This policy describes the personal data we collect when you use this website(https://us.davines.com)or make purchases of our DAVINES brand products via our online shop(“Website”) and lists the purposes for which the data is used and the rights you have as a Data Subject.
This policy does not refer to other processing carried out or described as a result of browsing Internet sites that can be reached through links that may be present on this Website.
Please note that Davines does not process the personal data of minors through the Website. Therefore, despite the fact that the contents of the Website may potentially be viewed by minors, please note that when filling out the Request Form located on the "Contact Us" page, no personal data should be entered by minors and/or in relation to minors without the prior consent of their parents or guardians. Davines encourages all parents and guardians to instruct minors in the safe and responsible use of their personal data on the Internet. Davines conserve and knowingly does not process any personal data that may be entered into the formby minors for any purpose, including disclosure to third parties.
1. WHO OIS THE DATA CONTROLLER?
The Data Controller is Davines S.p.A., in the person of its legal representative, with registered office in Via Don Angelo Calzolari 55/A - Roncopascolo, 43126 - Parma - PR (hereinafter, also 'Davines' or 'Data Controller').
You can contact the Data Controller bycalling 0521-965611 and/or writing to the e-mail address:gdpr@davines.it.
2. HAS A DATA PROTECTION OFFER (DPO) BEEN APPOINTED?
The Data Controller has appointed a Data Protection Officer whom you may contact by e-mail at privacydpo@davines.it whenever you believe and/or suspect that data processing is not carried out in compliance with the relevant regulations or violates your rights and/or freedoms.
3. WHAT DATA DO WE PROCESS, FOR WHAT REASONS AND HOW LONG?
WEBSITE NAVIGATION
Type of data processed:the IP addresses or domain names of the computers used to connect to the Site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment.
Purpose and legal basis:data are automatically acquired by technical and necessary cookies installed to enable web browsing; to carry out aggregate statistical analyses aimed at measuring the proper functioning of the Website and, in the event of computer crimes against the Website, to ascertain any liability.
The legal basis legitimising the processing of this data is the legitimate interest of the Data Controller in ensuring the proper functioning of the Website and the services available, as well as in the investigation of possible offences.
Data retention time: data are normally retained for short periods of time, as set out in more detail in the Cookie Policy, with the exception of possible extensions related to survey activities.
In addition to the cookies necessary for browsing, we may install other types of cookies that will enable us to capture additional data relating to your browsing experience. In this case, however, we will need your consent, which you can give via the cookie panel. For more details, please read our Cookie Policy.
ONLINE ACCOUNT REGISTRATION
Type of data processed:name, surname, reference salon, telephone number, e-mail, date of birth, gender, hair type/skin type and/or any other data specifically indicated in the reference form.
The data requested as compulsory are indicated with an asterisk (*), the others are optional and do not preclude registration and/or use of the services.
Purpose and legal basis:personal data are required in order to process your registration requests for our Online Shop and to enable you to create a personal area where you can find information about your account and your orders and make quick use of our services (requesting assistance, making returns or refunds, creating a wishlist with your favourite products, etc.).
By accessing your Personal Account, you can consult the information stored and change your active data and/or services.
The processing is necessary to implement pre-contractual or contractual measures taken in response to your request.
Time of data retention: the data relating to your Account are retained until your request for deletion is received.
CUSTOMER CARE
Type of data processed:we may collect some of your data through the formin the "contact us" section of the Website (name, surname, e-mail, country of origin, order number and/or any other data specifically indicated in the form) and/or through the contact e-mail addresses indicated on our Website.
The data required as compulsory for sending the formare indicated with an asterisk (*), the others are optional and do not preclude the possibility of sending the contact request. Any other information that you voluntarily enter in the message text may also be processed, so please only provide us with the information that you consider necessary.
