General information about our Privacy Policy

Welcome to our website www.cantalupobespoke.com (“Site”). Please read carefully our Privacy Policy, which applies to each of your access to the Site and, more generally, to each activity of navigation within it and use of its services, regardless of the purchase of products. As a result of consulting the Site or as a result of sending an e-mail from you via the “Contact” section or to an e-mail address indicated on the Site, in fact, personal data relating to identified or identifiable persons may be processed.

This document, therefore, describes to the users (‘Data Subjects’) how the processing is handled and also constitutes a disclosure made pursuant to the Personal Data Protection legislation).

This Privacy Policy, in addition, provides any information useful for understanding how we collect and use information that identifies users. For any other information about our Privacy Policy you can contact Manitaly’s customer support in the specific section of the Site, indicating the reason “Privacy”.

1. The Data Controller

The Data Controller is the company Manitaly S.r.l.

via Guglielmo Marconi, 55 – 84013 Cava de’ Tirreni (Sa) P.Iva n°05589400653, which determines the purposes and means of processing.

2. Purpose of Processing and Legal Basis

2.1. Data Collection.

Manitaly collects personal data and other information directly from its users as part of online registration processes, through web pages dedicated to new business initiatives (e.g. landing pages) or through the purchase order of products on the website for the conclusion of e-commerce transactions. These data are processed by Manitaly within the limits and purposes illustrated in the information presented to the user in the section of specific data collection or in this Privacy Policy, including the possible communication to third parties for purposes instrumental to the provision of the service requested by the user (as better specified in the paragraph “To whom we communicate personal data”).

2.2. Purpose and legal basis

Your personal data is collected and processed by Manitaly for purposes strictly related to the use of the website, its services (which include marketing activities) and the purchase of products. In particular, your personal data may be processed for the following purposes:

to provide registration services and access to restricted areas or specific services (as part of the website registration processes we collect your e-mail address, personal and/or shipping information and password through the relevant online registration forms);

where expressly requested, for sending the newsletter by e-mail;

for purposes necessary to give all information and assistance about the services and/or purchase of products on the Site (to provide support services we collect your personal data within the Customer Service in the “Contact Us” section);

enable you to finalize the processes of purchasing products on the Site (we collect your personal data, such as, for example, personal data, e-mail address, postal address, credit card and bank details, telephone number through the order form);

to provide information about problems with navigation, browser compatibility, and viewing or loading web pages on the Site (this is collection and processing as part of the request for technical support services);

to prevent or detect fraudulent activity or abuse detrimental to the Site;

to enable Manitaly to exercise its rights (such as the right to defend itself in court);

to allow you to save the products you like best in your virtual shopping cart;

to book appointments at the Atelier;

upon express and specific consent, for marketing, analysis and profiling activities such as

information and/or commercial promotion by paper mail (or flyer) and telephone or by electronic communications such as e-mail, Sms messages and other automated systems available for the purpose, aimed at raising awareness of new products and improving the services offered;

market research and surveys on the quality of services and customer satisfaction, also using specialized companies, with the aim of improving the offer of products and services;

profiling aimed at analyzing needs, tastes, choices and consumption habits, including through electronic processing, in order to provide communications about products or services in line with users’ preferences and interests;

analysis on aggregate data of user behavior or analysis of user behavior on the website.

The processing of your data for marketing and profiling purposes requires your specific and separate consent; however, we would like to inform you that for other purposes the Data Controller may process your personal data even without your consent in certain cases provided for by law (for example, when this is necessary to fulfill a legal obligation) or, when it is necessary to execute the obligations contractually undertaken towards users (for example, in case you have purchased products on the Site) or you have requested to use specific services through our website.

All personal data provided are processed, therefore, exclusively for fulfillments related to the activity of Manitaly, the legal bases of which – as the case may be – consist:

in consent (necessary for marketing purposes, profiling and/or transfer of your data to third parties or to personalize the user profile on the website);

in the performance of a contract to which you are a party (e.g., to send you service-related information via e-mail and/or text messages and/or any other means of communication for, for example, confirming your order or informing you of any changes to our services, to receive payments or transfer payments in the case of returning a product) or pre-contractual measures taken at your request

in the performance of legal obligations to which the Controller is bound;

in the legitimate interest of the Controller (as specified below).

Your personal data are processed mainly in electronic format and in some cases also in paper format.

Advertising, promotional and informational marketing activities about products and services, as well as for statistical analysis aimed at detecting the degree of satisfaction with the services offered are carried out through traditional channels (such as paper mail and operator calls), as well as through automated digital channels (such as e-mail, SMS, browser and social networks).

However, the purposes for which your personal data is processed may be specifically disclosed, from time to time, in the information text that the Data Controller submits to you on the page where the provision of personal data is required.

It may happen that the Controller finds itself processing personal data of third parties communicated directly by its users or has purchased a product to be delivered to a third party or when the person who pays the price for the purchase of the product is different from the person for whom the product is intended.

