Privacy & Cookies

Privacy Policy of www.whysen.com

Discover how Whysen protects your data and respects your privacy.

Introduction

This Privacy Policy is provided pursuant to Article 13 of European Regulation No. 679/2016 and applies exclusively to all Personal Data collected through the website www.whysen.com. This Privacy Policy is subject to updates, which will be promptly published on the website. This Privacy Policy sets out the grounds on which the Data Subject's Personal Data will be processed.

Data Controller

The Data Controller of the Data collected by this website is Whysen S.r.l., with registered office in Bellinzago Lombardo (MI), 20060, Via Alzaia Martesana, 5, VAT no. 14436090964, email: [email protected].

Personal Data

Personal Data means any information relating to an identified or identifiable natural person (Data Subject). A natural person is considered identifiable who can be identified, directly or indirectly, with particular reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more elements specific to his or her physical identity.

Categories of Personal Data Processed

Among the Personal Data processed by this website, independently or through third parties, there are Common Data such as: Cookies, Usage Data.
Personal Data processed by this Site for the pursuit of marketing purposes and, in particular, for the User's subscription to the newsletter: first name, last name, email.
Further Personal Data collected may be indicated in other sections of this Privacy Policy or through information texts displayed at the time the Data is collected. The optional, explicit and voluntary sending of emails through the appropriate forms provided on this website or through the addresses indicated on this website entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other Personal Data included in the email. The User's consent to the provision of Data is necessary in order to be included in the Data Controller's databases and for the establishment and proper performance of what the latter offers to its Users, as well as to third parties for the performance of the individual requested activity. Failure to provide such data therefore prevents registration in the Data Controller's databases, the conclusion of any contracts, as well as their execution and any other activity.

Methods of Processing Personal Data

The Personal Data provided or acquired will be subject to Processing based on the principles of fairness, lawfulness, transparency and protection of confidentiality pursuant to applicable regulations. The Data Controller processes the Users' Personal Data by adopting appropriate security measures aimed at preventing unauthorised access, disclosure, modification or destruction of Personal Data. The Processing is carried out by computer and/or electronic means, with organisational methods and logic strictly related to the indicated purposes.

Purposes of Processing Personal Data and Legal Basis

Personal Data may be collected independently by the Data Controller or through third parties. In this case, the computer systems and software procedures used to operate this website acquire some Personal Data of the Users, of a technical-computer nature (e.g. the IP address, the type of browser used, the operating system, the domain name and the addresses of websites from which access or exit was made, etc.), the transmission of which is inherent to the normal operation of the internet. Such Data may be processed solely for the purpose of obtaining anonymous statistical information on the use of the site and/or to check its correct functioning and will be deleted immediately after processing. The Data that the Data Subject chooses to provide voluntarily will be processed in compliance with the lawfulness conditions ex art. 6 GDPR and will be processed to enable the website to provide its services, as well as for the Purposes indicated below, and will be retained for the time necessary to fulfil the aforementioned Purposes.
The purposes of the processing are:

Soft spam

The Data will be processed to allow the Data Controller to send the Data Subject, by email, commercial and promotional communications concerning Products and/or Services similar to those purchased, without the need for the Data Subject's express and prior consent, as provided for by Article 130, paragraph 4, of the Privacy Code as amended by Legislative Decree no. 101 of 2018, and provided that the Data Subject does not exercise the right to object. Legal basis: this processing is based on the legitimate interest of the Data Controller pursuant to Article 6, letter F and Recital no. 47 of the GDPR. Data retention period: until the Data Subject objects.

Direct marketing

The Data will be processed for the direct sale of Services, market research, sending communications and promotional, commercial and advertising material or material relating to initiatives and events, via newsletter, email, by telephone, by post and other informational material. Legal basis: this processing is based on the freely given consent of the Data Subject pursuant to Article 6, par. 1, letter A of the GDPR. Data retention period: until the consent of the Data Subject is revoked.

Statistics

The Data will be processed to carry out statistical analyses on aggregated and anonymous data to analyse the behaviour of the Data Subject in order to improve the products and services provided by the Data Controller and to satisfy the expectations of the Data Subject. Legal basis: this processing is based on the freely given consent of the Data Subject. Data retention period: until the consent of the Data Subject is revoked.

Profiling

The Data will be processed for the analysis and evaluation of interests, habits and consumption choices, including the creation of profiles, in order to be able to send personalised informational and promotional material on the Services/Products offered by the Data Controller. Legal basis: this processing is based on the freely given consent of the Data Subject pursuant to Article 6, par. 1, letter A of the GDPR. Data retention period: until the consent of the Data Subject is revoked.

