LYRA di Gutanu Alina Simona (hereafter, “LYRA”) provides users of the LYRA website (hereafter, the “Site”, which can be visited at https://alenaettea.com/) with the following information, in compliance with Article 13 of Regulation (EU) 2016/679 (or General Data Protection Regulation, hereafter, “G.D.P.R.”) and subsequent national adaptation legislation (hereafter, referred to, together with the G.D.P.R., as the “Applicable Privacy Legislation”). During consultation of the Site, information relating to users is collected, which constitutes personal data within the meaning of the Applicable Privacy Law.

The information is provided exclusively for the above-mentioned Site, and not for other sites that can be reached through links on the same.

Data controller

The data controller of personal data is LYRA di Gutanu Alina Simona, with registered office in Via Pastrengo, 19 – 20159 Milan e-mail:
customerservice@alenaettea.com 

Types of data processed

The data that are processed by LYRA when the user uses the Site are specified below.

The user assumes responsibility for any personal data of third parties entered or published on the Site, and warrants that he/she has the right to communicate or disseminate such data – thus releasing LYRA from any liability towards such third parties.

Personal data acquired automatically when visiting the Site

  • Browsing data. LYRA automatically collects data about the device (PC, tablet, mobile phone or other mobile device) and connection used by the user, including, for example, IP address, date and time of access, hardware and software information, device event information, unique identifiers, crash data
  • Site usage data. LYRA collects information about how you have used the Site, including, for example, the pages of the Site or other content you have viewed, the searches you have performed, and the links to other sites and applications that you have clicked on.

Personal data provided directly by the user

a) Data required for the creation of an account

  • Data provided for the creation of an account. If the user, through “Login/Register” in the footer of the Site or during checkout, decides to register on the Site, LYRA collects the e-mail address.

This information is necessary to allow the user to create an account with LYRA. If the user does not wish to provide this information, he/she will not be able to create an account.

b) Data required to purchase items online

  • Data provided by the user to purchase items online. If the user intends to purchase and ship the items to his or her own or other domicile, through the “Cart” section, LYRA acquires the billing details (first name, last name, company name [optional], complete address, phone number, e-mail, fiscal code, VAT number [optional], e-mail PEC [optional], recipient code [optional]) and the shipping address if different from the billing address provided by the user, as well as any personal data entered by the user in the “Notes” section [optional].

This data is necessary to enable the user to order items on the Site. If the user does not wish to provide this data, he/she will not be able to benefit from this service.

The user is informed that with regard to PayPal and credit and debit cards, payments will take place on the relevant platforms. In these cases, LYRA is not the data controller of the transaction data, as the processing is carried out by the payment platforms.

c) Optional data

  • Data provided for the activation of the newslefler service. If the user decides to activate the newsletter service offered by LYRA – through the “Subscribe to our newsletter” item in the footer of the Site – LYRA collects the e-mail address entered.
  • Data provided for the activation of a product availability service. If the user decides to activate the availability service of a product, if a specific product is sold out on the Site offered by LYRA – through the item “Keep me updated about availability” present in each product page of the Site – LYRA collects the e-mail address entered.
  • Data provided through e-mail enquiries. If the user, to request information, explicitly and voluntarily sends e-mails to the LYRA addresses indicated on the Site, or uses the form available under “Questions? Contact me!” in the “Contacts” section, LYRA acquires the e-mail address and any personal data of the user (and/or third parties) included in the text of the electronic communication, as well as – for the “Questions? Contact me!”form, LYRA acquires the name, surname, e-mail address, telephone number and any personal data of the user (and/or third parties) included in the text of the message.

Personal data collected through cookies

LYRA uses cookies to collect data about your activity on the Site and your preferences. For more information on the use of cookies, the user can consult the Site’s cookie policy.

Purpose of processing

To contribute to the operation of the Site; to provide the user with the services that LYRA provides through the Site; to protect theuser’s vital interests; to comply with applicable legislation or pursue other needs of public interest
User data is processed:

  • to operate, measure, improve and keep secure the Site and the services provided through it;
  • to prevent, detect and mitigate fraud, security breaches and potentially prohibited or illegal activities.

Pursue LYRA’s legitimate interests in such a way that these interests do not override your fundamental rights and freedoms
User data is processed:

  • to identify and solve problems you encounter when using the Site (e.g. blocked or non-functioning pages).

