At Avanti Cavalli, we respect your privacy and are committed to protecting the personal information of everyone who uses our products and services. This privacy policy is designed to help you understand what personal data we collect and how we use it. It applies to your use of our products and services, and we encourage you to read it carefully before using them. If you do not agree with the terms of this policy, we recommend that you do not use our products or services.

RESPONSIBLE FOR DATA PROCESSING AND CONTACT INFORMATION

• Company Name: Avanti Cavalli Wasmuth
• Contact address: Listuveien 9, 1359, EIKSMARKA
• Email: post@avanticavalli.no
• Phone: +47 915 14 104
• Organization Number: 985 284 407

PROCESSING OF PERSONAL DATA AND SOURCES OF INFORMATION

We collect personal data from all individuals in connection with the products and services we offer through the Avanti Cavalli website.

INFORMATION WE COLLECT

We collect different types of personal information to provide our products and services effectively. This includes, but is not limited to:

• Identity and contact details: This includes name, email address, phone number, shipping address, and billing address.
• Login and account information: We collect your username and password to provide secure access to your account.
• Payment information: To process your transactions, we collect payment information such as credit card details.
• Photos and videos: In some cases, we may collect photos or videos with your consent to improve our services.
• Personal preferences: We collect information about your marketing preferences, wish lists, and cookie settings.
• Electronic identification information: This may include IP address, username, password, cookies, and device identification details such as MAC address, browser, and operating system.
• Location data: We collect general location data based on IP address or geolocation from mobile devices, if you grant us permiss
• Personal characteristics: We may collect information such as date of birth, age, and gender if you choose to provide it.
• Lifestyle data and preferences: We collect information about leisure activities and interests to better tailor our services.

We request certain personal information in order to provide you with the products or services you request. This may include processing purchases, communicating with customer service, participating in events or competitions, creating an account, or interacting with our websites and online stores.

PURPOSE AND LEGAL BASIS FOR PROCESSING PERSONAL DATA

We use the personal data we collect from you in the following ways:

1. Delivery and fulfillment of ordered purchases and services: We use your personal data to provide the products or services you have selected. For example, when you make a purchase on our website, we use your contact information to communicate with you about the purchase, the shipment, or to resolve any issues related to your order.
2. Use of special features on our websites and services: We may require additional personal information or further consent to use special features on our websites and services.
3. Communication of information about products, services, events, and promotions: If you are an existing customer, we may use your email address to send you marketing communications about similar products or services, unless you choose not to receive such messages. We may also request your consent to send you marketing information about our products, services, events, and promotions.
4. Operation, improvement, and maintenance of our business, products, and services: We use personal data to operate our business, including internal functions such as accounting and auditing, and to improve the user experience on our websites and applications.
5. Protection of rights, property, or safety: We use personal data to prevent or detect fraud, misuse, illegal activity, and violations of our terms of use, as well as to comply with court orders, government requests, or applicable law.
6. Research and analysis: We analyze how visitors use our websites, applications, and services to better understand customer behavior and preferences, allowing us to optimize our product offerings and overall customer experience.
7. Other purposes: In some cases, we use your personal data for other specific purposes, for which we provide notice at the time of collection and obtain your consent when required. In such cases, the legal basis for processing your personal data is your consent or our legitimate interest.

CONSENT

We consider privacy an absolute priority. We strive to be transparent and obtain your consent whenever it is required for the processing of your personal data.

• Parental consent: If you are under 18 and use our services, you must ensure that your parents or legal guardians have given their consent for the processing of your personal data.
• Withdrawal of consent: You have the right to withdraw your consent at any time. We will honor your request unless there is another legal basis for continuing to process your personal data.
• Consent to the use of cookies: Please refer to our cookie policy for detailed information on how we use cookies and how you can manage your cookie preferences.

STORAGE OF PERSONAL DATA

The personal data collected is stored securely and confidentially for the period necessary to fulfill the purposes described in this privacy policy, unless a longer retention period is required by law. After this period, the personal data will either be securely deleted or anonymized within a reasonable timeframe.

