This information is drawn up in accordance with Articles 13-14 of EU Reg. 2016/679, and is intended for all users and visitors of the website www.coverlab.com. This document cancels and replaces the previously published documents in their entirety.
We inform you that this website complies with EU Reg. 2016/679 (GDPR), which protects individuals with regard to the processing of personal data. Your data will therefore be processed in accordance with the principles of fairness, lawfulness and transparency, protecting your confidentiality and your rights.
1 WHO PROCESSES THE DATA?
Through the use of the site, your personal data will be processed by the following Autonomous Controllers:
- COVERLAB SRL with registered office in Via Mantova 91A, 43122 Parma (PR), Italy, VAT Code 04407230400; owner of the website; e-mail: privacy@coverlab.com
Coverlab informs that it has designated, pursuant to art. 37 EU Reg. 2016/679, your Data Protection Officer ("DPO") who can be contacted via email at: privacy@coverlab.com.
2 FOR WHAT PURPOSES, ON WHAT LEGAL BASIS AND FOR HOW LONG?
-
A) TO MANAGE USER ACCESS AND NAVIGATION
Information on the processing of navigation data and cookies is detailed in the Cookie Policy available at the following link: Cookiebot.
-
B) PLATFORM REGISTRATION
Through registration to the website, the user will be able to take advantage of all the services dedicated to members and available in their reserved area.
LEGAL BASIS
The legal basis for the processing of such data is the contract between the user and Coverlab srl, for the use of our services, including making purchases on the site.
STORAGE PERIOD
The processing of the data relating to the registered account will take place until the user's request for deletion of the account.
- C) ALLOW FOR ACTIVITIES PREPARATORY TO THE CONCLUSION OF THE PURCHASE CONTRACT
Through e-commerce purchasing, COVERLAB SRL will collect the data necessary to complete the order requested.
Contact information may be shared with external companies and carriers in charge of deliveries.
Information relating to economic transactions is managed through external payment services (e.g. PayPal, Stripe, Klarna).
LEGAL BASIS
The legal basis for the processing of such data is the execution of contractual measures taken at the request of the data subject. The storage of administrative documents by COVERLAB SRL takes place on the basis of a legal obligation.
STORAGE PERIOD
The data relating to orders placed by the user will be processed for the time necessary to complete the order requested, and stored thereafter in accordance with the timescale prescribed by law (10 years).
- D) MARKETING ACTIVITIES
D1) SENDING NEWSLETTERS AND CARRYING OUT MARKETING ACTIVITIES
Subscription to the newsletter is totally optional.
The service of sending newsletters and DEM shall be carried out by means of automated systems, also by means of mailing tools provided by Klaviyo, an external company appointed as Data Processor. The contents of the marketing communications may concern, by way of example: products, contexts of use of the products in the online shop catalogue, images, videos or other multimedia content relating to the products or brands of COVERLAB SRL.
LEGAL BASIS
This data is collected on the basis of consent. The legal basis for this data processing is the consent given at the time of the newsletter subscription request.
STORAGE PERIOD
The processing of contact data for this purpose shall take place until the user expresses the desire to no longer subscribe to the service (by means of the specific link present within each communication) or the e-mail address should prove to be no longer active.
D2) AUTOMATIC SHOPPING CART RETRIEVAL FUNCTION
Shopping cart retrieval invitations are only addressed to registered users who have used the e-commerce having logged in and have not completed their purchase. The service involves sending communications via marketing automation tools managed by Klaviyo, an external company appointed as Data Processor.
LEGAL BASIS
This data is collected on the basis of the consent to profiling expressed during profile registration of the newsletter subscription request or during the purchase flow.
STORAGE PERIOD
Data relating to the products placed in the shopping cart and the user's contact details are processed for this purpose for a maximum of 96h after the abandonment of the shopping cart on e-commerce.
D3) UP-SELLING AND CROSS-SELLING ACTIVITIES
The up-selling and cross-selling activities involve communications of a promotional and marketing nature aimed solely at registered users who have used the e-commerce having logged in and completed a purchase.
