Source: https://staiy.com/content/privacy-policy
Timestamp: 2020-08-03 11:54:12
Document Index: 93200570

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6']

Privacy policy | Staiy
Data Privacy Policy for the website and the platform staiy.com (“Website”)
Legal representatives: Adrian Leue, Alessandro Nora and Ludovico Durante
general@staiy.com
(7) the websites from which the system of the user arrived on our Website
Such data will be stored in log files of our system. Such data are needed only to analyze any malfunctions and will be erased at the latest within thirty days. The legal basis for temporarily storing data in log files is Art. 6 para. 1 let. f) GDPR. Temporary storage of the IP address for the system is necessary for making the Website available to the terminal device of the user. For this purpose the IP address of the user must be stored for the duration of the session. Data are stored in log files to ensure the functionality of our Website. In addition, such data are used to optimize the Website and to ensure the security of our IT systems. Data will not be analyzed for marketing purposes in this connection, and we will draw no inferences as to your identity. The aforementioned purposes also provide the basis of our legitimate interest in data processing within the meaning of Art. 6 para. 1 let. f) GDPR. Collecting data to make available the Website and storing data in log files is necessary for operating the Website. Consequently, users have no right to object to the collection or use of such data for the aforementioned purposes.
IV. User Account – fulfillment of orders – additional services
If you set up an account with us, we will process the following information from you:
If you place an order from your account, perform a payment or receive customer services we will process the following information from you:
- other details like product, size, price
- payment informations comprising credit/debit card’s number, holder’s name and CVV
Your data are processed for the purpose of processing the service-contract in accordance with Art. 6 para. 1 lit. b GDPR. Customer data may be stored in a customer relationship management system ("CRM system") or a comparable customer data system.
We will also process the following information from you for the purpose of quality monitoring of our services; administer, maintain and optimise our platform and our services; performing fraud and credit checks; carry on research, analysis, enquiries and surveys on your use of our website; advertising and retarget advertising of our and our Vendors’ products and services and for the purpose of producing aggregated statistic reports:
- order history (anonymized)
Your data are processed for the purpose of processing the service-contract in accordance with Art. 6 para. 1 lit. f GDPR.
With your consent we will also process the following information from you for the purpose of managing our loyalty/reward programmes; providing you with personalised recommendations and enhancing your experience:
- browsing history and behavior
- shopping preferences
- internal identifiers
- spent tier level and wealth;
Your data are processed on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR.
V. Online presence in social media
Our Website, therefore, links to the website of Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, U.S.A., or, if you reside in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, ("Facebook"). Otherwise, no data are exchanged with Facebook on our Website.
Our Website and App also connect to the website of Instagram Inc., 181 South Park Street Suite 2 San Francisco, CA 94107 United States.
Our Website and App also links to the website of Twitter, operated by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, U.S.A. or, if you reside in the EU, Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland.
We also link to the website of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter "LinkedIn").
Our website uses so-called session or flash cookies. Cookies are text files that are stored in or by the Internet browser on the user's computer system. When a user visits a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again. Some functions of our website cannot be offered without the use of cookies. For these it is necessary that the browser is recognized also after a page change. The user data collected by technically necessary cookies are not used to determine your identity or to create user profiles. The legal basis for the processing of personal data using cookies is Art. 6 para. 1 let. f DSGVO. In addition, we also use - if you allow this - so-called persistent cookies, which are used beyond the session (“cross session cookies”). The legal basis for the processing of personal data using persistent cookies is your consent, Art. 6 para. 1 let. a DSGVO. In particular, these cookies serve to make the website user-friendly, more effective and safer.
You can find a list of the cookies we use with a description [HERE ].
Cookies are stored on the user's computer and transmitted to our site by the user. Therefore, you as a user have full control over the use of cookies and they are deleted when you close your browser. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated, not all functions of the website may be available anymore.
VII. Analytics, Processing and Marketing Services
1. Google Analytics/Google TagManager/Google Adwords
On the basis of your consent (Art. 6 para. 1 let. a GDPR) we use web-analysis services from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, (“Google”).
To enable the service Google uses cookies. The cookies collect information about the usage of our online-services. This data is usually transmitted to a Google server in the U.S.A. and stored there.
