Timeless Elegance AG is aware that the personal data of its customers are important, and it therefore intends to inform and provide them with as much control as possible on how their personal data collected and processed during the purchases made on this website are handled (the “Website”).
1. Joint Data Controllers and Data Processors
With reference to the data connected to the online sales carried out through the Website and to any activity related to such sales
– Timeless Elegance AG, Gubelstrasse.24, 6300Zug, Switzerland (hereinafter referred to as, “Albert Nobilis”.
together, hereinafter referred to as, the “Joint Data Controllers”, have designated the Privacy Manager as data processor, the “Data Processor”.
The Joint Data Controller have also engaged, for reasons of an exclusively organizational and functional nature, a number of companies that will act as external data processors for purposes that are strictly related and connected to the sales of the products as well as to any activity that is incidental or conducive to such sales (like, without limitation, delivery). The external data processors were selected by taking into account their proven expertise, competence, reliability, and ability to give adequate guarantees on the fact that they will act in strict compliance with the legislation currently in force and applicable to personal data, including data security. The Data Processors shall process the data of the Website’s users in accordance with the instructions received from the Joint Data Controllers. On a regular basis, the Joint Data Controllers will verify that the Data Processors have punctually performed the assigned tasks and are still in a position to guarantee their full compliance with any data protection law. A complete list of the data processors can be obtained by contacting the Joint Data Controllers at the following email address: info@albert-nobilis.com
2. Data collected by the Joint Data Controllers and purposes of the processing.
Joint Data Controllers will collect personal data directly from the users during their registration or when they place their orders for the products, complete their e-transactions, exchange correspondence in relation to activities that are incidental and conducive to the sales, as well as when receive pre-sale and post-sale support. Personal data may also be processed to comply with legal requirements. Further specific purposes will be illustrated in greater details in specific privacy policies posted from time to time on the Website.
3. How data will be processed
The data collected through the Website during any activity that is incidental and conducive to the sales of the product and to any other related activity, will be mainly processed by electronic means, adopting all necessary security measures as to reduce to a minimum any risk of destruction or loss of the data, including accidental loss, unauthorized access, unlawful processing, or processing that are not compliant with the purposes for which the data were collected as specified in this Privacy Policy.
However, since the data will be transmitted via electronic networks, the above measures cannot limit or completely exclude the risk of unauthorized access or dissemination of the data. To this end, we recommend you check regularly that your PC is endowed with software capable of providing adequate protection (like updated antivirus systems) for the online transmission, inbound and outbound, of the data, and that your Internet Service Provider has adopted adequate security measures for a secure transmission online of your data (like, for instance, firewall and anti-spamming).
4. Obligatory or voluntary nature of providing the requested data.
The provision of the data, especially personal details, email address, postal address, telephone number, and bank details in case of credit card payments, is compulsory for executing, through the Website, the product purchase agreement.
Some of said data, however, may be necessary for providing to the user other services made available on the Website in connection with the sales, or for discharging the obligations deriving from the law or regulatory provisions.
Any failure to provide some of the data required for such purposes might result in us being unable to perform the agreement for the products purchased through the Website, or to provide the user with other services related to their purchase – such as, for instance, support services (Customer Care), use of the Wish List – or, also, to correctly perform the obligations provided for by the law and regulatory provisions. Any failure by the data subject to provide us with the data may therefore constitute, as the case may be, a lawful and justified reason for not performing the agreement of the products purchased on the Website and not providing the related services.
The provisions of data other than the data the provision of which is mandatory, for the purposes of complying with legal or contractual obligations or for providing, upon request, specific services, is instead voluntary and it does neither affect the purchase of the products nor any of the connected/related services.
The mandatory or voluntary nature of the data to be provided will be, if necessary, and, indicated by means of a special character (*) placed next to the relevant information or to the data the provision of which is necessary for the purpose of providing the services and for purchasing the products on the Website. Any failure to furnish the data the provision of which is voluntary, does not entail obligations or disadvantages of whatever type.
5. Scope of dissemination of the data
Personal data may be made available to any third party companies that perform specific services on behalf of the Joint Controllers, in the capacity of Data Supervisors (such as, for example, logistics services, fraud prevention services and IT services), to companies within the same group and disclosed to other recipients of the data gathered by the Joint Controllers, the names of which will be specified from time to time, which process the data autonomously for the sole purpose of the implementation of the Site-based product purchasing agreement (such as, for example, lending establishments, for the implementation of remote electronic payment services via credit/debit card), and only when such purpose is not incompatible with the purposes for which the data was collected and subsequently processed and, therefore, in compliance with the law.
The data will only be disclosed, assigned, or otherwise transferred to other third parties once prior notification has been given to the users and with their consent, when required by law. The data will not be circulated in any manner and will only be transferred abroad, including to non-EU countries (including countries such as Israel, the United States and Nepal, for the performance of specific fraud prevention activities) when guarantees are provided that the level of protection and safeguarding is adequate according to legal standards.
6. Data subjects ‘rights.
The data subject shall be entitled to obtain at any time confirmation from the Joint Data Controllers as to whether or not personal data concerning him exist, regardless of their being already recorded, and communication of such data in intelligible form. The data subject shall also be entitled to be informed of the source of the personal data; of the purposes and methods of the processing; of the logic applied to the processing, if the latter is carried out with the help of electronic means; of the identification data concerning the Joint Data Controllers and the data processors; of the entities or categories of entities to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as data processors or persons in charge of the processing. Some of this information are provided in this Privacy Policy for Online Sales; if you require additional information, please contact the Joint Data Controllers at the following address:
info@albert-nobilis.com
The data subject shall also have the right to obtain at any time from the Joint Data Controllers:
i. the updating, rectification or, where interested therein, integration of the data.
ii. erasure, anonymization or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed.
iii. certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.
The data subject shall have in any case the right to object, in whole or in part, on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection.
The above rights may be exercised at any time provided that such exercise is compliant with the law, by sending the relevant request to the Joint Data Controllers at the following address:
info@albert-nobilis.com7. Changes to the Website Privacy Policy and relevant updates
The Joint Data Controllers may modify or simply update, in whole or in part, this Privacy Policy for Online Sales also as a result of changes, if any, made to the existing laws. We therefore recommend you visit regularly this section of the Website to see when this Privacy Policy for Online Sales was lastly revised.