The service involves sending communications via marketing automation tools managed by Klaviyo, an external company appointed as Data Processor. The contents of the communication may relate to products marketed on the Platform, also related or connected to the purchases made by the user.
LEGAL BASIS
This data is collected on the basis of the consent to profiling given when registering the profile and absolutely optional. The interested party may always revoke the consent given by means of the unsubscription option available in the communications received or in the preference centre accessible in the reserved area. Any refusal to give consent may result in the impossibility of receiving information on promotions, discounts and offers.
STORAGE EPRIOD
Data relating to purchases made and contact details of the user are processed for this purpose for a maximum of 6 months after the purchase made on e-commerce, or until the user expresses the wish to no longer subscribe to the service, or the e-mail address is no longer active.
D4) SOCIAL MEDIA CAMPAIGNS
Marketing activities may also be carried out by sharing your personal data, acquired when browsing the site and purchasing products, with digital platforms and social networks, as part of campaigns (e.g. retargeting, prospecting, Custom Audience), in order to tailor and customise ads within the digital platforms themselves.
The Controller may also process the user's contact data and the data communicated by the user during the interaction with the digital platforms and social networks - such as the information provided by the user to the social media according to the privacy settings selected, on such social media - in order to show marketing ads and content consistent with the user's interests, based on the preferences and consumption habits identified through cookies and/or other tracking systems of the social media operators, including Meta Platforms Ireland Ltd. ("Meta") and/or as a result of the analysis that the social media operators perform on their users
LEGAL BASIS
This activity is carried out on the basis of consents for profiling purposes, which are absolutely optional, always revocable and expressed by the user: a. during registration with Coverlab (for Custom Audience campaigns), b. through cookie preferences (for retargeting campaigns), c. directly through the privacy settings of their profile on the social network (for prospecting activities).
STORAGE PERIOD
The user's data processed for this purpose refer to the last 2 years of activity on e-commerce, and in any case until the user expresses the wish to no longer subscribe to the service, or the e-mail address is no longer active.
- E) CUSTOMER SERVICE AND HANDLING REQUESTS BY USERS TO EXERCISE THEIR RIGHTS
In the event of a request to exercise a right, as indicated in point 7 of this Privacy Policy, the applicant's identification data may be requested, which will be processed on the basis of the legal obligations to which COVERLAB SRL is subject in order to acknowledge receipt of the request, check its suitability and carry out the necessary activities to proceed.
Any refusal to provide data for this purpose will make it impossible for COVERLAB SRL to fulfil your request, and you will therefore be unable to exercise your rights.
LEGAL BASIS
Processing of data necessary to provide a service requested by the data subject, and/or for the fulfilment of a legal obligation.
STORAGE PERIOD
The data requested from the interested party for this purpose will be processed for the time necessary to manage and close the file and may be kept for the time necessary to certify the fulfilment of the request made.
- F) PURSUIT OF JUSTICE
Personal data collected through browsing the site and through the use of its functions may be processed by COVERLAB SRL for purposes of ascertaining, exercising or defending its own rights.
LEGAL BASIS
Data collected initially for a different purpose are in fact used for this purpose, the processing of which is based on the legitimate interest of the data controller (Art. 6 lett. f EU Reg. 2016/679).
STORAGE PERIOD
Up to a maximum of 10 years from their collection or the achievement of the purpose for which they were originally collected.
- G) MANAGEMENT AND PUBLICATION OF PURCHASE REVIEWS
After completing a purchase, contact and purchase data will be used to automatically send invitations to provide a review. The activities of collection, moderation, and online publication of reviews and their contents (vote, comment, any photos and videos, dotted name, location of the consumer) will be carried out through the services of Okendo Pty Ltd, in its role as Data Processor.
LEGAL BASIS
The sending of the request to review products is done on the basis of the legitimate interest of the Owner. Under no circumstances is the purchaser under any obligation to provide their review.
STORAGE PERIOD
The processing of data relating to the reviews provided will take place until the user expresses his/her right to cancellation.
