Below are the rules governing the processing of personal data sent from our website to our company.

Having read the information on the processing of my personal data pursuant to ART. 13 OF REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27 APRIL 2016 ("GENERAL DATA PROTECTION REGULATION") and by purchasing or registering on the website https://www.vintageapt.it
I automatically and by right consent to the processing of my personal data for the purposes of the contract and the supply of the purchased goods, including the transfer of the data provided to third-party companies (national couriers) for the shipment, delivery and/or re-delivery of the purchased goods, for the sending of informative and promotional communications (including the "newsletter"), discount coupons and special offers, by vintageapt.it, a website owned by VINTAGEAPARTMENT SRL in Barletta, relating to our products and services, as well as for the conduct of market research also aimed at assessing the level of user satisfaction (customer satisfaction), via email and postal service.
If, however, you no longer wish to receive our marketing communications via email, want your data deleted or modified, or simply want to change your preferences, you can request this by writing to: vintagesrl@outlook.it
If you do NOT want your data to be recorded for future offers, emails, newsletters, communications, on vintageapt.it you can make purchases WITHOUT registration , in which case the data provided will be used only for the purpose of executing the purchase contract and released to third parties (national express couriers) only for the purpose of shipping and delivering the goods.

In summary
Why do we keep our privacy policy updated?
vintageapt.it complies with the standards set by the GDPR by updating its privacy policy and making it easier to read and understand.

What is the GDPR?
The GDPR is a regulation aimed at strengthening and unifying data protection for all individuals within the European Union. Because we believe in the importance of privacy for all our customers, we are implementing it. The GDPR requires greater transparency regarding how we collect, store, use, and more generally process personal data, and imposes stricter limits on their use.

Why do we need your data?
vintageapt.it uses the data collected to improve your experience with us and, with your consent, to offer you personalized offers, save you time, and make your purchases even more convenient.

DATA PROCESSING BY VINTAGEAPT.IT FOR THE PURPOSE OF ACCESSING AND REGISTRATION TO THE SITE, FULFILLMENT OF THE PURCHASE CONTRACT AND/OR EXECUTION OF PRE-CONTRACTUAL MEASURES AT THE REQUEST OF THE INTERESTED PARTY
vintageapt.it will process the user's personal data to:

• allow registration on the Site and the use of services reserved for registered users, including the possibility of purchasing online through the Site,
• allow the conclusion of the purchase contract via the Site and the correct execution of the obligations arising from such contract, such as, by way of example, the delivery and payment, including online, of the products and/or services purchased;
• execute requests sent by the user himself.

The legal basis for this processing is the fulfillment of the contract or, as the case may be, the implementation of pre-contractual measures taken at the request of the data subject (Article 6.1.b) of the Regulation).
For this purpose, vintageapt.it will process your data for the time strictly necessary to carry out the individual processing activities (e.g., registration data will be processed until your account is closed, taking into account the technical time required for this; data required to execute the purchase contract will be processed until the product is delivered or, in the event of non-delivery, until the contract is terminated). It is understood that, after this period, vintageapt.it may retain your data for the purposes and for the maximum retention periods and/or, in any case, in the cases established by the Regulation and/or by law.

“ Transfer of Personal Data to Third Parties”:
vintageapt.it undertakes NOT to disclose any personal data of customers registered on the vintageapt.it website to third-party companies or private individuals except for the sole purpose of fulfilling the purchase contract. Specifically, the data will be disclosed only to the company appointed on behalf of vintageapt.it to ship and deliver the purchased and/or returned goods. Vintageapt.it undertakes to work only with leading national couriers who have strict procedures for monitoring, managing, and retaining personal data, in accordance with applicable regulations. These couriers, in turn, undertake not to disclose the data except for the purpose of fulfilling the contract, and in any case to their partner individuals or companies with similar procedures for monitoring, managing, and retaining personal data, in accordance with applicable regulations.

“ Electronic Payment via PayPal or Credit Cards”:
All data related to "electronic" payments, i.e., credit card and/or PayPal payments made for online purchases on our website vintageapt.it, are managed directly by PayPal and are therefore in no way shared or communicated by PayPal to vintageapt.it (a website owned by VintageApartment SRL), except for the sole purpose of communicating the "successful" completion of the payment. All data for these types of "electronic payments" are held and managed directly by PayPal ( Privacy Policy ).

NB create link with Pay Pal privacy policy

“ Bank Transfer Payment”:
The bank details of users who choose "Bank Transfer" as their payment option will not be recorded or managed by vintageapt.it in any way, but will simply be displayed on account statements or on the Home Banking screens for the sole purpose of verifying the successful completion of the payment. The data provided upon transfer will be held and managed directly by the bank that made the transaction (see their privacy policies at their offices and/or websites) and our "receiving" bank.

