PRIVACY POLICY

Welcome to our web site (“emmelab.com”). Please read our Privacy Policy carefully, as it applies each time you access the web site and decide to navigate through it and use its services, regardless of whether or not you purchase products. Please also read the General Terms of Use on emmelab.com, because they include important information about privacy and the security systems adopted by the web site. EMMElab is responsible for making decisions concerning the purposes, methods of processing your personal data and the tools used, including the security profile, pursuant to Legislative Decree No. 196 of 30 June 2003 (Privacy Code). This Privacy Policy provides you with all information that is useful for understanding how we collect and use the information identifying users of emmelab.com. For any other information regarding the processing of your data, you may send a request via e-mail to info@emmelab.com, or by writing to the address of EMMElab .

Information pursuant to Art. 13 of Legislative Decree 196/2003

Data owner

The owner of the data processed by this site is EMMElab, which is headquartered in Italy at Via Giuseppe Berneri, n. 20, 00169, Roma (RM), Trade and Companies Register, Tax ID No. and VAT Registration No. 12857931005, fully paid-up (hereinafter: “EMMElab”). The owner independently decides on the purposes and methods of the processing, as well as on the security procedures to be applied to guarantee confidentiality, integrity and availability of the data.

Optional or mandatory provision of data

Providing EMMElab with your personal data, which is requested at various collection times, may be necessary to carry out the purposes indicated in the appropriate information, or this may be optional.

The mandatory or optional nature of such provision is specified by the symbol(*) which is placed alongside information which is mandatory.

Any refusal to provide EMMElab with such data when this is marked mandatory renders it impossible to pursue the main purpose of that collection: such refusal could, for example, make it impossible for EMMElab to perform the purchase agreement, or to provide other services that are available on emmelab.com. Supplying EMMElab with subsequent data, other than data marked as essential (such as, for example, indicating your favourite designer), is conversely optional, and does not result in any consequences in terms of completing the main purpose of such collection.

Data controllers

At the present time, some of the data controllers who process your data are as follows:

The updated list of all Data controllers is available at EMMElab’s headquarters; for further details, please contact our Customer Care by phone or e-mail, selecting “privacy” as the subject.

Your rights

According to Art. 7 of Legislative Decree 196/2003, you always have the right to obtain confirmation from EMMElab as to whether or not personal data concerning you was processed, even if it has not yet been recorded, and to be communicated such data in an intelligible form.

You also have the right to obtain information from EMMElab about the source of your personal data; the purpose and method of processing your personal data; the logic applied for processing performed with the aid of electronic tools, identification details of the data owner and controllers, an indication of the subjects or categories of subject for which personal data may be communicated or which could become known by people acting as, for example, data controllers. All of this information is contained in this Privacy Policy. Furthermore, you always have the right to obtain from EMMElab:

  1. a) an update, correction, addition of your personal data;
  2. b) the cancellation, conversion to an anonymous form or blocking of any personal data that was processed in violation of the law, including data which it is not necessary to store for the purposes for which said data was collected or subsequently processed;
  3. c) an attestation that notice of the operations indicated in letters a) and b) was given, including as concerns their content, to those people whose data was communicated or disseminated, except in the event that such measure proves to be impossible or entails using means which are clearly disproportionate with regard to the right protected.

You nevertheless have the right to object, in part or in full:

  1. a) for legitimate reasons, to the processing of personal data concerning you, even if it is pertinent to the purpose for which it was collected;
  2. b) to the processing of personal data concerning you for the purposes of sending advertising or direct marketing materials, or for completing market research or commercial communications activities.

You may exercise your rights freely and at any time, by sending a written request to EMMElab at the mailing address of the headquarters, or by sending an e-mail to Customer Care, selecting “privacy” as the subject, and we will promptly reply.

In order to guarantee that your personal data is always accurate, up-to-date, pertinent and complete, please inform us of any changes that have occurred via e-mail to our Customer Care, selecting “privacy” as the subject.

The information noted here is the minimum information that EMMElab is obligated to provide to you: for any further information relating to EMMElab’s processing of your personal data, please read this Privacy Policy in full.