3 HOW WILL DATA BE PROCESSED?
The platform is developed in the Shopify environment, which processes data as Data Processor.
In relation to the purposes indicated, personal data are processed by means of manual/analogue and computer/electronic/telematic supports and tools, and also by resorting to automatic tools suitable for connecting the data in question with those of other subjects on the basis of qualitative, quantitative and temporal criteria, recurring or definable from time to time, with logics and forms of organisation of the data strictly related to the purposes of the processing, always in such a way as to guarantee the security and confidentiality of the data.
4 AM I OBLIGED TO GIVE DATA?
Apart from what is specified for browsing data, the user is free to provide his/her personal data. Given that COVERLAB SRL has organised its activities by limiting the collection of personal data according to a principle of strict necessity, in the performance of certain operations, such as the filling in of forms, failure to provide the data indicated as necessary may make it impossible to complete the operations requested.
We also remind you that any consent you may have given for the performance of marketing activities may be withdrawn at any time through the preference centre accessible in your reserved area.
5 TO WHOM WILL THEY BE COMMUNICATED? WILL THE DATA BE DISSEMINATED?
Dissemination: the dissemination of your personal data may only concern what is indicated for purpose G, regarding the reviews of the purchases that will be published in the appropriate product sheets on this platform.
Communication: The data may be communicated to those subjects, including public authorities, who have access to the data by virtue of regulatory or administrative measures.
Furthermore, your personal data may be made accessible to:
- Employees and/or collaborators authorised and appointed as data processors;
- Companies of the Cellularline Group, of which Coverlab Srl is part, within the scope of administrative and strategic support activities;
- Shopify, as a PaaS (Platform As A Service) provider of e-commerce services;
- Other third-party companies, consultants or professionals appointed as Data Processors, including IT providers of modules and services integrated into the Shopify environment, or carrying out maintenance activities, mailing and marketing automation services, cloud services, including, in particular:
- Meta Platforms Ireland Ltd., in the context of marketing campaigns, which may have the role of co-processor (retargeting campaigns based on the navigation detected through the pixel), of autonomous data controller (prospecting campaigns aimed at social network users, with whom Coverlab has had no interaction), or limit itself to processing on our behalf as a Data Processor (in the construction of "Custom Audience CRM" campaigns)
The full list of data recipients is available at COVERLAB SRL registered office.
6 WHERE WILL THE DATA BE STORED?
The data will mainly be stored at the premises of the Data Controller and its suppliers based in the European Union. For newsletter sendings (purpouse D) and marketing automation operations (purposes D2 and D3) the involvement of suppliers based in the United States is foreseen, with data transfer made compliant with Chapter V of EU Reg. 2016/679 through contractual agreements based on the Standard Contractual Clauses approved by the European Commission.
7 WHAT ARE YOUR RIGHTS?
As a data subject, you have a number of rights, pursuant to Articles 15-22 of Regulation (EU) 2016/679, such as:
- Right to access your personal data (once you have received confirmation that your data is being processed by the Controller);
- Right to obtain rectification and integration of one's own data;
- Right to obtain the deletion of one's own data;
- Right to obtain the restriction of the processing of one's personal data under certain conditions;
- Right to receive the personal data provided to the Controller in a structured and commonly used format, and to transmit it to a different Controller;
- Right to object to the processing of personal data if there are reasons related to your personal situation;
- Right not to be subjected to an automated decision-making process;
- Right to obtain notification in the event of a serious breach of your data;
- Right to withdraw consent to processing at any time;
- Right to file a complaint before a Supervisory Authority
The Controller is committed to making it as easy as possible for data subjects to exercise their rights.
TO REQUEST THE EXERCISE OF YOUR RIGHTS, OR FOR ANY DOUBTS OR NEEDS RELATED TO THE PROCESSING OF PERSONAL DATA, PLEASE CONTACT COVERLAB SRL BY E-MAIL AT PRIVACY@COVERLAB.COM.
8 UPDATING OF THIS PRIVACY POLICY
Date this Privacy Policy was last updated: 5 April 2024.