In all these cases make sure that you obtain the consent of the person to whom the data refer before communicating them to Manitaly and that you have informed him/her in relation to the processing, because you will be the one and only responsible for the communication of information and data relating to third parties, without their express request, and for their incorrect or unlawful use. In any case, Manitaly, within the limits of what is prescribed by the regulations, will fulfill its obligation to inform the reported user and, where necessary, will request his express consent when registering in its archives the relevant personal data.

2.3. Legitimate interest of the Data Controller and/or third parties

As indicated above, Manitaly may process your personal data for marketing purposes, subject to your express consent, using the contact details you provide when registering on the Site. However, in the legitimate interest of the Data Controller, if the advertisement concerns products similar to those you have already purchased, you may receive it at your e-mail address even without your express consent, provided that you have not refused such use at the time of the provision of your e-mail or on subsequent occasions (so-called “soft spam” ex art. 130, paragraph 4, Legislative Decree No. 196/2003 of June 30, 2003). Likewise, we may process your data even without your consent in order to provide the services you have voluntarily requested (such as, for example, to measure the optimization of the efficiency of our advertising campaigns, to establish, exercise or defend the legal rights of the Owner or when the processing is necessary to prevent fraud on the Site or ensure the security and functionality of the same).

3. Nature of the data and consequences of any refusal to respond

The provision of personal data to Manitaly (in particular personal data, e-mail address, postal address and telephone number) is necessary with regard to the conclusion of the contract for the purchase of products on the Site.

Certain of said data may be, conversely, indispensable for the provision of other services rendered on the Site at your request or to fulfill obligations arising from laws or regulations.

Any refusal to indicate the data necessary for these purposes could result in the impossibility of executing the contract for the purchase of products on the Site or to provide the other services available – such as to provide support services – or, again, to properly fulfill legal and regulatory obligations.

On the other hand, the communication to the Controller of further data, other than that of mandatory provision, for the purpose of fulfilling its legal or contractual obligations or for the provision of certain services upon request is optional and does not entail any consequences for the use of the website and its services or for the purchase of products.

As appropriate and if necessary, from time to time you will be duly informed of the mandatory or optional nature of the provision of your personal data to the Controller. We will highlight the compulsory or optional nature of the provision of your data by means of a notice (“fill in this field”) or a special character (*) to the information of a compulsory nature or only the data necessary for the provision of services and for the purchase of products on the Site. Please note that failure to provide optional personal data will not result in any obligation or disadvantage for our users.

4. Transfer of data outside the EU

Your personal data will not be transferred abroad to those countries other than those belonging to the European Union.

5. Rights of the data subject

Users have the right at any time to obtain confirmation of the existence or otherwise of personal data concerning them and its communication in intelligible form.

Data subjects have the right to obtain the indication:

Of the content and origin of personal data;

Of the purposes and methods of processing;

Of the logic applied to the processing carried out with the aid of electronic instruments;

Of the identification details of the data controller and data processors;

The duration of storage in relation to the specific categories of data processed;

of the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them, in their capacity as managers or appointees.

Data subjects also have the right to obtain:

the updating, rectification or, when they are interested, the integration of data;

the cancellation, transformation into anonymous form or limitation of processed data (e.g., if processed in violation of the law), including data whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;

the portability of data to another data controller;

opposition to processing (e.g., for sending advertising or direct marketing material or for carrying out market research or commercial communication);

opposition to any automated decision-making process (including profiling);

the revocation of any consent given, where applicable (it should be noted that the revocation of consent does not affect the lawfulness of the processing based on the consent given before the revocation);

certification that the operations referred to in the preceding points have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except where this proves impossible or involves the use of means manifestly disproportionate to the protected right.

In part, this information is contained in our Privacy Policy; to learn more, you can contact our customer care at info@cantalupogroup.it indicating ‘Privacy’ in the subject line.

The right to object to the processing of personal data for marketing purposes can be exercised both towards the so-called automated methods of contact (e.g. e-mail, Sms, whatsapp or other social media, etc.), as well as towards the traditional methods (paper mail and telephone); this right can be exercised in whole or in part (e.g. only to communications by paper mail or telephone or by objecting only to the sending of promotional communications carried out through automated tools such as e-mail, sms), also independently through the specific services made available to the user.

To exercise the aforementioned rights, users may write to the person in charge of responding to users’ rights by sending a communication to the following e-mail address: info@cantalupogroup.it, indicating ‘Privacy’ in the subject line.

Finally, please note that the data subject always has the right to lodge a complaint with the Data Protection Authority for the exercise of his or her rights or for any other matter related to the processing of his or her personal data.

6. To whom we disclose personal data

For organizational and functional needs only, and for purposes strictly related and connected to the provision of our services (including the sale of products), your personal data may be made available to third companies, contractually linked to the Data Controller, which perform specific services, in their capacity as Data Processors (e.g., shippers or companies that perform activities or provide marketing services). These parties, in their capacity as Data Processors, will process your personal data exclusively on behalf of Manitaly and exclusively for the purposes indicated in this Privacy Policy and, in any case, in compliance with the limits of the law and any consents you have provided.

