Privacy Policy of Designbest

This Privacy Policy is provided pursuant to Article 13 of European Regulation No. 679/2016 and applies exclusively to all Data collected through the website https://www.designbest.com. This Privacy Policy is subject to updates, which will be promptly published on the website. This Privacy Policy and the Cookie Policy establish the basis on which the Personal Data of the Data Subject will be processed.

Data Controller

The Data Controller of the Data collected from this website is WebMobili S.r.l., headquartered at Via Mosè Bianchi, 71, Milan (MI), 20149.
Contactable via email: privacy@webmobili.it

Web Platform

The website is built with platforms designed to host and operate its key components. These platforms may provide analytical tools, user registration management, comment and database management, e-commerce functionality, payment processing, etc. The use of these tools involves the collection and processing of Personal Data.
Some of these services operate through servers geographically distributed in different locations, making it difficult to determine the exact location where Personal Data is stored.

Processed Personal Data

"Personal Data" refers to any information relating to an identified or identifiable natural person (Data Subject). A natural person is considered identifiable if they can be identified, directly or indirectly, with particular reference to an identifier such as a name, identification number, location data, online identifier, or one or more elements of their physical identity.

Categories of Personal Data Processed

Among the Personal Data processed by this website, independently or through third parties, are Common Data such as:
  • Personal details (such as first and last name)
  • Contact details (email, phone number)
  • Geolocation data (including IP addresses)
  • Internet browsing data (including data derived from the use of social icons and social login buttons - e.g., Facebook, Pinterest, Instagram, LinkedIn, YouTube, etc. - collected through cookies installed on the computer or mobile device; for more information, consult the Cookie Policy)
  • If a request is submitted via the "Contact Us" section of the site, providing certain Personal Data is necessary for the Controller to fulfill the requests, so the relevant fields of the registration form are marked as mandatory
  • In addition to the above-mentioned categories of Personal Data, additional data directly provided by the Data Subject ("Contributions") and shared on the pages of Social Networks such as likes, comments, images, and general content and information that you may publish on the Social Network pages of the Data Controller may also be processed
  • Cookies and usage data
  • Login and account information, including username, password, and unique user ID
  • Personal preferences, including your wish list and marketing and cookie preferences

Methods of Processing Personal Data

The Personal Data provided or acquired will be processed in accordance with the principles of correctness, lawfulness, transparency, and confidentiality under the current regulations. The Controller processes the Personal Data of Users by adopting appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of the Personal Data. Processing is carried out using IT and/or telematic tools, organized and strictly related to the purposes indicated.

