Privacy policy in accordance with Articles 13 and 14 of the GDPR – Fulfilment of information obligations

Thank you for visiting our website! The protection of your data is our top priority. In this privacy policy, we provide detailed information about how we process your data.

This policy applies both to data processing within Franciacorta Designer Village and to the use of our website. The legal basis for this data processing is the General Data Protection Regulation (GDPR) and the Italian Data Protection Act.

1. Data processing in general

1.1. Joint controllers

Joint controllers pursuant to Art. 4(7) of the EU General Data Protection Regulation (GDPR) are

ROS Italia S.r.l
Via Melchiore Giona 26
20124 Milan

Fashion District Molfetta S.r.l.
Via Cordusio 1
20123 Milan
Tel: +39 037625041
Email: info@pugliavillage.it

Fashion District Mantova S.r.l.
Via Cordusio 1
20123 Milan
Tel: +39 037625041
Email: info@mantovavillage.it

We, ROS Italia S.r.l, operate the website https://www.landoffashion.it together with Fashion District Molfetta S.r.l. and Fashion District Mantova S.r.l. In this case, we are joint controllers for the processing of personal data. If we are obliged to fulfil data subject rights, you can contact us, Fashion District Molfetta S.r.l. or Fashion District Mantova S.r.l.

1.2. Data processing in accordance with Art. 13 GDPR

We process data that is provided to us by various individuals through their own disclosures, such as concluding contracts.

1.3. Data processing in accordance with Art. 14 GDPR

In addition, we also process data that is not provided directly by the data subject. This is the case, for example, when management bodies provide us with the names and contact details of their employees in the context of projects or business relationships. If necessary for the provision of our services, we also process personal data from legally accessible public sources such as debtor registers, land registers, commercial and association registers, media reports or the internet.

1.4. Data subjects

We process the following data from website visitors: IP-address and any other information provided in connection with the use of the website or an inquiry submitted via the website.

We process the following data from suppliers and business partners that is necessary for the initiation or conclusion of a contract: company, title and names of contact persons, business address and contact details, bank details, contract data.

We publish the names of authors upon request. As soon as the use of the works are discontinued, the personal data is automatically deleted.

1.5. Legal basis

The legal basis for data processing is:

• Consent (e.g. when processing your email address for advertising purposes) in accordance with Art. 6(1)(a) GDPR
• Contract initiation and fulfilment pursuant to Art. 6(1)(b) GDPR
• Legal obligations (e.g. statutory retention and documentation obligations, publication obligations under copyright law) pursuant to Art. 6(1)(c) GDPR
• Legitimate interests of our company (e.g. use of software) in accordance with Art. 6(1)(f) GDPR

We will inform you separately about the legal basis and purpose of the processing for each of the data processing operations described below.

1.6. Transfer of data

Data is transferred exclusively for the purpose of fulfilling the contract in accordance with Art. 6 (1) (b) GDPR in order to provide you with our services.

• Transfer within the group of companies: Where necessary, the personal data collected will be transferred within the group of companies to parent companies and subsidiaries. The transfer is based on internally concluded contracts.
• Transfer to processors: We work with processors to whom personal data is transferred in order to provide services efficiently. These include companies that perform tasks such as contract fulfilment, payment processing, account management, newsletter dispatch and IT services.
• Other transfers: In certain cases, such as legal obligations or in the context of a legal dispute, personal data may be disclosed to authorities or solicitors.

1.7. Storage/deletion/anonymisation of data

• Contractual retention obligations: After termination of a contractual relationship or after the end of contractually agreed periods, personal data will be deleted or anonymized as soon as there are no legal retention obligations to the contrary.
• Revocation of consent: If consent to the processing of personal data is revoked, the data will be deleted or anonymized unless there is another legal basis for processing.
• Statutory retention obligations: The controller is subject to a wide range of statutory retention obligations. Once these statutory retention obligations have expired, personal data will be automatically deleted. However, personal data may have to be retained for legal reasons despite the withdrawal of consent or the expiry of contractually agreed periods and may only be deleted at a later date (after the expiry of the respective legal periods). The EU regulations and laws to be complied with by the controller are listed below (without claiming to be exhaustive):
• Tax Procedure Code and Taxpayer Statute (DPR 600/1973 and Statuto dei diritti del contribuente (L. 212/2000)
• Civil Code, Book V (Company Law) and Corporate Insolvency Code (Codice Civile, Libro V (Delle Società) and Codice della crisi d’impresa e dell’insolvenza (D.Lgs. 14/2019)
• Business Licensing Regulation (D.Lgs. 59/2010)
• Civil Code (Codice Civile)
• Value Added Tax Act (DPR 633/1972)
• Personal Data Protection Code (Legislative Decree 196/2003 (Privacy Code), amended by Legislative Decree 101/2018)
• General Data Protection Regulation (Regulation (EU) 2016/679 (GDPR))

