Privacy Policy

DHOMEO s.r.l. informs the user of the following:

Personal data processing means any operation or set of operations, carried out with or without the aid of automated processes and applied to personal data or sets of personal data, even if not registered in a database, such as the collection, recording, organisation, structuring, storage, processing, selection, blocking, adaptation or modification, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Specifically :

1. JOINT CONTROLLERS.

The joint controllers of personal data according to art.26 are:

• DHOMEO s.r.l. with legal head office in Figino Serenza (CO), via Alcide De Gasperi 10, Italy and registered at the Como Register of Company (REA: CO-420022) with VAT tax number and tax code 04103970135. Registered email of the company dhomeo@pecmeb.it
• Velve Solutions s.r.l. with legal head office in Lentate sul Seveso (MB), via Miglio 1, Italy and registered at Milan Register of Company with VAT tax number 10104140966. Registered mail of the company: velvesolutions@pec.it

2. AIMS OF DATA PROCESSING.

The user's personal data, freely communicated and acquired by DHOMEO s.r.l. due to the activity it carries out, will be processed lawfully and fairly for the following purposes:

A - Consent is not required (art. 24 - a, b, c Privacy Code and art. 6 - b, e GDPR): - data will be used exclusively for purposes directly related to the activation and operation of the services provided by DHOMEO s.r.l for example to allow the registration of an Account, the managing of the Basket, Wishlist, Customer Care Service and also to comply with an obligation imposed by law, regulations and Community legislation as well as exercise his/her own rights in a court of law.

B - The data subject has freely given his/her consent which can be withdrawn at any time (art. 23 and 130 Privacy Code and art. 7 GDPR): - the use of their personal data, specifically the email and postal address, by the Joint Controllers, for the management, fulfillment, invoicing, and delivery of ordered products, commercial communication services, including the newsletter regarding offers on the Website, as well as for conducting market research, including research aimed at assessing user satisfaction levels.

The subject shall have the right to withdraw his of her consent to the treatment of these data at any time (art. 2 B) as following:
- through the link at the bottom of each promotional email sent by DHOMEO s.r.l.;
- by sending an email to contact@dhomeo.com;
- by accessing the "Contact" section inside the website sending a specific request to cancel / modify the given preferences;
- by contacting our Customer Care at 031.2250248.

C - Soft Spam: The email address given by the subject when purchasing a product or a service can be used by the Controllers for future email communications related to the direct selling of products or services similar to the one previously purchased or activated, except when the subject expresses its right to withdraw through the modalities mentioned in point B.

D - Email to a friend: The user who intends to utilise the 'Email to a Friend' service, by clicking the 'Friends' button on the product page, declares to have obtained the recipient's consent for the communication of the latter's email address to the Joint Controllers solely for the purpose of allowing the sending of the invitation to register on the Website. The data relating to the recipient's email address will not, however, be stored following the transmission of the invitation email.

3. ACCOUNT.

The subject can create his/her own account on the website www.dhomeo.com by adding its personal data (including name, surname, telephone number, email, address). The user can update its personal details at any moment and cancel the data through the personal area of his/her account.

The user may also create an account using Amazon Pay or link their existing account at a later stage. Further information can be found in section 13.

4. PROCESSING METHODS.

The data will be processed, while ensuring the necessary security and confidentiality, through the following methods: collection of data from the data subject, collected and recorded for specified, explicit, and legitimate purposes and utilised in subsequent processing operations in terms compatible with those purposes, processing carried out with the aid of electronic and automated tools (data collection electronically, directly from the data subject).

5. LEGAL BASIS OF THE TREATMENT.

The legal basis of the treatment is composed of: the user consent, the fulfilment of a contractual obligation and law regulations.

6. LEGITIMATE INTEREST PURSUED BY THE JOINT CONTROLLERS.

The legitimate interests pursued by the joint controllers of data treatment respects and honours the contract obligations undersigned by the parties. According to art.6 processing shall be lawful only if the data subject has given the consent to the processing of his or her personal data, documented in written form.

7. NATURE OF THE DATA SUPPLYING.

The provision of the data requested upon activation of the services, for the purposes set out in the preceding Section 2A, is mandatory, as it is strictly functional to the performance of those services. Any refusal to provide the data makes it impossible for DHOMEO s.r.l. to complete the user's registration process and thus to provide the services offered. The provision of data for the purposes set out in the preceding Section 2B is optional.