Purposes of Personal Data Processing and Legal Basis

Personal Data may be collected independently by the Controller or through third parties. In this case, the IT systems and software procedures used for the operation of this website acquire some technical and IT-related Personal Data of the Users (e.g., IP address, browser type used, operating system, domain names and website addresses accessed or exited, etc.), the transmission of which is inherent in the normal operation of the internet. Such Data may be processed solely to derive anonymous statistical information on the website's use and/or to ensure its proper functioning and will be deleted immediately after processing. The Data that the Data Subject voluntarily chooses to provide will be processed in compliance with the legality conditions under Article 6 of the GDPR and processed to allow the website to provide its services, as well as for the Purposes outlined below, and will be retained for the time necessary to fulfill these Purposes. Specifically, the purposes of the processing are:
  1. Information and pre-contractual obligations Data will be processed to be re-contacted or to follow up on specific requests addressed to the Controller by the Data Subject for informational communications and/or information about obtaining a quote and/or purchasing Products resold by the Controller, via email messages or the completion of the Contact Form and other communication tools such as telephone or WhatsApp Business instant messaging. Legal basis: This processing is optional and based on the Data Subject's consent; however, the provision of Data is necessary for pursuing the indicated purpose. Data retention period: Until consent is revoked by the Data Subject.
  2. Website registration The registration procedure, through the creation of an account or using an existing social network account, aims to enable the use of the website as a "Registered User" and to access a series of services offered through the same applications. Data will be processed to register with the Controller's site for purchasing Products from the Controller. Legal basis: The legal basis for processing is the execution of pre-contractual measures involving the Data Subject and the consent of the Data Subject, which may always change their mind. However, providing Data is necessary for pursuing the indicated purpose. Data retention period: Until consent is revoked by the Data Subject.
  3. Compliance with legal obligations Data will be processed to fulfill any obligation provided for and required by current laws, regulations, related standards, commercial practices, and tax/financial matters, including for purposes required by anti-money laundering legislation (Legislative Decree 231/2007 and subsequent amendments). Legal basis: This processing is necessary to fulfill a legal obligation to which the Data Controller is subject. Data retention period: Period indicated by law and, in any case, for a maximum term of 10 years for fulfilling associated administrative and tax obligations.
  4. Newsletter Data will be processed to send communications and promotional, commercial, and advertising materials or information about the Controller's initiatives and events via the newsletter. Legal basis: This processing is based on the freely expressed consent of the Data Subject pursuant to Article 6(1)(a) of the GDPR. Data retention period: Until consent is revoked by the Data Subject via a specific tool at the bottom of the newsletter or by contacting the Data Controller.
  5. Marketing Data will be processed for direct sales of Products, market research, sending communications and promotional, commercial, and advertising materials or information about initiatives and events via email, SMS, WhatsApp, social networks, phone calls, or other informational material. Legal basis: This processing is based on the freely expressed consent of the Data Subject pursuant to Article 6(1)(a) of the GDPR. Data retention period: Until consent is revoked by the Data Subject.
  6. Statistics Data will be processed to perform statistical analysis on aggregated and anonymous data to analyze the behaviors of the Data Subject to improve the products and services provided by the Controller and meet the expectations of the Data Subject. Legal basis: This processing is based on the freely expressed consent of the Data Subject. Data retention period: Until consent is revoked by the Data Subject.
  7. Profiling Data will be processed for analyzing and evaluating interests, habits, consumer choices, including creating profiles to send personalized informational and promotional material about the Controller's Services/Products. Legal basis: This processing is based on the freely expressed consent of the Data Subject pursuant to Article 6(1)(a) of the GDPR. Data retention period: Until consent is revoked by the Data Subject.
  8. Data sharing with third parties Data related to information requests will be processed by the Controller and Product resellers, who will process the Data Subject's Personal Data as independent Controllers. Third-Party Assignees act as Resellers. A complete and updated list of Third-Party Assignees can be requested at any time from the Data Controller. In any case, the Data Subject may exercise all the rights granted under Articles 15-22 of Regulation (EU) 679/2016 against Third-Party Assignees. Legal basis: This processing is based on the freely expressed consent of the Data Subject pursuant to Article 6(1)(a) of the GDPR. Data retention period: Until consent is revoked by the Data Subject.
  9. Wish List Inclusion Data will be processed to follow up on the specific request made by the Data Subject to the Data Controller to be included in the waiting lists related to out-of-stock Products and to be re-contacted when the Product of interest becomes available again. Legal basis: This processing is optional and based on the Data Subject's consent; however, the provision of Data is necessary for pursuing the indicated purpose. Data retention period: Until consent is revoked by the Data Subject.

Data Communication

In addition to the Controller, in some cases, the Data may be accessible to:
  1. categories of staff specifically trained and involved in the website's organization (administrative staff, commercial staff, marketing staff, legal staff, system administrators);
  2. external subjects (such as third-party technical service providers, hosting providers, IT companies, communication agencies) also appointed as Data Processors by the Controller under Article 28 of the GDPR. The updated list of Processors, if appointed, can always be requested from the Data Controller;
  3. public or private entities that can access the Data in compliance with legal obligations;
  4. subjects who perform auxiliary and instrumental tasks related to the Controller's activity.

