Privacy policy
Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Legislative Decree no. 196 of June 30, 2003 (Privacy Code)
This policy describes how personal data of users of the website www.madefurglam.com, managed by Maison Amelie Srl (hereinafter “Data Controller”), is collected and processed, in accordance with Regulation (EU) 2016/679 of April 27, 2016 (GDPR) and Legislative Decree 196/2003, as amended by Legislative Decree 101/2018.
1. Data Controller
Maison Amelie Srl
Monza (MB), Via Cernuschi no. 6
VAT no. 14459420965
e-mail: maisoamelie@madefurglam.com
If a Data Protection Officer (DPO) has been designated, their contact details are as follows: [●].
2. Types of data
The Data Controller may process:
- identification and contact data (first name, last name, address, e-mail, telephone);
- data relating to orders, purchases, shipments, payments, and returns;
- browsing data and website usage data;
- data provided in the context of customer service requests;
- data collected for promotional purposes, subject to consent where required;
- any other data voluntarily provided by the user.
3. Purposes, legal bases, and nature of provision
a) Browsing, security, and operation of the Website
Purpose: to allow the proper functioning of the Website, security, prevention of abuse or fraud, and the production of aggregated statistics.
Legal basis: legitimate interest of the Data Controller.
Provision: necessary for the technical use of the Website.
b) Management of orders, purchases, payments, deliveries, returns, and after-sales assistance
Purpose: conclusion and execution of the sales contract, administrative management, shipping, invoicing, assistance, legal warranty, returns, and refunds.
Legal basis: execution of a contract or pre-contractual measures.
Provision: necessary; any refusal prevents the conclusion or execution of the contract.
c) Fulfillment of legal obligations
Purpose: fulfillment of obligations provided for by laws, regulations, or requests from authorities.
Legal basis: legal obligation.
d) Protection of the Data Controller’s rights and fraud prevention
Purpose: prevention, detection, and management of fraud, insolvency, disputes, debt collection, and judicial or extrajudicial defense.
Legal basis: legitimate interest of the Data Controller.
e) Account registration and reserved services
Purpose: creation and management of the customer account, order history, simplification of purchases, preference management, and wish lists.
Legal basis: execution of pre-contractual measures and the relationship requested by the user.
Provision: optional, but necessary for account creation. Consent may be revoked at any time.
f) Marketing and promotional purposes
Purpose: sending newsletters, promotional communications, offers, and commercial initiatives related to the Data Controller's products.
Legal basis: consent of the data subject.
Provision: optional. Consent may be freely revoked at any time.
4. Processing methods
Data is processed using electronic tools and, where necessary, paper documents, with logic strictly related to the aforementioned purposes and through adequate technical and organizational measures.
5. Data recipients
Data may be communicated to subjects acting, as the case may be, as data processors or independent data controllers, including:
- hosting and website management providers;
- e-commerce platforms and IT providers;
- couriers and logistics operators;
- payment service providers;
- legal, tax, accounting, and administrative consultants;
- subjects tasked with customer assistance;
- public authorities, entities, or bodies authorized by law.
6. Extra-EU transfers
The activities and processing carried out do not involve the transfer of data abroad.
7. Retention period
Data is kept for the time strictly necessary for the purposes for which it is collected and, subsequently, within the limits permitted or imposed by law, within limitation periods.
8. Rights of the data subject
The data subject may exercise the rights provided by Articles 15–22 of the GDPR, including access, rectification, erasure, restriction, objection, portability, withdrawal of consent, and lodging a complaint with the supervisory authority.
In particular, the right of access allows one to obtain confirmation of the existence of processing, a copy of the data, and information on purposes, categories of data, recipients, retention times, and the origin of the data.
Requests can be sent to: info@madefurglam.com
The Data Controller will respond within thirty days of receiving the request (subject to any extension, in any case not exceeding sixty days).
The response will be provided free of charge, unless, due to the complexity or quantity of the request, the Data Controller deems it appropriate to request that the data subject pay a fee.
9. Complaint
The data subject has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
10. Automated decision-making processes
Unless otherwise specified, the Data Controller does not adopt decisions based solely on automated processing that produce legal effects or similarly significant effects on the data subject.
11. Cookies and other tracking tools
The Website uses cookies and other technical tracking tools and, subject to consent where required, non-anonymized analytical, profiling, marketing, and third-party cookies. Related information is contained in the Cookie Policy, which describes categories, purposes, legal bases, retention times, methods for managing preferences, and withdrawal of consent. Users may refuse or revoke consent to non-essential cookies at any time; in such cases, the Website will still remain usable in its essential functionalities.
This policy is subject to updates.