DATA PROCESSING BY “VINTAGEAPT.IT” FOR GENERIC MARKETING PURPOSES
Subject to the user's express consent through registration/purchase on the vintageapt.it website, VintageApartment SRL itself will process the user's personal data to send them informative and promotional communications, including the newsletter, discount coupons and special offers, relating to its own and/or third-party products and/or services, as well as for direct sales purposes and for carrying out market research, via email and via the postal service.

The user may revoke the consent given at any time and/or object to the processing of his/her data for marketing purposes by contacting us by email at vintagesrl@outlook.it

PROCESSING OF EMAIL ADDRESSES BY “VINTAGEAPT.IT” FOR SOFT-SPAM PURPOSES
vintageapt.it will process the email address provided by the user when purchasing a product and/or service offered and sold on the Site directly by vintageapt.it , to allow vintageapt.it to directly sell similar products or services (and therefore to send the user promotional communications regarding such products and/or services by email) without the need for the express prior consent of the interested party, as provided for by Article 130, paragraph IV, of the Privacy Code, and provided that the user does not exercise the right to object in the manner indicated below (so-called soft-spam).
The legal basis for this processing is Article 130, paragraph IV, of the Privacy Code, which expressly permits this processing.
You may opt out of receiving soft-spam communications by contacting us at vintagesrl@outlook.it

DATA PROCESSING BY “VINTAGEAPT.IT” FOR MARKETING PROFILING PURPOSES
Subject to the user's express consent through registration/purchase on the vintageapt.it website, VINTAGEAPARTMENT SRL itself will process the users' personal data, in an automated manner, for:

• monitor and track user behavior on the Site, collecting and recording navigation data (e.g. pages visited, categories of products viewed, whether the user has purchased or not purchased, abandoned carts, access device) and purchase data (e.g. type of product purchased, frequency of purchases, amounts spent, payment method);
• analyze and process such data, together with other information relating to users (such as, for example, gender, order status, postcode, date of birth, IP address), in order to identify correlations between user behavior and place them into various "clusters" or sets of customer types that may have common characteristics;
• send, via email or post, and/or display on the Site to users personalized offers, i.e. offers linked to the cluster in which the user has been placed and, therefore, of presumed specific interest to him.
• Send purchase confirmations, order status updates, or shipping updates

A decision based solely on automated processing, including profiling, produces legal effects concerning the data subject (limitation of their freedom of choice) and is permitted by the exemption provided for in Article 22.2.a of the GDPR, as it is necessary for the performance of the contract between the data controller and the data subject and/or is in any case related to that contract and to its validity and effectiveness.
The user therefore has the right, at any time, to:

• obtain human intervention on the part of;
• express one's opinion;
• challenge the decision made by VintageApartment SRL (e.g. inclusion in a given cluster).

The legal basis for this processing is the explicit consent of the interested party (Article 21.1.c) of the Regulation).
You may withdraw your consent at any time and/or object to the processing of your data for marketing profiling purposes by contacting us at vintagesrl@outlook.it.
For marketing profiling purposes, VintageApartment SRL will process your data until you withdraw your consent and/or exercise your right to object and, in any case, no later than 12 months after collection.
Providing data for marketing profiling purposes is optional: that is, there is no legal or contractual obligation on the user to provide such data for this purpose and/or to consent to the processing of their data for this purpose.

DATA PROCESSING BY VINTAGEAPT.IT FOR ASSISTANCE AND/OR CUSTOMER CARE PURPOSES
VINTAGEAPT.IT will process user data for general assistance and customer care purposes and therefore to respond to requests for information from users or to respond to complaints, reports, disputes, and to allow the user, if desired, to leave a review.
The legal basis for this processing is the implementation of pre-contractual measures adopted at the request of the data subject (Article 6.1.b, final paragraph, of the Regulation) or, as the case may be, the legitimate interest of VintageApartment SRL (Article 6.1.f) of the Regulation).
It is in the legitimate interest of VintageApartment SRL to respond to requests for information and/or reviews and/or reports and/or disputes and/or complaints from users of the Site (to which, moreover, VintageApartment SRL is required to respond, also pursuant to the provisions of the Consumer Code). This legitimate interest of www.vintageapt.it also coincides with the legitimate interest of the same users of the Site who make the requests and/or reports and/or disputes and/or complaints in question and who, therefore, within the context of their relationship with www.vintageapt.it, can be assumed to reasonably expect their personal data to be used by VintageApartment SRL to provide feedback.
The legitimate interest of VintageApartment SRL thus identified can therefore be considered to prevail over the fundamental rights and freedoms of the interested party, also by virtue of such reasonable expectations and the relationship existing between the interested party and VintageApartment SRL , as well as in consideration of the nature of the data processed and the coinciding interests of the interested parties themselves.
In any case, the user has the right to object, at any time, for reasons related to their personal situation, to the processing of their personal data for the purposes in question (i.e., customer service and support). To exercise this right, the user can contact us by email at vintagesrl@outlook.it

