Privacy and Cookie Policy

1. Data Controller and contact details

   1. The data controller of the personal data of the users of the website www.lumberjackshoes.com (the "Site") is Brand Park S.r.l., with registered address at Via Fonderia, 39 - 31100 Treviso (TV), Italy, VAT no. 07845560965 ("Lumberjack", "we", "us"). Lumberjack can be contacted at the email address privacy.brandpark@legalmail.it ,.

2. Legal basis and purposes of the processing

   1. Personal data are processed for the following purposes and according to the indicated legal basis:

      1. on the basis of the existing contractual relationship between the user and us, for the following purposes:

         1. to process orders and perform related activities, including the issuing and managing of gift card;

         2. to manage the delivery and/or return of the products;

         3. to follow-up on specific requests of the users (such as answering to information requests sent though the section “Contact us” of the Site or by other means);

      2. on the basis of the legitimate interest of Lumberjack or of a third party, as far as permitted by the law, for the following purposes:

         1. to analyse and enhance the service, carry on statistical analysis and/or research and development through analysis of the purchase of the product;

         2. to provide advertising and commercial communication via email regarding Lumberjack products, unless the user's opt-out ("soft spam");

         3. to ensure security and confidentiality of its information technology systems;

         4. to defend a right in judiciary, out of court and administrative procedure and in relation with any dispute that may arise in relation to the offered service or products;

         5. to carry out extraordinary operations, mergers, transfers and acquisitions etc.;

      3. on the basis of user consent given by the user, for the following purposes:

         1. for marketing and market research activities, including those carried out by means of telephone and/or SMS and/or other messages;

         2. for profiling activities aimed at providing the user with a better experience based on his/her shopping habits.

3. Categories of personal data collected

   1. Among the categories of personal data that Lumberjack collects, by itself or through third parties (e.g. through any external social networks that you use to log-in, such as Facebook), there are the following categories of personal data: first name; last name; email address; phone number; country; city; region: postal; address; gender; data contained in cookies; usage data.

   2. Personal data may be freely provided by the user, or, in case of usage data, collected automatically when using the Site or interacting with any other website or tool provided by Lumberjack.

   3. Users are responsible for any third-party personal data obtained, published or shared through the Site and confirm that they have the third party's consent to provide the data to Lumberjack.

4. Recipients of the Data

   1. Personal data may be accessible to subjects acting on behalf of Lumberjack, involved with the operation of the Site and duly authorised (administration, sales, marketing, legal, system administration), including affiliated and group entities or external parties (such as group or third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies or parent and affiliated group entities, commercial agents, customer service agents, delivery companies, credit insurance companies, consultants, banks, etc.) appointed, if necessary, as data processors by Lumberjack.

5. Transfers of Personal Data

   1. Data transfers include the transferring the users' data to a country other than their own, including outside the European Union and, specifically, to Turkey, where a group entity that is in charge of providing IT services is located.

   2. In such circumstances, the transfers will be carried out in compliance with regulations on personal data, in order to ensure an adequate level of protection. Particularly, the transfers will take place subject to one of the safeguards established under the law, including an adequacy decision of the EU Commission, or by adopting Standard Contractual Clauses approved by the European Commission, such as for the transfers of data to Turkey.

   3. More information on the safeguard in place can be requested by submitting a specific request using the contact details in this privacy policy.

6. Retention period

   1. Personal data will be processed and stored for as long as required by the purpose they have been collected for. Once the retention period expires, personal data will be deleted unless the law requires further storage or the user has consented to the processing for a longer time or to have them archived.

   2. Particularly, following the completion of the transaction, Lumberjack will retain data necessary to defend or assert any existing or potential claim or handle any complaint regarding contracts or orders concluded.

   3. The data retention period necessary to achieve the aforementioned purposes is linked to the prescription period of a claim that in many cases is equal to 10 years. Lumberjack will retain personal data after such time has elapsed only when required to comply with legal obligations or in the event of disputes and extraordinary claims that reasonably require the retention of personal data. However, for marketing and market research purposes, user's personal data shall be processed for a maximum of 24 months (unless the consent is revoked before).

7. Users' privacy rights

   1. Users have the right to exercise certain rights regarding their personal data processed by Lumberjack. In particular, data subjects have the right to do the following:

      1. Withdraw their consent at any time. Users have the right to withdraw consent where they have previously given their consent to the processing of their personal data.

      2. Object to the processing of their data. Users have the right to object to the processing of their data where personal data is processed for the purposes of the legitimate interests pursued by Lumberjack or by a third party. Users may object to such processing by providing a ground related to their particular situation to justify the objection. However, when personal data are processed for direct marketing purposes, they can object to that processing at any time without providing any justification.

