Privacy Notice on the Processing of Personal Data pursuant to Article 13 of Regulation (EU) 2016/679
Last updated: 29.10.26
Data Subjects: Newsletter Subscribers
Ca' Da Mosto S.p.A. (hereinafter, "Seventy"), in its capacity as Data Controller of your personal data pursuant to Regulation (EU) 2016/679 (hereinafter, the "GDPR"), hereby informs you that the aforementioned legislation provides safeguards for data subjects regarding the processing of personal data and that such processing shall be carried out in accordance with the principles of fairness, lawfulness, transparency, and protection of your privacy and rights.
Your personal data will be processed in compliance with the provisions of the above-mentioned legislation and the confidentiality obligations set out therein.
Categories of Data Collected and Purposes of the Processing
Subject to your prior consent, your personal data (e.g. first name, surname, email address, date of birth, gender and country) will be used to send you informational communications, including newsletters containing updates on Seventy events, collections and promotions; promotional offers on the occasion of your birthday; invitations to exclusive events at the retail store where you make your purchases; and for the conduct of market research and customer satisfaction surveys. The provision of data for the purposes indicated above is voluntary. However, any refusal to provide such data will make it impossible for you to subscribe to newsletters and receive information regarding Seventy’s latest products, services and initiatives.
The legal basis for such processing is your consent, pursuant to Article 6(1)(a) GDPR. Such communications are sent using automated means of contact (e.g. automated email campaigns). You may withdraw your consent at any time by clicking on the relevant links included in our communications or by contacting us by email at: privacy@cadamosto.it.
Your data will also be processed for email open-tracking purposes, namely through the inclusion of a tracking pixel within email communications. A tracking pixel is an invisible image that enables the detection of whether a message has been opened, allowing us to measure recipients' interest in our communications and, where you have provided consent for marketing purposes, to personalise the content and frequency of such communications. You may disable this tracking at any time through the preference management page accessible via the link included in each communication, whilst continuing to receive emails that do not contain the tracking pixel.
Methods of Processing
Your personal data will be processed, in compliance with the GDPR, through electronic and telematic means for the purposes described above and, in any event, using measures appropriate to ensure an adequate level of security and confidentiality, in accordance with Article 32 GDPR.
For the distribution of communications, the Data Controller uses a specialised platform that generates reporting information. Subject to the consent provided, such reports may include, for example:
- the identity of recipients who have opened an email;
- clicks on individual links (link tracking);
- the device and email client used;
- delivered, undelivered or forwarded emails;
- the date and time of dispatch;
- lists of unsubscribed recipients.
Where you have withdrawn consent solely for tracking activities, the Data Controller will process only aggregated and anonymised data relating to you, without any individual identifiers.
Recipients of Your Personal Data and Persons Who May Become Aware of It
For the purposes described above, your data will be processed exclusively by personnel expressly authorised by the Data Controller and, in particular, by members of the Marketing Department.
Your personal data may also be processed by third parties falling, by way of example, within the following categories:
- providers of external communication and marketing platforms;
- providers of technical support services for the management of information systems and other service providers;
- external platforms used for the sending of email and SMS communications.
The entities belonging to the categories listed above act as Data Processors formally appointed by the Data Controller in accordance with Article 28 GDPR.
The complete and up-to-date list of entities to whom your personal data may be disclosed can be obtained by contacting the Data Controller using the contact details provided in this Privacy Notice.
Disclosure to the public: your personal data will not be disclosed to the public in any manner whatsoever.
Transfer of Personal Data
Your personal data are stored within Member States of the European Union.
Data Retention Period
In accordance with the principles of lawfulness, purpose limitation and data minimisation set out in Article 5 GDPR, your personal data will be retained until you decide to withdraw your consent or exercise your right to object to the processing.
Data Controller
The Data Controller, pursuant to applicable law, is Ca' Da Mosto S.p.A., registered office at Via Venezia 146, 30037 Scorzè (VE), Italy, VAT No. 02037210271, email: privacy@filoblu.com, acting through its legal representative pro tempore.
You have the right to obtain from the Data Controller the erasure of your personal data (right to be forgotten), restriction of processing, rectification, updating, portability of your data, and to object to the processing of your personal data. More generally, you may exercise all rights provided for under Articles 15, 16, 17, 18, 19, 20, 21 and 22 GDPR by contacting the Data Controller using the contact details indicated in this Privacy Notice.
You also have the right to lodge a complaint with the competent supervisory authority if you consider that the processing of your personal data infringes applicable data protection legislation.
Data Subject Rights under Regulation (EU) 2016/679 (Articles 15-22)
1. Right of Access
The data subject has the right to obtain confirmation as to whether or not personal data concerning him or her are being processed and, where that is the case, access to such data in an intelligible form, as well as the right to lodge a complaint with the supervisory authority.
2. Right to Information
The data subject has the right to be informed of:
a. the origin of the personal data;
b. the purposes and methods of processing;
c. the logic applied where processing is carried out by electronic means;
d. the identity and contact details of the Data Controller, the Data Processors and any designated representative;
e. the recipients or categories of recipients to whom the personal data may be disclosed or who may become aware of them in their capacity as authorised persons, data processors or designated representatives.
3. Right to Obtain
The data subject has the right to obtain:
a. the updating, rectification or, where relevant, completion of personal data;
b. the erasure, anonymisation or restriction of personal data processed unlawfully, including data whose retention is unnecessary in relation to the purposes for which they were collected or subsequently processed;
c. confirmation that the actions referred to in points (a) and (b) have been notified to those to whom the data have been disclosed, unless this proves impossible or involves a disproportionate effort;
d. data portability.
4. Right to Object
The data subject has the right to object, in whole or in part:
a. on legitimate grounds, to the processing of personal data concerning him or her, even where relevant to the purpose of collection;
b. to the processing of personal data for direct marketing purposes, including the sending of advertising material, direct sales activities, market research or commercial communications
