Privacy policy
Privacy notice pursuant to Articles 13–14 of EU Regulation 679/2016 (“GDPR”)
This privacy notice explains which of your personal data are collected by Happydays S.r.l., and for what purposes and by which methods they are processed. It also provides the information you need to exercise your rights under the GDPR.
In general, when you purchase products offered for sale on the online store https://grandorangedeturin.it/ (hereinafter, the “Store”), when you email us or contact us for support, when you interact with us via our Instagram page (hereinafter, the “Social Page”), or when you subscribe to our newsletter.
Please note that the personal data collected during these interactions will be processed in order to respond to your requests, to enable you to use the services offered by the Store (for example, to fulfil your orders and carry out related activities, including the operations required for administrative and tax compliance and, if requested by you, the sending of newsletters and informational material) as described below.
1. Who processes your data: the Controller
Happydays Srl – registered office at Via Vittorio Alfieri 18 – (10121), Turin (TO), VAT and Tax Code 12790020015 (hereinafter, the “Controller”) – can be contacted at the following email address: privacy@grandorangedeturin.it
With regard solely to data collected through our Social Page, Instagram is a joint controller of your personal data as published on its platform. For further details, please refer to Instagram’s privacy notice.
2. What data we process: categories of personal data
Your contact details. We will store the contact information you provide (e.g., first name, last name, address, email, country of residence, date of birth) when you purchase a product or when you contact us via our Social Page, whether through public comments or private messages.
Your payment and invoicing data. We will process the payment and billing data you provide (e.g., credit card number, postal code and address) when you purchase a product, for the purposes of managing your orders and shipping the products.
Information about your use of the site and your activity on the Store. Your use of our site involves the processing of data about the browser and device you are using and your IP address (this is the number that identifies a specific device on the internet and is required for your device to communicate with websites). We may analyse the website from which you arrived and the actions you performed on our site.
3. Where we obtain your data – methods of collection:
Directly from you. For example, when you make a purchase on the Store or submit a query, including via the Social Pages. If you do not provide your data, you will not be able to purchase the products offered for sale therein.
Through your use of the Store’s features. We use cookies and other technologies, such as pixel tags on our websites and in our emails, to collect data about your use and to better target promotions. For more information, please see our Cookie Policy.
Third-party data provided by you. If you provide personal and contact data of any third party (for example for product shipment), you act as an independent controller with respect to that processing, assuming all obligations and responsibilities under the applicable data protection laws. You warrant that any third-party data you indicate have been collected by you in full compliance with applicable data protection law and that there is an appropriate legal basis legitimising the communication of such third-party personal data to us, holding us harmless from any claim, demand or request for damages that we may receive from any such third party as a result of the foregoing communication.
4. Why and for how long we process your data - Purposes and legal bases for processing; retention period.
a) To provide you with the products and services you have purchased and to send you communications relating to your order or payments. For example, we will use your data to manage your order, confirm your purchase and manage ancillary services such as the shipment of purchased products. Without your data, we cannot process and fulfil your order.
The legal basis for this processing is the performance of the sales contract of which you become a party when you accept the Store’s terms and conditions of sale.
Your data will be retained for the time necessary to fulfil the order.
b) To provide necessary after-sales support in compliance with the applicable warranty regulations. For example, we will use your data to provide assistance and to manage the return of products you purchased in the Store in accordance with applicable law and the Store’s general terms of sale.
The legal basis for this processing is compliance with legal obligations, and the retention period is the time necessary to meet the requirements of the applicable legislation (in particular, consumer protection laws).
c) To properly manage your administrative position. We process your data for accounting, administrative and tax purposes directly connected to the Controller’s business activities and required by applicable law.
The legal basis for this processing is compliance with legal obligations, and the retention period is that required by law (in particular, tax, anti-money laundering, banking and public security regulations).
d) To prevent or control unlawful conduct or to protect and enforce rights. For example, we may use your data to prevent the infringement of our intellectual property rights (e.g., counterfeiting of our and/or our partners’ trademarks) or theft (including credit card cloning and thefts that we believe could occur during a contest or event) or other unlawful acts, as permitted by applicable law.
