In general, the visit and consultation of the Website does not imply collection and processing of the user’s personal data. The processing of the user’s personal data that visit and consults the Website is limited to the so-named surfing data, namely the data whose transmission to the Website is implicit in the functioning of the information systems in charge of the managing of the Website and in the use of communications protocols peculiar to the Internet. Surfing data are, for example, the IP addresses or the domain names of the computers employed by the user who connects to the Website and other parameters relating to the type and the information operating system employed by the user. Surfing data, such as these above specified and for example the number of visits, the time spent on the Website are collected and processed by EPMS exclusively for statistical purposes and in anonymous form in relation to the access and use of the Website for purposes of monitoring the correct functioning of the Website and enhancing the Website functioning and content. Due to the nature itself of surfing data, these data may lead to identification of the users if they are associated with data held by third parties; however, EPMS does not collect surfing data in order to associate them with identified the users. Surfing data are deleted after the processing in anonymous form; said data may be used for purposes of assessing possible responsibilities in case of information crimes realized against the Website or through the Website. With the exception of the aforementioned circumstance, EPMS keeps the user’s surfing data only for the maximum period of time allowed under applicable laws and then makes said data anonymous.
Furthermore, EPMS collects and processes personal data voluntarily provided by the user when the user interacts with the Website functionalities and requests the services offered by the Website, for example upon the user’s subscription to the Website; the user’s subscription to the newsletter or mailing list; the user’s purchase of products through the Website, which includes all activities relating to the purchase of goods, such as for example delivery of goods, billing issues, returning and exchanging of goods, receiving refunds, purchase and use of gift cards and e-gift cards, as applicable, payment related activities, including fraud prevention, and customer support and interaction with our call centre; the user’s participation in promotions and other initiatives realised through the Website such as for example competitions and sweepstakes, the user requests information from EPMS or the user sending EPMS a question, communication or feedback through traditional mail or through the Website. We will process the user’s personal data to comply with laws, regulations and Community legislation, and to assess and defend a legal right. We may process the user’s personal data also when the user contacts our customer support and call centre, which may communicate with the user and thus process the user’s personal data through email, chat and telephone. The user may finalise the purchase of our products through telephone by contacting our call centre, following the procedure specified in our returns policy. For the processing of your personal data when you make a purchase on our Website, please see our relevant privacy Statement. The call centre will assist the user in closing transactions over the phone and processing the user’s order on the user’s behalf and for said purpose it will collect the user’s personal data and credit/debit card details. The call centre will also register the user’s phone number for the purpose of call-back and back-office services in order to provide the user with the requested support and information. Marketing, statistical and profiling activities as above specified may also be performed by the call centre, with the user’s consent. In some cases, for purposes of internal training, quality control and verification, the call may be recorded, and the emails may be saved to the extent not prohibited by applicable laws.
The user will always be informed in advance of the recording of the communication, and the user will have the opportunity to object to such recording, save when this is necessary for verification purposes in relation to your purchase or other reasons, as allowed under applicable laws.
With the user’s consent, which is optional, EPMS may further process the user’s personal data for survey purposes and for marketing purposes, that is for sending the user, through email or other electronic communications such as SMS, MMS, fax, etc., promotional information and material on products and services from EPMS, on special initiatives on prices and promotions, exhibitions and fairs organized by EPMS or in which EPMS takes part; and for profiling purposes. For the marketing and profiling activities above defined the user’s personal data may also be shared with other EPMS partners. The user will always have the opportunity to object, at any time and for free, to the processing of his/her personal data for the sending of promotional information and material; in each communication there will be a specific section in which are specified the conditions (easy to perform and free of charge) of revoking the consent.
Personal data that EPMS collects and processes includes name and contact details such as street address, telephone number, email address and further possible information of an optional nature provided by the user. In the relevant sections of the Website where data is collected a specific information statement is provided. When requested under the Privacy Law, EPMS requires the user’s consent before proceeding to process his/her personal data.
Where you have provided us with personal data about another person, (for example when using the function email a friend, gift card functionalities or other purposes) to the extent permitted by applicable laws you hereby confirm that said communication and further processing by us as set out in this Privacy Policy complies with applicable privacy laws, so for example you should inform said person and as requested obtain his/her consent to the processing of his/her personal data for the purposes set out in this Privacy Policy.
Personal data collected through the Website will be processed by EPMS only. The updated list of Processors and addresses of data communications is at your disposal at EPMS. Personal data is processed only through specifically authorised staff designated to access and process the data, including staff designated for performance of non-routine maintenance operations of the Website. Furthermore, other partner companies of EPMS involved in the processing of personal data in relation to the functioning of the Website and performance of the services and functionalities offered through the Website, for example in relation to purchase of products, customer support and call centre activities, and also for marketing and profiling activities as above specified. The user is invited to check the section of this Privacy Policy relating to Extent of personal data communication. All processors are acting on behalf and under the instructions of EPMS.
