Information pursuant to articles 13 and 14 of EU Reg. 679/2016

Cashmere Island was born from our experience: thirty years in the knitwear sector, in particular in the production of pure cashmere garments, it offers highly qualified products, made by Italian artisans and therefore exclusively Made In Italy.

This website allows users to learn about and purchase the products that NonSoloLana Srl sells through the website www.cashmereisland.com.

Your privacy and the security of your personal data are very important to Nonsololana srl, which is why we collect and manage your personal data with the utmost care and adopt specific measures to keep them safe.

Below you will find the main information on the processing by Nonosololana srl ​​of your personal data in relation to your browsing of www.cashmereisland.com and the use of the services offered. We invite you to read our Privacy Policy.

Data controller

Nonsololana Srl – with headquarters in Via dei Casini 19/B – 59100 – Prato – ITALY VAT number 02040470979 – email: customercare@cashmereisland.com 

For any clarification, question or need related to your privacy and the processing of your personal data, you can contact us at any time by sending a request to our  Customer Service by writing to email address – customercare@cashmereisland.com

Purpose, legal basis and need to provide data.

Purpose

The general and main purpose that the Data Controller pursues through this website is to inform and sell its products to web users, for this purpose it performs some processing of personal data.

The personal data collected by the Data Controller will always be processed in compliance with the principles of lawfulness, fairness, correctness, proportionality, necessity, accuracy, completeness and security imposed by the legislation on privacy.

The personal data that the Data Controller processes are those that you provide to us when you complete an order and purchase goods, and those that we collect while you browse or use the services offered on the site, for example personal data such as name and surname, email , shipping address and billing address, telephone numbers, navigation data and your purchasing habits. The treatment will take place using IT, manual and paper tools and in particular for:

  1. allow users to purchase and receive or ship cashmereisland products through the e-commerce function;
  2. register and access the personal area of ​​the site in order to use the functions contained therein (e.g. create your own wish list, edit data of your account, purchase products more quickly as a "registered user" with historicization of purchases);
  3. subscribe to the newsletter and therefore be the recipient of commercial communications from Nonsololana srl ​​and its products;
  4. promote one's products and website also through advertising campaigns on social networks;

We also inform you that we carry out statistical surveys and analyzes of navigation data and preferences in aggregate form, to understand how users interact and use the Site and to improve our offer and our services. This treatment takes place in a completely anonymous form for the owner.

Finally, it may be necessary to process our customers' personal data to respond to requests, including for information or as part of the service customercare

Legal basis of the processing, Need for conferment

  • The processing for the purposes sub 1 - purchase with or without registration on the site of the products via the e-commerce platform - has as its legal basis the need to fulfill the pre-contractual and/or contractual obligations between the parties (owner and user) as required by Article 6 paragraph 1 letter b) of the GDPR, as well as the fulfillment of obligations deriving from the law (Article 6 paragraph 1 letter c) of the GDPR), such as for example issuing invoices, accounting, delivery of goods, and other activities relating to the sale of products and after-sales (including, for example, fraud prevention, returns, guarantees and customer assistance, information requests). The data processed will be of a common type: personal data and contact details (name, surname, residential address, delivery address, email, telephone number) to provide for the execution of the contract and deliver the goods (also via carriers) . The provision of the requested data is therefore mandatory and without it it will not be possible to proceed with the sale.

As required by the Privacy Code and the GDPR, the email address provided on the occasion of the sale of one of the owner's products may be used by the latter in order to promote softspam commercial initiatives based on one's own interest legitimate (art. 6 paragraph 1 letter f) and recital 47 of the GDPR as well as art. 130bis of the Privacy Code) the user can at any time request the interruption of this treatment with simplified methods (unscribe- link inserted in the email received ).

attention: We inform you that the personal data of third parties to whom you wish to send the products you purchase on the site (e.g. a gift) are: name, surname, shipping address and will be treated solely and exclusively purpose of shipping the goods, also via an appointed carrier. The information contained in this disclosure is therefore also valid for interested parties pursuant to Article 14 of the GDPR, i.e. those who have not directly provided their data to the Data Controller as they are only recipients of the goods and not buyers.

  • The processing for the purposes under 2 - registration in the reserved area of ​​the website - has as its legal basis for the processing of data the consent freely expressed by the interested party (art. 6 paragraph 1 letter a) of the GDPR. The data processed will be of a common type: name, surname, gender, age, email and residential address, delivery address, no. telephone number and data relating to purchases and preferences expressed. The registered user is asked for all the data necessary to be able to better enjoy the site experience and possibly purchase the goods from the e-commerce platform. In addition, the user can create his own wishlist and his order history on his own page (orders are kept for 10 years). The registered user - with reference to his own wishlist  or abandoned carts - will receive: email communications relating to the prices or availability of preferred or unpurchased products; communications of products similar to products already purchased through the account. The provision of the data required for the creation of the account is necessary in order to give access to the functions contained therein in the absence it will not be possible to make them available to the user.

