Use coupon code WELCOME10 for 10% off your first order.

Cart 0

Congratulations! Your order qualifies for free shipping You are €200 away from free shipping.
Sorry, looks like we don't have enough of this product.

Products
Pair with
Is this a gift?
Subtotal Free
Shipping, taxes, and discount codes are calculated at checkout

Your Cart is Empty

Collections SS 2026
Home
Catalog
Contact

Privacy policy

Privacy Policy 

Information document Article 13 EU Reg. 2016/679 - GDPR - Information on the processing of personal data collected from the data subject

In compliance with the provisions of EU Reg. 2016/679 (European Regulation on the protection of personal data - GDPR), we provide you with the necessary information regarding the processing of personal data. This information is provided pursuant to Art. 13 of the GDPR and Art. 130 of the Privacy Code. This policy is not to be considered valid for other websites that may be accessed through links on the domain websites of the Data Controller, who is not to be considered in any way responsible for third-party websites.
This information notice is also inspired by the provisions of Directive 2002/58/EC, as updated by Directive 2009/136/EC,, on Cookies, by the Cookie and other tracking tools Guidelines of the Italian Data Protection Authority and by the EDPB Guidelines 05/2020 on consent under the GDPR, adopted on 04.05.2020.

Personal data that may be processed: 

Personal data: any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person; (C26, C27, C30).

Browsing data: The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users connecting to the site, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server response (successful, error, etc.) and other parameters related to the user's operating system and IT environment.

• Data provided by the data subject: The optional, explicit and voluntary sending of messages to the contact addresses indicated on this site and/or the filling in of data collection forms entails the subsequent acquisition of the sender’s address, necessary to reply to requests, as well as any other personal data entered.

• Specific notices: Specific information notices may be provided on the pages of the site in relation to particular services or data processing.

Cookies

For more information on the cookies used by this website, please refer to the cookie policy.

1.DATA CONTROLLER, pursuant to Articles 4 and 24 of EU Reg. 2016/679, is C.P.A. s.r.l., CENTRO PRODUZIONE ABBIGLIAMENTO, Via Valletta, 1°, 30010 Cantarana (VE), VAT No. 02863960270, e-mail address dora@cpasrl.com in the person of the legal representative pro-tempore.

2. PURPOSES OF THE PROCESSING, LEGAL BASIS, RETENTION PERIOD OF THE DATA AND NATURE OF THE PROVISION

BROWSING THE WEBSITE

  • LEGAL BASIS: legitimate interest Art. 6 letter f) and Recital 47: the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, taking into account the reasonable expectations of the data subject based on their relationship with the controller. Activities strictly necessary for the operation of the site and the provision of the browsing service on the platform.

  • DATA RETENTION PERIOD: until the duration of the browsing session. For browsing see the cookie policy

  • NATURE OF PROVISION: except as specified for browsing data (which are necessary to allow browsing the website), the user is free to provide personal data.

VOLUNTARY SENDING OF EMAILS to the addresses on the site: to respond to specific requests for information voluntarily sent to the email addresses on the site

POSSIBLE COMPLETION OF DATA COLLECTION FORMS FOR CONTACTS

  • LEGAL BASIS: based on the execution of pre-contractual measures adopted also at the request of the data subject

  • DATA RETENTION PERIOD: 1 year

  • NATURE OF PROVISION: the provision of data is optional or necessary depending on the specific purpose for which the data is processed. Failure to provide data marked with the symbol * or wording (required) will result in the impossibility of obtaining what is requested or of using the services of the data controller.



SUBSCRIPTION TO THE NEWSLETTER

  • LEGAL BASIS: consent (Art. 6 paragraph 1 letter a)) 

  • DATA RETENTION PERIOD: until objection

  • NATURE OF PROVISION: the user is free to give consent for newsletter subscription.

Subject to consent and until objection: for direct marketing activities by the Data Controller, newsletters on products or other information about our services, market research or other surveys and direct sales to receive - through automated means such as email, fax, MMS (Multimedia Messaging Service) or SMS (Short Message Service) messages or other types, as well as phone calls by operators and postal mail - information material, satisfaction surveys, promotional, commercial and advertising material or regarding events and initiatives, by the Data Controller – consent (Art. 6 paragraph 1 letter a)) as the legal basis of the processing.

MANAGEMENT OF DATA SUBJECTS’ RIGHTS REQUESTS, pursuant to Art. 15 et seq. of the GDPR (rights of the data subject)

  • LEGAL BASIS: The processing is necessary to comply with a legal obligation to which the controller is subject (C45) Art. 6 par. 1 letter c) of the GDPR 

  • DATA RETENTION PERIOD: The retention period is 5 years from the closure of the request, unless litigation occurs.

  • NATURE OF PROVISION: The provision of personal data is mandatory, as it is essential to be able to fulfil legal obligations.

3. RECIPIENTS OR CATEGORIES OF DATA RECIPIENTS
The personal data provided will be communicated to recipients who will process the data as processors (Art. 28 of EU Reg. 2016/679) and/or as natural persons acting under the authority of the Controller and the Processor (Art. 29 of EU Reg. 2016/679), for the purposes listed above in point 2. 

Specifically, the data will be communicated to 

- parties providing services for the website and communication networks, including email, hosting, website management, platforms and CLOUD, management systems, platforms for sending newsletters;

- competent authorities for compliance with legal obligations and/or provisions of public bodies, upon request. 

The subjects belonging to the aforementioned categories act as Data Processors, or operate completely autonomously as distinct Data Controllers. The list of Data Processors is constantly updated and available by writing to dora@cpasrl.com

4. TRANSFER OF DATA OUTSIDE THE EUROPEAN UNION

Personal data will not be transferred to non-EEA countries.

5. AUTOMATED PROCESSING

No decision-making processes based on automated processing, including profiling, are used.

6. RIGHTS OF DATA SUBJECTS

You may exercise your rights as set out in Articles 15, 16, 17, 18, 19, 20, 21 of EU Regulation 2016/679, by contacting dora@cpasrl.com You have the right, at any time, to request from the Data Controller access to your personal data, rectification, erasure, restriction of processing and data portability, where applicable. In addition, you have the right to object, at any time, to the processing of your data based on consent and/or legitimate interest.  Without prejudice to any other administrative or judicial remedy, if you believe that the processing of your data violates the provisions of EU Reg. 2016/679, pursuant to Art. 15 letter f) of the aforementioned EU Reg. 2016/679, you have the right to lodge a complaint with the Data Protection Authority ( www.garanteprivacy.it).


 

Update date REV01_ 01.09.2025