Data Processing Times

As expressly provided for by Article 5(1)(e) of the GDPR, Data is stored for the time necessary for its processing concerning the performance of the service requested by the Data Subject or required by the purposes described in this document. At the end of the retention period, Personal Data will be deleted and, therefore, the rights of access, deletion, rectification, and portability of the Data can no longer be exercised.

Cookies

This website uses cookies. Cookies are small text files that websites can use to make the experience more efficient for the Data Subject and to personalize content and ads, provide social network features, and analyze traffic. Cookie Policy

Place of Processing and Data Transfer Abroad

Data is processed at the Controller's operational headquarters. For more information, you can contact the Data Controller. Data may be processed by natural persons and/or legal entities operating on behalf of the Controller and under specific contractual obligations located in EU or non-EU member states. If Data is transferred outside the EEA, the Controller will adopt all suitable contractual measures to ensure adequate Data protection.

Exercise of Data Subject Rights

The Data Subject has the right to exercise the faculties provided for under Articles 7 and 15-22 of European Regulation 679/2016. In particular, they have the right to revoke their consent at any time and, upon simple request to the Data Controller, can request access to their Personal Data, receive the Personal Data provided to the Controller, and, where possible, transmit them to another Controller without hindrance (so-called portability), obtain the updating, limitation of processing, rectification of Data, and deletion of those processed in violation of the current regulations. They have the right, for legitimate reasons, to object to the processing of Personal Data concerning them and to the processing for the purpose of sending advertising material, direct sales, and conducting market research. They also have the right to lodge a complaint with the Privacy Authority as the supervisory authority on personal data protection or to take legal action. The Data Subject can exercise their rights by contacting the Controller via email at: privacy@webmobili.it

Tools Used for Personal Data Processing

CONTACT FORM

By filling out the contact form with their Data, the Data Subject consents to its use to respond to requests for information or for any other purpose indicated in the form's header. Personal Data collected via the contact form: Email, First and Last Name, Phone, Province

OTHER CONTACT TOOLS

WhatsApp Business

WhatsApp Business is an instant messaging service provided by WhatsApp Ireland Limited. For processing methods, the Terms of WhatsApp Business Data Processing are referenced at the following link: https://www.whatsapp.com/legal/business-data-processing-terms/. The Data Subject's data will transit through WhatsApp Business services under the terms specified in the "WhatsApp Business Terms of Service" available at the following link: https://www.whatsapp.com/legal/business-terms/. Personal Data collected: phone number, email, Usage Data, Cookies. Place of Processing: Ireland - Privacy Policy

EMAIL MANAGEMENT

These services allow the management of a database of email, phone, or other contact details used to communicate with the Data Subject. These services may also enable the collection of Data regarding the date and time of message viewing by the Data Subject and their interaction with them, such as information on clicks on links included in the messages.

Newsletter

By subscribing to the newsletter, the Data Subject's email address is automatically added to a contact list to which emails containing information, including commercial and promotional information, related to this website may be sent. The Data Subject's email address may also be added to this list as a result of registering on this website or after making a purchase. The Data Subject can unsubscribe from the newsletter at any time by clicking on a specific button found within the emails. After clicking the unsubscribe button, the Data Subject's Data will be immediately deleted from the "email marketing" software. Personal Data collected: email and name. This website uses the newsletter service provided by:

Brevo formerly SendinBlue (SendinBlue SAS)

Brevo is a service that organizes and analyzes the distribution of newsletters. If the Data Subject does not want their Data to be managed by Brevo, they must unsubscribe from the newsletter. For this purpose, a link is provided in every newsletter sent. Personal Data collected: Email and Name. Place of Processing: FRANCE – Privacy Policy

WEBSITE REGISTRATION

By registering or authenticating, the Data Subject allows the website to identify them and provide access to dedicated services. The Data Subject can register directly on the website by filling out the form and providing their Data. Registration and authentication services can also occur with the help of third parties. In this case, the application may access certain Data stored by the third-party service used for registration and identification. Some of the services listed below may collect Personal Data for targeting and profiling purposes. This website uses:

Facebook Connect (Facebook Ireland Ltd)

Facebook Connect is a service provided by Facebook Ireland Ltd that facilitates and integrates the connection of the site with the social network. This website may request certain permissions from Facebook that allow it to perform actions with the Data Subject's Facebook account and collect information, including Personal Data, from it. For more information on the permissions below, the Data Subject can refer to Facebook's Privacy Policy.

