PRIVACY POLICY

This policy describes how this website is managed with regard to the processing of personal data of users who consult it, pursuant to Regulation (EU) 2016/679 (GDPR) and applicable national legislation on the protection of personal data.

This information applies exclusively to this site and not to other websites that may be accessed via external links.

By visiting the site, the user implicitly accepts the data processing methods described in this policy.

DEFINITIONS AND DATA CONTROLLER

Data Subject: The natural or legal person to whom the personal data refers.
Data Controller: ABC srl
Registered office: Piazza XV Febbraio, 16
VAT number: 02887130603
Contacts:

• Telephone: +39 0776310964

• Email: info@jwsaxmilano.com

Personal data: any information relating to an identified or identifiable natural person, including data provided voluntarily and data collected automatically (e.g., IP address, device type, browser, etc.).

Processing: any operation applied to personal data, such as collection, recording, organization, storage, modification, use, deletion, etc.

TYPES OF DATA COLLECTED, PURPOSES AND LEGAL BASIS FOR PROCESSING

While browsing the site, two types of personal data may be collected:

• Data provided voluntarily by the user: name, surname or company name, shipping and/or residential address, email address, telephone number, tax code and/or VAT number, etc.

• Data collected automatically: IP address, browser type, browsing data, access logs, etc.

Personal data is processed for the following purposes and legal bases:

• Contract execution: order management, shipping, customer support.

• Fulfillment of legal obligations: tax, accounting, and regulatory obligations.

• Legitimate interests of the data controller: site security, fraud prevention, legal protection.

• Technical operation of the site: performance analysis, device compatibility, etc.

• Marketing (with prior consent): sending promotional communications, newsletters, special offers.

In case of payment by credit/debit card, the payment data is not processed by the owner, but exclusively by the payment service provider.

DATA COLLECTION AND STORAGE METHODS

Data may be collected:

• Directly from the interested party (online forms, telephone contacts, e-mail).

• Through third parties (e.g. marketplaces like Amazon, eBay, etc.) acting as intermediaries.

In the event that data is acquired from third parties, the interested party will be informed within one month or at the latest upon the first available communication.

The data is stored on secure servers, either our own or those of IT providers specifically designated as Data Processors. An updated list of Data Processors can be requested using the contact details provided.

OBLIGATION TO PROVIDE DATA

Providing personal data is mandatory to fulfill contractual and legal obligations. Failure to provide it will make it impossible to complete the order or provide the requested service.

DATA RETENTION PERIOD

Personal data will be retained for the entire duration of the contractual relationship and, subsequently, for 11 years for tax and accounting purposes.

In the event of legal disputes, the data will be retained until the appeal deadline has expired.

After this period, the data will be securely deleted, consistent with the technical procedures adopted.

AUTHORIZED SUBJECTS AND DATA RECIPIENTS

In addition to the owner, personal data may be processed by:

• Independent data controllers: e.g., couriers, consultants, legal or accounting service providers.

• External data processors: IT service providers, e-commerce platforms, technical support services, etc.

• Competent authorities: in compliance with legal obligations.

The updated list of data controllers can be requested using the contact details above.

MARKETING PURPOSES (WITH PRIOR CONSENT)

Only with your explicit consent, your personal data may be used for direct marketing activities, including sending promotional communications, newsletters, or other commercial information.

Consent can be revoked at any time using appropriate digital tools or by contacting the data controller.

RIGHTS OF THE INTERESTED PARTY

The interested party has the right to:

• access your personal data;

• request its rectification or cancellation;

• limit or object to processing;

• obtain data portability;

• withdraw consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal);

• lodge a complaint with the supervisory authority (e.g., the Italian Data Protection Authority).

HOW TO EXERCISE YOUR RIGHTS

The interested party may exercise their rights by sending a request to the email address: info@jwsaxmilano.com or through the contact channels indicated.

If registered on the site, the interested party can access their account to view, modify, or delete their data, as well as change their data processing preferences.

CHANGES TO THE PRIVACY POLICY

This policy may be updated at any time to reflect regulatory or technological changes, or to accommodate new services.

It is recommended that you consult this section periodically.

PERSONAL DATA SECURITY

The owner adopts adequate technical and organizational measures to guarantee the security of personal data and to prevent their loss, illicit use or unauthorized access.

It is the user's responsibility to adopt appropriate tools to protect their devices (e.g. updated antivirus, firewall, etc.).