Privacy Policy

Purpose of processing and Personal Data processed

Legal basis and data retention period

a.      Navigating the Website

The computer systems and software procedures used to operate this Website acquire, during their normal operation, some Personal Data whose transmission is implicit in the use of Internet communication protocols.

This category of data includes IP addresses or domain names of computers and terminals used by users, URI/URL (Uniform Resource Identifier/Locator) of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.) and other parameters relating to the operating system and computer environment.

This data, necessary for the use of web services, is also processed in order to obtain anonymous statistical information on the use of the Website and to ensure the correct functioning of the services offered.

The processing is based on the legitimate interest of the Data Controller (Article 6, paragraph 1 letter f) of the GDPR).

Some browsing data is also stored beyond the single session to enable essential Website functions, such as recovery of abandoned shopping carts, analysis of user activities and improvement of the shopping experience.

b.     Spontaneous communications or requests for information

The optional, explicit and voluntary sending of messages via Slowear's contact channels – including any private messages sent to the Data Controller's official social media profiles, where applicable – as well as the completion of forms on this Website or on official social media pages, entails the collection of the contact details provided and any other personal data included in the communication. Such information will be used exclusively to respond to general enquiries or to provide clarification regarding Slowear services and experience.

The legal basis of the processing depends on the individual purpose pursued.

Personal Data provided by the user for submitting requests will be retained for 36 months from the date of collection, unless the user has registered an account, in which case the data will be associated with the account and retained for its entire duration.

c.      Use of social media

With regard to the processing of personal data carried out by the operators of the social media platforms used by Slowear, please refer to their respective privacy policies.

Personal Data provided by users through Slowear's social media pages are processed exclusively to manage interactions with users (comments, public posts, etc.) and in compliance with applicable legislation.

The processing is based on the legitimate interest of the Data Controller (Article 6, paragraph 1 letter f) of the GDPR).

Personal Data and messages sent via Slowear's social media pages are retained for 36 months, unless retention is necessary for additional purposes.

d.     Creation of a personal account

Following registration – via the Website or in one of the Stores – a personal profile (account) will be created, allowing access to dedicated services such as order management and tracking, saving details for future purchases and purchasing new products.  To offer these services to registered users, the Data Controller necessarily processes identification and contact data.

In some cases, the Data Controller may optionally request that you provide additional information, such as gender, age group, country of residence and telephone number, to improve knowledge of customers and better identify their needs.

The legal basis for the processing is the performance of a contract or pre-contractual measures at the request of the data subject (Article 6, paragraph 1, letter b) of the GDPR).

Personal Data will be retained until the request to delete the account.

e.     Order and purchase management

The Data Controller collects information relating to purchases made by registered users on the Website or by customers who provide their personal data in the Stores, such as purchased products and quantities. In the case of guest checkout purchases, data necessary to manage the purchase and delivery are processed.

The legal basis is the performance of a contract (Article 6, paragraph 1, letter b) of the GDPR);

Personal Data will be retained for the period required by tax law, namely 10 years for accounting records.

f.       Promotional communications and marketing

Subject to consent, the personal and contact data provided (such as email address and telephone number), collected through dedicated forms, may be used to send informational and promotional communications relating to the Data Controller's products and initiatives.

Such communications may include, for example, newsletters, invitations to exclusive events or presentations of new collections.

The processing is based on the express consent of the data subject (Article 6, paragraph 1, letter a) of the GDPR).

Personal Data will be retained until the user withdraws consent, which can be done by accessing their reserved area, using the cancellation link at the bottom of each promotional communication, or by writing to the addresses indicated in paragraph 1 of this policy.

g.      Other commercial communications

Limited to the email address provided during the purchase, the Data Controller may send promotional communications relating to products or services similar to those already purchased, even in the absence of explicit consent from the customer (known as soft spam).

It is understood that the customer may object to such communications at any time by writing to the addresses indicated in the "Rights of the data subject" section or by using the unsubscribe links in each email received.

The processing is based on the legitimate interest of the Data Controller (Article 6, paragraph 1, letter f of the GDPR and Article 130, paragraph 4 of Legislative Decree 196/03).

Personal Data is kept until the purposes pursued are achieved, unless the data subject objects.

h.     Profiling

Subject to consent, the Data Controller may also use the personal data collected at the time of account creation (see point d) for profiling purposes.

This includes analysing the user's preferences, habits and purchasing choices, in order to propose personalised products, services and content, in line with their interests, as well as to send targeted promotions and tailored communications.

The processing is based on the express consent of the data subject (Article 6, paragraph 1, letter a) of the GDPR).

Personal Data will be retained until the user withdraws consent.

i.        Compliance with legal provisions or orders of competent authorities

Personal Data may be processed to comply with obligations provided for by law or regulations, as well as to execute requests, orders or binding measures issued by competent authorities. In such cases, the user's data may be disclosed to public bodies or authorities, within the limits of the provisions of the applicable legislation.

The processing is necessary to fulfil a legal obligation to which the Data Controller is subject (Article 6, paragraph 1, letter c) of the GDPR).

Personal Data will be kept for the periods provided for by current regulations.

j.        Other purposes of processing

Personal Data may also be processed by Slowear for the following purposes:

-           to protect its rights or those of third parties in or out of court, in the event of disputes, claims for compensation or other legal matters;

-          to carry out statistical and aggregate analyses in anonymous form, in order to monitor performance, correct any anomalies and optimise the user experience and the efficiency of the services offered;

-          to prevent and detect fraud or misuse of services, helping to ensure the security of users and their data.

The processing is based on the legitimate interest of the Data Controller (Article 6, paragraph 1 letter f) of the GDPR).

The data will be kept for the time strictly necessary to achieve the purposes for which it was collected.