Privacy policy

2.1) Data acquired during normal business operations from customers and suppliers

L’Inglesina Baby S.p.A. informs you that, for the establishment and execution of contractual relationships, it acquires personal data (identification, tax data, data relating to the data subject's economic activity, etc.) collected verbally or from public registers, lists, deeds and documents and/or public and/or private databases, or commercial information companies. The legal basis for processing lies in Art. 6(1)(b) and (c) of the GDPR.

With reference to such data, please be informed that:

• Data are processed in relation to the fulfilment of legal and contractual obligations arising therefrom, as well as to achieve effective management of commercial relations and also for the purposes of credit protection and the better management of our rights relating to the individual commercial relationship;

• Data will be processed in written form and/or on magnetic, electronic, or telematic media and, in any case, using methods strictly functional to the aforementioned purposes;

• The provision of such data is mandatory for everything required by legal and contractual obligations; therefore, any refusal to provide them or to their subsequent processing may result in the impossibility of the undersigned to carry out the contractual relationships themselves;

• The provision of all data not attributable to legal and contractual obligations is optional, but failure to provide them will result in consequent decisions related to the possibility or otherwise of establishing a new commercial relationship.

Data retention occurs for the period provided for by the relevant legislation.

The provision of data based on the express consent of the data subject for one or more specific purposes (GDPR Art. 6(1)(a)), which is therefore unrelated to the legal and contractual obligations mentioned above, may be withdrawn at any time without affecting the lawfulness of processing based on consent before its withdrawal. In such cases, data are kept until consent is withdrawn.

 

2.2) Data collected automatically by website technologies

The computer systems and software procedures used to operate the website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third ¹parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users connecting to the site, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters r²elating to the user's ³operating system and computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning. Internal personnel or external parties providing support services related to the site may access these data. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site and may therefore be provided to the Judicial Authority upon request.

 

2.3) Cookies

Regarding the management of Cookies, please refer to the Cookie Policy in the dedicated section.

 

2.4) Data provided by the user via website contact features

The “CONTACT US” and “WORK WITH US” sections of the site require the user to fill in certain personal data. The legal basis for processing is the consent provided by the data subject pursuant to Art. 6(1)(a) of the GDPR.

The data will be processed exclusively to provide a specific response to the requests submitted by the user. Providing data marked with an asterisk is necessary to provide an adequate response to the user. Filling in additional fields is optional and will allow for greater personalisation of the responses.

Data will be stored for the duration of the company's management needs and/or until a request for erasure is made by the data subject. In the event of a Curriculum Vitae being sent by the user, the Controller will keep such document in its paper and/or electronic archives for a maximum period of 24 months.

 

2.5) User Profile

The “USER PROFILE” section of the site requires the user to fill in certain personal data (email address is mandatory; residential address and telephone number are optional). The data are requested to enable website features reserved for registered users (e.g., product registration and/or purchasing a product on the inglesina.com website and/or joining the Inglesina Membership, as provided for in the relevant Regulations). Providing data is necessary to use the relevant services. The legal basis for processing lies in Art. 6(1)(b) of the GDPR. Data will be stored until a request for erasure is made by the data subject, subject to legal obligations and/or legitimate interests of the controller.

 

2.6) Data provided by the user for downloading informative and promotional material

Downloading informative or promotional material requires the user to fill in certain personal data. The data will be processed exclusively to provide a specific response to the request for downloading informative and promotional material submitted by the user. Providing data is necessary to provide the material requested by the user. The legal basis for processing is the consent provided by the data subject pursuant to Art. 6(1)(b) of the GDPR. Data will be stored until a request for erasure is made by the data subject.

 

2.7) Participation in online training events

Participation in online training events requires the user to fill in certain personal data. The data will be processed exclusively to provide a specific response to the user's request. Providing data is necessary to participate in the online training event. The legal basis for processing lies in Art. 6(1)(a) and (b) of the GDPR. Data will be stored for 3 months from the time of transmission.

 

2.8) Processing for marketing purposes

We will process your personal data to manage your newsletter subscription. Processing for marketing purposes includes, by way of example, sending commercial and promotional information relating to our products via email. The Newsletter subscription can be cancelled at any time through:

• The specific link at the bottom of each newsletter;

• The specific link indicated in the Personal Area;

• A request through the "Contact Us" section of the website.

The legal basis for processing is the consent provided by the data subject pursuant to Art. 6(1)(a) of the GDPR. Data will be stored until a request for erasure is made by the data subject and in any case no later than 24 months from the date of the last interaction with the Controller (in fact, our newsletters incorporate a tracking feature, which allows each email opening to update the consent date for marketing purposes provided by you upon registration for our services. Marketing consents will not be updated if the requester is unsubscribed with a date prior to the opening of the email).

 

2.9) Use of chatbot

Normally, the use of the chatbot does not involve any processing of personal data; however, in the event of a request to be contacted by a human operator, or in the case of a request for information on your e-commerce orders, we may request some common personal data. We will process your personal data to manage the request to be contacted by an operator or to provide information regarding an order. The legal basis lies in the performance of a contractual or pre-contractual relationship to which the data subject is party (Art. 6(1)(b) GDPR). Data retention occurs for a period of one year.

 

3) Transfer of personal data to third countries or international organisations 

L’Inglesina Baby S.p.A. hereby informs you that personal data collected for the purposes indicated above may be transferred to countries outside the European Union or the European Economic Area (EEA).

Such transfers will take place exclusively in full compliance with the conditions set out in Chapter V of EU Regulation 2016/679 (GDPR), ensuring that the level of protection of natural persons is not undermined.

In particular, data transfers may take place on the basis of:

• Adequacy Decisions: transfers to countries that the European Commission has determined ensure an adequate level of protection (e.g. EU-US Data Privacy Framework for the United States);
  
• Appropriate Safeguards (Art. 46 GDPR): in the absence of an adequacy decision, the transfer will be governed by binding legal instruments, such as the Standard Contractual Clauses (SCC) approved by the European Commission;
  
• Binding Corporate Rules (BCR): where the transfer takes place within a multinational group of companies;
  
• Specific Derogations (Art. 49 GDPR): limited to exceptional situations and subject to the explicit consent of the data subject, or where necessary for the performance of a contract.

Rev. March 2026