To get the full list of the data processors who process your data, please contact our customer care in the “Contact Us” section or write to info@cantalupogroup.it

Your personal data will not be disclosed, assigned or transferred to third parties for purposes not permitted by law or without your express consent. In addition to the companies that act as data processors, your personal data is also made available to third parties (autonomous data controllers) who process the data autonomously solely to execute the contract for the purchase of products on the Site and for purposes ancillary to and related to the provision of the services you have requested (e.g., for transactions related to purchases, the credit institution for the execution of remote electronic payment services, by credit/debit card).

The following are examples of some of the third parties with whom we work closely and who may be the recipients of your personal data:

business partners of social media platforms, who may offer linking services (such as linking profile information) from their social media platforms to our website;

providers of delivery services for purchased products or payment processing;

providers of services or IT solutions to support internal customer care or marketing (e.g., for the “Live chat” service).

Your data will not be subject to dissemination. This is without prejudice, in any case, to the communication or dissemination of data required, in accordance with the law, by police forces, judicial authorities, information and security bodies or other public entities for purposes of defense or state security or the prevention, detection or suppression of crimes.

7. Period of data retention

Your personal data are processed for the time strictly necessary to achieve the purposes and purposes listed above.

The criteria used to determine the retention period are established by:

specific legal regulations, which govern the activity of Manitaly;

by the period of permanence as a registered user of the newsletter (for marketing), in the absence of voluntary unsubscription;

by tax regulations regarding the processing of administrative-accounting data (10 years); in particular, the retention period required by applicable tax and accounting laws is applied for financial data (e.g., payments, refunds, etc.).

With reference to data collected for commercial purposes, on the other hand, details of purchases referring to identifiable users are kept for 12 months (from the date of acquisition of such information) for the purpose of sending targeted commercial communications (profiling) and for 24 months for the purpose of carrying out direct marketing activities.

The data subject to profiling, therefore, may be retained for this purpose only for a period not exceeding twelve months from their registration, subject to the actual transformation into anonymous form that does not allow, even indirectly or by linking other databases, to identify the data subjects (the profiling activity will be carried out using data strictly necessary for the pursuit of the stated purposes).

Personal data of the “registered” user, on the other hand, will be kept until:

12 months after account closure;

10 years after the last use on our website (e.g. access to personal area, purchase made by logged-in user, etc.), if the user does not close the account.

Finally, the customer’s personal data may also be retained for as long as permitted by Italian law to protect the legitimate interests of the Owner company (art. 2947, co. 1 and 3 c.c.).

7.1 Consent management, deactivation and deletion of data

The General Data Protection Regulation recognizes the right to access, rectify, transfer and delete your data. You also have the right to object and the right to restrict the processing of your data.

To change consents regarding data management, users can use this link.

To exercise their rights, request deactivation of their account and removal of their data, users can send an email to info@cantalupogroup.it,,, indicating ‘Privacy’ in the subject line.

8. Processing based on automated decisions and profiling

For more information on the processing of personal data based on automated decisions and profiling you can consult our Cookie Policy .

9. Processing for additional purposes

The Data Controller, subject to specific notice, may also process your data for additional purposes than those indicated above, provided that they are compatible with the initial purpose stated at the time of collection. In the event that the further purpose is incompatible with the initial one, your consent will be required and you will be informed in advance with the possibility to update or change your preferences (following the appropriate instructions provided), so that you can confirm or deny your consent for the use of your personal data.

Your consent will not be required if the further processing by the Data Controller is based on another lawful cause such as the fulfillment of a legal obligation of the Data Controller or the performance of contractual obligations.

10. Minors

This Site and its services are not intended for minors under the age of 18, and the Owner does not intentionally collect personal information referring to minors. In the event that information about minors is inadvertently recorded, the Owner will delete it in a timely manner, including at the request of the users themselves.

11. Applicable Law and Contacts

This Privacy Policy is governed by European law and Italian law (Personal Data Protection Code, Legislative Decree No. 196 of June 30, 2003, as amended), which govern the processing of personal data of users of this Site.

These regulations ensure that the processing of personal data is carried out with respect for the fundamental rights and freedoms, as well as the dignity of the person concerned, with particular reference to confidentiality, personal identity and the right to protection of personal data.

12. Changes and updates to this Privacy Policy

The Owner will take care to modify or simply update, in whole or in part, the Privacy Policy of the Site also in consideration of the modification of the laws or regulations that govern this matter and protect the rights of users. Changes and updates to the Site’s Privacy Policy, to users registered for our services, will be notified by e-mail and, in any case, will be made available on the Home page of https://www.cantalupobespoke.it/privacy-policy/ as soon as they are adopted. Therefore, please access this section on a regular basis to review the most recent and updated Privacy Policy.

Last updated June 2023