2. Contact

When you contact us by email or telephone, the data you provide will be stored in order to process your enquiries.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest)

3. Whistleblowing system

We have set up a whistleblower system (online whistleblowing portal) on our website. The whistleblower system allows you to contact us and report compliance and legal violations without fear of retaliation. For more information, please visit: https://www.landoffashion.it/en/whistleblowing

Legal basis: Art. 6(1)(c) GDPR (legal obligation).

4. Data processing when using our website

4.1. Informational use of the website

When using the website for informational purposes only, we only collect the personal data that your browser transmits to our server (server log files). When you visit our website, we collect the data that is technically necessary for us to display our website to you and to ensure stability and security:

• IP address
• Date and time of the request
• Time zone difference to Coordinated Universal Time (UTC)
• Content of the request (specific page)
• Access status/HTTP status code
• Website from which the request originates
• Browser
• Operating system and its interface
• Language and version of the browser software

This data is not merged with personal data sources. We reserve the right to subsequently check this data if we become aware of specific indications of illegal use and, in the event of a cyber attack, to pass the data on to the law enforcement authorities. No further disclosure to third parties takes place.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest)

4.2. Cookies

When you visit our website, cookies are stored on your device. Cookies are small text files that are assigned to the browser you are using and stored on your hard drive. They enable us or third-party providers to collect certain information. Cookies cannot execute programs or transfer viruses to your computer.

The information contained in the cookies is used, for example, to determine whether you are logged in, what data you have already entered, or to recognize you as a user when a connection is established between our web server and your browser.

We distinguish between technical cookies, which serve exclusively to ensure the operation of a website, and cookies requiring consent, which are set by us or third-party providers for the purposes of statistical analysis, tracking or advertising/marketing.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest; for technical cookies), Art. 6(1)(a) GDPR (consent; for all other cookies)

4.3. Order of gift cards

You can order gift cards through our website. As part of the ordering process, we process the personal data you provide to the extent necessary to process and fulfill your gift card order. This includes, in particular, your first name, last name, email address, postal address, and telephone number.

We process your data for the purpose of handling and fulfilling your gift card order, issuing an invoice, contacting you in connection with the order, and, where applicable, complying with legal retention and documentation obligations.

Legal basis: Art. 6(1)(b) GDPR (contract initiation and fulfilment)

5. Data processing when using Google services

We use the services of Google Ireland Limited ("Google"), a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland, on our website.

Further information can be found in Google's privacy policy at https://policies.google.com/privacy?hl=en.

5.1. Google Fonts

We use Google Fonts on our website. To ensure a uniform and appealing display of fonts and icons, your browser loads the required fonts into your browser cache. To do this, it is necessary for the browser you are using to contact the Google Fonts servers, which means that Google Fonts becomes aware that our website has been accessed via your IP address.

Legal basis: Art. 6(1)(a) GDPR (consent)

5.2. Google Analytics

We use Google Analytics on our website, a tool that allows us to analyze how our website is used. With Google Analytics, we can see how many people visit our website and how long they stay.

This website uses the “IP anonymization” feature (i.e., Google Analytics has been extended with the code “gat._anonymizeIp();” to ensure that IP addresses are collected anonymously (so-called IP masking)). As a result, your IP address is truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the U.S. and truncated there.

Google uses the collected information to analyze your use of the website, to compile reports on website activity, and to provide other services related to website usage.

Your IP address, which is transmitted by your browser to Google Analytics, is not merged with other Google data. However, Google may disclose this information to third parties if required by law or if third parties process this data on Google’s behalf.

You can prevent cookies from being stored on your computer by adjusting the settings in your browser. Please note, however, that in this case you may not be able to fully use all features of our website.

For more information on terms of use and data protection, please visit https://marketingplatform.google.com/about/analytics/terms/us/or https://support.google.com/analytics/answer/6004245?hl=us.

Legal basis: Art. 6(1)(a) GDPR (Consent)

5.3. Google Ads

Google Ads is integrated into our website. Information about the use of our website is processed via Google services. This may include, in particular, technical data such as IP addresses, browser and device information, cookies or online identifiers, as well as information about pages visited and interactions.