Cookies are small data files stored on the hard disk of the users’ computer. The Website deploys cookies for specific and limited purposes, notably in order to offer to the user an easier surfing on the Website, to make login easier (for example by remembering the user’s username and password), for internal security purposes, system administration, trend analysis. The cookies deployed by EPMS cannot be used to run programs on the user’s computer or to download viruses on the same, and they do not allow EPMS any kind of control on the user’s computer. EPMS does not use cookies to access information stored on the user’s computer, to store information on the same and to monitor the user’s operations. This section of the Privacy Policy relating to Cookies applies to cookies and any other tracking technology that may be used by EPMS and applies to the computer of the user as well as any other device employed by the user to connect to the Website.
‘Session cookies’ are stored in a temporary memory and are deleted when the user closes the browser. Session cookies do not collect any information from the user’s computer.
Cookies that are used upon subscription of the user to the Website collect the user’s personal information that allows EPMS to recognize the user in case of further visits to the Website and they are used in order to create easier surfing of the Website and the login procedure, allow EPMS to understand what are the sections of the Website that the user is most interested in in order to offer to the user a personalised visit of the Website and of the information thereon published, and for security and managing purposes as above specified. The Website may contain links to other websites. EPMS does not have any type of access or control on cookies, web beacons and other user tracking technologies that are present on third party websites that are accessible from the Website, on the availability and on any content or material contained in, or obtained through, any such websites, and on the conditions of processing of the user’s personal data by said third parties’ websites, and hereby expressly disclaims any relevant liability. EPMS invites the user to consult the privacy policy of third parties’ websites that the user accesses from the Website in order to be informed of the conditions of collection and processing of the user’s personal data, since this Privacy Policy only applies to the Website as above defined. Most web browsers automatically accept cookies, but the user can usually change their web browser to disable this function. The ‘Help’ section of the toolbar placed on the majority of browsers explains how to disable and avoid cookies, web beacons and other technologies employed to track the user behaviour. Disabling of cookies may limit the possibility to use the Website and may prevent the user from fully benefiting of the Website functionalities and services.
EPMS communicates the user’s personal data within the limits and under the circumstances specified in this Privacy Policy and in the information statement published on the Website in the sections where data is collected, in any case in full compliance with the consent given by the user upon collection of data, when required by the Privacy Law. The user’s personal data will be accessible within EPMS organisation by internal and external personnel that need to access them because of their duties in relation to the processing purposes herein specified. The updated list of Processors and of the subjects to which data may be communicated will remain at the user’s disposal free of charge upon request from EPMS.
The user’s personal data may be communicated to institutions, authorities, public entities, banks and financial institutions, professionals, independent consultants, also in associate form, business partners and third party service providers to which EPMS may revert to for performance of professional, technical and organizational services functional to the managing of the Website and the activities therein performed, such as for example the sales of goods and related activities, the managing of functionalities offered by the Website and of the initiatives and services that the user may subscribe to and require through the Website, and for services strictly functional to achievement of the other processing purposes herein specified. With specific reference to the purchase of goods, data will be processed by the relevant local EPMS entity established in the place where delivery has to take place, acting as controller of your personal data in accordance with applicable privacy laws, for the following purposes: billing issues, despatch of goods, returning and exchanging of goods, receiving refunds, purchase and use of gift cards and e-gift cards as applicable, payment related activities, including fraud prevention. Moreover, for closing transactions and payment processing we revert to third party service providers for managing and support of the e-commerce platform. These service providers are bound by contractual obligations so that they will implement adequate security measures to protect security and confidentiality of the user’s personal data and credit card information.
The third parties receiving the user’s personal data as above specified will process data as Data Controllers, for example EPMS local entities, or Processors for example third party services providers, as the case may be, according to applicable data protection laws and for the same purposes above specified. Personal data may also be communicated to third parties in case of mergers, acquisitions and transfer of any of our assets, products, websites or operations. These third parties will be provided only with the information necessary to perform their respective functions; they agree to use the information received only for the processing purposes above specified, to keep it confidential and secure and to comply with applicable law and the instructions received by EPMS. The third parties receiving your personal data are established within the European Economic Area and will process them under applicable privacy laws for the purposes above specified.
Except for the foregoing, the user’s personal data will not be shared with third parties, natural persons or legal entities that are unrelated to, or that do not perform a business, professional or technical function for EPMS. The user’s personal data may further be communicated to whoever is the legitimate addressee of communications as provided by applicable laws and regulations, thus for example in case of judicial processes, request by competent courts and authorities or other legal obligation, to protect and defend the rights and property of EPMS and the Website. The user’s personal data will not be communicated to third parties for their own marketing purposes and will under no circumstance be spread.
