WE RESPECT YOUR PRIVACY
Officina delle Essenze is a family-run artisan company. An Italian production with philosophy that places the product quality at the center, as well as rigorous attention to all production stages. We treat our customers with the same approach and use the same concept when we enter into realities. Our professional équipe works for people and with people and strongly believes in human relations. Therefore, Officina delle Essenze respects and will always respect your privacy.
This website is an extension of our business. We have developed it with the aim to offer a direct access to our artisan products. It is a platform where you can discover history and some curious facts, and be continuously updated. Our tools allow us to improve the shopping experience and the users’ policy and in this regard we work with the utmost respect of data and privacy. We assist you in your online and offline shopping via e-mail and social media, suggest promotions at our official retailers via newsletters and inform about the events organized in your city and much more.
Respect is our slogan and you will never receive from us invasive emails or improper contacts. We will treat you as friends. When there is something to know or you need to solve an issue, we will promptly contact you with the tools you have provided us. The data we register are entrusted to the strict management of our Customer Care inside the Company and we take advantage of recognized encryption systems and security certificates for all external suppliers. Your data are not sold to any third party and are used exclusively for improvement of products and website of Officina delle Essenze because understanding your shopping habits allows us to offer the most suitable product for you. We are here for you and if you have any doubts, please, send us an email.
To learn more about this topic, please consult the full version of our privacy policy below.
PRIVACY POLICY
The company Officina delle Essenze srl, having it’s headquarter in Rome (RM), via Pierluigi Sagramoso 52 – 00060, E-Mail: customer.care@officinadelleessenze.com (VAT no. 11311081001) (hereafter “Owner”) and acting in its capacity as a Data Controller pursuant to articles 4 no. 7) and 24 of EU Regulation 2016/679 of 27 April 2016 on the protection of natural persons in respect of personal data processing (hereafter “Regulation”), informs that according to the Art. 13 of Regulation it will proceed to the processing of personal data with regard to website users.
1. PURPOSE OF DATA PROCESSING
- REGISTRATION: at the time of purchase, the User can enter the billing and shipping details indicated on the checkout page also for creating an account. Another option is to subscribe via social media, submitting First name, Last name and e-mail address, or to save the credit card number in order to avoid entering it again.
- PURCHASE: once the purchase is made, First name, Last name, address, telephone number, e-mail and payment information are collected on the website. If the User is a VAT number holder, there will be requested and stored Company name, VAT number and PEC address or Recipient code.
- BLOG: username (or nickname) and e-mail are collected by leaving a comment on the blog.
- OLFACTORY MARKETING CONSULTANCY: First name, Last name, business name, e-mail and telephone number are collected by filling in and sending the form.
- CUSTOMER CARE: username and email are collected by filling in and sending the form.
- BECOME OUR RETAILER: First name, Last name, e-mail, telephone number, business name, address and website are collected by filling in and sending the form.
- ASK A QUESTION: username and email are collected by filling in and sending the form.
- GIFT CARD: you will need to provide the recipient’s email, name and a message (optional) in order to deliver the gift card. Afterwards, we will ask you to indicate the recipient’s details to finalize the shipment, for more information please refer to paragraph “Purchase of goods”.
- INFLUENCER AND BLOGGER: username, e-mail and links to social media are collected by filling in and sending the form.
- NEWSLETTER: the e-mail is collected by subscribing to newsletters.
- REVIEW: First name, Last name (or nickname) and e-mail are collected by leaving a review.
- WORK WITH US: username and email are collected by filling in and sending the form.
- WHATSAPP, FACEBOOK or INSTAGRAM: by contacting Officina delle Essenze srl via WhatsApp, Facebook or Instagram, it is possible to make a purchase after collecting all data necessary for a new order (First name, Last name, billing and shipping addresses, e-mail and telephone number).
2. LEGAL BASIS AND PURPOSE OF PROCESSING
The data processing is carried out to allow the exercising of activities related to service introduction and management requested from the Data Controller. The data will be processed legitimately, fairly and with the utmost confidentiality, in compliance with the appropriate security measures provided by the Code and Regulation.
The processing is carried out with analog and digital tools. The data will not be subject to the public disclosure, in particular:
- REGISTRATION: la finalità è quella di permettere un accesso diretto al sito, consentendo un acquisto più veloce e immediato. La base giuridica è il consenso.
