Privacy policy

GLOBAL PRIVACY AND COOKIE POLICY

This Privacy and Cookie Policy describes the purposes and methods employed for the collection and processing by LARUS MIANI S.r.l. of Via Ollearo n°. 8, 20155 – Milan, as Data Controller (the “Company” or “Data Controller”) of the personal data of the user (“User”) interacting with the web site https://www.larusmiani.com (the “Site”), its integrated omnichannel platforms, and the services offered.

The information contained in this Privacy and Cookie Policy is provided under art. 13 of EU Regulation no. 679 of 27 April 2016 (the “GDPR”), the Provisions emanated by the Italian Data Protection Authority, and other applicable global privacy frameworks (including the CCPA/CPRA for United States residents). Information on data processing applies only to the Site and to processing by the Company, and does not extend to processing by third parties via any other web sites the User may consult via links.

1.1. Data Controller: The Data Controller is the Company, as stated above.

1.2. Purposes and legal basis of data processing: The Company may process the User’s data via the Site for the following purposes:

a. To contact the Company: To accept, correctly manage, and respond to the User’s requests for information regarding orders, activities, and initiatives via the “Contact Us” section. Legal basis: providing the service expressly requested by the User.

b. Registration: To allow the User to register, view orders, and edit contact and accounting information. Legal basis: execution of the service expressly requested by the User.

c. Sale of products and services: To conclude, execute, and manage a contract of sale stipulated between the Company and the User. This includes data processed through our global e-commerce systems (e.g., Shopify) to manage cross-border transactions. Legal basis: execution of a contract.

d. Competitions for prizes: To permit participation in competitions. Legal basis: providing a service expressly requested by the User.

e. Legitimate interests: To exercise the rights to defense in court, management of claims, credit collection, or prevention of fraud. Legal basis: legitimate interests of the Company.

f. Fulfilment of legal obligations: To fulfill obligations under national, EU, or applicable international laws.

g. Sales and marketing purposes: To send newsletters, event invitations, and promotional information pertaining to LARUSMIANI products, highlighting our manifattura artigianale as well as our distinct Made in Italy heritage. Legal basis: User’s freely given consent. (Under point 47 of the GDPR, existing customers may receive emails about similar products based on legitimate interest, with an opt-out available at any time).

h. Profiling: To send advertising messages personalized on the basis of browsing data, preferences, and interests. Legal basis: User’s freely given consent.

i. Statistical analysis: Conducting aggregated, anonymous analyses to improve performance.

1.3. Categories of data processed

1.3.1 Data collected through browsing and cookies: When a User visits the Site, data such as pages viewed, access times, IP addresses, and operating systems are collected. The Company uses these data, utilizing advanced tracking tools such as Google Analytics 4 (GA4), strictly for anonymous statistical information and ensuring site security. For full details on cookies, please view our dedicated Cookie Policy: https://www.larusmiani.com/cookie-policy

1.3.2 Data voluntarily provided by the User: The Company collects information necessary to pursue the purposes described in point 1.2, including any additional data voluntarily supplied to resolve technical faults or exercise privacy rights.

1.4. Disclosure and International Transfer of Data: Data supplied by the User will not be publicly disclosed but may be provided to the following categories of parties:

  • Companies belonging to the same group as the Data Controller.
  • Third-party service providers, including IT services, global e-commerce infrastructure providers (e.g., Shopify), and CRM/marketing automation platforms (e.g., Salesforce, Mailchimp) used to ensure omnichannel functionality.
  • Legal, fiscal, and administrative consultants.
  • Authorities entitled to access data by law.

If these parties are based in non-EU nations (such as the United States or countries in the APAC region like Indonesia), the Company ensures the legitimate transfer of personal data by adopting appropriate safeguards required by the GDPR. Specifically, we utilize the Standard Contractual Clauses (SCCs) approved by the European Commission and rely on the EU-U.S. Data Privacy Framework for certified entities in the United States. For operations in other jurisdictions, data processing adheres strictly to local data protection and cross-border transfer laws.

1.5. Data storage: The User’s data will be stored only for the time necessary to achieve the specific purposes, after which they will be stored according to statutory limits for administrative/legal protection. Data for marketing purposes will be processed until the User objects. Data used for profiling will be processed for no more than 24 months following collection.

1.6. User Rights (GDPR): Users may exercise their rights to: access data, request correction or erasure, request limitation of processing, data portability, and revoke consent at any time. Users may also object to processing. Requests can be sent to: privacy@larusmiani.com. Users may also contact the competent supervisory authority (e.g., www.garanteprivacy.it).

1.7. Specific Rights for United States Residents (CCPA/CPRA): If you are a resident of California or another US state with applicable privacy laws, you have specific rights regarding your personal information:

  • Right to Know and Access: You may request details about the categories and specific pieces of personal information we have collected, the sources, and the business purposes.
  • Right to Delete: You may request the deletion of your personal information.
  • Right to Opt-Out of Sale or Sharing: We do not sell personal data for monetary value. However, sharing data with third-party advertising partners for cross-context behavioral advertising may be considered a "sale" or "sharing" under certain US laws. You have the right to opt out via the “Do Not Sell or Share My Personal Information” link on our Site.
  • Right to Non-Discrimination: You will not be discriminated against for exercising your privacy rights.

1.8. Specific Rights for APAC Residents (e.g., Indonesia): For Users accessing the Site from the Asia-Pacific region, including Indonesia, the Company processes data in compliance with local regulations, ensuring necessary consent mechanisms, data breach notification protocols, and cooperating with local data protection authorities where data localization or specific overseas transfer mechanisms are legally required.