A summary of our privacy policy

The following are the principles on which our privacy policy is based:

  1. processing data exclusively for the purposes and according to the methods illustrated in the information presented when the data was collected;
  2. only using the data for purposes in addition to those for which it was specifically released when the user has expressly consented;
  3. only providing access to data to third parties for purposes which are essential for performing the service requested and within the context of appointing a data controller; not communicating data, assigning it or transferring it to third parties for their own specific processing unless the users have been informed in advance and have given their consent;
  4. responding to requests for cancelling, changing or adding the data provided, opposing the processing of data for the purposes of sending commercial and advertising information;
  5. insuring proper and lawful data management, safeguarding the privacy of users, as well as applying appropriate security measures to protect the confidentiality, integrity and availability of the data provided.

How and why we process your personal data

Your personal data is processed using primarily electronic and telematic means by EMMElab and by other parties who, having been appropriately selected for their reliability and expertise, perform operations which are instrumental to pursuing purposes that are strictly related to use of the web site, its services and to the purchasing of products through the web site (see too, the paragraph “Parties who may process your personal data”).

The specific purposes for which data is processed are summarized on each occasion in the information pursuant to Art. 13, Legislative Decree 196/2003, which is presented to the user when s/he releases personal data.

Generally, the data is processed to perform the following services, which are available by accessing our site:

  1. registration or subscription to services offered by the EMMElab, such as, for example, our newsletter, sharing your likes with friends of yours who are registered on the site, and through your social media accounts;
  2. order fulfilment and related activities;
  3. management of payments, including anti-fraud control in case of payment by credit/debit card (in which case the data released during the purchase process will be sent to the person in charge of antifraud control);
  4. management of your requests: technical, of a commercial nature, regarding the progress of your orders, as well as requests for information in the broader sense;
  5. making contact with our service professionals (Press Office, Business Development, Web Marketing, Purchasing Office, Customer Care);
  6. request to be considered as a member of our staff, by sending a CV;
  7. sending, upon your consent, and for marketing purposes, commercial communications through various channels, both electronic and telematic (e-mail, sms) as well as using traditional methods (paper-based mail, telephone). We remind you that, as prescribed by Art.130, Subsection 4 of Legislative Decree 196/2003, the owner may use data to send e-mails advertising its own products and services that are similar to those already purchased, unless such use is denied;
  8. sending, upon your consent, for profiling purposes to improve your navigation experience on the site, commercial proposals which are in line with your interests. Profiling is carried out, for example, through the use of third party cookies. To that end, we ask that you read our Cookie Policy.

In processing data which could directly or indirectly identify you, we seek to follow a principle of strict necessity.

Therefore, we have configured the site in such a way that your personal data is reduced to a minimum: therefore, the processing of your data is excluded when the purposes pursued in the individual cases can be achieved through the use of anonymous data (such as, for example, market research aimed at improving services) or through other means which allow the person concerned to be identified only in case of necessity or at the request of the authorities or police forces (such as, for example, for data relating to traffic and to your presence on the web site, or to your IP address).

Your data will be communicated to third parties only with your express consent, except in cases where communication is mandatory by law or is necessary for the purposes prescribed by the law to pursue purposes for which the consent of the interested person is not requested; in these cases, data may be made available to third parties that will independently process it, and only for the aforementioned purposes (for example, in the case of a request made by the police or judiciary, or other competent entities, or to perform obligations deriving from the contract entered with you, as is the case with communication to PayPal for payments of purchased products).

Any processing purpose other than the one specified for which you have provided your personal data shall be demonstrated in the information and shall only be pursued by EMMElab upon obtaining your express consent.

There are, moreover, processes for which the legislation provides for excluding consent: for example, we inform you that EMMElab may process your personal data without obtaining your consent when this is needed to perform a legal obligation or when this is necessary to perform the obligations that have been contractually assumed towards you. We wish to inform you that Art. 130, Subsection 4 of Legislative Decree 196/2003 on personal data protection permits EMMElab, without any obligation to obtain your express consent, to use your data for direct selling activities involving products similar to those you have already purchased and for opinion survey, unless you refuse to allow such use of the e-mail address you communicated to us.

Lastly, we inform you that your personal data will not be transferred abroad to countries that do not belong to the European Union, or which do not provide adequate levels of personal protection. In the event this is necessary to provide you with services, or to enter into a contract with EMMElab to purchase products, we assure you that the transfer of your personal data to countries which do not belong to the European Union or which do not provide an adequate level of protection shall be performed only prior to the signing by EMMElab and said parties of specific contracts in accordance with the applicable law and regulations.

EMMElab may end up processing personal data of third parties which has been directly communicated to EMMElab by its own users, for example in the case where a user has purchased a product to give to a friend, or when the party paying the price to purchase the product is different from the party for whom the product is intended, or even when the user intends to inform a friend of a service on emmelab.com or of a sales offer of a particular product.