- PURCHASE: the purpose is to allow the User to complete the purchase of Officina delle Essenze products and to ship them. The legal basis is the fulfillment of the Purchase Agreement and legal obligations (including those of accountable and fiscal nature). The data are communicated to the reference shipping courier, duly appointed as Data Controller. After making a purchase, the data are exported to a CRM in order to send commercial information, the consent is optional in accordance with the Art. 130 c. 4 of Legislative Decree no. 196/03, without prejudice to the possibility to opt-out at any time via specific link.
- BLOG: the legal basis is a consent and the data are processed to authorize comments.
- OLFACTORY MARKETING CONSULTANCY: the legal basis is a consent and the data are processed in order to authorize Officina delle Essenze srl to respond to requests.
- CUSTOMER CARE: the legal basis is a consent and the data are processed in order to authorize Officina delle Essenze srl to respond to requests.
- BECOME OUR RETAILER: the legal basis is a fulfillment of pre-contractual measures carried out upon request of the data subject.
- ASK A QUESTION: the legal basis is a consent. The data are processed to allow Officina delle Essenze srl to answer the Users’ questions.
- GIFT CARD: we will process the data to execute the contract that arises from the purchase of a gift card (refer to “Purchase of goods” for more details). We will also process the email of the recipient (i.e. an individual who will receive the gift card as a present) to deliver it. The recipient’s data will be initially processed in accordance with cl. 14 of GDPR and will not be further processed for any purposes until the date of use. After the first purchase by the recipient, the individual can be identified as a Customer and his/her data will be processed in compliance with this Privacy Policy for the purposes related to purchase and/or registration as better specified in the dedicated paragraphs.
- INFLUENCER AND BLOGGER: the legal basis is a fulfillment of pre-contractual measures carried out upon request of the data subject. The data are processed in order to allow the Data Controller to respond to requests.
- NEWSLETTER: the purpose is to inform the User over news and promotions. The legal basis is a consent.
- REVIEW: the legal basis is a consent and the data are processed in order to authorize a review publication.
- WORK WITH US: the legal basis is a fulfillment of pre-contractual measures carried out upon request of the data subject. The data are processed in order to allow Officina delle Essenze srl to respond to requests. No particular data are required, notwithstanding the User’s will to include additional information in his/her CV, authorizing Officina delle Essenze srl to process such data.
If the purchase is failed (abandoned cart, pending payment, payment failed) or the order is completed with a bank transfer and the recipient has never received any payment, Officina delle Essenze srl retains the right to send two messages via e-mail within 24/48 hours in order to give the User time to complete the procedure. In the first case, the purpose of processing is the legitimate interest of the Owner. In the second case, there is a fulfillment of pre-contractual measures carried out upon request of the data subject. After making a purchase, always based on the legitimate interest of the Owner, a request for product review is sent with the appropriate confirmation for publication.
3. METHODS OF DATA PROCESSING AND DURATION OF DATA STORAGE
The Data Controller will process personal data for as long as required to fulfill the purposes as follow:
- REGISTRATION: until the User decides to unsubscribe from the site; Officina delle Essenze srl will remove every account after 7 years from the User’s last access. Prior to this, the Data Controller will send an e-mail to learn if the User wants to keep the account active.
- PURCHASE: the entered data will be stored for no more than 10 years from the purchase.
- BLOG: the comments will be kept online for as long as the website is active.
- OLFACTORY MARKETING CONSULTANCY: the Data Controller will verify obsolete data every 5 years and will proceed with its removal.
- CUSTOMER CARE: the Data Controller will verify obsolete data every 5 years and will proceed with its removal.
- BECOME OUR RETAILER: if the User becomes a collaborator, his/her policy will be substituted; otherwise, the data will be removed after 2 years from the last submission.
- ASK A QUESTION: the Data Controller will verify obsolete data every 5 years and will proceed with its removal.
- GIFT CARD: the gift card contains no personal data, it is virtual and only the recipient will use it. The buyer’s data will be saved and processed in compliance with the provisions defined in “Purchase of goods”. The addressee’s data that are necessary for the gift card delivery (e-mail and name) will be stored in order to allow their use since they comprise the recipient’s e-mail. After the first purchase by the recipient, the individual can be identified as a Customer and his/her data will be processed in compliance with this Privacy Policy for the purposes related to purchase and/or registration as better specified in the dedicated paragraphs.
- INFLUENCER AND BLOGGER: if the User becomes a collaborator, his/her policy will be substituted; otherwise, the data will be removed after 2 years from the last submission.
