Legal & Governance

Privacy Policy


1. Data Controller and Entity Identification

This Privacy Policy governs the processing of personal information collected by Rankbaskettonictrailies S.r.l., an Italian corporate entity registered under company number MI-48920194, with legal headquarters located at Via Monte Napoleone 18, 20121 Milano (MI), Italy ("we", "us", "our"). We act as the Data Controller under Regulation (EU) 2016/679 (General Data Protection Regulation / GDPR) and applicable Italian national legislation (Legislative Decree 196/2003, as amended).

2. Categories of Information Collected

We adhere strictly to the principle of data minimization. We only collect personal details necessary to provide our sartorial publications and respond to inquiries:

  • Direct Communications: When you submit our correspondence form on contact.html, we collect your full name, electronic mail address, inquiry category, and the contents of your message.
  • Automated Technical Data: When navigating this website, our server logs collect basic network metadata including masked Internet Protocol (IP) addresses, browser type, operating system, referring URLs, and timestamp data.
  • Local State Identifiers: We utilize client-side local storage exclusively to remember your consent preference regarding cookie usage, preventing redundant notification banners.

3. Legal Bases for Data Processing

We process personal data solely on lawful grounds established under Article 6 of the GDPR:

  • Contractual Performance and Pre-Contractual Measures (Art. 6(1)(b)): Responding to user requests, concierge inquiries, and sartorial guidance submissions.
  • Legitimate Interests (Art. 6(1)(f)): Securing our digital static infrastructure against malicious denial-of-service attacks, fraud, and server exploitation.
  • Consent (Art. 6(1)(a)): Where explicitly granted for optional analytical metrics and preference caching.

4. Third-Party Processors and International Transfers

We do not sell, rent, or trade your personal information to commercial advertising brokers. We may engage verified European cloud infrastructure and hosting providers who act strictly as Data Processors bound by written Data Processing Agreements (DPAs). Any transmission of information outside the European Economic Area (EEA) is carried out under the European Commission's Standard Contractual Clauses (SCCs) to guarantee equivalent data protection standards.

5. Data Retention Periods

Personal correspondence submitted through our contact facility is retained for no longer than twenty-four (24) months from the date of the last exchange, after which it is permanently purged or anonymized. Server access logs are rotated and permanently deleted on a rolling thirty-day (30) schedule.

6. Rights Under GDPR and CCPA

Subject to statutory conditions, visitors located in the European Union and California enjoy full rights over their personal data, including:

  • Right of Access: You may request a confirmation and copy of all personal records we maintain about you.
  • Right to Rectification: You may demand immediate correction of inaccurate or incomplete records.
  • Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where retention is no longer justified by law.
  • Right to Restriction and Objection: You may restrict processing or object to processing based on legitimate interest grounds.
  • Right to Data Portability: You may request your data in a structured, commonly used machine-readable format.
  • California Non-Discrimination: We do not discriminate against individuals exercising their statutory California Consumer Privacy Act (CCPA) rights.

7. Data Protection Officer (DPO) Contact

To exercise any of the statutory rights listed above, or to file a formal inquiry regarding our data handling mechanisms, you may contact our appointed Data Protection Officer via electronic mail:

Attention: Data Protection Officer
Email: [email protected]
Postal Address: Rankbaskettonictrailies S.r.l., Via Monte Napoleone 18, 20121 Milano (MI), Italy

You also maintain the right to lodge a complaint directly with your competent national supervisory authority (in Italy, the Garante per la protezione dei dati personali at www.garanteprivacy.it).