Boots

PRIVACY INFORMATION NOTE - Art. 13 Leg. Decree 196/2003

If you wish to complete the registration process and/or use the website services offered to those accessing the reserved areas (e.g make a purchase and instrumental activities to the same, including operations relating to administrative and tax obligations, sending of newsletters (where requested), please complete the fields below and accept this Information Note.  Conferral of data pursuant to the registration form and/or the purchase of products is not compulsory. However, we must inform you that the aforementioned conferral is required to process your order and complete the contract formalities. Your refusal may make it impossible for us to complete the product purchase procedure and/or provide the requested services. All collected personal data shall be processed mainly using electronic systems and, only very occasionally, paper based systems.

The activities undertaken by TD refer solely to managing the sales and commercial transactions related to the purchase of products via the Site, and more precisely: order management, sale of products, registration of Site users. To conduct such aforementioned activities functional to the sale of products via the Site, TD processes, in its capacity as joint Data Controller and in accordance with the applicable privacy code, user data such as name and surname, residence and information on credit cards used by users (such as first and last name of the card holder, card number, expiration date, security code. Therefore, the Data Controller for the processing of personal data in relation to all the other activities, including those which are not functional to the sale of products via the Site (such as, by way of example and not limited to, the delivery of products, claims management, RMA management, mailing of advertising materials, commercial communication, promotions, marketing) is exclusively TBN.

Please also be informed that Legislative Decree 196/2003 has a particular regime for the processing of sensitive data, i.e. all  personal data that reveals the racial and ethnical origin, religious, philosophical or other beliefs, political opinions, memberships with political parties, trade unions, religious, philosophical or trade union associations or organizations, health conditions and sexual orientation; This data may only be processed after receiving the written consent of the Data Subject. In this regard, some purchases made in the Wellness & Health section may reveal information on the health conditions of the purchaser. In light of the above, if you make any purchases of such products, you may be requested to grant specific consent to allow us to process the data and complete the contract formalities. 
H&FS Health and Fashion Shoes may also use your personal data to send emails advertising its products and services, similar to those purchases, unless you refuse this option by exercising your right of opposition as per the procedures below (art. 130 paragraph 4 Legislative Decree 196/2003.

Moreover, where express consent is granted, your personal data may also be processed for marketing purposes such as the mailing of promotional material on products and services different to those already purchased, news, promotions, and also third-party communications from our commercial partners.
Transfer of your personal data outside the European Union is not contemplated. Should the same become necessary, the Data Controller shall be accountable for requesting your specific consent.

This does not include the data relating to your Credit card, which is excluded for any purposes other than checking the existence of such payment means, the payment received and the management of payments further to claim management and contentious procedures. To this purpose, the data will also be processed by the Bank that provides the online payment service, further to the entity that issued the credit card you use to confirm your order.

At present, one of the Chief Data Processors designated to the processing of your personal data is Arcese Logistic S.r.l., who will process the data required to ship the merchandise and manage any returns you may make.Please contact the Customer Care service for a complete list of those designated to processing your Personal Data or send an e-mail to the following address privacy@triboo.it for H&FS Health and Fashion Shoes and privacy@triboo.it for Triboo Digitale.

The categories of those designated to processing the data for the aforementioned purposes, include staff assigned to website management, administration, customer care services, marketing activities (where consent is granted), IT systems and third parties who process data on our behalf (such as, for instance, IT service maintenance, couriers and carriers, legal advisers, enterprises assigned to the realisation and/or management of promotional campaigns, etc.); they can also be disclosed to the public entities authorised to receive the same.

As foreseen by art. 7 of the Code, which for completeness of data is attached to this Notice, in your capacity as Data Subject, you are entitled to obtain the updating, rectification or integration, erasure and anonymisation of the data. Furthermore, you can also oppose, totally or partially, the processing of your personal data for marketing purposes or for sending commercial communications, by contacting TBN S.r.l. at the following post address: TBN SRL, Galleria del Corso no. 2, 20122 Milan, Italy and/or by email at the the following address  ecommerce@corsoromaoutlet.com; as far as TD is concerned, by sending an email to privacy@triboo.it. The same procedures can be used to request the complete updated list of the Chief Data Processors.

Legislative Decree no. 196 dated June 30th 2003 - Personal Data Protection Code

Art. 7 - Rights to access personal data and other rights

1. The Data Subject  has the right to request confirmation as to whether or not personal data concerning you exists, regardless of their being already recorded, and communication of such data in an intelligible form.

2. The Data Subject has the right to obtain indications on:

a) the source of the personal data;

b) the purposes and methods of the processing;

c) the logic applied to the processing, if the latter is carried out with the aid of electronic means;

d)  the identification data concerning the Data Controller, data processors and the representative designated as per Section 5(2);

e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of such data in their capacity as Representatives for the Country, Chief Processors or Designated Officers.

3. The Data Subject has the right to obtain:

a) updating, rectification or, where interested therein, integration of the data;

b) erasure, anonymisation or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;

c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.

4. The Data Subject is entitled to oppose, totally or partially:

a) on legitimate grounds, the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;

b) the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.