FULL INFORMATION ON THE PROTECTION OF PERSONAL DATA
The protection of your personal data is important to Vintageapt.it (a website owned by VintageApartment SRL, Via Carducci, 12 Barletta, VAT no. 08359810721). We have adopted strong, valid principles in this regard, as set out in our Data Protection Policy, available on the Vintageapt.it website. These principles comply with the new European Regulation (EU) 2016/679 (General Data Protection Regulation), effective May 25, 2018.
This Data Protection Notice provides you with detailed information regarding the protection of your personal data.
Data Controller (“We”): Vintageapt.it website owned by VintageApartment SRL Via Carducci, 12 Barletta VAT number 08359810721).

As data controllers, we are responsible for the collection and processing of your personal data in connection with our activities. The purpose of this Data Protection Notice is to inform you of the personal data we collect about you as a customer, the reasons we use and share such data, how long we retain it, your rights, and how you can exercise them.
Further information may be provided to you, where necessary, when you request a specific product or service.

1. WHAT PERSONAL DATA DO WE PROCESS ABOUT YOU?
We collect and use your personal data to the extent necessary to run our online clothing and accessories sales business and to achieve high quality standards.
We may collect various categories of personal data about you, including:

• identification data (for example, name, surname, nationality, place and date of birth, IP address)
• contact information (for example, postal address and email address, telephone number)
• tax data (tax code or VAT number)
• data relating to you, your habits and your preferences:

1. data relating to your purchase of our products and services as well as data relating to concluded commercial transactions;
2. data deriving from your interactions with us: our websites, our applications, our social media pages, calls, chats, emails, interviews, telephone conversations

We never ask for personal data relating to your racial or ethnic origins, political opinions, religious or philosophical beliefs, trade union membership, genetic data, or data relating to your sexual orientation, unless required by law.
The data we use may be provided directly by you or obtained from the following sources, in order to verify or enrich our databases:

• websites/social media pages containing information made public by you (for example, your website or social media page)
• databases made publicly accessible to third parties

2. WHY AND ON WHAT BASIS DO WE USE YOUR PERSONAL DATA?
A) To comply with legal and regulatory obligations
We use your personal data to comply with a variety of legal and regulatory obligations, including the following:

• banking and financial regulations in compliance with which We:

1. We implement security measures to prevent fraud and abuse.
2. we detect transactions that deviate from normal patterns
3. We record, where necessary, telephone calls, chats, emails, etc.

• respond to an official request from a duly authorized public or judicial authority
• prevention of money laundering and terrorist financing
• compliance with legislation on sanctions and embargoes
• Fight against tax fraud and fulfill tax audit and reporting obligations

B) To perform a contract to which you are a party or to take pre-contractual measures at your request before entering into a contract with you
We use your personal data to enter into and perform our contracts, including to:

• provide you with information regarding our products and services
• Plan and manage the delivery or return of goods following your purchase on our website Vintageapt.it
• manage dispute resolution and assist you, as well as respond to your requests and complaints (including insurance ones)
• manage invoicing, reporting and collection activities
  

C) To pursue our legitimate interest
We use your personal data to implement and develop our products and services, to improve our risk management, and to defend our rights, including as follows:

• proof of transactions
• fraud prevention
• response to official requests from public authorities in third countries (located outside the EEA)
• IT systems management, including infrastructure management (e.g., shared platforms), and IT security
• creation of individual statistical models, based on transaction analysis, for example to help define your profile
• creation of statistics, tests and aggregate models, for research and development, in order to improve the management of our products and services or to create new ones
• personalization of our offer for you, through:

1. improving the quality of our products and services (including through customer satisfaction surveys);
2. advertising products and services that match your situation and profile

The above can be achieved:

• segmenting our prospects and customers
• by analyzing your habits and preferences across different channels (visits to our branches, emails or messages, visits to our website, etc.)
• matching the products or services you already own or use with other data we hold about you

D) To respect your choice we have asked for your consent

3. WHO DO WE SHARE YOUR PERSONAL DATA WITH?
In pursuing the purposes indicated above, we disclose your personal data only to:

• service providers (National Couriers) who may process the data on our behalf for the sole purpose of transporting and delivering the purchased and/or returned goods
• regulated professionals such as lawyers, accountants and auditors

4. TRANSFER OF PERSONAL DATA OUTSIDE THE EEA
In the case of international transfers originating from the European Economic Area (EEA), where the European Commission has recognised that a non-EEA country can ensure an adequate level of data protection, your personal data may be transferred on that basis.
For transfers to countries outside the EEA whose level of protection has not been recognized by the European Commission, we will rely on a derogation applicable to the specific situation (for example, if the transfer is necessary to perform our contract with you such as when making an international payment) or we will implement one of the following measures to ensure the protection of your personal data:

• standard contractual clauses approved by the European Commission
• binding corporate rules, where applicable

To obtain a copy of these measures or details of where they are available, you can make a written request as set out in Article 9.

5. HOW LONG DO WE KEEP YOUR PERSONAL DATA?
We will retain your personal data for as long as necessary to comply with applicable laws and regulations or for a different period based on our operational requirements, such as proper account maintenance, facilitating customer relationship management, and responding to legal disputes or regulatory requests. For example, most customer information is retained for the duration of the contractual relationship and after the termination of the contractual relationship for the period necessary to ensure the exercise or defense of legal claims.
Cookies and other connection and tracking data stored on your device are retained for a maximum period of 24 months from the date of their collection.

6. WHAT ARE YOUR RIGHTS AND HOW CAN YOU EXERCISE THEM?
In accordance with applicable regulations, you have the following rights:

• Access: You can obtain information in relation to the processing of your personal data, and a copy of such personal data.
• Rectification: Where you believe that your data is inaccurate or incomplete, you can request that such data be amended accordingly.
• Cancellation: You can request the cancellation of your personal data, within the limits permitted by law.
• Restriction: You can obtain the restriction of the processing of your personal data.
• Objection: You may object to the processing of your personal data for reasons related to your particular situation. You have the absolute right to object to the processing of your personal data for direct marketing purposes, including profiling related to such direct marketing.
• Withdrawal of consent: where you have given your consent for the processing of your personal data, you have the right to withdraw it at any time.
• Data portability: in the cases provided by law, you have the right to obtain the return of the data you have provided to us, and where technically feasible, to obtain its transfer to a third party.

If you wish to exercise the rights listed above, you can send an email to vintagesrl@outlook.it. Please attach a scan/copy of your ID for identification purposes.
In accordance with applicable law, in addition to the rights set out above, you also have the right to lodge a complaint with the competent supervisory authority.

7. HOW TO KEEP UP TO DATE ON CHANGES TO THIS
In a world of constant technological change, we may need to periodically update this Policy.
We encourage you to review the latest version of the Policy online, and we will notify you of any material changes through our website or through our usual communication channels.

8. HOW CAN YOU CONTACT US?
If you have any questions about our use of your personal data under this Policy, please email us at vintagesrl@outlook.it

We also inform you that the Data Protection Officer (DPO) can be reached at vintagesrl@outlook.it

If you would like to learn more about cookies and security, please contact us by writing an email to vintagesrl@outlook.it

INFORMATION ON THE PROCESSING OF BROWSING DATA
In compliance with the Privacy Law (in particular Articles 13 and 14 of EU Regulation No. 679/2016 General Data Protection Regulation, hereinafter GDPR), vintageapt.it, a website owned by VintageApartment SRL, Via Carducci, 12 Barletta, VAT No. 08359810721, wishes to provide the following information on the processing of personal data relating to the user or browser ("data subject") who consults this website. This information applies only to the vintageapt.it website.

Browsing data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature, it could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the web server, the size of the file obtained in response, the numerical code indicating the status of the response from the web server (successful, error, etc.), and other parameters relating to the user's operating system and computer environment. This data is used solely to obtain anonymous statistical information on site usage and to monitor its proper functioning. This data is retained for the time necessary to carry out these activities, except in the event of investigations into computer crimes against the site.
No data deriving from the web service will be communicated or disseminated, except to fulfill obligations established by laws, regulations, or EU legislation.
This website also uses cookies to analyze user behavior for marketing purposes (profiling), aimed at publishing advertisements based on the interests expressed by the user while browsing (retargeting/remarketing). Specifically, to promote its services, Vintageapt.it uses advertising services provided by third parties. These services involve the use of third-party cookies. These cookies serve to provide users who have visited this website with advertising banners consistent with the interests expressed while browsing, when they access other sites where the third parties have purchased the rights to use the advertising space. Browsing this website constitutes acceptance of these cookies. To obtain further information or to prevent the installation of all or some of these cookies, please visit the websites of the third parties in question.
Below is a detailed description of the cookies used by this website, their nature and characteristics, and, where applicable, a link to the third-party website's privacy policy:

• Google Analytics , a service activated to monitor the vintageapt.it website and display, through a dashboard, statistics and data relating to user access to the website. ASK for the name of our cookies.

