This privacy policy relates to the processing of data that you provide when you visit the website giuliangin.com (hereinafter "the website"), or on the use of company contacts provided through the websites themselves in accordance with European Regulation 2016/679 (hereinafter "Regulation") and Legislative Decree 196/2003 in the by Legislative Decree 101 / 2018 amended version.

1. HOLDER OF TREATMENT AND CONTACT DETAILS

The person responsible for data processing is the natural or legal person, public authority, service or other institution that individually or together with others determines the purposes and means of processing personal data.

The person responsible for data processing is Fashion Time srl(hereinafter "Controller") with registered office at VIA DUCHESSA JOLANDA 26 CAP– 13100 Vercelli (VC) ITALIA, VAT identification number 02496550027.

For information or to enforce the rights mentioned in point 6, the data controller is available at the following contacts:

• Telephone 49 (0) 9451 949 63 15
• Email shop@giuliangin.com

2. CATEGORIES OF DATA PROCESSED AND PURPOSE OF TREATMENT

Among the personal data collected by this website either independently or through third parties are cookies, usage data and data requested or provided by the user via the fillable forms (e.g. name, telephone, e-mail).

Unless otherwise stated, all requested information is mandatory. If the user refuses to communicate, the owner may not be able to provide the service. In cases where some data is marked as optional, users cannot share that data without affecting the availability of the service or its operation.

The user assumes responsibility for the personal data of third parties obtained, published or passed on through these websites and guarantees the right to communicate or disseminate them, thereby releasing the owner from any liability towards third parties.

Full details of each type of data collected can be found below:

2.1 NAVIGATION DATA

The IT systems and software procedures used to operate the site collect, during their normal operation, some personal data, the transmission of which is associated with the use of Internet communication protocols. This is information that is not collected in order to be associated with identified data subjects, but which, by their very nature, could enable users to be identified through processing and association with data from third parties. This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the Uniform Resource Identifier (URI) addresses of the resources requested, the time of the request, and the method of sending the Request to the server to get the size of the file in response,

These data are used to:

• obtain anonymous statistical information on the use of the website;
• Manage control requirements regarding usage, detection of anomalies and / or abuse;
• Determination of responsibility in the event of hypothetical computer crime against the website or third parties.

This processing of this data is based on the legitimate interest of the data controller to make the functions of the website usable after access by the user as well as to prevent and / or identify fraudulent activities that are committed via the website and to protect themselves in court ( Article 6) co 1 letter f).

2.2 User Provided Data

The collection of personal data of users can be done voluntarily, by sending emails to the addresses indicated on the website and / or via the fillable forms.

The personal data collected are used by the data controller to:

1. CONTACT USER TO PROVIDE INFORMATION ABOUT THE PRODUCTS / SERVICES: Provide the information and / or services requested through Company Contacts and subsequent related communications. This includes the collection of the name, telephone number and email address of the sender by the owner, which are necessary to answer the request, as well as all other personal data voluntarily submitted in the message.

The legal basis that legitimizes the processing is the execution of a contract to which the interested party is a party or the execution of pre-contractual measures taken upon its adoption (Article 6 (1) (b)). The provision of data is necessary for the provision of the service. If no data such as name and e-mail address are provided, the requested service cannot be provided.

1. MARKETING ACTIVITIES: Sending promotional / promotional communications using conventional and / or digital and / or automated methods (e.g. by post, email, SMS and the like) relating to products, services and events promoted by the Data Controller and Offered to third parties.

The legal basis is the consent freely given by the interested party (Article 6 paragraph 1 letter a). The provision of data is voluntary and its use requires express consent. Any refusal will make it impossible for the data controller to send such communications. You can stop sending communications at any time by following the instructions below or by contacting the data controller at the addresses given in point 1.

1. REGISTRATION OF THE PROFILE AND PURCHASE OF ONLINE PRODUCTS: registration on the website and use of the services reserved for registered users, including the possibility to buy products online through the website; enable the conclusion of the sales contract through the website and the proper fulfillment of the obligations arising from this contract, such as the delivery and payment of the purchased products, the fulfillment of tax and accounting obligations and the provision of customer services.

The processing includes the collection of data such as personal data (including company name, registered office and sales tax identification number for a legal person) by the person responsible for data processing, contact details (e-mail addresses, telephone number), delivery address, billing address (if different from Shipping address). The username and email address are collected when the account is registered, while the other information is collected at the time of the first purchase.

It is not possible to buy products without prior registration.

The legal basis that legitimizes the processing is the execution of a contract or pre-contractual measures in which you are involved (Art. 6 co 1 letter b) and the fulfillment of the legal obligations of the state or the Union (Art. 6 co 1 letter c). The data requested are mandatory as they are necessary for the conclusion of the sales contract and for the pursuit of the purposes mentioned above.

The data collected for this purpose will be kept for the entire duration of the contractual relationship and 10 years after its termination (with regard to tax and accounting obligations).

