- What kind of data we collect
Natuzzi may collect, retain and use personal details and contact information you provide when
- you make a purchase in one of our stores, on Natuzzi.com or our mobile apps (collectively, “Websites”),
- you request a quote or information about our products,
- you register yourself with the Natuzzi Community,
- you sign up for our newsletters, or you engage with us on our social media platforms (hereinafter collectively, “Data”).
In order to be able to request information and/or complete the process of registering with the Natuzzi Community, all the data indicated with an asterisk in the respective forms must be provided.
- Additional data
When you visit our Websites, we (or our third-party service providers) collect information about your use of the Websites: your Internet service provider’s address, your location as determined by your Internet Protocol (“IP”) address, the name of the website or advertisement directing you, your user agent, as well as your clicks and activity on our Websites. We use this information to understand how to make our Websites more available and user-friendly to our customers, as well as to provide you with advertising that may be of interest to you. To learn how you can opt out of such advertising click here. We do not serve interest-based advertising to users we identify as using our Websites from EU IP addresses.
With your consent, we may also collect the following data:
- optional information that you may convey to use through order forms, quote requests and the Natuzzi Community registration form; information that we may obtain by examining how you interact with us, through emails and newsletters, as well as our websites and apps; to do so, we may use tools that are developed either by us or third parties (for more information, we invite you to consult their Privacy Policies); your purchasing preferences, including information relating to purchases made by you and quotes requested by you from Natuzzi; information shared by you through the social networks you are registered with.
- Why do we use your data and what legal basis we adhere to?
Once your consent is granted, we may use your data for some, or all, of the following purposes:
a) to send you newsletters, information about products and services we offer, special promotions and surveys. For example, we might send you emails, instant messages (e.g., via SMS and WhatsApp), and promotional material via regular mail or have one of our representatives contacting you over the phone.
b) to analyse your preferences and the way you interact with us. More specifically, in order to better understand your tastes and interests with regard to our products and services, we may examine – also using automated systems and third party service providers – the information you provide to us in order forms and quote requests, the items you purchased at Natuzzi stores in the last ten years, your level of interest in emails, advertising and newsletters we send you, the frequency of your visits to our websites, the way you use our apps and your engagement with our social media profiles (e.g. Facebook, Instagram and Pinterest). For more information about the Data we may obtain as a result of you browsing our internet websites and/or using our apps, please consult the relevant privacy documents. Finally, we may supplement your profile with information of statistical nature that we lawfully obtain from other sources: this could be related to where you live (e.g., demographic information, geo-referencing data etc.) or what electronic devices you use to interact with us.
In any case, this kind of activity should not have any legal consequences for you, or significantly impact you personally. Moreover, in the event that you have filled in a form for the request for information, we will use your Data:
c) to provide you with the information requested;
And, in the event you have completed the Natuzzi Community registration form, we will use your Data for the following purpose, including through the use of electronic means:
d) to manage your participation within the Natuzzi Community. Your Data will be used to give you discounts and other benefits, which may be made available from time to time. More generally, they will be used to satisfy all related contractual and administrative requirements.
Registration with the Natuzzi Community is optional and neither registration nor the information request is in any way dependent on you granting your consent for the data processing purposes set out at (a) and (b).
These activities allow us to provide you with our online and in-store retail and design services, process your transactions more efficiently, expedite shipping, offer you promotions, contests and other opportunities and, ultimately, give you a higher caliber of customer service.
- Who is the data controller?
The data controller is Natuzzi S.p.A., whose contact details are listed here below.
- How long do we keep your Data for?
We will only store your Data for the period of time necessary to pursue the various data processing purposes. You can request that we delete your personal information at any time by simply sending an e-mail to [email protected]. For details about your rights to deletion under California law, please see below section titled, California Consumer Privacy Act Addendum.
With regard to the Natuzzi Community, your Data will not be stored for longer than the time necessary to manage your participation in the Natuzzi Community. In the event that you decide to leave the Natuzzi Community, your Data will be deleted within 30 days.