Purpose and legal basis:personal data are acquired to enable us to collect and manage your requests relating both to an order and/or to products purchased and/or to be purchased (information relating to the status of purchases made, their delivery, any returns/refunds, defects in products received, etc.) and more general requests for information (relating, for example, to opening hours, salons in your area, initiatives and events, product characteristics, etc.) and, therefore, to offer the best pre- and post-sales support to our customers.
The processing of your data, which is carried out on the basis of your request, is therefore necessary to perform the contract of sale and/or purchase of a service or take steps as a result of your request.
Data retention time: the data collected are usually kept for short periods of time and, in any case, for as long as is strictly necessary to process requests and provide the requested services.
ASSISTANCE FORM FOR PROFESSIONALS
Type of data:through the contact forms available on the Website, we may acquire the dataspecifically indicated in the reference form, including the following data:
The data requested as mandatory are indicated with an asterisk (*), the others are optional and do not preclude the possibility of sending the contact request. Any other information you voluntarily enter in the message text may also be processed, so please only provide us with the information you consider necessary.
Purpose and legal basis:personal data are collected to enable us to collect and process your requests and, therefore, to take steps and/or perform contractual measures taken as a result of your request.
With reference to the second type of form,please note that the relevant data will be used to contact the salon's reference person, commence the commercial phase and establish a commercial relationship whether the salon should join the Davines network.
Data retention time: data collected through contact formsare usually retained for short periods of time and, in any case, for as long as is strictly necessary to process requests and provide therequested services.
With reference to the second form, Davines has an interest in keeping all the history of requests and evaluations made in relation to each salon. For this reason, data relating to salons that will not become part of the Davines network will also be kept.
PURCHASING PRODUCTS ONLINE
Type of data processed:contact data (first name, surname, e-mail address, telephone number), shipping address, country/region, payment data, billing data (recipient code, certified e-mail, VAT number or tax code) and/or any other data specifically indicated in the reference form.
The data requested as compulsory are indicated with an asterisk (*), the others are optional and do not preclude a purchase.
Purpose and legal basis:data are collected to enable us to process online purchase orders and to carry out all related activities (product dispatch, invoicing, payment management, shipment tracking, product delivery, sending of communications relating to the status of the order and/or related to the management of the purchase, possible activation of the return and refund process, return management, etc.).
The processing of this data is necessary for us to perform the sales contract and to fulfil accounting and tax obligations.
Data retention period: data is retained for as long as necessary to fulfil contractual and regulatory obligations relating to the purchase and sale of products (e.g. ten years for tax legislation).
SHOPPING CART ABANDONMENT
Type of data processed:data associated with the registered account, such as name, surname, items placed in the shopping cart, e-mail address.
Purpose and legal basis:the data is used for reminding you by e-mail that the product placed in your shopping cart is still available and ready for purchase. You may only receive communications relating to your abandoned shopping carts if you have given us your consent for Marketing purposes, which you may revoke at any time by clicking on the unsubscribe link in each communication you receive or, alternatively, by accessing your private area of the Account or by writing to the email address gdpr@davines.it.
Data retention time: data will be retained until you request deletion and, in any case, no longer than three months after the creation of the shopping cart.
E-GIFT CARD
Type of data processed:sender's name, recipient's name and e-mail address. This data is communicated to us by the purchaser.
Purpose and legal basis:sending and use of the E-Gift Card. The E-gift card constitutes a contract and, therefore, the data is required to perform a contract.
Data retention period: E-Gift Card data is retained for the time strictly necessary for the delivery of the E-Gift Card and its subsequent use. With regard to the data collected during the purchase process, the processing and storage principles set out in the relevant section apply.
COMMERCIAL COMMUNICATIONS - MARKETING
Type of data processed:identification and contact data (name, surname, e-mail address, telephone number), purchase data.
