PRIVACY POLICY – PARAJUMPERS S.P.A. WEBSITE
Welcome to the website of Parajumpers S.p.A. (“Site”). On this page, we provide you with information pursuant to art. 13 of Regulation (EU) 2016/679 (“GDPR”) on the processing of the personal data we collect when you browse the Site and interact with its services.
This privacy policy applies only to the Site and its possible subdomains, and not to other websites that may be accessed through hyperlinks or links.
Please read this privacy policy carefully before providing us with your personal data.
1. DATA CONTROLLER
Parajumpers S.p.A., with registered office in Sestiere San Marco nr. 3877, Palazzo Corner Spinelli, 30124, Venice, privacy@parajumpers.it, VAT number/Tax Code and Venice Rovigo Companies Register no.: 04630620278 and The Level S.r.l., with registered office in Piazza Arcole 4, 20143, Milan (IT), privacy@thelevelgroup.com (“TLG”) are joint controllers of the processing of personal data and purchase data relating to the products offered on the Site. You can learn the essential content of the agreement between TLG and Parajumpers S.p.A. pursuant to art. 26 GDPR by contacting us by e-mail at privacy@parajumpers.it
Parajumpers S.p.A. is also an independent controller for the purposes of managing the Site and your registration on the Site (personal account), marketing and profiling, as further described in the following paragraph.
TLG is also an independent controller for administrative and accounting purposes related to the sale, as well as for the related assistance regarding the purchase you have made.
Hereinafter, when we use the term “Joint Controllers”, we will refer jointly to Parajumpers S.p.A. and TLG. Conversely, you will find a direct reference to Parajumpers S.p.A. or TLG where the information refers to only one of the two controllers.
2. DATA PROTECTION OFFICER (DPO)
TLG has appointed a data protection officer (DPO), who you can contact at the following address: dpo@thelevelgroup.com
3. CATEGORIES OF PERSONAL DATA COLLECTED
a) Browsing data
Browsing the Site and accessing its services involves the acquisition of certain personal data relating to your browsing, such as, for example, the IP addresses or domain names of the computers you use to connect to the Site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to your operating system and IT environment.
b) Personal data you provide voluntarily
The personal data you provide voluntarily when you register on the Site, access its services, purchase a product or interact with customer service, such as, for example, personal details, contact details, purchase data and bank details.
c) Cookies
The Site uses cookies. For more information on cookies and their use on the Site, please see the cookie page.
4. PURPOSES, LEGAL BASIS AND RETENTION PERIOD
I. Your personal data will be processed by Parajumpers S.p.A. for:
| PURPOSE | LEGAL BASIS | RETENTION PERIOD | |
|---|---|---|---|
| A | Registration on the Site* (personal account): to allow you to create your personal account on the Site and to access and use the related services | Performance of the contract or of pre-contractual measures requested by you | Until you request the deletion of your account or until the service is terminated |
| B | Assistance with purchases in physical stores or from another online store; general and company information*: to respond to your request for general information about the products or the brand | Performance of the contract or of pre-contractual measures requested by you (response to requests submitted by the data subject) | For the time necessary to respond to your request |
| C | Marketing: to send informative and commercial communications, including promotional ones, regarding the products and services of Parajumpers S.p.A. | Consent | For 24 months after the last communication sent |
| D | Profiling: to analyse the tastes, preferences, habits and behaviour of the Data Subject in order to send personalised commercial communications based on the commercial and behavioural profile thus created. | Consent | For a period of 12 months from collection |
II. Your personal data will be processed by Parajumpers S.p.A. and TLG for:
| PURPOSE | LEGAL BASIS | RETENTION PERIOD | |
|---|---|---|---|
| E | Sale of products*: for the conclusion and performance of the contract for the sale of the products offered on the Site, including the management and fulfilment of purchase orders, the delivery of products, the communication of any circumstances relating to the order, the management of payments and anti-fraud checks | Performance of the contract or of pre-contractual measures requested by you | For the time necessary to fulfil the purchase order (without prejudice to further retention, where necessary, for the purposes below) |
III. Your personal data will be processed by TLG for:
| PURPOSE | LEGAL BASIS | RETENTION PERIOD | |
|---|---|---|---|
| F | After-sales assistance*: to manage and respond to the requests you send us regarding the products purchased on the Site, for example regarding returns, complaints and refunds | Performance of the contract or of pre-contractual measures requested by you | For the time necessary to respond to your request (without prejudice to further retention, where necessary, for the purposes below). |
| G | Compliance with legal obligations*: to comply with legal obligations (in particular in civil, tax, public security, banking and personal data protection matters) | Compliance with legal obligations | For the period required by law. Invoicing data are retained for 10 years from the date the invoice is issued. |
| H | Disputes and prevention of unlawful acts*: to defend or assert a right and/or to detect and prevent fraud and other crimes or unlawful acts | Legitimate interest of the Controller | For the period necessary for the purpose for which the data are collected, in accordance with applicable law (for example, regarding statutes of limitation). |
5. NATURE OF THE PROVISION OF DATA
The provision of the data in the fields marked with an asterisk (*) for the purposes set out in art. 4, I), letters A), B), II) and III) above is necessary to register on the Site, use its services and purchase products on the Site; failure to provide such data will make it impossible to obtain the products and services requested. Conversely, providing the data in the fields not marked with an asterisk, although it may be useful to facilitate relations with Parajumpers S.p.A., is optional, and failure to provide them will not affect your ability to obtain the products and services requested. With regard to the marketing and profiling purposes set out in art. 4, I), letters C) and D), the provision of data is optional and your refusal will make it impossible for Parajumpers S.p.A. to process the data you provide for marketing and profiling purposes, but will not prevent you from registering on the Site, purchasing products and using the related services as provided for in art. 4, I), letters A), B), II) and III).