The legal basis for this processing is the Controller’s legitimate interest.
Your data will be retained for the time reasonably necessary to enforce our rights from the moment we become aware of the unlawful act or its potential commission.
e) To respond to your requests collected via the Store and the Social Pages. For example, we will use your data to respond to your requests received by email or via our Social Page, whether as public comments or private messages.
The legal basis for this processing is the performance of a contract to which the data subject is party or the performance of pre-contractual measures, and the retention period is the time necessary to follow up on the data subject’s requests.
f) To send you our newsletter. With your consent, we may send you our scheduled newsletter by email, including following your subscription by entering your email address.
The legal basis for this processing is your explicit consent, which, for the newsletter signup banner, consists of entering your email address.
Your data will be retained for 24 months from when consent was given.
5. Nature of the provision of personal data
For the purposes from (a) to (f) in the previous paragraph, providing data is necessary to allow you to make purchases in the Store and receive the other services available in the Store.
For purpose (g), the provision of data is optional; any refusal will not prejudice the purposes from (a) to (f). The data subject may withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
6. Where your data are processed – data transfers
Data will be processed and stored at the Controller’s offices, as well as by suppliers operating within the European Union and—where the safeguards under Articles 45–47 GDPR are met—outside the European Union. Solely with regard to data collected on our Social Page, such data will be stored on the relevant platform, i.e., Instagram, in accordance with their privacy policies, which we invite you to review.
7. With whom we share your data – recipients of personal data
Without prejudice to obtaining your prior consent and completing any formalities required by law where applicable, we may share your data with the following third parties (also as data processors):
Our service providers. We may share your data with third parties so that they can provide services to us (e.g., IT service providers for Store management, couriers, logistics companies). In such cases, we will enter into an agreement compliant with Article 28 GDPR to protect your data. These parties will only have access to the data necessary to perform their functions and may use them solely to provide such services on our behalf or to comply with legal obligations. You may obtain details of such processors pursuant to Article 28 GDPR by writing to us at the addresses indicated above.
Where we deem it necessary to comply with legal obligations or to protect us or third parties in legal proceedings. Where permitted or required by law, we may also share data requested by a government body or other authorised entity or organisation in order to protect or exercise our rights or those of third parties, or to limit or prevent fraud (including credit card fraud or other fraud we believe could occur during a promotion or event) and other unlawful acts.
8. Minors
Our Store is not intended for persons under 18 years of age; it is designed for an adult audience. If you are a parent or guardian and believe your child has provided us with data, you may contact us.
9. Security measures
We adopt the security measures required by law. We implement measures to protect your data. The standard security measures we use depend on the type of data we process and comply with the requirements laid down by law and by European government agencies’ standards.
10. Your rights
You may contact the Controller to request access to your personal data, rectification or erasure of such data, or restriction of processing; to object to processing; and to request the portability of your data where processing is carried out by automated means. You may also withdraw your consent at any time (this will not affect the lawfulness of processing based on consent before its withdrawal). When exercising the right of access, you have the right to know whether your data are being processed, the purposes of processing, the categories of data processed, the recipients or categories of recipients to whom your data are disclosed (and, if they reside in a third country, on the basis of which safeguards), the retention period for your data (or the criteria used to determine such period), whether automated processing (e.g., profiling) is in place and the logic involved in such processing, and the source of the data (where not initially collected by us).
You have the right to lodge a complaint with the competent supervisory authority pursuant to and within the limits of Article 77 GDPR.
You can exercise your rights by contacting the Controller at the addresses indicated above.
You may also exercise your rights, in relation to the processing of personal data carried out via our Social Page, by contacting Instagram as provided in its respective privacy policy.
To stop receiving our newsletter, you can follow the instructions provided in the promotional message you receive. Alternatively, you may notify us of your withdrawal of consent by contacting us at the addresses indicated above.
11. Changes to this notice
We may make changes to this privacy policy. We will also publish an updated version on our website. It will show a date different from that indicated below. Please check the website periodically for updates.
Last updated: 01/10/2024