      3. Access their data. Users have the right to learn if data is being processed by the data controller, obtain disclosure regarding certain aspects of the processing and obtain a copy of the data undergoing processing.

      4. Verify and seek rectification. Users have the right to verify the accuracy of their data and ask for it to be updated or corrected.

      5. Restrict the processing of their data. Users have the right, under certain circumstances, to restrict the processing of their data. In this case, the data controller will not process their data for any purpose other than storing it.

      6. Have their personal data deleted or otherwise removed. Users have the right, under certain circumstances, to obtain the erasure of their data from the data controller.

      7. Receive their personal data and have it transferred to another data controller. Users have the right to receive their data in a structured, commonly used and machine readable format and, if technically feasible, to have it transmitted to another controller without any hindrance. This provision is applicable provided that the data is processed by automated means and that the processing is based on the user's consent, on a contract which the user is part of or on pre-contractual obligations thereof.

      8. Lodge a complaint. Users have the right to bring a claim before their competent data protection authority that, for Italy, is the Garante per la protezione dei dati personali.

   2. Any requests to exercise user rights can be directed to Lumberjack through its contact details provided above in this document. These requests can be exercised free of charge and will be addressed by Lumberjack as early as possible and always within one month.

8. Cookies

   1. A cookie is a small file sent by a website and stored on the user's browser while they use an Internet site. Cookies can be stored only for the time a particular site is used (cookies session) or for a longer period of time and independent from the session (persistent cookies). Cookies work in conjunction with the website content and normally have the function of improving the usability and browsing experience on the web (technical cookies). Some types of cookies also allow users to know the contents displayed, the choices selected and any use of the site. This functionality also allows the data controller to offer the most useful and relevant advertising to every single user (profiling cookies). A website can use self-developed cookies (first-party cookies) or cookies developed by third-party companies (third-party cookies).

   2. Lumberjack uses the following cookies:

      1. Technical Cookies

These are cookies necessary for browsing as they allow the correct use of the Site and its full functionality. These cookies are strictly necessary for operations and their deactivation might impair browsing experience and outcome. In particular, Lumberjack uses technical cookies for the following purposes: management of dynamic web pages; geographical identification of users; management of last access data; ensure the functioning of the web pages; management of data relating to the amounts and products of the orders.

2. First Party and Third Party Analytical Cookies

These are cookies used to collect information on the number of users and how they visit the Site. These cookies, which are either managed directly by Lumberjack and through the Third Party Google Analytics tool information, are aimed at collecting information about users' visits in aggregate form without any power of identification. Further information on the processing of privacy by Google is available at the following link: http://www.google.com/analytics/learn/privacy.html. Information on the cookies used by Google Analytics, collection and use of this data are available at the following link: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage#gajs. The following link also contains information to deny consent to the use of third-party cookies by Google Analytics: http://tools.google.com/dlpage/gaoptout

3. Third Party Profiling Cookies for Marketing/Retargeting

These are cookies of third-party companies that allow the collection of information on the user for subsequent communication of more specific and/or personalised promotional material, including: Google Adwords. They include cookies for inserting banner advertisements on the Site relating to third party companies or products chosen or viewed by the user, or similar or like products. These cookies can be deactivated without preventing proper navigation on www.lumberjack.it. For more information on profiling cookies currently installed in the user's terminal, review the third party privacy information and change the preferences expressed, users can consult the page http://www.youronlinechoices.com/it.

3. Disabling cookies. The user can always decide to block, delete, disable cookies or other similar technologies through the settings of their browser or device. There are many different browsers: each different browser (and in some cases even each different version of the same browser) has its own procedure for deleting cookies. Cookie preferences must be set separately for each browser used, as the features and options offered may vary. It is therefore advisable to visit the support pages of the browser for more information.

4. Acceptance and waiver of cookies. At the time of the user's first access to the Site and, in any case, until a choice is expressed, the user will be asked to provide his/her consent to the use of third-party analytical and profiling cookies.

1. Additional information about the user's personal data

   1. In addition to the information contained in this policy, Lumberjack may provide the user with additional and contextual information concerning particular processing of personal data in relation to specific services, events, etc. More details concerning the collection or processing of personal data may be requested from Lumberjack at any time. Please see the contact information at the beginning of this document.

2. Changes to this privacy policy

   1. Lumberjack reserves the right to make changes to this privacy policy at any time by giving notice to its users on this page and possibly within the Site and/or - as far as technically and legally feasible - sending a notice to users via any contact information available to Lumberjack. It is strongly recommended to check this page often, referring to the date of the last modification listed at the bottom.