- NEWSLETTER: 5 years from the date of the last e-mail.
- REVIEW: the reviews will be kept online for as long as the website is active.
- WORK WITH US: 24 months from the submission of the application.
- ABANDONED CART: the Data Controller will verify obsolete data every 5 years and will proceed with its removal.
4. DATA COMMUNICATION
The Data Controller may communicate the data for the purposes referred to in Article 2 to all subjects for whom such communication is mandatory in order to fulfil the legal provisions. However, the data will not be a subject to public dissemination.
5. DATA STORAGE AND TRANSMISSION
The personal data management and storage take place on servers, located within the European Union (the servers are currently in Italy), of assigned third-party companies that are duly appointed as data processors.
In order to consent payments through third-party circuits (e.g. PayPal), as well as submission of commercial information (newsletters) or use of reporting systems of sales and visit, the Data Controller uses one or more suppliers based in the USA and transfers all necessary data to non-EU countries. The Data Controller also ensures that the data transmission to non-EU countries takes place in compliance with the applicable legal provisions by concluding, if necessary, agreements that guarantee an adequate level of protection and/or by adopting standard contractual provisions provided by the European Commission. The list of data processors is available on site.
6. RIGHTS OF THE DATA SUBJECT
The User, in capacity as data subject, has rights referred to in Article 15 of Regulation, namely:
- The data subject is eligible to receive a personal data confirmation, or its absence, and a notice in an intelligible form;
- The data subject has the right to receive information on:
- The origin of personal data;
- Purposes and methods of processing;
- Logic applied in case of processing with electronic tools;
- Identification details of the Owner, the managers and the representatives;
- Subjects and categories of subjects to whom personal data may be disclosed or who can be acknowledged in this regard in capacity of appointed representative in the State, managers or agents.
- The data subject has the right to obtain:
- Updates, rectification or, when necessary, integration of data;
- Removal, transformation into anonymous form or freezing of data processed illegally, including the data that are not obligatory to be stored in relation to the purposes they were collected or eventually processed;
- Confirmation that the operations under letters a) and b), as well as their content, have been brought to the attention of those to whom the data were communicated or disclosed unless this requirement proves impossible or involves manifestly disproportionate effort compared with the right that is to be protected.
- The data subject has the right to fully or partially object:
- For legitimate reasons to the processing of personal data relating to him/her, even if pertinent to the purpose of collection;
- To the processing of personal data relating to the data subject in order to fulfil purposes not covered under Art. 2.
Also on the basis of Art. 15 and those following the GDPR, the User has the right to request, at any time, access to his/her personal data, their rectification or removal, limitation of the data processing in cases provided by Art. 18 of the GDPR; to obtain from automatic device, in a structured and commonly used format, the data relating to the User in cases provided by the Art. 20 of the GDPR.
At any time, based on the Art. 7 of the GDPR, the User may withdraw from the given consent; lodge a complaint to the competent supervisory authority under Art. 77 of the GDPR if the User deems that his/her data processing does not follow the current legislation. The User can make a request of opposition to the personal data processing under Art. 21 of the GDPR where he/she will provide valid reasons that justify such opposition. The Data Controller reserves the right to evaluate the request. It will not be accepted if there are compelling legitimate grounds to proceed with the processing that prevails over the User’s interests, rights and freedom. At any time, the data subject can exercise the rights referred to in the previous article by sending:
- A registered letter to: Officina delle Essenze srl, via Pierluigi Sagramoso, 52 – 00060 Rome
- An e-mail to PEC: officinadelleessenzesrl@postcert.it
COOKIE POLICY
The present policy covers the use of cookies on officinadelleessenze.com and is available for the User in implementation of the provision adopted by the Privacy Guarantor for the personal data protection “Identification of simplified procedures for the information notice and the acquisition of consent for the use of cookies – 08 May 2014” and in compliance with Art. 13 of the GDPR.
Officina delle Essenze srl notifies that the provision of data is optional with regard to the cookies that are installed on the device of the User. However, some of them are necessary for the proper use of the website (technical cookies) and therefore, in the absence of consent, only some cookies will be automatically blocked.
WHAT ARE COOKIES?
Cookies are small text files that are stored on the User’s device while browsing a website.
WHAT ARE COOKIES FOR?
They allow the website to activate basic or extra functions that make the website operate or improve services offered to the User.
