PRIVACY NOTICE

Purpose: to allow web browsing; to carry out aggregate statistical analysis aimed at measuring the correct functioning of this website and, in the event of computer crimes, to ascertain any responsibility.

Processed data: IP addresses, domain names, URIs. These data are acquired by the IT systems responsible for the proper functioning of this website.

Legal basis:

• Provision of services aimed at allowing users to browse this website;
• Legitimate interest consisting in ensuring the proper functioning of IT systems and in proceeding with the investigation of possible crimes (possibly also based on the existence of a legal obligation).

Retention period: 30 days after the collection, unless legal provisions or provisions of Public Authorities impose a different retention time in relation to investigations related to any computer crimes.

Purpose: fulfilment of online purchase orders and performance of related activities (sending of goods, invoicing, payment management, shipment tracking, delivery of goods, possible activation of the return and refund process of the order, management of the return, etc).

Processed data: contact details (name, surname, e-mail address, telephone number) and shipping address. In the event of a return, we will ask you to also communicate your IBAN code, which is necessary to refund the price of the goods you have returned. We do not process the data relating to the payment method indicated by you (e.g. payment card number and security code), which are instead collected exclusively by the chosen payment service provider.

Legal basis: execution of the sales contract.

Retention period: time necessary to fulfil the contractual and regulatory obligations regarding the purchase and sale of products (e.g. tax legislation).

Purpose: we provide you with an assistance service (via chat, telephone, e-mail, online form) for any request relating to the purchase of our products or the use of our services. The phone calls to customer care are recorded-this way we can evaluate to improve the quality and efficiency of the service provided to our customers. We also retain your requests for assistance if they are related or connected to a claim made by you against us or are necessary for the protection of our rights.

Processed data: data necessary to reply to the requests that you will address to our Customer Care (in particular, for the chat assistance service, we will ask you to provide your name and your e-mail address, phone calls recorded will be limited to less than 30% of the total calls received on a daily basis).

Legal basis:

• execution of the contract for the purchase and sale of products or pre-contractual measures adopted following your request;
• Legitimate interest in defending our rights in or out of court, in the event of legal claims or litigation;
• regarding chat support service, legitimate interest in preventing the so-called "Chat spam”;
• regarding the recording of phone calls, legitimate interest in improving the quality and effectiveness of the service provided.

Retention period: time strictly necessary to fulfil your requests; recordings of phone calls will be kept for a period not exceeding 93 days. If a claim or legal proceedings are filed, any related requests for assistance will be retained for 10 years.

Purpose:Collect information about your interests and preferences, and your opinion about the quality of our products, our online and point-of-sale services and our customer service. Some questionnaires are intended for all our customers, others are available to loyalty customers or following your request to our customer service.

Processed data:Depending on the survey, the following may be processed: your name, your contact details, your order number, your loyalty card number, the number of the ticket that has been assigned to your request for assistance, data provided during the completion of the survey

Legal basis: the user's specific consent given by filling in each survey.

Retention period: up to 1 year after their collection. If you have filled in your interests and preferences in the relevant section of your personal area but abandoned the questionnaire before its completion, the data entered up to that point will be stored for 4 months to enable you to resume filling in from the point where you stopped.

Purpose:sending of commercial communications through the traditional paper mail service, e-mail, SMS, landline and mobile phone, carrying out market research and surveying your degree of satisfaction regarding products relating to all the brands of the Oniverse (Calzedonia, Intimissimi, and “IUMAN Intimissimi Uomo Atelier Emé, Tezenis, Falconeri and Signorvino).

Processed data: contact details (e.g. name, surname, e-mail address, telephone number, home/residence address ).

Legal basis: your consent that you may revoke at any time by writing to privacy@oniverse.it or logging in in your reserved area.

Retention period: until you revoke your consent.

Purpose: profiling allows us to send you personalized commercial communications based on your profile and your purchasing and browsing habits as well as to develop products and services consistent with the preferences of our customers.

