Privacy Policy

PRIVACY POLICY pursuant to Articles 13 and 14 of EU Regulation 2016/679, “Regulation” or “GDPR”.

This document has been prepared pursuant to Articles 13 and 14 of EU Regulation 2016/679 (hereinafter “GDPR”) to inform you about our privacy practices and how your personal information is handled when you use our websites or social media pages. We encourage you to read this Privacy Policy carefully before providing any personal data, as it contains important information about the protection of your personal data.

The company Gifrab Italia S.P.A., VAT number 04836890824, (hereinafter “Gifrab”) with registered office at Via Marco D’Agrate 41, 20139, MILAN, MI, is the Data Controller of your personal data collected via the websites https://www.lamalfa14.it/, https://thebfashion.com/, https://www.gifrab.it/ (the Site) and will process them in compliance with applicable law as described below.

We also inform you that Gifrab Italia S.P.A. has appointed, pursuant to Article 37 of the GDPR, a Data Protection Officer (DPO), who can be contacted via email at: rpd@gifrab.it.

CATEGORIES OF PERSONAL DATA

Among the data collected through navigation on this website, whether directly or via third parties, may include email, first and last name, mobile number, province, country, gender, date of birth, city, company name, and various other types of information. Personal data may be voluntarily provided by the User or collected automatically during navigation, particularly processed for:

  • Browsing Data: The IT systems and software procedures that operate this website acquire, during normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.
  • Cookies: Aggregated information about user behavior on the Site collected through the use of cookies.
  • Data you provide directly: Personal and contact data provided through forms, modules, or submitted during a purchase (newsletter, job application, Loyalty Program, guest purchase).
  1. Purpose and legal basis of processing:
    1. Navigation and support: to enable navigation on the Site and access to offered services, and to respond to requests via Customer Service (“Contact”), email, or phone (Legal basis: Article 6(1)(b) GDPR).
    2. Commercial and promotional information: operations related to knowledge of discounts, promotions, newsletter subscription, notices, participation in contests, invitations, and events (Legal basis: User consent).
    3. Mailing List or Newsletter: sending messages (SMS or email) containing commercial and promotional information regarding Gifrab products and services (Legal basis: User consent).
    4. Contact Form: use of data to respond to inquiries, quotes, or other requests indicated in the form (Legal basis: Article 6(1)(b) GDPR).
    5. Recruitment and selection: in case you submit your CV via the “Job” section of the website.
    6. Legal compliance: to comply with obligations imposed by laws, regulations, or authorities (Legal basis: Article 6(1)(a/c) GDPR).
  2. Processing methods and recipients: Processing will be carried out using manual and automated tools. Data will be handled by authorized personnel (Marketing, Human Resources, IT, store staff) and qualified external parties such as:
    • Data processors (data entry companies, IT services, statistical analysis, event and contest organizers).
    • Third parties necessary to fulfill user requests.
  3. Data transfer: Personal data will be processed within the European Union. They may be transferred outside the EU for service efficiency only to countries recognized by the European Commission as providing adequate protection or via standard contractual clauses.
  4. Storage period and location: Data is stored at the Controller’s registered office and where involved parties are located. It will be kept only as long as necessary to achieve the purposes, in compliance with civil and fiscal obligations. For newsletters, data is stored until consent is revoked (unsubscribe).
  5. Optional nature of provision: Except for browsing data, the user is free to provide personal data in the designated sections. Failure to provide such data may prevent the requested service from being delivered.
  6. Data subject rights: Pursuant to Articles 7 and 15–22 of the GDPR, you have the right to:
    • Access your data and obtain a copy (Art. 15);
    • Update, modify, or correct your data (Art. 16);
    • Request deletion or restriction of processing (Arts. 17–18);
    • Withdraw consent at any time (Art. 7);
    • Request data portability (Art. 20);
    • Object to processing (Art. 21);
    • File a complaint with the Supervisory Authority (Garante Privacy).

    To exercise these rights, contact: email info@gifrab.it or registered mail to Gifrab Italia S.p.A., Via Marco D’Agrate 41, 20139, MILAN, MI (Attn: Gifrab Privacy Officer).

  7. Policy updates: This Privacy Policy may be updated over time. The Controller reserves the right to make changes at any time and will notify Users via the websites.

    Last updated: 19/09/2023