Purposes and legal basis:sending commercial communications - via the newsletter service and/or promotional text messages - regarding products/services, discounts, offers, promotions and/or events relating to the brands of Davines S.p.A. Group (Davines and Comfort Zone) and via any other channel that Davines usually adopts and/or will adopt as part of its marketing campaigns; carrying out market research and activities to measure your level of satisfaction regarding products relating to the brands of Davines S.p.A. Group (Davines and Comfort Zone); sending communications relating to abandoned shopping carts. In order to be able to process this data, we require your consent, which you may revoke at any time by clicking on the unsubscribe link in each communication you receive or, alternatively, by accessing your reserved area or by writing to the email address gdpr@davines.it. In addition, by accessing your personal area, you will be able, at any time, to review your preferences on the marketing channels on which you wish to receive updates on the Davines world.
We may also carry out marketing, remarketing/retargeting campaigns through social channels and third party platforms. This depends, of course, on your consent given with regard to cookies and other tracking tools. For more details, please read the following paragraph and our Cookie Policy.
As part of the social campaigns, by filling in the subscription forms forour newsletter service, you will also be able to obtain free contents, such as free samples of our Davines and Comfort Zone products. For further information, please refer to the privacy policy at the bottom of the forms.
Data retention period: We will use your identification and contact information to reach you with our promotional communications for twenty-four (24) months from the last interaction.
Purchase data will be used for marketing purposes for a period of twenty-four (24) months after collection.
REMARKETING/RETARGETING:
Our Website uses Remarketing technologies to communicate, optimise and process advertisements based on users' browsing. In particular, the information collected (IP address and e-mail address) is transferred to the following partners, to which the Remarketing activity is linked, to categorise users of the Website by dividing them into user groups. Based on the different user groups, personalised advertising on Davines products and services is proposed to users on other sites/applications. The processing is done on the basis of your consent provided in the cookie panel, which can be revoked at any time. You may also choose not to participate in certain advertising features through the corresponding device configuration options.
- Google Customer Match: The Customer Match function allows you to show advertisements to the user, even after visiting this Website and after authenticating to your Google profile to access the services offered. Your information shared with Google will be saved within the Google Ads service and used solely for the provision of the service in question to Davines.
This mechanism only works if you decide to activate the relevant cookies by issuing the appropriate consent via the cookie panel.
- Facebook Pixel: A so-called Facebook pixel is active on our Website. This is a piece of software that is embedded in the pages of our Website in order to track the passage of users, create a link between the user's visit to the Website and Facebook, and collect useful data to optimise our marketing strategies and improve the performance of campaigns on Facebook. When the pixel is loading, Facebook installs a cookie on the user's computer that helps Facebook to offer more personalised advertising, but also to measure and improve advertising. When the cookie is installed, Facebook is able to track your browsing behaviour across other websites that have applied a Facebook pixel or social plug-in. This mechanism only works if you decide to activate the cookies by giving your consent.
For more information, please refer to the sections in the following link.
- Criteo Pixel: Criteo helps brands, eCommerce sites and other advertisers ('Advertisers') promote their products and services. This allows us to tailor our campaigns and/or offers to the audiences we want to reach, with the content we want to promote. This allows you to receive advertisements from our partners ("Publishers" or "Partners"), in which you may be interested, on websites, mobile applications and other platforms. For more information, please refer to the section in the following link.
- Webgains Pixel: Webgains allows you to define what is known as an affiliate marketing platform. Advertisers can register on this Webgains platform and send you online advertising ('ads'). In parallel, 'Publishers' also register on Webgains. This allows them, via the Internet, to direct advertising content placed by Advertisers to you. They can do this, for instance, on their websites or in their newsletters. Our goal is to connect advertisers and publishers, to register intermediate orders for advertisers and to manage remuneration for publishers. For more information, please refer to the section in the following link.
- Pinterest pixel: thePinterest pixel is a piece ofsoftware codethat is embedded in the pages of our Website in order to allow Pinterest to track visitors to the Website and the actions they take after viewing the Pinterest ad. This allows us to measure the effectiveness of Pinterest ads by interpreting the actions taken by users on our Website after viewing or interacting with our ads on Pinterest.For more information, please refer to the sections in the following link.