 

  • The processing for the purposes sub 3 - subscription to the newsletter for receiving commercial communications - has as the basis of the data processing the consent freely expressed by the interested party (art 6 paragraph 1 letter a) of the GDPR. The processing involves sending commercial communications, via electronic means (such as, for example via e-mail, social networks and chat) or paper (for example, traditional mail), relating to its brands, services and/or products, for participation in events and conducting market analysis and statistics. The data processed will be of a common type: email address, gender, name and surname, date of birth. The data will be processed only for sending communications relating to future: promotions, collections or initiatives of the Data Controller. The provision of the requested data is necessary in the absence of which it will not be possible to receive the newsletter.
  • The treatment for the purposes sub 4 - promotion of one's products through social network advertising campaigns - has as its legal basis the consent freely given by the interested party (read the information cookies policy) and in the cases provided by law the legitimate interest of the owner art. 6 paragraph 1 letter f) of the GDPR. The provision of data is necessary in cases where consent is required. In the cases of legitimate interest, the data have already been provided by the user or by third parties and appropriate information on their use has been made with the possibility of easily and promptly interrupting the processing.
  • For the Data Controller's statistical analysis purposes, please refer to the information cookies policy.
  • The processing of data that may possibly occur to process requests for information and/or the creation of customecare services has as its legal basis the legitimate interest of the owner or, in the case of pre-contractual correspondence, the need to fulfill to certain legal obligations (Article 6, paragraph 1, letter a) of the GDPR). Therefore, in these cases, the provision of data is mandatory and without it it will not be possible to process the requests of the interested parties.

The categories of personal data

When browsing or shopping on cashmereisland.com:

  1. a) we collect the personal data necessary to conclude and execute your purchase on the site, such as gender, name and surname, e-mail address, shipping address, billing address, telephone and payment details;
  2. b) we collect your e-mail address together with your name, surname and gender when you sign up for our newsletter service;
  3. c) we process the personal data you provide us when you contact our Customer Service to provide you with the requested assistance (via email, website form and telephone), in particular you will have to provide for a better service at least: the name and surname, telephone, geographical area, reason for the request;
  4. d) subject to your consent, we collect and use your personal data for marketing purposes (for example: gender, date of birth, email, purchasing habits, order history, preferences, any access to the reserved area, etc. );
  5. e) for the registration of your account in the reserved area, we collect your name and surname, your e-mail address and password. If you are a registered user, we collect information about your access to the reserved area of ​​the Site. All with the prior specific consent.
  6. f) we collect anonymous information about your navigation on this website, such as the pages you visited, the products. This is aggregated data managed by data controllers.
  7. g) in the event that you provide the Data Controller with personal data of third parties, for example in cases in which you decide to purchase a product to be delivered to a friend, or to give a gift, we inform you that this information is also valid for the processing of your data pursuant to Article 14 of the GDPR 

We inform you that the owner does not process personal data relating to minors. If you access and use the services offered, you must be of legal age and declare that you are of legal age.

Recipient categories

The personal data on this website may be processed by the Data Controller and/or by specifically authorized and/or appointed personnel, as well as by internal and external managers, all formally appointed/authorized by the Data Controller himself.

In particular for the purposes sub 1, 2 and 3, the data may be communicated by the Data Controller also to suppliers of the management and maintenance service of IT systems, websites and databases of consultants, who will process the data as External Managers.

Treatment method

All data will be processed in paper and electronic format. Personal data as well as any other information that can be directly or indirectly associated with an interested party are processed by applying security, technical and organizational measures such as to guarantee a level of security appropriate to the risk, taking into account the state of the art and the costs of implementation, o where provided for, security measures prescribed by specific legislation, by way of example but not limited to, provisions issued by the guarantor, regulations, provisions, legal provisions.

Period  of conservation

The data are processed and stored for the time required by the purposes for which they were collected.

Therefore:

  • Personal Data collected for purposes related to the execution of a sales contract and/or specific services between the Owner and the User will be processed until the execution of this contract is completed and kept for 10 years from the termination of the contract, except for events interrupting the limitation period.
  • The data for the pursuit of communication and marketing purposes will be processed until revocation of consent and/or existence of legitimate interest and/or request for interruption of processing by the interested party, as well as possibly kept for the time referred to in the statute of limitations of rights.

At the end of the retention period, Personal Data will be deleted.

Data transfer to third countries

The data controller does not transfer to third countries pursuant to Regulation 2016/679. In case of transfer to third countries, the Data Controller ensures that the reference company has adhered to agreements recognized by the European Commission or that privacy safeguard clauses have been signed.

Rights of the interested party

In relation to the processing of personal data, the interested party may, at any time, exercise the rights provided for by the GDPR (pursuant to articles from 15 to 22). Where deemed appropriate, lodge a complaint with the supervisory authority.

In particular, the following rights are recognized to the interested parties: articles15 – “Right of access of the data subject”, 16 – “Right of rectification”, 17 – “Right to cancellation", 18 - "Right to limit processing", 19 - "Obligation to notify in case of rectification or cancellation of personal data or limitation of processing", 20 - "Right to data portability", 21 - "Right to object ", 22 - "automated decision-making process relating to natural persons, including profiling" of the GDPR within the limits and under the conditions set out in Article 12 of the GDPR. (In general, please note that for the processing of personal data for which the legal basis is consent, this may be revoked).