We retain your information after you request such deletion for longer periods for specific purposes to the extent that we are obliged to do so in accordance with applicable laws and regulations and/or as necessary to protect our legal rights for certain business requirements. For example, when we process your payments, we will retain this data for longer periods of time as required for tax or accounting purposes. See below for specific reasons we would retain some data for longer periods of time:
- Security, fraud & abuse prevention – to protect you, other people, and us from fraud, abuse, and unauthorized access.
- Financial record-keeping – when you make a payment to us we are often required to retain this information for a long period of time for purposes of accounting, dispute resolution and compliance with tax, anti-money loundering, and other financial regulations (information relating to your purchases will be stored for processing for no longer than 10 years from the date of collection).
- Complying with legal or regulatory requirements – to meet any applicable law, regulation, legal process, or enforceable governmental request, as required to enforce our terms of service, including investigation of potential violations.
- Direct communication with us – if you have directly communicated with us, through a customer support channel, feedback form or a bug report, we may retain reasonable records of those communication (in any case, for no longer than 12 months from the date of collection).
- To whom we disclose your Data
For administrative purposes, we may communicate your Data to our service suppliers (e.g., IT services). If you are registered with the Natuzzi Community, we may communicate your Data to companies – including foreign companies – who manage the stores participating in the Natuzzi Community initiative, as well as to authorities, agencies, public bodies and law enforcement, when we are legally obliged to do so.
A full list of our third-party service providers and stores participating in the Natuzzi Community initiative will be made available to you upon sending a written request to the contact details listed below.
- How will the transfer of your Data to non-EU countries be regulated?
Some of the third parties service providers mentioned before, may be located in countries outside the European Union. In case of transfer of your Data to foreign countries that do not guarantee the same level of data protection of the EU, we will ensure that the transfer is carried out in compliance with applicable laws, meaning collecting your previous consent when necessary, or through the adoption of any other measure to ensure an equivalent level of protection of transferred data, including the execution of standard contractual clauses according to the European Commission template, introduced by European Commission Decision 2010/87/CE https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1728496.
- Your rights under GDPR Regulation (EU, EEA and UK)
Any organization offering goods or services to a resident of an EEA (European Economic Area) country is subject to GDPR - Regulation (EU) 2016/679. If you are a resident of an EEA country (or UK), you have the right to
- access the Data to request the amendment or cancelation of the Data,
- request that data processing be limited,
- object to our use of your Data, and
- request that a copy of your Data be sent to you.
- Rights of the interested party
Right of access
Right of amendment
You have the right to obtain – without undue delay – the amendment of any incorrect personal data regarding you.
Right of cancellation
The have the right to obtain – without undue delay – the cancellation of personal data regarding you for any of the following reasons:
a) the personal data is no longer necessary as per the purposes for which they were collected or processed;
b) you have revoked your consent to data processing and there are no other legal grounds for data processing;
c) you have opposed data processing and there is no other legitimate motive to proceed to data processing;
d) your personal data has been processed unlawfully;
e) your personal data must be deleted to comply with a legal obligation.
Right to limit data processing
You have the right to obtain the limitation of data processing in the following scenarios:
a) if you inform us that your personal data is incorrect, we will limit data processing for the period needed for the data controller to check your personal data;
b) if data processing is illegal and you oppose the deletion of your personal data and instead request that its use be limited;
c) even though the data controller no longer needs your personal data for data processing purposes, your personal data may still be needed to check, exercise or defend a right in a legal proceeding;
d) if you have opposed data processing and are awaiting verification that we have legitimate reasons for this.
Right of opposition
You have the right to oppose – at any time – the processing of your personal data for direct marketing purposes, including any profiling activities linked to marketing.
Right to data portability
You have the right to obtain a copy of the personal data we have regarding you in a well-structured, intuitive format that can be viewed on an automatic device. You also have the right to pass this data to another data controller without the consent of the data controller that supplied you with it, in the event that:
- a) data processing is based on consent or a contract; and
- b) data processing is carried out using automated means.