The retention periods for personal data may vary depending on the purpose of processing and the type of information. Below are details on the retention periods for different categories of data:

• CUSTOMER DATA:
  • Main customer and transaction data: Stored for 10 years after the transaction date for legal reasons. After this period, the data is anonymized.
  • Customer service inquiries: Customer service inquiries and related information are deleted three years after the last update to the case.
  • Delivery and payment data: Specific retention policies from shipping companies and payment providers apply. Personal financial information, such as credit card numbers, is not stored by Avanti Cavalli but is handled directly by the payment providers under strict government regulations.

• MARKETING DATA
  • Browser data: Stored for six months after the last session.
  • Marketing email data: If consent for email marketing is withdrawn, contact information is deleted within one year of withdrawal or immediately upon request.
  • Analytical data: Analytical data is automatically deleted after a retention period of 38 months.

TRANSFER OF PERSONAL DATA

Avanti Cavalli uses various third-party systems to deliver personalized services and maintain the operation of our websites. These third-party systems store and use only the personal data necessary to perform the service they provide to Avanti Cavalli.

We work only with professional and leading third-party providers who comply with EU data protection regulations.

Some third-party service providers, such as payment processors, are subject to government regulations and follow strict guidelines regarding the information required for transactions related to purchases. Please note that when you leave our online store or are redirected to a third-party website or application, you are no longer governed by this privacy policy or our terms and conditions.

Avanti Cavalli transfers personal data to the following data recipients:

• Payment processors: We use Klarna, Stripe, and Vipps for payment processing.
  • Klarna: Klarna's Privacy Policy
  • Stripe: Stripe's Privacy Policy
  • Vipps: Vipps Privacy Policy
• Shipping: We use Posten Norge for our delivery service. We provide these shipping companies with the necessary information, such as name, address, and phone number, to complete the delivery of the products.
  • Posten Norge: Posten Norge's Privacy Policy
• Analytics: We use Google Analytics as our analytics tool.
  • Google: Google's Privacy Policy
• Marketing: We use marketing platforms such as Facebook and Google Ads.
  • Facebook: Meta's Privacy Policy
  • Google: Google's Privacy Policy

Please note that we may also share your information in connection with a merger, sale of our assets, or financing or acquisition of all or part of our business.

In exceptional cases, personal data may be shared with third parties if required by law, regulation, or a request from authorities, and to investigate possible misuse of products and services, as well as to ensure the security of those products and services.

PROTECTION OF PERSONAL DATA

We are committed to complying with the security provisions of applicable data protection laws and to processing personal data in accordance with best practices. Both our staff and any data processors handling personal data are required to maintain strict confidentiality regarding all personal information. Access to personal data is limited to employees who need the information to perform their job duties.

We implement appropriate standards, technical measures, and organizational security practices to protect all personal information. This includes the use of encryption, firewalls, and other security technologies to ensure the integrity and confidentiality of the data.

In the event of a data breach, relevant authorities and affected users or data subjects will be notified in accordance with applicable information security and data protection regulations. We are committed to taking all necessary measures to remedy any breaches and to minimize any negative impact on affected users.

RIGHTS OF DATA SUBJECTS AND SUPERVISORY AUTHORITY

We recognize and respect your rights regarding your personal data. Here are your rights according to data protection regulations:

• Right to access and rectification: You have the right to request information about the personal data we process and to request the correction of any inaccurate, incomplete, outdated, or unnecessary personal data.
• Right to object to and restrict processing: You have the right to object to certain types of processing of your personal data, including direct marketing, if the data is being used for purposes other than those necessary to provide you with products and services or to fulfill a legal obligation. You may also request restrictions on the processing of your personal data.
• Right to erasure: You have the right to request the deletion of your personal data that we process. We will comply with this request unless we have a legitimate reason not to do so.
• Right to data portability: You have the right to receive the personal data you have provided to us in a structured, commonly used format. You may also request that this data be transferred to another data controller.
• Objection to direct marketing and withdrawal of consent: You may object to direct marketing and withdraw your consent to electronic direct marketing at any time. You may also withdraw other types of consent, including parental consent.
• Right to lodge a complaint with the supervisory authority: If you believe that our processing of your personal data does not comply with the General Data Protection Regulation (GDPR) (EU) 2016/679, you have the right to file a complaint with the data protection authorities.