We use “Google Adwords” is a system that use to bid on certain keywords and for retargeting order for their clickable ads to appear in Google's search results.
https://developers.google.com/analytics/devguides/collection/analyticsjs/enhanced-ecommerce (“enhanced ecommerce data for analytics purposes”)
Google Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps. Firebase will be used for tracking analytics, reporting and fixing app crashes, creating marketing and product experiment. Third parties will have controlled access to this data only for analytical purposes.When customers use Firebase, Google is generally a data processor and processes personal data on their behalf.
The Firebase services that are used successfully completed the ISO 27001 and SOC 1, SOC 2, and SOC 3 evaluation process, and some have also completed the ISO 27017 and ISO 27018 certification process:
Cloud Firestore, Cloud Functions for Firebase, Cloud Storage for Firebase, Firebase A/B Testing, Firebase Authentication, Firebase Cloud Messaging, Firebase Crash Reporting, Firebase Crashlytics, Firebase Dynamic Links, Firebase Hosting, Firebase In-App Messaging, Firebase Invites, Firebase Performance Monitoring, Firebase Platform, Firebase Predictions, Firebase Realtime Database, Firebase Remote Config, Firebase Test Lab, Google Analytics for Firebase, ML Kit for Firebase.
3. Hotjar Ltd
This website uses Hotjar, an analysis software of Hotjar Ltd. ("Hotjar") (http://www.hotjar.com, 3 Lyons Range, 20 Bisazza Street, Sliema SLM 1640, Malta, Europe). With Hotjar it is possible to measure and evaluate the usage behaviour on our website in the form of clicks, mouse movements, scroll heights, etc. The information generated by the tracking code and cookie is transmitted to and stored on the Hotjar servers in Ireland.
If you have allowed the use of hotjar’s cookies, the following information is collected:
- Your e-mail address, including your first and last name, if you have provided it to us via our website.
Hotjar will use this information for the purpose of evaluating your use of our website, compiling reports, and providing other services relating to website usage and internet evaluation of the website. Hotjar also uses third-party services such as Google Analytics and Optimizely to provide services. These third party companies may store information that your browser sends when you visit the website, such as cookies or IP requests. For more information on how Google Analytics and Optimizely store and use data, please refer to their respective privacy statements.
Apart from a cookie-opt in, you can also prevent Hotjar from collecting this information by clicking on the following link and following the instructions: https://www.hotjar.com/opt-out.
SendPulse is a newsletter service provider operated by SendPulse Inc., 19 Hill St Bernardsville NJ 07924 USA. The processing of personal data by SendPulse is covered by SendPulse Privacy Policy and is GRPR compliant. The use of SendPulse simplifies the processing of newsletters considerable and therefore represents a legitimate interest.
On our website we offer payment via Stripe. This payment service is provided by Stripe Payments Europe, Ltd, a private limited company organized under the laws of Ireland with company number 513174 and offices at The One Building, 1 Grand Canal Street Lower, Dublin 2, Ireland (hereinafter "Stripe"). The transfer of your data to Stripe is based on Art. 6 para. 1 lit. b DSGVO (processing to fulfil a contract).
When contacting us (e.g. via contact form, e-mail, telephone or social media), your data are processed for the purpose of processing the contact inquiry and processing it in accordance with Art. 6 para. 1 lit. b GDPR. Customer data may be stored in a customer relationship management system ("CRM system") or a comparable enquiry organisation.
Embedded on our website, users are given the opportunity to subscribe to our press release newsletter via a third party service provided by Sendpulse (SendPulse is a newsletter service provider operated by SendPulse Inc., 19 Hill St Bernardsville NJ 07924 USA). The input mask used for this purpose determines what personal data are transmitted, as well as when the newsletter is ordered by the controller.
During the registration for the newsletter, our third party service also store the first name, last name, e-mail address. Furthermore, the IP address of the computer system assigned by the Internet service provider (ISP) and used by the data subject at the time of the registration, as well as the date and time of the registration.
The legal basis for processing your data is Article 6 (1) lit. a GDPR. Since the newsletter service is provided by a third party, the third party Sendpulse will be processing the data.
There will be no transfer of personal data collected by the newsletter service to other third parties except Sendpulse which operates the service on behalf of us.