Payment services are managed through the support of the Paypal, Stripe and Satispay platforms.

For more information, see the following links:

PAYPAL, a European bank registered in Luxembourg. PayPal operations are supported by a network of computers, cloud servers, and other infrastructure and data technologies that may be in countries other than the user's and outside the European Economic Area.

Data protectionhttps://www.paypal.com/it/webapps/mpp/ua/privacy-full#1

STRIP PAYMENT. Stripe Inc., based in San Francisco, California, adheres to the principles of the EU-US Privacy Shield Framework for the processing of personal data received from companies in the EEA (European Economic Area).

Data protectionhttps://stripe.com/privacy-shield-policy

Privacy shieldhttps://www.privacyshield.gov/welcome

The financial intermediary regulated by SATISPAY EUROPE SA acts as an e-money institution (“IMEL”) authorized under Luxembourg law.

Data protectionhttps://www.satispay.com/it-it/privacy/privacy-policy/

1. STATISTICAL ANALYSIS AND REMARK: see next section Cookies 2.3

The legal basis is the consent freely given by the interested party (Article 6 paragraph 1 letter a). The provision of data is voluntary and its use requires express consent. Any refusal will allow you to use some parts of the website, but some services may not be usable.

3. RECIPIENTS OF PERSONAL DATA

The processing of the data collected is carried out by internal staff identified for this purpose and authorized to process them in accordance with the specific instructions of the data controller. The data collected may, if necessary to carry out the above purposes, be processed by third parties specifically appointed as data processors or, as the case may be, communicated to them as autonomous owners and precisely companies, associations and professionals (both) natural and legal persons) supporting and advising the data controller) and / or providing the services related to the execution of the stated purposes.

In particular, the data controller uses third parties to:

• Assistance in managing and maintaining the website and solving technical problems;
• Tax, accounting and tax assistance;
• Shipping of goods;
• Assistance and resolution of technical problems in the use of business administration software;
• Support for payment services;
• Sending the newsletter.

The owner undertakes to entrust the data only to persons who, due to their technological connotation, experience, ability and reliability, offer a reasonable guarantee of full compliance with the regulation, with particular attention to data security and respect for the fundamental freedoms of the interested party.

Your personal data will not be disseminated.

The data controller does not transfer data outside the EEA. It is possible to transfer data outside the EEA by third parties when managing cookies under their responsibility. Further explanations can be found in the specific data protection guidelines (see section 2.3).

4. DATA RETENTION PERIOD

All data are kept for the time necessary to fulfill the obligations associated with or resulting from the specific service requested in accordance with Art. 5, paragraph 1, letter e) of the regulations.

The data processed to fulfill the legal obligations will be stored until the fulfillment itself and in any case for the period necessary to prove compliance. the data processed for the fulfillment of contractual purposes until the fulfillment of the same and, if a contract is concluded or pre-contractual negotiations have taken place, ten years after the signing of the same, in order to enable judicial or extrajudicial protection as well as proof of the proper fulfillment of the contractual obligations assumed.

With regard to the activity of commercial communication by e-mail and for the management of technical and analytical cookies, the data will be stored until the interested party objects or, for processing with consent, until the same is withdrawn.

5. METHODS OF DATA PROCESSING

The processing of your personal data is carried out according to the principles of legality, correctness, transparency and correctness in order to protect your privacy and your rights. The person responsible for data processing also undertakes to process your data according to the principle of "minimization", ie to collect and process data that is limited to what is necessary, as well as using organizational and logical methods that are closely related to compliance of the stated purposes.

The data is collected electronically from the website and processed mainly with the help of electronic tools. The same can be stored on computer media, but also on paper media and in any case on any other type of appropriate support in accordance with the regulations, taking appropriate security measures to prevent unauthorized access, disclosure, alteration or unauthorized destruction of the data itself.

This information relates only to the website. The Data Controller is not responsible for the methods of managing the processing of your personal data by third party websites that can be accessed through the links contained in the sections of the website.

6. INTERESTED PARTY RIGHTS

We inform you that as an interested party you can exercise certain rights under the Regulation (Chapter III), including:

• Right of access to your data (Article 15): to receive or not from the data controller confirmation of the existence of your personal data and its availability in an intelligible form;
• Right to rectification of data (Article 16);
• Right to delete data (Article 17);
• Right to restrict processing in whole or in part (Article 18);
• Right to object to the processing of data for legitimate reasons (Article 21);
• Right to data portability (Article 20);
• Right to lodge a complaint with the supervisory authority (guarantor for the protection of personal data) if it is of the opinion that your data has been breached;
• Right to revoke the consent given at any time, without prejudice to the legality of the processing carried out before the revocation.

You can exercise your rights at any time by contacting the person responsible for data processing at the addresses given in point 1.

The information can change after the introduction of new rules. We therefore invite you to visit this section regularly for updates.