This is used to display, measure, and optimize advertisements, as well as to attribute website visits to advertising campaigns. This allows us to track whether users perform certain actions on our website after clicking on an ad. In addition, the information collected can be used to improve and target advertising campaigns.

For more information, please refer to: https://policies.google.com/technologies/ads

Legal basis: Art. 6(1)(a) GDPR (Consent)

5.4. Google Ads Conversion Tracking

This website uses Google Conversion Tracking. Google Ads places a cookie on your computer if you arrived at our website via a Google ad. These cookies expire after 30 days and are not used to identify you personally. The information collected via the conversion cookie is used to generate conversion statistics for us. We learn the total number of users who clicked on our ad and were redirected to our page tagged with a conversion tracking tag. However, we do not receive any information that can be used to personally identify users. If you do not wish to participate in the tracking process, you can also refuse the placement of the cookie required for this, for example, by using a browser setting that generally disables the automatic placement of cookies. You can also disable cookies for conversion tracking by configuring your browser to block cookies from the domain “www.googleadservices.com.”

If you use SSL search, Google’s encrypted search feature, search terms are usually not sent as part of the URL in the referrer URL. However, there are some exceptions to this, for example, if you use certain less common browsers. For more information on SSL search, please visit: https://support.google.com/websearch/answer/173733?hl=en.

Search queries or information in the referrer URL may also be viewed via Google Analytics or an Application Programming Interface (API) under certain circumstances. Additionally, advertisers may receive information about the exact search terms that triggered a click on an ad.

For more details, please refer to Google’s FAQ: https://policies.google.com/faq?hl=en

Legal basis: Art. 6(1)(a) GDPR (consent)

5.5. Google Tag Manager

We use Google Tag Manager on our website. Google Tag Manager is a service that allows website tags to be managed via a unified interface. Google Tag Manager itself is primarily used to control other tags and, in doing so, processes the user’s IP address in particular. Additional tags can be triggered via Google Tag Manager, which may in turn process personal data. Google Tag Manager itself does not access this data.

Google Tag Manager may set cookies, particularly in connection with preview and debug functions. To the extent that tags or technologies requiring consent are integrated and triggered via Google Tag Manager, their use is subject exclusively to your prior consent via our consent banner.

The integration of Google Tag Manager enables the loading of Google Ads and Google Ads Remarketing services.

For more information, please visit: https://support.google.com/tagmanager.

Legal basis: Art. 6(1)(a) GDPR (consent)

6. Cookie Script (Consent-Management Tool)

Our website uses the consent management tool “CookieScript” operated by Objectis Ltd, Laisves str. 60, LT-05120 Vilnius, Lithuania.

The service stores information on your device and uses technically necessary cookies and comparable technologies in order to save and manage your cookie preferences. CookieScript records and stores the consent choices made by the respective users of our website. This ensures that cookies and similar technologies requiring consent, in particular for statistical and marketing purposes, are only used after the website visitor has given their explicit consent.

In this context, information on the consent status, a consent ID, the time and scope of the consent decision, browser information and technical device information is processed.

Further information can be found in CookieScript’s privacy policy: https://cookie-script.com/legal/privacy-policy.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest)

7. Amazon Web Services (AWS)

Our website uses a cloud web hosting solution provided by Amazon Web Services EMEA SARL, Eschborner Landstraße 100, 60489 Frankfurt am Main, Germany. AWS provides the infrastructure and resources necessary for the operation and delivery of the website. Since AWS acts as a cloud provider, data is stored and processed on AWS servers.

When using AWS, certain data such as IP addresses and access times may be logged to ensure the security and operation of the website.

Further information is available in the Amazon Web Services Privacy Policy at https://aws.amazon.com/privacy/?nc1=f_pr.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest)

8. Your rights

You have the following rights with regards to your personal data:

• Right to information, correction and deletion
• Right to restriction of processing
• Right to object to processing
• Right to data portability

In addition to the above rights, you have the right to lodge a complaint with a data protection authority, which in Italy is the Italian Data Protection Authority:

• Address: Piazza Venezia 11, 00187 Rome
• Telephone: +39 06.696771  
• Email: protocollo@gpdp.it

If you believe that we have violated Italian or European data protection law in the processing of your data and thereby infringed your rights, please contact us so that we can clarify any questions you may have.

Please send your enquiries and requests by email to or contact us using the contact details provided.

9. Changes to this privacy policy

We reserve the right to make changes to our privacy policy from time to time. All changes to the privacy policy will be published by us on this page. Please refer to the current version of our privacy policy for this information.