On these occasions, EMMElab will take steps to deliver the information prescribed by Art. 13, Legislative Decree 196/2003 to the third party when it registers said party’s data in its own archives, but you are still responsible for obtaining the consent of the person whose data is indicated prior to communicating it to EMMElab and to informing said party about this Privacy Policy, because you will be the sole party responsible for communicating information and data relating to third parties, without them having expressed their consent or for any use by them which is incorrect or contrary to law.

We inform you that these parties’ consent is not necessary when the data is communicated to EMMElab to enter the contract, with EMMElab, in favour of the third party.

EMMElab reserves the right to eliminate accounts and all related data in the event that unlawful content, content that is damaging to EMMElab’s image and/or its products or those of third parties, or content which is nevertheless offensive or which promotes illegal or defamatory activities, pornographic content, content which incites people to violence, which promotes discrimination with regard to race, sex, religion or sexual orientation, is detected.

Parties that may process your personal data

EMMElab has decided to use third parties to process your personal data for certain activities. Third parties who perform these operations have been appropriately selected and have the experience, capacity and reliability, and offer a suitable guarantee that they will fully comply with the current provisions on processing, including the data security profile.

These third parties have been appointed “data controllers” where necessary, and perform their activity according to the instructions given by EMMElab, and under its control (see section “Data controllers”). We periodically verify that the controllers have performed the tasks assigned to them in a timely manner and that they continue to provide appropriate guarantees that the provisions on the protection of personal data have been fully respected.

Your data is then processed by the individuals in charge of the specific services; the class of agent that performs these activities is dependent on the purposes for which the data was provided, and is always indicated in the information presented to you when your personal data is released.

Security measures

We adopt adequate security measures to reduce to a minimum the risks of destruction or loss, including accidental – of data, unauthorized access or unapproved processing or processing which does not conform to the purposes of collection indicated in our Privacy Policy.

However, EMMElab may not guarantee to its users that the measures adopted for the security of the site and the transmission of the data and information on the site limit or exclude any risk of access without consent, or dissemination of data by devices belonging to the user: we advise you to make sure that your computer is equipped with adequate software to protect against the transmission in data networks, whether through input or output (such as updated antivirus systems) and that your Internet service provider has adopted suitable measures on network data transmission security (such as, for example, firewalls and spam filters). On emmelab.com, every purchase is made with the utmost security thanks to the use of the most advanced technological and coding systems (SSL).

Link to other web sites

Our site contains links to other web sites which may not have any connection to us.

EMMElab does not control nor does it perform monitoring operations on these web sites and their content.

EMMElab may not be held liable for the content of these sites and for the rules adopted by them, including with regard to your privacy, and to the processing of your personal data during your navigation activity. We ask that you thus pay attention, when you connect to these sites through the links on our site, and that you carefully read their conditions of use and privacy policies. Our Privacy Policy does not apply to third party web sites. Our site provides links to these sites only to facilitate a user in his/her search and navigation, and to facilitate hypertext links to other sites. Activating the links does not constitute any recommendation or suggestion by EMMElab to access and navigate to these sites, nor does it provide any guarantee as to their content, services or the goods provided and sold by them to Internet users.

Contacts

If you wish to receive further information on how EMMElab processes your personal data, please write an e-mail to the e-mail address “privacy”.

To find out your rights and to always remain up-to-date on the legislation on personal protection with regard to the processing of personal data, please visit the web site of the Italian Data Protection Commissioner [Garante per la protezione dei dati personali] at the following address http://www.garanteprivacy.it/.

Applicable law

This Privacy Policy is regulated by Italian law and in particular by the Code on personal data protection (Legislative Decree No. 196 of 30 June 2003) which governs the processing of personal data, including data held abroad, that is carried out by anyone with a residence or registered office in Italy.

The Code guarantees that personal data will be processed in accordance with fundamental rights and freedoms, as well as with dignity for the person concerned, particularly as concerns confidentiality, personal identity and the right to protection of personal data.

Modification and updates to the EMMElab Privacy Policy

EMMElab may modify or simply update all or part of the site’s Privacy Policy, including in consideration of the modification of legal rules or regulations which govern this subject area and protect your rights. Changes and updates to the Privacy Policy will be notified to users on the Home Page as soon as they are adopted and will be binding as soon as they are published on the web site. Therefore, please access this section regularly to check on the publication of the most recent and updated Privacy Policy.