Processed data: data relating to your purchases – also relating to the other Oniverse’s brands (Calzedonia, Intimissimi, and “IUMAN Intimissimi Uomo Atelier Emé, Tezenis, Falconeri e Signorvino) - your country of origin, your gender and your age, your interaction with us through our websites and through the Apps that may be developed by us or by third parties – and through our social channels (e.g. Facebook). We may also examine the data relating to your (possible) participation in the “My Intimissimi” Loyalty Program and the use of the services we provide. Finally, we may enrich your profile with statistical information that we may lawfully acquire from other sources: for example, in relation to your area of residence (such as demographic information, geo-referencing data, etc.) or to the electronic tools that you use to interact with us.

Legal basis: your consent that you may revoke at any time by writing to privacy@oniverse.it or logging in in your reserved area.

Retention period: the data relating to your interactions with us will be kept for 12 months from the date of collection; the information relating to your purchases will, on the other hand, be kept for 3 years starting from the date of each purchase.

Purpose: to check the correspondence between the buyer and the holder of the selected payment instrument.

Processed data: your name, surname, e-mail address, IP address, details of e-commerce orders and information on the type of payment instrument used to make the purchase.

Legal basis: legitimate interest in preventing and combating fraud.

Retention period: 5 years after the collection of the data.

Purpose: creation of a reserved area ("account") that will allow you to save some content (e.g. the "wishlist" i.e. the list of your favourite products, your purchase history, etc.).

Processed data: personal details and contact details indicated in the online form relating to registration in the reserved area. The data essential for the use of our services are marked with an asterisk: should you not provide this information, we won’t be able to provide you with the requested service.

Legal basis: execution of the website registration agreement.

Retention period: if you do not use Oniverse brand accounts for more than 3 years, these accounts and the data relating to them will be deleted.

Purpose: to make it easier to use your private area ("account") by allowing you to save your login credentials and stay connected to your account beyond the end of the browsing session.

Processed data: your access credentials.

Legal basis: your consent submitted by accepting a cookie (see also Cookie Policy).

Retention period: the cookie that allows you to save the login credentials will stay active for 6 months. At any time, you can disable cookies by accessing the "Cookie Settings" section available on the Cookie Policy).

Purpose: sending and use of the E-Gift Card.

Processed data: name and e – mail address of the recipient of the E-Gift Card. This data are communicated to us from the purchaser of the E-Gift Card.

Legal basis: legitimate interest in assuring the sending and the use of the E-Gift Card.

Retention period: Period strictly necessary to send the E-Gift Card and to guarantee its use.

Purpose: creation of statistical reports and behavioural models in order to examine - in aggregate form - the effectiveness from an economic point of view of the commercial initiatives (e.g. launch of a new product) of Calzedonia and to address future commercial and promotional initiatives.

Processed data: information relating to your purchases (including in relation to Oniverse's other brands), country of origin, age, gender, information obtained by reviewing your interaction with us, through e-mail, our websites, the section relating to your interests and preferences in your personal area, if completed, and through Apps that may be developed by us or by third parties (for more information, please see the relevant privacy policies).

Legal basis: legitimate interest of Calzedonia S.p.A. to analyse - in pseudonymised form (therefore without information directly attributable to individual customers) - customer data to obtain strategic information relating to customer purchasing behaviour, the ways in which customers interact with the company through the various communication channels and the effectiveness of commercial and promotional initiatives, in order to be able to compete with the main operators in the sector.

Retention period: the data relating to your purchases will be kept - in pseudonymised form - for a period of five years. The other personal data will be kept - in pseudonymised form - for a period of two years.

Purpose: purchase of a product that you can send as a gift to your contacts. The recipient can decide to accept the gift or modify it (by selecting, for example, another colour or size, changing the shipping address, or choosing a different product from the one proposed).

