Privacy Policy

Privacy Notice pursuant to Art. 13 of EU Regulation No. 2016/679 (hereinafter "GDPR")

WowHaus is committed to complying with data protection laws, and therefore invites you to read how it will collect and manage information about you. The data controller is available to provide further clarification regarding this privacy policy via email at ciao@wowhaus.it, by phone at 0422 498030, or, upon request, by letter to its registered office at Via della Costituzione, 133 - 30038 Spinea VE, Italy.

In accordance with the GDPR, when you access the website the controller collects only the data strictly necessary to ensure a smooth browsing experience (for example, through the use of cookies, for which you can consult the Cookie Policy). Furthermore, should you decide to contact the Controller, your contact details and any other personal data you provide will be used in accordance with the service you requested, in order to assist you promptly. If the website contains links to other websites (for example, external platforms, social networks or other websites) and, by clicking on them, you decide to continue browsing there, you are invited to consult the privacy policy and cookie policy of those websites.

Below you will find more details about the data collected through this website!

Types of personal data collected through the website

Browsing data – log files – collected automatically. Each time you access and visit the website, the system may automatically collect the following technical information: the IP address used to connect your mobile device or computer to the internet, login information, browser type and version, time zone settings, browser plug-in types and versions, operating system and platform; information about your visit, including the full URL, page response times, download errors, length of visits to certain pages, page interaction information and methods used to navigate away from the page. This information is not collected in order to be associated with identified data subjects, but by its very nature it could, through processing and association with data held by third parties, allow users to be identified. This category includes the IP addresses or domain names of the computers used by users connecting to the website, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server's response (successful, error, etc.) and other parameters relating to the user's operating system and IT environment. This data is used solely to obtain anonymous statistical information on the use of the website and to check that it is functioning correctly, without prejudice to the fact that it may be made available to the Judicial Authorities.

Cookies. The website uses cookies; please refer to the Cookie Policy.

Data voluntarily provided by you. If the website contains a form to contact the controller directly or to subscribe to the newsletter, or if you contact the controller using the telephone numbers, email addresses or other methods described on the website, you will provide the personal and contact data about yourself that you consider necessary for the controller to handle your request. The personal data provided on such occasions may include first and last name, date of birth, address, email address and telephone number. When contacting us, please avoid providing more data than necessary! In particular, you are asked not to include special categories of data (so-called sensitive data) relating to your health, ethnic origin, membership of political or religious groups and organisations, and so on!

If you are interested in the services offered by the controller and would like to stay informed about further services and/or products offered by the controller, you may contact it and ask to periodically receive news, promotional information and updates on service prices. If you want this service, however, you must give your consent; otherwise the controller will not be able to contact you for marketing purposes.

Remember that you can change your mind at any time!

No profiling is carried out and your data is not sold to third parties!

Purposes and legal basis of processing

Your data will be stored on secure and adequately protected servers located in Europe, in compliance with the security measures adopted by the controller, and processed for the following purposes:

Purpose of processing Legal basis

a) Compliance with obligations under national or EU laws, regulations and/or rules, or imposed by supervisory and control bodies, judicial authorities or other authorised authorities. Compliance with a legal obligation

b) Handling of requests you submit by filling in any forms available on the website. Performance of a contract / fulfilment of your request

c) Sending the newsletter you requested, where the controller offers the option to subscribe to this free service. Fulfilment of your request based on consent

d) Sending marketing communications where the user has requested them. Your consent is optional, freely given and revocable at any time!

The Controller reserves the right to transfer personal data to third countries and/or international organisations and to use external storage services, including in countries outside the European Union; in such cases, service providers will be selected in accordance with Art. 46 of EU Regulation No. 679/2016.

Communication and disclosure of personal data

For the purposes indicated above, your personal data may be disclosed to the following categories of recipients:

public authorities, supervisory and control bodies, as well as competent judicial authorities, government agencies or other third parties, including for the purpose of exercising, establishing or defending our rights in legal proceedings;

companies and professionals who carry out technical and organisational tasks and services on behalf of the Controller (appointed as data processors) and who cooperate with the Controller;

employees duly instructed and authorised to process data in accordance with their duties;

parties providing services for the management, updating and maintenance of the website.

Data retention period

In accordance with the principle of data minimisation, your requests will be handled as quickly as possible, using only the data strictly necessary and for the period required to achieve the purposes for which the data was collected. Thereafter, your data will be retained solely for the period necessary to comply with applicable laws and to protect the controller (including with regard to limitation periods for rights).

The following table sets out in more detail the period for which the Controller will retain the different types of personal data:

Purpose of processing Period of use and retention of personal data

Compliance with obligations under national or EU laws, regulations and/or rules, or imposed by supervisory and control bodies, judicial authorities or other authorised authorities. Personal data will be processed for the period strictly necessary to fulfil the legal obligation and retained for any subsequent period established by applicable law.

Handling of requests you submit by filling in any forms available on the website. Personal data will be processed for the time strictly necessary to fulfil your request made through the website and retained solely for protection purposes, to demonstrate the correctness of the controller's conduct within the applicable limitation periods.

Request to periodically receive newsletters or to be periodically contacted with commercial (marketing) communications. Where it is possible to subscribe to the newsletter or request marketing communications, contact data will be retained and used to fulfil that request until you ask for the service to be suspended/cancelled. The controller will update its records within 60 days.

Security information

The Controller applies appropriate technical and organisational security measures to protect the personal data processed and to prevent unauthorised access, collection, use, disclosure, copying, modification or transfer.

Rights of the data subject

With regard to the processing described in this Notice, as a data subject you may, under the conditions set out in the GDPR, exercise in particular the following rights:

right of access: the right to obtain confirmation as to whether or not personal data concerning you is being processed and, if so, to obtain access to that personal data;

right to rectification of inaccurate personal data concerning you and/or to have incomplete personal data completed;

right to erasure (right to be forgotten);

right to restriction of processing;

right to object to the processing of personal data concerning you, unless the Controller has legitimate grounds to continue the processing;

right to data portability, i.e. to receive the personal data concerning you that you have provided to the Controller in a structured, commonly used and machine-readable format, and the right to transmit it to another controller without hindrance, where the processing is based on consent and carried out by automated means;

right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali);

right to take legal action.

The applicable legislation and useful documentation on the processing of personal data can be consulted on the website www.garanteprivacy.it.