For further details, please refer to the Cookie Policy.
PROFILING
Type of data processed:data relating to your purchases - also relating to the other brands of the Davines S.p.A. Group (Davines and Comfort Zone) - your country of origin, your gender and age, preferences expressed (e.g. skin/hair type, preferred salon, etc.), your interaction with us through our websites, our social channels (e.g. Facebook) and through our Hairquiz/Skinquiz. Finally, we may enrich your profile with statistical information that we may lawfully acquire from other sources: for example, in relation to your area of residence (e.g. demographic information, geo-referencing data, etc.) or the electronic tools you use to interact with us.
Purpose and legal basisprofiling allows us to analyse your purchasing habits and/or preferences, browsing or other identifying data produced by the devices, applications, tools and protocols used in order to create your profile, place it in groups of homogeneous profiles, carry out statistical and market analyses aimed at identifying products and/or services of interest to you, improve our products and/or services in line with our customers' preferences, as well as send you personalised commercial communications based on your profile, your purchasing habits over the last twelve (12) months, and your browsing experience on our Website and, in general, offer you marketing and remarketing services thanks also to the information collected through cookies or other identifiers. Personal data is processed by automated tools, including those owned by third parties. In order to process this data, we require your consent, which you may revoke at any time by accessing your reserved area or by writing to gdpr@davines.it. In addition, you can manage your browsing preferences by accessing the relevant section through the Cookie panel, which can be found in the footer of the Site.
Data retention time: Data relating to your interactions will be retained for profiling purposes for a period of twelve (12) months from the time of collection, unless you withdraw your consent.
COLLECTION & PUBLICATION OF REVIEWS
Type of data processed:contact data (name, surname, e-mail address) and images.
The data requested as mandatory are indicated with an asterisk (*), the others are optional and do not preclude a review.
With regard to images, please send us only those that you consider necessary for the purposes of the review and, where possible, exclude the face of the person concerned from the image. In any case, in order to avoid diffusion of your images, our operators will endeavor to blur your face when this is not necessary for the purposes of the review.
Purpose and legal basis:the data - freely provided by you via the 'write a review' service on the Website - will be processed to enable our internal resources to moderate the review in its content and finally to publish it on our Website.
The legal basis for this processing is the need to execute contractual measures relating to the service you have requested. Should you also decide to send us your picture, you authorise us to process this data and publish it together with the review.
Only if you have also given your marketing consent will you be able to receive emails inviting you to review the products you have purchased. Please note that you may revoke your consent at any time by clicking on the unsubscribe link in any communication you receive or, alternatively, by accessing your Account area or by writing to gdpr@davines.it.
Data retention time: your data will be retained until we receive a request from you to delete it.
RESEARCH CANDIDATES TO JOIN OUR TEAM
Type of data processed:personal data communicated by voluntarily sending CVs to the e-mail addresses indicated and/or acquired through the 'Work with us' section of the site in response to vacancy notices are collected.
We may also collect data relating to your state of health (e.g. in the case of selection of a person belonging to protected categories) or revealing your racial or ethnic origin (so-called 'special data'). Since this data is highly confidential, we ask you to communicate to us only the information strictly necessary for the purposes of your application.
Purpose and legal basis:data are used for the sole purpose of enabling personnel search and selection activities. The processing of this data is necessary in order to implement pre-contractual measures). We are also authorised to process 'special data' that you wish to transmit to us, without the need for a declaration of consent from you. For any further details, we invite you to consult the privacy policy dedicated to applications, available in the appropriate section.
Data retention time: data will be retained for eighteen (18) months after it is provided.
Please note that the section dedicated to applications can be found on our corporate website under the link Careers | Davines Group where you can consult the privacy policy for candidates.
