• SCROLL TO EXPLORE THE MILLEFIORI UNIVERSE • SCROLL TO EXPLORE THE MILLEFIORI UNIVERSE

Privacy Notice

1. PRIVACY NOTICE

Pursuant to Article 13 of EU Regulation 2016/679 (GDPR) and subsequent amendments

Data subjects: Users of the website “www.millefiorimilano.com”

Dear User,

This document provides information from Home Fragrance Italia S.r.l. (“the Company” or “the Controller”) regarding the processing of your personal data collected through your voluntary subscription to the newsletter service, in compliance with applicable data protection laws.

All processing of your personal data will be carried out in accordance with the principles of lawfulness, fairness and transparency.

Your data will be processed in line with the provisions of the General Data Protection Regulation (GDPR), the Italian Privacy Code, and the confidentiality obligations that apply to such processing.

2. IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER

The Data Controller (hereinafter referred to as the “Controller” or “Company”) is Home Fragrance Italia S.r.l., represented by its legal representative pro tempore, with registered office at Via del Commercio 28, 20881 Bernareggio (MB), Italy, VAT No. 12886810154.

You may contact the Controller at the above address or through the following:
+39 039 9220979
 Email: info@millefiorimilano.com
 Certified email (PEC): millefiorisrl@legalmail.it

3. TYPES OF PERSONAL DATA PROCESSED

The Controller processes the following categories of personal data, including but not limited to:

  • Contact details (e.g. name, surname, email address);

  • IP address;

  • Other information provided voluntarily by the user when subscribing to the newsletter.

4. DEFINITION OF PROCESSING

Pursuant to Article 4(2) of the GDPR, “processing” means:

“Any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.”

5. METHODS OF PROCESSING

Your personal data will be processed using both manual and electronic tools, in full compliance with data protection laws and by adopting appropriate technical and organisational measures to ensure their security and confidentiality.

Processing will be carried out solely by authorised personnel who have received appropriate training and instructions.

6. PURPOSES OF DATA PROCESSING

a. Newsletter service management:
With your explicit consent, your email address will be used to send newsletters containing information, updates and promotional content about Home Fragrance Italia S.r.l. products and initiatives.

b. Personalised marketing through profiling:
With your explicit consent, the data you provide (e.g. personal details, purchase history, browsing data collected via the website) may be used to analyse your preferences, habits and interests.
Such profiling activities, as defined by Article 4(4) of the GDPR, aim to create individual and group profiles in order to send you targeted communications and offers that match your preferences and interests.

7. LEGAL BASIS FOR PROCESSING

The legal basis for the processing of your personal data for each purpose is as follows:

  • Newsletter service (purpose 6.a): your explicit consent, pursuant to Article 6(1)(a) GDPR, provided at the time of subscription.

  • Personalised marketing and profiling (purpose 6.b): your separate, specific and optional consent, pursuant to Article 6(1)(a) GDPR. This consent is independent from the one required for the newsletter service and is collected through a dedicated, non-preselected checkbox.

You may withdraw your consent for either purpose at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

8. NATURE OF DATA PROVISION

Providing your email address for the purpose of newsletter subscription (6.a) is necessary in order to receive the requested service.
Failure to provide your email address will make it impossible for you to receive our newsletters.

Providing your data and granting consent for personalised marketing and profiling (6.b) is entirely optional.
Failure to provide consent for this purpose will not affect your ability to subscribe to and receive the general newsletter; it will only prevent the Controller from sending you personalised offers and communications based on your interests.

9. RECIPIENTS OF PERSONAL DATA

Your personal data may be disclosed to the Controller, authorised personnel, and data processors.

Specifically, and only to the extent necessary for the purposes described in Section 6 above, your data may be shared with:

  • Internal staff of the Company duly authorised to process personal data;

  • Service providers responsible for managing IT systems and telecommunications networks (including email, newsletters, and website management), as well as third parties that assist the Controller in direct marketing activities.

All such entities will process data as Data Processors appointed under Article 28 of the GDPR.
An updated list of Data Processors is available upon request from the Controller at the addresses provided above.

10. DATA TRANSFER OUTSIDE THE EEA

Your data will not be transferred outside the European Economic Area (EEA).

However, should data sharing with recipients located outside the EEA become necessary — such as data storage on non-EU servers — the Controller ensures that any transfer will comply with applicable data protection laws.
In particular, transfers will only occur where adequate safeguards exist, such as adequacy decisions, Standard Contractual Clauses (SCCs) approved by the European Commission, or other legally recognised instruments.

Where equivalent data protection laws are not in place, third parties will be required to sign the European Commission’s Standard Contractual Clauses (Decision 2021/914 of 4 June 2021) to ensure an appropriate level of protection.

11. DATA RETENTION PERIOD

In accordance with the storage limitation principle (Article 5(1)(e) GDPR), your personal data will be retained for varying periods depending on the purpose of processing:

  • Newsletter service (6.a): your email address will be retained until you withdraw your consent by requesting to unsubscribe.

  • Personalised marketing and profiling (6.b): with your explicit consent:

    • Data relating to your purchase details and interactions (used for analysis and profiling) will be retained for a maximum of 12 months from collection.

    • Contact data used for personalised marketing communications will be retained for a maximum of 24 months from the date of consent.

After these periods — or in the event of consent withdrawal — data will be irreversibly deleted or permanently anonymised, in accordance with technical procedures for data deletion and backup.

12. DATA SUBJECT RIGHTS

Under Articles 15–22 of the GDPR, you have the right to exercise specific rights, including:

  • The right to obtain confirmation of whether your personal data are being processed;

  • The right to access your data and information pursuant to Article 15 GDPR;

  • The right to request rectification or erasure of your data, restriction of processing, or to object to processing for legitimate reasons;

  • The right to withdraw consent at any time (without affecting prior lawful processing);

  • The right to data portability where applicable;

  • The right to request updates or corrections to your data.

You also have the right to obtain information on:

  • The source of the data;

  • The purposes and methods of processing;

  • The logic applied in case of automated processing;

  • The identification details of the Controller and any parties to whom your data may be disclosed.

Additionally, you may request anonymisation, restriction, or blocking of data processed unlawfully.
If you believe your data have been processed in violation of the law, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) following the procedures described on its website: http://www.garanteprivacy.it.

Requests to exercise the above rights may be addressed to the Controller at the contact details below, either informally or using the model form provided by the Garante (available at: http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1089924).

For exercising your rights or for any related request, please contact:
Home Fragrance Italia S.r.l.
Registered office: Via del Commercio 28, 20881 Bernareggio (MB), Italy
VAT No.: 12886810154
Tel: +39 039 9220979
Email: info@millefiorimilano.com
PEC: millefiorisrl@legalmail.it