STATISTICS

Statistics services allow the Data Controller to exclusively monitor and analyze traffic data and track the Data Subject's behavior. This website uses the following services:

Google Analytics 4

Google Analytics is an analysis service provided by Google LLC. Google uses the Personal Data collected to track and examine the use of this website, compile reports, and share them with other services developed by Google. Google may use the Personal Data to contextualize and personalize ads in its advertising network. Google may also transfer this information to third parties where required by law or where such third parties process the information on Google's behalf. In Google Analytics 4, IP addresses are used at the time of collection and then deleted before data is recorded in any data center or server. For more information, you can consult Google's official documentation. At the following link https://tools.google.com/dlpage/gaoptout?hl=it, Google provides the browser add-on for deactivating Google Analytics. Personal Data collected: Cookies and Usage Data. Place of Processing: USA - Ireland Privacy Policy

Facebook Conversion Tracking Pixel (Meta Platforms, Inc.)

Facebook Conversion Tracking Pixel is a statistics service provided by Facebook. The Facebook Pixel monitors conversions that can be attributed to Facebook ads. Personal Data collected: Cookies; Usage Data. Place of Processing: Ireland - Privacy Policy.

Google Search Console (Google Ireland Limited)

This is an analysis service provided by Google Ireland Limited. Google uses the Personal Data collected to track and examine the use of this website, compile reports, and share them with other services developed by Google. Google may use the Personal Data to contextualize and personalize ads in its advertising network. Google may also transfer this information to third parties where required by law or where such third parties process the information on Google's behalf. Personal Data collected: Cookies and Usage Data. Place of Processing: Ireland – Privacy Policy

TAG MANAGEMENT

The use of Tags allows snippets of code (called Tags) to be installed within the HTML pages of a website. It can also be used in Android and iOS Apps. Tag Management allows multiple tools on the website to be managed with a single snippet of code. The use of such services involves the passing of the Data Subject's Data through them and, where necessary, their retention.

Google Tag Manager (Google LLC or Google Ireland Limited)

Google Tag Manager is a service that allows managing and monitoring all third-party Tags on the website to gather information about Users' interest in the site itself and consequently about the quality of the content. Personal Data collected: Cookies and Usage Data. Place of Processing: USA- Ireland – Privacy Policy

AUTOMATION TOOLS

Zapier (Zapier Inc.)

Zapier is an online automation tool offered by Zapier Inc. that allows creating automated workflows between two separate applications (so-called ZAP). The ZAP consists of two parts: the "trigger," the event that occurs within the first application and initiates the automation, and the "action," the event that completes the ZAP. Personal Data collected: Cookies, Usage Data, and aggregated Personal Data as specified in the Service's Privacy Policy. Place of Processing: USA – Privacy Policy

SOCIAL NETWORK INTERACTION

These services allow interactions with social networks directly from the pages of this website. Interactions and information acquired by this website are always subject to the Data Subject's privacy settings for each social network. If a service interaction with social networks is installed, it is possible that, even if Users do not use the service, the service collects traffic data related to the pages where it is installed.

Facebook (Meta Platforms, Inc.)

Facebook buttons are interaction services with the Facebook social network, provided by Meta Platforms, Inc. Personal Data collected: Cookies and Usage Data. Place of Processing: Ireland – Privacy Policy

Instagram (Meta Platforms, Inc.)

