Privacy Policy

Information in accordance with Articles 12 and 13 of EU Reg. 2016/679 (GDPR)

​

In accordance with art. 13 of the "European Regulation 2016/679 (hereinafter "GDPR"), the Individual Company Pucciarini Francesca, with registered office in Via della Cerqua 3, 06134 Perugia, Italy - VAT number 03725440543 fiscal code PCCFNC91R41G478I, in its quality of Controller of the Treatment of personal data, conferred to use the services available through the website, including the purchase of Products ( including but not limited to: candles and design objects) subject to the definitions provided in the GDPR is required to inform you of the following.

 

(A). - How the site works.

The https://www.trama.design/ website, through the system provided by Wix.com, allows you to purchase and receive a wide range of Products at the address you have provided.

In order to use these services, you must access the site by clicking on the following link: https://www.trama.design/.
You can log in as a guest or register for a personal, non-transferable account (free of charge). You can cancel your account at any time. Purchases can be made either as a guest or by completing the registration process.

During registration, you will choose your access credentials, including your password, which only you will know. You can then access the services from your mobile device or desktop by entering your personal authentication credentials in the fields provided. Please keep your credentials with the utmost care.

Either by registering or by logging in as a guest, you can choose the products and place your order, which will be followed by a confirmation e-mail.

 

(B). - Reference standards and legal grounds for processing.

Processing operations, which we will explain to you in detail below, have their legal basis in Art. 6(a) and (b) and Art. 9(a) of the GDPR;

​

(C). - Nature of the data subject to processing.

Only after your consent, where applicable, the following categories of personal data will or may be processed for the indicated purposes:

1. Personal data: first and last name, e-mail, password, telephone number, delivery address, billing information and IP address;

2. Payment data: information relating to the purchase you have made and the related payment (e.g. credit card number and payment circuits whose terms and privacy policy can be consulted at the links below:

https://www.paypal.com/it/webapps/mpp/ua/legalhub-full

https://support.wix.com/en/article/about-wix-payments

https://payments.google.com/payments/apissecure/get_legal_document?ldo=0&ldt=buyertos&ldr=ENG).

 

(D). - Nature of data provision, data sources.

The provision of your personal data is not mandatory but, in some cases necessary, and therefore obligatory, in order to allow you to make use of the services and purchase functions.

The providing of certain data (name and surname, e-mail, password, telephone number, delivery address and IP address) is necessary, and therefore mandatory, in order to activate and carry out some services. You are always free to refrain from providing your personal data, but in such a case it may be impossible for the Controller to fulfil your requests, respond to your needs, or allow all the functions available on the trama.design website to be used fully.

​

(E). -Purposes for the Processing.

The Data Controller, in addition to processing operations required in relation to legal obligations, regulations, or arising from orders by the Authority, will carry out the necessary operations for the following purposes:

• Processing of purchase orders formulated through the Site and related order management activities (providing e-commerce services, sales and after-sales customer support, communication with the client on the order status, receiving your requests for information on purchased products, payment management, reporting, shipping and delivery);

• sending newsletters, only with your consent, for the promotion of products and services similar or comparable to those you have purchased;

• sending commercial communications on products and services of the Site and/or the Controller and/or third parties, special offers, promotions and news, coupons, market research, with automated systems (so-called "marketing purposes”);

• analysis of preferences and consumer habits and the processing of the Purchaser's personal preferences and interests through automated systems and the transmission of tailored offers through the Site (so-called "profiling" purposes); 

The Data Controller, through external Managers specifically designated pursuant to Article 28 of the GDPR, will carry out the technical processing essential to enable you to access the services. 

​

(F). - Methods of data processing, storage and security.

Your data may be processed by electronic means and will be stored by the Data Controller, in compliance with all the security measures provided for by law, for the time necessary to pursue the above-mentioned purposes and, in particular, the contractual obligations undertaken, and in any case no longer than two years from the last interaction.

In case of purchase, we will keep your data for the purpose of fulfilling legal obligations and to assert and defend a legal claim for a period of 10 years.

After this period of time has elapsed, or after you have cancelled your data, we will remove any data no longer required.