8. SUBJECTS TO WHOM DATA CAN BE TRANSMITTED.

The user's personal data may be communicated to specific parties, appointed by the Controller for the provision of services instrumental or necessary to the performance of the obligations connected with registration on the website www.dhomeo.com and online purchasing, within the limits and in conformity with the instructions given. In particular, the data may be communicated to:

1. people, companies or professional studios which provide assistance, advice or collaborate with the owner on accounting, administrative, legal, tax and financial matters;
2. subjects appointed by DHOMEO for the execution of activities or part of the activities related to the provision of sales services, such as the Customer Service, even if managed through outsourcing; the logistics center responsible for packaging the products purchased by the user; the carriers appointed for the delivery of the purchased products; the parties who carry out post-sales assistance activities on behalf of DHOMEO, and any other external collaborator to whom the communication is necessary for the correct fulfillment of the obligations assumed by DHOMEO in relation to the contract for the provision of its services;
3. to Public Administrations for the performance of institutional functions within the limits established by law or regulations. The Joint Controllers have appointed several data processors for the personal data of users, depending on the functions performed. The updated list of all Data Processors is available at the registered office of DHOMEO and may be requested at the following email address: contact@dhomeo.com. This list may subsequently be supplemented and/or updated as required.

9. METHOD OF TREATMENT.

The data is collected electronically and processed through operations of recording, consultation, communication, storage, and erasure, carried out predominantly with the aid of electronic tools, ensuring the use of suitable measures for the security of the processed data and guaranteeing their confidentiality.The user's data, stored on electronic media, are kept and archived on a server located in Italy. In particular, the Joint Controllers declare that the data recorded on the server are protected against the risk of intrusion and unauthorized access and that they have also adopted suitable security measures to ensure the integrity and availability of the data, as well as the protection of the relevant areas and premises for the purpose of their custody and accessibility.
The personal data will be processed by collaborators and/or employees of the Joint Controllers acting as data processors or persons authorised to process data, within the scope of their respective functions and in conformity with the instructions given by the Joint Controllers.The Joint Controllers guarantee the maximum level of security in the management of the user's data. Credit card information is stored solely in encrypted format and according to the security requirements stipulated by PCI certification. The Joint Controllers do not have access to the confidential credit card information, which will be processed by the intermediaries and the card issuers in compliance with the Privacy Code.

10. RIGHTS OF THE INTERESTED PARTY.

The subject (or interested party) has the following rights, according to art. 7 of Privacy Code and art. 15 GDPR:

• to obtain confirmation of the existence or not of his/her personal data, even if not registered, and their communication in an intelligible form;
• to obtain information about:
  a) the source of personal data;
  b) the purposes and methods of the data processing;
  c) the logic applied to the processing, if the latter is carried out with the help of electronic means;
  d) of the identification of the data controller, data processors and the representative designated as per art. 5(2) of the Privacy Code and art. 3(1), GDPR;
  e) The subjects or categories of subjects to whom the personal data may be disclosed or who may become aware of the data in their capacity as a designated representative in the territory of the State, as data processors, or as persons authorised to process;
• to obtain:
  a) the updating, rectification, or, where the data subject has an interest, the integration of the data;
  b) the erasure (or cancellation), anonymization, or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;
  c) certification that the operations referred to in points (a) and (b) have been brought to the attention, also as regards their content, of those to whom the data were communicated or disseminated, except where this fulfillment proves impossible or involves a use of means manifestly disproportionate to the protected right;
• object in whole or in part:
  a) on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;
  b) the right to object to the processing of personal data concerning him or her for the purposes of sending advertising material or direct sales or for carrying out market research or commercial communication, by means of automated calling systems without the intervention of an operator using email and/or by means of traditional marketing methods using telephone and/or paper mail.
  It is noted that the data subject’s right to object for the purpose of direct marketing using automated methods extends to traditional methods, and that in any case, the possibility for the data subject to exercise the right to object even only partially remains reserved. Therefore, the data subject can decide to receive only communications using traditional methods, or only automated communications, or neither of the two types of communication
• ask to the Joint controllers to access personal data (art 15 GDPR), rectify them (art 16 GDPR) or erase them (art. 17 GDPR), restrict or oppose to the processing (art. 18 GDPR)
• transmit the data to another controller, where feasible, if the process is carried out by automated means
• revoke the consent at any moment without prejudice according to the lawfulness of the treatment based on the consent before the revocation
• submit a claim to the Competition Authority for the protection of personal data.

In order to exercise the mentioned rights and to receive information concerning the subjects currently holding your data or to whom the data have been transmitted or again those subjects in charge of the mentioned data, it is possible to address to the Joint controllers by sending a request to the following email: contact@dhomeo.com.

11. DURATION OF THE TREATMENT AND PERIOD OF DATA STORAGE.

The treatment of personal data related to the aims pointed out in section 2.A will last as long as the execution of the requested services, there will also be an additional time - provided for by law - to comply all civil, fiscal and taxes obligations.

12. TRANSFER OF PERSONAL DATA BY THE JOINT CONTROLLERS.

The management and storage of personal data will take place on servers located within the European Union.
The servers are currently situated in Italy.
The data will not be transferred outside of the European Union.

13. PRIVACY NOTICE UPDATES.

This Privacy Policy is subject to occasional revisions. Should changes to the processing be introduced, DHOMEO will provide appropriate notification to the user, by publishing the changes on the Site. Where required by current legislation, the user shall have the right to grant their consent to any potential new processing activities. In case of refusal, the users' data will not be processed according to the changes contemplated by the privacy policy.