Instagram buttons are interaction services with the Instagram social network, provided by Meta Platforms, Inc. Personal Data collected: Cookies and Usage Data. Place of Processing: Ireland – Privacy Policy

LinkedIn (LinkedIn Ireland Unlimited Company)

LinkedIn buttons are interaction services with the LinkedIn social network, provided by LinkedIn Corporation. Personal Data collected: Cookies and Usage Data. Place of Processing: Ireland – Privacy Policy

Pinterest (Pinterest Europe Ltd)

Pinterest buttons are interaction services with the Pinterest social network, provided by Pinterest, Inc. Personal Data collected: Cookies and Usage Data. Place of Processing: Ireland - Privacy Policy

YouTube (Google Ireland Limited)

YouTube buttons are interaction services with the video content display service managed by Google. Personal Data collected: Cookies and Usage Data. Place of Processing: Ireland – Privacy Policy

REMARKETING AND RETARGETING

These services allow this website to communicate, optimize, and serve ads based on the User's past use of this website. This activity is carried out through the tracking of Usage Data and the use of Cookies. This website uses the following services:

Facebook Remarketing (Meta Platforms, Inc.)

Facebook Remarketing is a Remarketing and Behavioral Targeting service provided by Facebook that links the activity of this website with Facebook's advertising network. This website uses the Facebook Pixel tool to measure conversions. Thanks to the Facebook Pixel, actions performed on the website can be understood. The collected Data can be used to: - Ensure ads are shown to the right people; - Create audience groups for ad targeting; - Utilize the additional advertising tools of the advertising platform. The detected information is anonymous to the operators of this website and cannot be used to identify a specific Data Subject. However, the information is saved and analyzed by Facebook, which may link the action to a single profile and use this information for internal advertising purposes on Facebook, as outlined in Facebook's privacy policy. This allows Facebook to display ads on both Facebook and third-party sites. The Site Owner has no control over how this data is used. For more information on how users can protect their privacy, refer to Facebook's Privacy Policy.

Google Ads

Google Ads is a service provided by Google Ireland Limited that connects this website with Google's advertising network. This website uses Google Analytics' Remarketing functionality combined with Google Ads' cross-device capabilities. This functionality allows targeting groups for promotional campaigns created by Google Analytics' Marketing feature to be combined with Google Ads' cross-device capabilities. This allows for the display of ads based on the Data Subject's personal interests, identified through an analysis of their behavior on the web, whether on a mobile device or other devices. Personalized ad targeting and remarketing can be permanently disabled by disabling the "personalized advertising" feature in the Google account. To do so, follow this link: https://www.google.com/settings/ads/onweb/. Personal Data collected: Cookies and Usage Data. Place of Processing: Ireland – Privacy Policy

CONTENT ON EXTERNAL PLATFORMS

These services allow content hosted on external platforms to be viewed directly from the pages of this website and to interact with them. If a service of this type is installed, it is possible that, even if Users do not use the service, the service collects traffic data related to the pages where it is installed. This website uses:

ShareThis (ShareThis, Inc.)

ShareThis is a service that allows online audiences to share and amplify the Controller's content across the web. ShareThis Website Tools can increase web traffic, grow social following, and create deeper connections with readers. Place of Processing: USA - Privacy Policy

COMMERCIAL AFFILIATION

These services allow this website to display advertisements of products or services offered by third parties. Ads may be displayed as either advertising links or banners in various graphic forms. Clicks on the banner published on this website are tracked by the third-party services listed below and are shared with this website. To learn what Data is collected, please refer to the Privacy Policies of each service.

Changes to this Privacy Policy

The Data Controller reserves the right to make changes to this Privacy Policy at any time by giving notice to Users on this page. Therefore, please consult this page often, referring to the date of the last modification indicated at the bottom. In the event of non-acceptance of the changes made to this Privacy Policy, the Data Subject is required to cease using this website and may request the Data Controller to remove their Personal Data. Unless otherwise specified, the previous Privacy Policy will continue to apply to Personal Data collected up to that point. The Data Controller is not responsible for updating all the links displayed in this Privacy Policy, so whenever a link is not functional and/or updated, Users acknowledge and accept that they must always refer to the document and/or section of the websites referenced by such link.

Privacy Policy updated January 2025