Processed data: the personal and contact details of the gifter; personal and contact details of the giftee (communicated to us by the gifter or by the giftee).

Legal basis:

• execution of the sale contract;
• legitimate interest in assuring the shipment of the gift to the giftee.

Retention period: time necessary to fulfil the contractual and regulatory obligations regarding the purchase and sale of products (e.g. tax legislation).

Purpose: if the product you want is not available, you can order it in our stores and receive it at home or at your favourite Intimissimi & IUMAN Intimissimi Uomo shop. We will then collect your personal data for the fulfilment of your purchase order and for carrying out the related activities (sending the goods, invoicing, payment management, shipment tracking, delivery of the goods, possible activation of the return and refund process of the order, return management, etc.).

Processed data: personal and contact data (name, surname, shipping address, email address, telephone number), information relating to the product purchased (e.g. size). If you wish to return the purchased products, to proceed with the refund of the price paid, we will ask you to communicate your IBAN code.

Legal basis: execution of the sale contract.

Retention period: time necessary to fulfil the contractual and regulatory obligations regarding the purchase and sale of products (e.g. tax legislation).

Data Controller: Calzedonia S.p.A.; furthermore - if you have made a purchase at a Intimissimi & IUMAN Intimissimi Uomo store managed by a franchising company (i.e. a company with which there is a commercial franchising relationship) - this company, together with Calzedonia S.p.A, are the Joint Data Controller (they jointly define the purposes and means for processing the personal data collected). To exercise your rights in relation to this specific purpose, you can contact all the Joint Controllers by writing to privacy@oniverse.it

Purpose: sending by e-mail of the receipt relating to a purchase made at a Intimissimi & IUMAN Intimissimi Uomo store.

Processed data: e-mail address.

Legal basis:

• fulfilment of regulatory obligations in tax matters;
• fulfilment of contractual obligations;

Retention period: 10 days after the issue of the receipt.

Data Controllers: Calzedonia S.p.A.; furthermore - if you have made a purchase at a Intimissimi & IUMAN Intimissimi Uomo store managed by a franchising company (i.e. a company with which there is a commercial franchising relationship) - this company, together with Calzedonia S.p.A, are the Joint Data Controller (they jointly define the purposes and means for processing the personal data collected). To exercise your rights in relation to this specific purpose, you can contact all the Joint Controllers by writing to privacy@oniverse.it

Purpose: sending of a back in stock notice to the e – mail address indicated by you regarding the new availability of a product (so called back in stock).

Processed data: e – mail address

Legal basis: execution of pre-contractual measures adopted following your request Retention period: your e - mail address will be deleted immediately after informing you of the new availability of the product you requested and, in any case, no later than one month from the request.

Purpose:to collect the rating and review of customers from the products they have purchased.

Processed data: your e-mail address, your name and surname, the products you have purchased, the rating and the product review you have shared; on our website, your review will only contain your name and the initial of your surname.

Legal basis:your consent, which you can revoke at any time by writing to privacy@oniverse.it

Retention period: the review will be visible on the page of the product you purchased until it is available, after which you can continue to view your reviews exclusively in your reserved area. You can request the deletion of your review at any time by writing to privacy@oniverse.it .

Purpose:participation in events and initiatives proposed by us.

Processed data: personal data included in the registration form for each initiative. Only common personal data will be collected (e.g. name, surname, contact information)

Legal basis: your specific consent expressed by filling in the registration form.

Retention period: duration of the event. Following the event the data will be deleted.

Joint  Controller: Calzedonia S.p.A.; furthermore, if you have registered for an event or initiative that will be held at a shop managed by an affiliated company (i.e. a company with which there is a commercial affiliation relationship), this company, together with Calzedonia S.p.A., is the Joint Controller (these parties jointly define the methods and purposes of the processing). To exercise your rights in relation to this specific purpose you can contact all the Joint Controllers by writing to privacy@oniverse.it