Privacy policy
INCANTO PRIVACY POLICY
We acknowledge the importance of protecting your personal data and handle your information in a lawful, transparent, and fair manner, limiting it exclusively to the purposes for which it was collected. We are committed to ensuring that your personal data is accurate, secure, confidential, and properly protected throughout the process of handling and storage.
In compliance with legal requirements, we adhere to Regulation (EU) 2016/679 (General Data Protection Regulation) (“GDPR”) and other applicable data protection regulations.
1) WHAT IS THIS DOCUMENT?
1.1. This document, the Privacy Policy (“Privacy Policy”), aims to inform you about our practices concerning the collection, use, and disclosure of data when you visit our website www.incantocover.com, place orders for goods, or enter into a contract with us. This Privacy Policy applies to anyone who visits the Website and to all actions performed on it.
1.2. We invite you to read this Privacy Policy carefully to understand how we handle your personal data, where we obtain it, and what your rights are as a data subject.
1.3. The term "personal data," as used in this Privacy Policy, refers to any information that could be used to identify you directly or indirectly.
2) WHO IS THE DATA CONTROLLER?
2.1. The Website is operated and managed by Incanto.
2.2. In accordance with applicable legal regulations, we are responsible for handling your personal data, i.e., the legal entity responsible for the collection, processing, and/or use of personal information (“INCANTO”).
2.3. If you have any questions about our Privacy Policy and our practices regarding the handling of your personal data, please feel free to contact us at info@incantocover.com.
3) HOW DO WE COLLECT YOUR PERSONAL DATA?
3.1. We process personal data that we have obtained using the following methods:
3.1.1. Directly: when you create an account on our Website or contact us via email or through social media, such as Facebook Messenger;
3.1.2. Indirectly: when you browse our Website or make online purchases. We may obtain personal data from third parties, with your consent, or from publicly accessible sources.
4) WHAT PERSONAL DATA DO WE COLLECT AND FOR WHAT PURPOSES?
4.1. We process your personal data for the following purposes:
4.1.1. Contractual fulfilment. When you make a purchase on our Website, we enter into a contract with you. To fulfil this contract, we process the following personal data:
Categories of personal data: Name, surname, address including billing and delivery addresses, telephone numbers, and email addresses.
Legal basis for processing personal data: Processing is necessary for the performance of a contract (Article 6(1)(b) of the GDPR).
Retention period for personal data: Your personal data is processed for 10 (ten) years after the expiry of the agreement.
Source of personal data: You.
We share or transfer personal data to: Third-party service providers whose services are normally required for data storage, website hosting, and other technical services.
4.1.2. For creating and managing user accounts on the Website. When you create an account on our Website, we use the following personal information to ensure its proper functioning:
Categories of personal data: Name, surname, password, email address, address including billing and delivery addresses, order history.
Legal basis for processing personal data: Processing is necessary for the performance of a contract (Article 6(1)(b) of the GDPR).
Retention period for personal data: Your personal data is processed for 2 (two) years from your last login to your account.
Source of personal data: You.
We share or transfer personal data to: Third-party service providers whose services are normally required for data storage, website hosting, and other technical services.
4.1.3. For order fulfilment. We process the following personal data to manage and deliver your orders:
Categories of personal data: Name, surname, phone number, email address, delivery address.
Legal basis for processing personal data: Processing is necessary for the performance of a contract (Article 6(1)(b) of the GDPR).
Retention period for personal data: Your personal data is processed for 10 (ten) years after the expiry of the agreement.
Source of personal data: You.
We share or transfer personal data to: Couriers and delivery service providers.
4.1.4. For issuing refunds. If you wish to return your order, we will process the following personal data:
Categories of personal data: Name, surname, delivery address.
Legal basis for processing personal data: Processing is necessary for the performance of a contract (Article 6(1)(b) of the GDPR) and for compliance with a legal obligation (Article 6(1)(c) of the GDPR).
Retention period for personal data: Your personal data is processed for 10 (ten) years from the moment of the refund.
Source of personal data: You.
We share or transfer personal data to: Payment service providers.
4.1.5. For sending direct marketing messages. To keep you updated with the INCANTO experience, we use personal data for marketing purposes, sending you text and/or email messages about our latest offers and events. We may also display advertisements on external platforms such as Facebook and Instagram, as well as through digital advertisers like Google.
Categories of personal data: Name, email address, phone number, date of birth, interests, preferences, feedback, competition participation, survey responses, and information about the time and date users open our emails.
Legal basis for processing personal data: Processing of such data is based on your consent (Article 6(1)(a) of the GDPR).
INCANTO’s legitimate interest in communicating with customers and offering them similar products is in accordance with Article 6(1)(f) of the GDPR.
Retention period for personal data: Your personal data will be processed until you withdraw consent or object to processing based on a legitimate interest.
Source of personal data: You.
We share or transfer personal data to: Third-party service providers, including those we typically use for data storage, website hosting, and other technical services, as well as marketing and communication service providers.
How can I stop receiving your communications?
You have the right to opt out of receiving promotional communications at any time:
- by informing our customer service at info@incantocover.com that you wish to change your marketing preferences, or by clicking "unsubscribe" in any email you receive from us.
4.1.6. For ensuring optimal Website functionality, administering it, diagnosing malfunctions, and conducting statistical analysis to better understand your needs and use resources more efficiently:
Categories of personal data: Browser type; number of visits; pages viewed on the Website; time spent on the Website; online pages from which the user arrived; device information; language; country; internet service provider; cart details, etc.
Legal basis for processing personal data: We have a legitimate interest in ensuring that our Website functions smoothly and can be used efficiently (Article 6(1)(f) of the GDPR).
Retention period for personal data: Your personal data will be processed for up to 2 (two) years from the time of collection.
Source of personal data: You.
We share or transfer personal data to: Third-party service providers whose services are normally required for data storage, website hosting, and other technical services.
4.1.7. For ensuring secure access to the Website. To this end, we use a series of technical, organisational, and administrative measures.
Categories of personal data: IP address; Name; email; login name.
Legal basis for processing personal data: We have a legitimate interest in ensuring the security of our systems and your personal data (Article 6(1)(f) of the GDPR).
Retention period for personal data: Your personal data will be processed for up to 2 (two) years from the time of collection.
Source of personal data: You.
We share or transfer personal data to: Third-party service providers whose services are normally required for data storage, website hosting, and other technical services.
5) WHO HAS ACCESS TO YOUR PERSONAL DATA?
5.1. Your personal data may be disclosed to the following categories of recipients:
5.1.1. Service providers: We use third-party service providers to perform certain services, such as order fulfilment, payment processing, marketing, and analytics. These providers have access only to the personal data necessary to perform these services and are required to protect your data and use it solely for the purposes specified.
5.1.2. Competent authorities: We may disclose your personal data to competent authorities if required by law or to protect our legal rights.
5.1.3. Business partners: In some cases, we may share your personal data with our business partners for marketing purposes or to offer you joint promotions and services. However, we will only share your personal data with your prior consent.
6) YOUR RIGHTS
6.1. In accordance with the GDPR, you have the right to access, rectify, delete, or restrict the processing of your personal data, as well as the right to data portability and the right to object. You can exercise these rights by contacting us at info@incantocover.com.
6.2. You also have the right to lodge a complaint with the competent supervisory authority if you believe that the processing of your personal data violates the GDPR.
7) CHANGES TO THE PRIVACY POLICY
7.1. We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on our Website. We recommend that you periodically review this page for any updates.
Last updated: 06/07/2024.
Thank you for reading our Privacy Policy. For further information or clarification, please do not hesitate to contact us at info@incantocover.com.