Data Subject Satisfaction

The Data will be processed for the sending of surveys to verify the degree of Customer satisfaction in order to improve the offer on the Products and/or Services of the Data Controller and without marketing purposes. Legal basis: this processing is based on the legitimate interest of the Data Controller pursuant to Article 6, letter F and Recital no. 47 of the GDPR. Data retention period: until the Data Subject objects.

Disclosure of Data

In addition to the Data Controller, in some cases, the following may have access to the Data:

  • a) categories of Persons in charge specifically trained and involved in the organisation of the website (administrative, commercial, marketing, legal staff, system administrators);
  • b) external subjects (such as third-party technical service providers, hosting providers, IT companies, communication agencies) also appointed as Data Processors by the Data Controller pursuant to Article 28 GDPR. The updated list of Processors, if appointed, can always be requested from the Data Controller;
  • c) public or private subjects who may access the Data in compliance with legal obligations;
  • d) subjects carrying out ancillary and instrumental tasks with respect to the activity of the Data Controller;

Retention Period

As expressly provided for by Article 5, par. 1, letter e) of the GDPR, the Data is retained for the time necessary for its Processing in relation to the performance of the service requested by the Data Subject, or requested by the Purposes described above in this document.
At the end of the retention period the Personal Data will be deleted and therefore the rights of access, erasure, rectification and portability of the Data can no longer be exercised.

Place of Processing and Cross-Border Data Transfer

The Data is processed at the operational headquarters of the Data Controller. For further information you can contact the Data Controller. The Data may be processed by natural persons and/or legal entities acting on behalf of the Data Controller and under specific contractual obligations, having their registered office in EU or non-EU countries. In the event that the Data is transferred outside the EEA, the Data Controller will adopt any appropriate contractual measure to guarantee adequate protection of the Data.

Exercise of the Data Subject's Rights

The Data Subject has the right to exercise the powers provided for in Articles 7, 15-22 of European Regulation 679/2016. In particular, he/she has the right to withdraw his/her consent at any time and, upon simple request to the Data Controller, may request access to the Personal Data, receive the Personal Data provided to the Data Controller and, where possible, transmit them to another data controller without hindrance (so-called portability), obtain the updating, limitation of the processing, rectification of the Data and erasure of those processed in breach of the applicable legislation. He/she has the right, for legitimate reasons, to object to the Processing of Personal Data concerning him/her and to the Processing for the purpose of sending advertising material, direct sales and market research. He/she also has the right to lodge a complaint with the Privacy Guarantor as the supervisory authority for the protection of personal data or to bring the matter before the appropriate judicial bodies. The data subject may exercise his/her rights by contacting the Data Controller by email at: [email protected] .

  • a) the origin of the personal data;
  • b) the purposes and methods of the processing;
  • c) the logic applied in the event of processing carried out with the aid of electronic tools;
  • d) the identifying details of the Data Controller and of the Data Processors;
  • e) the subjects or categories of subjects to whom the Personal Data may be communicated or who may become aware of it in their capacity as designated representative in the territory of the State, or as managers or persons in charge;
  • f) the updating, rectification or, where interested therein, the integration of the Data;
  • g) the erasure, transformation into anonymous form or blocking of data processed in breach of the law, including data whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed.

Tools Used to Process Personal Data

Address management and email sending

These services allow you to manage a database of email contacts, telephone contacts or contacts of any other type, used to communicate with the User. These services could also allow the collection of Data relating to the date and time of display of the messages by the User, as well as the User's interaction with them, such as information on clicks on the links inserted in the messages.

Newsletter

By registering for the newsletter, the Data Subject's email address is automatically inserted into a list of contacts to which email messages may be transmitted containing information, even of a commercial and promotional nature, relating to this website. The Data Subject's email address could also be added to this list as a result of registration on this Site or after making a purchase. The Data Subject can choose to unsubscribe from the newsletter at any time by clicking on a specific button that he/she will find inside the emails. After clicking on the unsubscribe button, the Data Subject's Data will be immediately deleted from the email marketing software. Personal Data collected: first name, last name and email.

Security measures adopted

This website, in order to make the moment in which Personal Data is entered secure, has an SSL certificate and uses the HTTPS protocol. By using this protocol, transactions and data transmitted on websites take place with maximum security and the content of the communication is not read or manipulated in any way by third parties.