You have the right to obtain the direct transfer of your personal data to another data controller, provided this is technically possible and only by request.
- How can you change your preferences or revoke consent?
You can – at any time – check, modify or revoke your consent for the data processing purposes as set out in (a) and (b). You may also declare that you no longer wish to receive commercial information via email and/or instant messaging services. You can decide to leave the Natuzzi Community at any time. In order to do so, simply contact Natuzzi S.p.A. or the Data Protection Manager at the address [email protected].
11.How do you contact the data controller and Data Protection Officer to exercise your rights?
You can exercise your rights by writing to the data controller and/or Data Protection Officer at the following addresses:
Via Iazzitiello, 47
70029 Santeramo in Colle (BA)
Email: [email protected]
Natuzzi S.p.A. Data Protection Officer:
Protection Trade Srl
Via Giorgio Morandi, 22
04020 Itri (LT)
- How to file a complaint with competent authorities
If your rights under GDPR legislation have been subject to delay, limitation or exclusion by the Data Controller, you can file a complaint with the competent supervisory authority or directly contact the authority to the following address:
Garante per la Protezione dei Dati Personali [Personal Data Protection Authority]
Piazza Venezia 11
00187 - Rome
Fax: (+39) 06.69677.3785
Tel: (+39) 06.696771
Email: [email protected]
Certified email address: [email protected]
Last updated: April 12nd, 2022
This information briefing is provided in accordance with the European Regulation 679/2016 regulating the protection of natural persons with regard to the processing of personal data and the free movement of such data (hereinafter also referred to as the Regulation), for users of services offered on our Websites. The information briefing only applies to Natuzzi S.p.A., its affiliates and subsidiaries, and their respective websites and apps. Natuzzi is not in any way responsible for other websites you may be redirected to by clicking on links available on its Websites.
The data controller
The Data Controller of the personal data processed following consultation of our website is Natuzzi S.p.A. (hereinafter, also referred to as Natuzzi), with registered office in Via Iazzitiello, 47 – Santeramo in Colle (BA).
The data protection manager
The Data Protection Manager is Protection Trade S.r.l. with registered office in Via Giorgio Morandi – 22, Itri (LT), contact email address: [email protected]
Place, purpose and communication of the data
The processing connected to the web services of our Websites takes place at the aforementioned office of the Company, by Natuzzi’s employees and representatives duly appointed to carry out the process. The data derived from the Website may be communicated to the subjects that manage the Website, or to IT partners used by the Data Controller to deliver the services requested by the users, as well as to subjects who have the right to access to the data under legal provisions and/or secondary regulations. The personal data provided by users who submitted requests for information about products (information requests, responses to questions etc.) or other communications are used for the sole purpose of performing the service requested and are communicated to third parties only in the event that it is necessary for this purpose.
Type of data processed
Navigation data. As you navigate through and interact with our Websites, we may use automatic data collection technologies to collect information about your equipment, browsing actions and patterns, including: (a) details of your visits to our Websites and other communication data and the resources that you access and use on the Websites; and (b) information about your computer and internet connection, including your IP address, operating system and browser type, addresses in URI notation (Uniform Resource Identifier) of the resources requested, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (successful outcome, error etc.). The information we collect automatically is often statistical data and does not include personal information, but we may maintain it or associate it with personal information we collect in other ways or receive from third parties. It helps us to improve our Websites and to deliver a better and more personalized service, including by enabling us to store information about your preferences, allowing us to customize our Websites according to your individual interests and recognize you when you return to our Websites. In addition, this data may be used to ascertain responsibility in case of cyber-crimes to the detriment of the Websites.
Data provided voluntarily by the user
The optional, explicit and voluntary sending of emails to the addresses indicated on this website leads to the subsequent acquisition of the address of the sender, required to respond to the requests, as well as any other personal data entered in the communication.
Specific summary information briefings shall progressively be reported or displayed on the pages of the website provided for particular services on request.