These processing operations protect LYRA’s interest in keeping the Site functional and efficient. Moreover, they do not violate the user’s fundamental rights and freedoms, as they are foreseeable and widespread in any site that allows the creation of an account. Moreover, such processing also benefits the user himself, allowing the Site to continue functioning.

With the user’s consent, marketing and statistical cookies
With the user’s consent, the user’s personal data (and/or that of third parties) may be processed in order to

  • send marketing emails to the address provided – i.e. advertising and information about LYRA’s business, products and services;
  • personalise, measure and improve the advertising provided to the user on the Site and on other websites, based on the user’s preferences encountered when browsing the Site
  • collect statistical information, in aggregate form, on the number of users visiting the Site (as unique visitors) and how users visit the Site.

Processing methods

The user’s personal data are processed using computer or telematic instruments, exclusively for the purposes for which they were collected (see above), and stored for a determined period of time according to the criteria indicated in this privacy policy (see below).

Personal data may be known and processed by LYRA’s staff, duly instructed on the precautions to be taken in accordance with the Applicable Privacy Policy.

Duration of processing

The specific retention times of the user’s personal data are documented in LYRA’s register of processing activities (implemented in accordance with Article 30 of the G.D.P.R.).

The user’s personal data are retained (in accordance with the criteria set out in recital 39 and article 5, paragraph 1, letter e) of the G.D.P.R.) for the period necessary to ensure that the Site functions and that LYRA provides users with the services provided through the Site. This period, in any case, may not exceed 10 years from the date of collection.

The user’s personal data may be retained for longer periods than the above only if this is necessary for LYRA to fulfil its legal obligations or to protect a right in court.

After these retention periods have expired, the user’s data will be deleted or permanently anonymised.

Communication of data

LYRA may communicate processed personal data only to the entities and for the purposes indicated below.
Fighting unlawful acts, fraud and security breaches

  • LYRA may disclose your personal information to third parties involved in preventing, detecting and mitigating potentially unlawful acts, fraud and security breaches.

Law enforcement, legal proceedings and methods authorised by law

  • LYRA may disclose your personal information to Law Enforcement Agencies, Public Authorities or authorised third parties where required to do so by law. And, in general, when it is necessary to comply with legal obligations or verified requests relating to a criminal investigation or suspected illegal activity, or to respond to claims by others regarding the rights, property, or safety of LYRA, its employees, or users.

Rights of the interested parties

In the sole cases and with all the limits provided for in Articles 15-22 G.D.P.R., the user has the right – at any time, free of charge and without any particular burdens or formalities – to

  • obtain confirmation of the fact that LYRA processes your personal data
  • have access to his/her personal data, and know their origin, the purposes and purposes of processing, the storage period and information regarding third parties to whom the personal data are communicated
  • revoke your consent at any time, if this constitutes the basis for the processing;
  • update or rectify your personal data collected by LYRA, so that they are always exact and accurate
  • exercise the so-called right to be forgotten, i.e. to have your personal data collected by LYRA deleted from LYRA’s databases and/or archives, including backup files
  • restrict the processing of your personal data by LYRA;
  • object to the processing of personal data processed to pursue public interest requirements or legitimate interests of LYRA;
  • to be informed, in an appropriate timeframe, of any rectification, cancellation or restriction of processing ordered by LYRA, as well as of any revocation of such measures and the reasons for the revocation.

The user may exercise these rights by making a written request to LYRA, without any formalities, by sending an e-mail to customerservice@alenaettea.com

Upon receipt of the aforementioned e-mail, LYRA will comply with the request within one month from its receipt. This deadline may be extended by two months – after notice to the user – taking into account the complexity and number of requests.

LYRA reminds the user that, should the response to his/her request not be satisfactory, he/she may contact and lodge a complaint with the Italian Data Protection Authority (http://www.garanteprivacy.it/) in the manner provided for by the Applicable Privacy Policy.

Changes to the privacy policy

LYRA reserves the right to make changes to this privacy policy at any time, giving notice to users on this page of the Site. Therefore, the user is kindly requested to consult this page often, taking as reference the date of last modification indicated at the bottom. Unless otherwise specified, in the event of a change, the previous privacy policy will continue to apply to personal data collected up to that time.

 

Date last updated: March 2024

Alena Ettea