Most internet browsers are set to automatically accept cookies. Users can choose their preferences regarding the use of cookies (accept, reject, or receive a warning before accepting a cookie from the website they visit) by changing their browser settings. Cookies can also be deleted by deleting the contents of the browser's "cookie" folder. Each browser has different procedures for managing cookies; below is a link to specific instructions for the most popular ones:

• Internet Explorer
• Google Chrome
• Apple Safari
• Mozilla Firefox

By completely disabling cookies in your browser, you may not be able to use all of the site's interactive features.

Data processing methods and scope of communication
Without prejudice to the above regarding cookies, browsing data may be accessed by vintageapt.it personnel (employees and contractors) within the facilities responsible for providing web services. This data will also be processed using computerized procedures and electronic communication systems, protected by appropriate security and confidentiality measures, using methods and methods consistent with the intended purposes and for the retention periods strictly necessary to fulfill contractual and legal obligations. The personal data thus acquired will not be disclosed and may be disclosed to the relevant public bodies and authorities to comply with regulatory obligations or to ascertain liability in the event of computer crimes against the site. It may also be disclosed to, or allocated to, third parties operating in Italy and abroad used by vintageapt.it to perform tasks and activities, including technical and organizational ones, essential to the functioning of the website. Specifically, these third parties (who, as external data processors or independent controllers, may process user data) belong to the following categories: companies that provide IT and telematics services (e.g., website hosting and management services); An updated list of entities belonging to the aforementioned categories is available at the vintageapt.it headquarters, upon request to be sent by email to vintagesrl@outlook.it. Furthermore, browsing data may be processed for further purposes of improving and developing web services, including by third-party companies operating in sectors related to the type of services provided.

Rights of interested parties
The interested party may, at any time, assert his or her rights, as provided for by the GDPR (Articles 15 et seq. of EU Regulation 679/2016).
In accordance with applicable regulations, you have the following rights:

• Access: You can obtain information in relation to the processing of your personal data, and a copy of such personal data.
• Rectification: Where you believe that your data is inaccurate or incomplete, you can request that such data be amended accordingly.
• Cancellation: You can request the cancellation of your personal data, within the limits permitted by law.
• Restriction: You can obtain the restriction of the processing of your personal data.
• Objection: You may object to the processing of your personal data for reasons related to your particular situation. You have the absolute right to object to the processing of your personal data for direct marketing purposes, including profiling related to such direct marketing.
• Withdrawal of consent: where you have given your consent for the processing of your personal data, you have the right to withdraw it at any time.
• Data portability: in the cases provided by law, you have the right to obtain the return of the data you have provided to us, and where technically feasible, to obtain its transfer to a third party.

If you wish to exercise the rights listed above, you can send an email to vintagesrl@outlook.it. Please attach a scan/copy of your ID for identification purposes.
In accordance with applicable law, in addition to the rights set out above, you also have the right to lodge a complaint with the competent supervisory authority.
Given that the current state of development of automatic control mechanisms does not ensure they are free from errors and malfunctions, this document will be subject to updates. Users are therefore encouraged to periodically visit this section of the site to review any changes or additions.

Use of data for marketing purposes

If the Data Subject has given his or her specific consent, his or her Personal Data may be used for marketing activities such as sending communications, newsletters, etc., both by the Data Controller and by persons designated for this purpose.

In this case, the Personal Data will be stored and used for this purpose until the Data Subject revokes his or her consent.

Newsletter via email, SMS, WhatsApp, and other messaging systems
of our Newsletter which may also contain special offers and commercial proposals of various kinds.
You can unsubscribe from the newsletter at any time, either by sending a message to the contact information listed in the main body of the Privacy Policy or by using the unsubscribe link provided in each newsletter. After you unsubscribe, we will delete the email address or other contact information used without your explicit consent to further use of the same data, subject to our right to further use of the data, of which the data subject has been properly informed in this statement, in accordance with the applicable law.

Send abandoned cart notifications via email, SMS, WhatsApp, and other messaging systems
The data subject's strictly necessary and instrumental data for this purpose will be used to send notifications regarding the presence of a shopping cart created by the user that has not been followed by the finalization of the order, including links and/or instructions for recovering the cart and finalizing the order, with possible simultaneous proposal of special commercial conditions.