Source: http://www.brunellocucinelli.com/en/privacy.html
Timestamp: 2019-04-20 11:07:32+00:00

Document:
is not considered applicable to the section of the Website dedicated to “Human Resources” or to “Online boutique” websites, for which reference is made to the specific information notices contained therein.
The processing of your personal data shall be based on the principles of correctness, lawfulness, transparency, limitation of the aims and storage, minimization and exactness, integrity and confidentiality, and the principle of accountability in accordance with Art. 5 of the Regulation. Your personal data shall therefore be processed in accordance with the legislative provisions of the Regulation and the confidentiality obligations envisaged therein.
Processing of personal data means any operation or set of operations, performed with or without the aid of automated processes and applied to personal data or sets of personal data such as the collection, recording, organization, structuring, storage, adaptation or amendment, extraction, consultation, use, communication through transmission, disclosure or any other form of provision, comparison or interconnection, limitation, deletion or destruction.
During their normal process, the IT systems and software procedures in place for the operation of the Website acquire some personal data whose transmission is implicit in the use of internet communication protocols. This refers to information that is not collected to be associated with identified interested parties, but that by its very nature could, through processing and association with data held by third parties, allow the users to be identified. IP addresses or domain names of the computers used by the users who connect to the Website, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used for making the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the operating system and the IT environment of the user all fit into this category of data. These data used for the sole purpose of gaining anonymous statistical information on the use of the Website to control the correct operation thereof, to identify any anomalies and/or abuse, are deleted straight after being processed. The data could be used for ascertaining responsibility in the event of any IT crimes that may damage the Website or third parties.
The information on the cookies served by the Website is available here.
3.3. To process statistics, without it being possible to trace your identity.
Specific security measures are observed in order to prevent the loss of data, illicit use or incorrect use and unauthorized access.
The legal basis for the processing of personal data for the aims according to section 3.1 is Art. 6(1)(b) of the Regulation ([…]processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract), since the processing is necessary for the provision of services. The legal basis for the processing of personal data for the aims according to section 3.2 is instead, Art. 6(1)(c) of the Regulation ([…]processing is necessary for compliance with a legal obligation to which the controller is subject). The provision of personal data for these purposes is optional, but any failure to provide data could imply the impossibility to activate the required services. It is instead specified that the processing according to section 3.3 is not performed on personal data and therefore can be freely performed by the Controller.
5.3. Persons authorized by the Data Controller, in accordance with Articles 30 of the Code and 29 of the Regulation, to process the personal data necessary for performing activities strictly connected with the provision of services, who have committed to confidentiality or who have a suitable legal confidentiality obligation. The updated list of subjects who could process your personal data as processors is available by sending a written request to the Data Controller to the addresses indicated in the “Contacts” section of this information notice.
Some of your personal data may be shared with Recipients who are located outside the European Economic Area. The Data Controller guarantees that the processing of your personal data by these Recipients takes place in compliance with Articles 43 and 44 of the Code, and with Articles 44 - 49 of the Regulation. More information is available by sending a written request to the Data Controller to the addresses indicated in the “Contacts” section of this information notice.
The personal data processed for the aims according to section 3.1 shall be stored for the amount of time strictly necessary to achieve such purposes. However, since the processing is performed in order to provide services, the Data Controller shall store the personal data for the amount of time envisaged and permitted by Italian legislation for the protection of its interests (Art. 2946 of the Civil Code et seq.). The personal data processed for the aims according to section 3.2 shall be stored for the amount of time envisaged by the specific obligation or applicable legal standard. More information related to the data storage period and the criteria used to determine such period can be requested by sending a written request to the Data Controller to the addresses indicated in the “Contacts” section of this information notice. This is notwithstanding the possibility for the Data Controller to store your personal data for the period of time envisaged and permitted by Italian law to protect his interests (Art. 2947(1)(3) of the Civil Code).
In accordance with Art. 7 of the Code, you have the right at any time to obtain confirmation of the existence or not of your personal data and to find out the contents and origin thereof, verify the accuracy or request the addition, updating or correction thereof; you have the right to request the deletion, transformation into anonymous format or blocking of data processed against the law, or to oppose in any case, for legitimate reasons, the processing thereof. Starting from 25 May 2018 you also have the right to request access to your data, to oppose processing and to request the limitation of processing in the cases envisaged by Art. 18 of the Regulation, where technically possible, and to obtain in a structured format, of common use and legible by an automatic device, the data regarding you, in the cases envisaged by Art. 20 of the Regulation. Requests are to be sent in writing to the Data Controller to the addresses indicated in the “Contacts” section of this information notice. You always have the right to lodge a complaint with the competent control authority (Data Protection Authority) in accordance with Art. 77 of the Regulation, should you consider that the processing of your data infringes legislation in force.

References: Art. 5
 Art. 6
 Art. 6
 Art. 7
 Art. 18
 Art. 20
 Art. 77