We would also like to inform you that our company is hosted by the Wix.com platform, which enables us to sell our products and services. Your data may be stored via Wix.com's data memory, databases and general applications, and stored on secure servers protected by firewalls.

The relevant security policies are reviewed by auditors appointed by Wix.com, in accordance with the policies set out in ISO/IEC 27001:2013, Information Security Management Systems, Tier III.

All direct payment gateways offered by Wix.com and used by the company also adhere to the standards set by PCI-DSS as administered by the PCI Security Standards Council to ensure the secure handling of payment information by the shop.

 

(G). - Navigation data.

The software used to operate the site and the computer systems acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but by their very nature could, through processing and association with third parties data, allow users to be identified.

This category of data includes: IP addresses or other device identifiers used by users who connect to the site; the URI (Uniform Resource Identifier) addresses of the resources requested; the time of the request; the method used to submit the request to the server; the file size obtained in response; the numerical code indicating the status of the response given by the server (successful, error, etc.); other parameters relating to the user's operating system and computer environment.

This data is only used to obtain anonymous statistical information on the use of the site and to check that it is functioning correctly. They are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical cyber crimes to the detriment of the site. Except for this possibility, at present, data on web contacts do not persist for more than 7 days.

Authentication data will be encrypted as soon as they are used for the first time and the Data Controller will not be able to know them in any way.

 

(H). - Cookies.

The Data Controller uses cookies to identify (in anonymous statistical form) the parts of the https://www.trama.design/ website that are of most interest to users. You can always disable cookies by setting your browser to refuse them. If you refuse cookies, some features of the website may not be available. You can find more detailed information about this in the Cookie Policy.

 

(I). - Data recipients and data transfers abroad.

They may become aware of the personal data, referred to in this statement, in their capacity as Data Processors or Persons in Charge of Processing:

• inside the Company, qualified personnel, each within the limits of his or her competence and duties and on the basis of assigned tasks and instructions;

• outside the Company, third parties, also specifically designated as Data Processors or persons in charge of the processing - which the Data Controller uses for various services and exclusively to perform such services - each within the limits of their own competences and duties and on the basis of assigned tasks and instructions.

The Data Controller, for ordinary management, accounting and administrative activities, may communicate your personal data, after obtaining your consent in the manner required by law, where applicable, and in compliance with security measures, to third party service providers for the sole purpose of performing the service you have requested.

The list of the subjects to whom the data may be communicated is available at the Data Controller headquarters.

 

The Data Controller does not transfer personal data abroad on its own initiative. However, some third party service providers have their servers physically located abroad. In such cases, the transfer of data abroad will take place exclusively within the scope of and in compliance with Article 44 et seq. of the GDPR.

Under no circumstances may your personal data be disseminated.

 

(L). - Rights of the data subject.

Articles 15 to 22 of the GDPR grant data subjects the exercise of specific rights. Article 15 of the GDPR grants data subjects the right to access and obtain a copy of their personal data. The right to obtain a copy of the data must not infringe the rights and freedoms of others.

You have the right to obtain confirmation from the Data Controller as to whether or not personal data concerning you are being processed and to be informed of the purposes and categories of data processed, the third parties to whom the data are disclosed and whether the data are transferred to a non-EU country with adequate safeguards. You also have the right to know the storage time of your personal data and the right to request the rectification of inaccurate data and the integration of incomplete data, the cancellation (right to be forgotten) under the conditions indicated in Article 17 of the GDPR, the restriction of processing, the revocation of consent, the portability of data and the right to object, at any time and without providing justification, to the data treatment for direct marketing purposes.
Rights may be exercised by email to info@trama.design, or by regular mail to the following address: Pucciarini Francesca, Via della Cerqua 3, 06134 Perugia Italy. If you believe that the processing of your personal data violates the provisions of the GDPR or internal regulations on the protection of personal data, you have the right to lodge a complaint with the Italian Data Protection Authority and/or to take legal action.

The complete list of Data Processors is available at the offices of the Data Controller. This mandatory information is subject to updating, depending on any changes in the applicable legal provisions.