EXAMPLES OF WEBSITE COOKIES
- Some cookies are stored in order to recognize the User’s specific browsing session. If the cookies did not function, the User A would see the cart of the User B and vice versa. On the other hand, by storing a cookie the website tracks the User A, for whom it will keep in memory all products placed in the cart, just like a faithful assistant.
- A cookie is stored to evaluate whether the User has already logged in or not. If the User has logged in, the previously entered billing and shipping details are retrieved. Otherwise, it is necessary to enter them again.
- The website stores a cookie to evaluate the User’s language (Italian, English or other). Thanks to this cookie all communications between Officina delle Essenze and the User take place in the preferred language of the latter.
- Some cookies allow interaction between the website and payment circuits such as PayPal or Amazon Pay. The systems would not be able to “talk” without cookies.
More details about cookies are available on Wikipedia.
This website makes use of cookies of third parties for:
Tracking with anonymized IP without profiling (Google Analytics)
The website uses performance cookies of Google Analytics to study the Users’ behavior during browsing, with a view to improve its speed, accessibility and User experience. The Data Controller has selected to anonymize User’s IP for Google Analytics integration, that way there are no invading ads or possible profiling from Google.
For more details, please consult a special page dedicated to IP anonymization (or masking) in Analytics on Google.
Personal Data Processed: cookies and usage data
Place of processing: USA
GPS tracking upon request (Google Maps)
The website uses Google interactive maps on some pages to provide the User with a list of retailers. In this case, the closest retailer is suggested and the User has the right to accept or reject the identification of GPS location via browser.
Personal Data Processed: cookies and usage data
Place of processing: USA
Google Fonts
The fonts of this website use Google Fonts service to integrate and use font style. The information obtained through the stored cookie is transmitted from the User’s browser to Google and allows its tracking.
Officina delle Essenze srl has decided to integrate these tools due to the fact that Google cares about Users’ privacy and shows it with a strict application of service conditions. Please consult Google page to access Google Privacy Policy. The latter includes information on cookies that Google Maps or Google Fonts can store in User’s device.
Personal Data Processed: cookies and usage data
Place of processing: USA
Sharing and interaction with external social networking platforms
The website uses sharing tools (social widgets) to allow the User to interact and forward the page URLs to external platforms (Facebook, Twitter, etc.). The interactions and the information acquired by these applications are subject to the policy settings of the User that are managed within every social networking platform.
Personal Data Processed: cookies and usage data
Place of processing: USA or Ireland
Content display hosted on external platforms
The website uses tools that can enable visualization of content, hosted on external platforms, directly on officinadelleessenze.com (e.g. Issuu for the PDF catalog) and its interaction. If this type of content is displayed, the third party can collect traffic data relating to the User.
Personal Data Processed: cookies and usage data
Place of processing: USA or Ireland
Conversion tracking with Facebook pixel
The tracking of Facebook Ads conversion (via the Facebook pixel), depending on the displayed page, allows the Data Controller to connect data from Facebook advertising network with operations carried out on officinadelleessenze.com and vice versa.
Personal Data Processed: cookies and usage data
Place of processing: USA or Ireland
Remarketing and behavioral targeting with Facebook pixel
The website uses Facebook pixel to provide personalized content based on the User behavior on officinadelleessenze.com, as well as to monitor conversions, manage, disseminate and track ads on social media. This service allows the Data Controller to offer a tailor-made experience according to the real needs of the User or what the User has or has not done on the website. If the User does not want to activate this function, it will be sufficient to disable non-essential cookies via a special banner.
Personal Data Processed: cookies and usage data
Place of processing: USA or Ireland
Facebook Custom Audience and/or similar
The Facebook function “custom audience” and “similar” allows the Owner to offer ads to Facebook audience based on the behavior and the interests of Facebook users that have already visited officinadelleessenze.com at a certain period or have done specific operations with other Facebook pixel previously installed. Here as well, the Users can leave Facebook cookies disabled and avoid participating in the following service.
Personal Data Processed: cookies and usage data
Place of processing: USA or Ireland
Facebook Audience Network
Facebook Audience Network is an advertising service that allows the Data Controller to use some identifiers to offer ads to the User via Facebook.
Personal Data Processed: Cookies, usage data and unique identifiers (e.g. Google Advertiser ID or IDFA)
Place of processing: USA or Ireland
All above mentioned services that involve “Facebook” are offered by Facebook, Inc. or by Facebook Ireland Ltd, depending on the location of officinadelleessenze.com is accessed from. For more details on Facebook’s use of Data, please consult Facebook data policy.