6. EXISTENCE OF AUTOMATED DECISION-MAKING (PROFILING)
Parajumpers S.p.A. intends to pursue the purposes set out in art. 4, I) letter D (profiling) by analysing information about the Data Subject (derived, for example, from purchases made), in order to send personalised commercial communications, as well as to carry out targeted promotional activities and business intelligence. The processing will be carried out using tools for processing data and/or information which, once cross-referenced, will create a commercial profile of the Data Subject on the web. For the same purpose, such data and/or information will also be associated with data and/or information subsequently provided by the Data Subject or already held by Parajumpers S.p.A., including following any subscription to the services made available by the latter.
7. METHODS OF PROCESSING
Your data will be processed by the Joint Controllers mainly by electronic and telematic means. Specific security measures are observed to prevent data loss, unlawful or incorrect use and unauthorised access. The Joint Controllers have adopted all appropriate security measures required by law. Your data will be processed by Parajumpers S.p.A. and TLG as independent Controllers mainly by electronic and telematic means, in compliance with technical and organisational rules aimed at preventing unlawful, incorrect or unauthorised use.
8. CATEGORIES OF RECIPIENTS OF PERSONAL DATA AND DISSEMINATION OF DATA
To pursue the purposes for which the data are collected, the Joint Controllers and Parajumpers S.p.A. and TLG as independent Controllers may use the following categories of parties, to whom the data may be disclosed or who may become aware of them as data processors:
• IT service providers, such as, for example, internet service and cloud computing providers;
• parties carrying out logistics, warehousing, promotion and delivery of the Joint Controllers’ products and services;
• parties providing customer service;
• firms and other parties providing assistance, consultancy and services of, for example, a legal, tax, accounting, economic-financial, technical-organisational, data processing or communication nature;
• parties providing banking, financial, insurance and debt collection services;
• parties carrying out anti-fraud checks on payments;
• subsidiaries, parent companies, associated and affiliated companies;
• public authorities and supervisory and control bodies.
The updated list of data processors is available upon specific request using the methods indicated in paragraph 12. Solely for the purposes specified above, your personal data may also be accessed by personnel of the Joint Controllers / independent Controllers authorised to process them by virtue of their respective duties. No data collected on the Site is disseminated.
9. TRANSFER OF DATA TO A THIRD COUNTRY AND/OR AN INTERNATIONAL ORGANISATION
The personal data processed by the Controller may be transferred, solely for the purposes indicated in point 4, to companies based in the United States of America (USA). Such transfer will take place only after the signing, between The Level Group and the recipient companies, of standard contractual clauses (S.C.C.) adopted by the European Commission (art. 46, paragraph II, letters C and D of the GDPR)
10. SOCIAL BUTTONS AND WIDGETS
The Site also contains social buttons/widgets. These are, in particular, the icons of social networks such as, for example, Facebook, X, Youtube and Instagram, which allow you to reach the relevant social networks by clicking on the icon. With the help of these tools you can, for example, share content or recommend products from the Site on social networks. After clicking on the social buttons/widgets, the social network may collect data relating to your visit to the Site. As mentioned in the introduction, this privacy policy does not cover the processing of your data by the social network, for which you should refer exclusively to the privacy policy provided by the social network.
Except where you voluntarily share your data with the chosen social networks by clicking on the social buttons/widgets, Parajumpers S.p.A. does not disseminate or share any personal data with the social network.
11. MINORS
The Site and its services are intended for the sale of products and services to adults. Therefore, the Joint Controllers do not knowingly collect personal data of persons under the age of 18. By accessing the services of the Site, you declare that you are of legal age.
12. RIGHTS OF DATA SUBJECTS
With regard to the personal data you have provided, you have the right at any time to request:
• confirmation as to whether or not personal data concerning you are being processed and, if so, access to the personal data and a copy of them (art. 15 of the GDPR);
• the rectification of inaccurate personal data concerning you, as well as their completion where they are considered incomplete in relation to the purposes of the processing (art. 16 of the GDPR);
• the erasure of personal data in the cases set out in art. 17 of the GDPR;
• the restriction of processing in the cases set out in art. 18 of the GDPR;
• to object to the processing of personal data as provided for in art. 21 of the GDPR;
• data portability, where the processing is based on your consent or on a contract and is carried out by automated means (art. 20 of the GDPR);
• where you have given explicit consent to the processing of such personal data for one or more specific purposes (art. 6, par. 1, letter a, of the GDPR), the withdrawal of consent, without affecting the lawfulness of the processing based on consent given before its withdrawal.
To exercise these rights, you can write to: privacy@parajumpers.it or privacy@thelevelgroup.com. You may in any case exercise your rights against each Joint Controller by writing to the respective contacts indicated in paragraph 1, where the processing is carried out by them under the aforementioned Joint Controllership Agreement. Finally, where the conditions are met, you also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) as the supervisory authority, in accordance with the established procedures.