Statistics

The statistics services allow the Data Controller exclusively to monitor and analyse traffic data and serve to keep track of the User's behaviour. This website uses the following services:

1) Google Analytics (Google Ireland Limited) is an analysis service provided by Google Ireland Limited. Google uses the Personal Data collected in order to track and examine the use of this website, compile reports and share them with the other services developed by Google. Google might use Personal Data to contextualise and personalise the ads of its own advertising network. Google may also transfer such information to third parties where this is imposed by law or where such third parties process the aforementioned information on Google's behalf. On this site the IP address anonymisation function is active. The IP address transmitted by the browser for the purposes connected to Google Analytics will not be incorporated into other data already held by Google.
At the following link Google provides the browser add-on to disable Google Analytics. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland - Privacy Policy.

2) Google Search Console (Google Ireland Limited) is an analysis service provided by Google Ireland Limited. Google uses the Personal Data collected in order to track and examine the use of this website, compile reports and share them with the other services developed by Google. Google might use Personal Data to contextualise and personalise the ads of its own advertising network. Google may also transfer such information to third parties where this is imposed by law or where such third parties process the aforementioned information on Google's behalf. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland - Privacy Policy.

Tag Management

1) Google Tag manager (Google Ireland Limited) is a service that allows you to manage and monitor all third-party Tags on the website in order to obtain information on the interest shown by Users towards the Site itself and consequently on the quality of the contents. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland - Privacy Policy.

Remarketing and Retargeting

These services allow this website to communicate, optimise and serve advertisements based on the past use of this website by the User. This activity is carried out through the tracking of Usage Data and the use of Cookies. This website uses the following services:

1) Google ADS is a service provided by Google Ireland Limited that connects this website with the Google advertising network. This website uses the Remarketing features of Google Analytics combined with the cross-device adaptation possibility of Google ADS. This functionality makes it possible to connect the target groups for promotional campaigns created by the Marketing function of Google Analytics with the cross-device adaptability of Google ADS. This allows showing advertisements based on the personal interests of the user, identified through an analysis of the user's behaviour on the web, whether on a mobile device or on other devices. You can permanently disable the targeting and remarketing functions by disabling the "personalised advertising" function in your Google account. To do this, simply follow the link: https://www.google.com/settings/ads/onweb/. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland - Privacy Policy.

2) Insight Tag LinkedIn (LinkedIn Ireland Unlimited Company). This website uses a script called "Linkedin Insight Tag". The LinkedIn Insight Tag adds a cookie to the Users' browser every time they visit this website. Thanks to this tool, the Data Controller can record when a LinkedIn member performs a certain action on the website (such as booking a service or leaving an email). This tool is used for the collection of statistical data that allow measuring the effectiveness of paid advertising. Thanks to the Linkedin Insight Tag it is possible to understand the actions that people perform on the website. The collected Data is used to: ensure that the advertisements are shown to the right people; create audiences to target the advertisements to; leverage the other advertising tools of the platform on which advertising is done. This website uses the Linkedin Insight Tag to carry out "remarketing" and "retargeting" activities; thanks to these activities, the cookies that the User leaves on the website are used, without however identifying him/her. Personal Data collected: Cookies and Usage Data. Place of Processing: Ireland - Privacy Policy.

Content on external platforms

These services allow you to view content hosted on external platforms directly from the pages of this website and to interact with them.
In the event that a service of this type is installed, it is possible that, even if the Users do not use the service, it collects traffic data relating to the pages in which it is installed.
This website uses:

Youtube (Google Ireland Limited)
. Youtube is a video content display service managed by Google that allows this website to integrate such content within its pages. Personal Data collected: Cookies and Usage Data. Place of Processing: Ireland - Privacy Policy.

Google Fonts is a font style display service provided by Google Ireland Limited that allows this website to integrate such content within its pages. Personal Data collected: Usage Data; various types of Data as specified by the service's privacy policy. Place of processing: Ireland - Privacy Policy.

Changes to this Privacy Policy

The Data Controller reserves the right to make changes to this Privacy Policy at any time, giving notice to Users on this page. Therefore, please consult this page often, taking as reference the date of the last modification indicated at the bottom. In the event of non-acceptance of the changes made to this Privacy Policy, the Data Subject is required to cease using this website and may request the Data Controller to remove his/her Personal Data. Unless otherwise specified, the previous Privacy Policy will continue to apply to the Personal Data collected up to that moment. The Data Controller is not responsible for updating all the links viewable in this Privacy Policy, therefore whenever a link is not working and/or updated, the Users acknowledge and accept that they must always refer to the document and/or section of the websites referred to by such link.

Privacy Policy updated as of January 2025.