4. HOW DO WE PROCESS YOUR DATA?
In relation to the aforementioned purposes, personal data shall be processed by formally authorised and specifically trained Davines' internal resources, using manual and paper-based instruments, as well as computerised and telematic instruments, with logics strictly related to the purposes themselves and, in any case, adopting technical and organisational measures such as to guarantee a level of security adequate to prevent the risk of destruction, loss, modification and unauthorised disclosure of data or access, accidental or unlawful, to the same.
5. TO WHOM DO WE COMMUNICATE YOUR DATA?
In order to achieve the above-mentioned purposes, we may need to communicate your data to the following categories of recipients:
In no other way the data will be spread.
6. DO WE TRANSFER YOUR DATA TO COUNTRIES OUTSIDE THE EUROPEAN UNION?
We make every effort to protect your data and do not regularly transfer data outside the European Union. However, should it become necessary to transfer personal data to non-EU countries, in order to process your online purchase or to guarantee the services offered, this will be done in accordance with Articles 44 et seq. of the GDPR, by setting up appropriate means to ensure adequate data protection guarantees.
7. SOCIAL NETWORK
On our Website there are social buttons/widgets, i.e. those particular 'buttons' representing the icons of social networks (e.g. Facebook, Pinterest and Twitter). These 'buttons' allow users who are browsing the Website to interact with a click directly with the social network, which acquires data relating to your visit. However, there is no social login, which would allow you to access your reserved area through your social network account.
8. WHAT HAPPENS IF YOU USE THIRD-PARTY PLATFORMS FOR PAYMENT?
You will be able to pay the price of the Products and the Ancillary Charges by one of the means indicated in the Terms and Conditions of Sale document. Below, you will be able to understand how your data is processed if you use Payment Platforms.
PayPal
If you have a PayPal account, you can pay using the information already stored in your PayPal Account. By joining the service, you consent to your data being transferred to us from the PayPal platform. We will process this data exclusively for the purposes indicated in this policy, in order to facilitate the payment process by pre-filling the fields in the payment form with the data provided by PayPal. To learn more about how PayPal processes personal data, you can consult the following link: PayPal.
Shop Pay
If you decide to purchase via Shop Pay service, your payment details will be processed directly by Shopify and will not be transmitted or shared with us. To learn more about how Shopify processes your personal data, you can consult the following link: Shopify.
Apple Pay
If your device is compatible with this payment method, simply approve the payment via Touch ID or Face ID or, in the case of the Apple Watch, by pressing the side button twice.
Product payment information will be processed directly by Apple and will not be transmitted or shared with us. To find out more about how Apple processes personal data, please see the following link: Apple Pay.
Klarna
If you decide to purchase through the Klarna service, your payment details will be processed directly by Klarna and will not be transmitted or shared with us. To find out more details about how Klarna processes personal data, please see the following link: Klarna.
9. WHAT RIGHTS CAN YOU EXERCISE AS A DATA SUBJECT?
You can exercise your rights under the GDPR regarding your personal data by writing to gdpr@davines.it. We will endeavor to respond to your request as soon as possible and in any event no later than thirty days from receipt of your report. In certain cases, we will ask you for a copy of an identification document if, in connection with your request, it is necessary to verify your identity. In particular, you may exercise the following rights, where applicable:
You also have the right to write to the appointed DPO and/or lodge a complaint with the Data Protection Authorityif you consider that the processing of your data contravenes the provisions of the GDPR.
10. DO WE USE COOKIES?
We use cookies in some areas of the Site. We ask that you read the Cookie Policy, which should be consulted in conjunction with this notice.
We reserve the right to update the content of this page from time to time. We encourage you to consult this privacy policy regularly in order to keep up to date with any changes that have occurred since your last consultation.
Last updated: June 2024
CONTACT INFORMATION
To ask questions about or comment on this Policy and our privacy practices, contact us at
Email: contact@davines.us
Toll-free Phone Number: + 866-328-4637 during regular business hours (Monday through Friday, 9:00 am to 5:30 pm ET)
Postal Address: Davines North America, Inc., Attn: Customer Care, 61 N. 11St Street, Brooklyn, NY 11249
