Privacy Policy

This policy indicates the personal data we collect when you use this website or visit our boutiques and describes the rights you have as a “Data subject”. We reserve ourselves the right to update the content of this page periodically, so we invite you to consult it regularly.

 

Who is the Data Controller?

The Data Controller is Antonio Marras S.r.l., with legale seat in Alghero (SS), Località Salondra n. 64, e-mail data.protection@oniverse.it

 

What personal data do we collect and for what purpose?

You may find below a list of all the purposes for which we collect your personal data.

 

Browsing

Purpose: to allow web browsing; to carry out aggregate statistical analysis aimed at measuring the correct functioning of this website.

Processed data: IP addresses, domain names, URIs. These data are acquired by the IT systems responsible for the proper functioning of this website.

Legal basis: Provision of services aimed at allowing users to browse this website; legitimate interest consisting in ensuring the proper functioning of IT systems

Retention period: 30 days after the collection, unless legal provisions or provisions of Public Authorities impose a different retention time in relation to investigations related to any computer crimes.

 

Online Products Purchasing

Purpose: fulfilment of online purchase orders and performance of related activities (sending of goods, invoicing, payment management, shipment tracking, delivery of goods, possible activation of the return and refund process of the order, management of the return, etc).

Processed data: contact details (name, surname, e-mail address, telephone number) and shipping address. We do not process the data relating to the payment method indicated by you (e.g. payment card number and security code), which are instead collected exclusively by the chosen payment service provider.

Legal basis: execution of the sales contract.

Retention period: time necessary to fulfil the contractual and regulatory obligations regarding the purchase and sale of products (e.g. tax legislation).

 

Customer Care 

Purpose: we provide you with an assistance service (via chat, telephone, e-mail, online form) for any request relating to the purchase of our products or the use of our services.

Processed data: data necessary to reply to the requests that you will address to our Customer Care.

Legal basis:execution of the contract for the purchase and sale of products or pre-contractual measures adopted following your request;

Retention period: time strictly necessary to fulfil your requests.

 

Sending of commercial communications ("Direct Marketing")

Purpose: with your consent, we will send you commercial communications regarding our products, services and offers via e-mail, landline, mobile phone, instant messaging services (e.g. WhatsApp), post and social media channels (e.g. Facebook, Instagram, etc.). We may also conduct market research and surveys to detect your level of satisfaction with Antonio Marras products.

Processed data: contact details (e.g. name, surname, e-mail address, telephone number).

Legal basis: your consent that you may revoke at any time by writing to data.protection@oniverse.it or by clicking on the links contained in the footer of our communications.

Retention period: until you revoke your consent.

 

Profiling

Purpose: with your consent, we will send you personalised commercial communications based on your profile, purchasing and browsing habits. In addition, our client advisors will be able to assist you in all our boutiques with information on colours, models and sizes relating to purchases made in our stores. 

Processed data: data relating to your purchases, your country of origin, your gender and your age, your interaction with us through our website. We may also enrich your profile with information lawfully acquired from third parties and made available to Antonio Marras, with statistical information (e.g. demographic information, georeferencing data, etc.) as well as information relating to the electronic tools you use to interact with us.

Legal basis: your consent that you may revoke at any time by writing to data.protection@oniverse.it

Retention period: the data relating to your interactions with us will be kept for 12 months from the date of collection; the information relating to your purchases will, on the other hand, be kept for 5 years starting from the date of each purchase.

 

Reserved area registration 

Purpose: creation of a reserved area ("account") that will allow you to save some content (e.g. your purchase history, etc.).

Processed data: personal details and contact information provided in the online form for registering for the reserved area. Some fields specifically marked are to be considered mandatory: should this information not be provided, we will not be able to provide you with the service you have requested.

Legal basis: execution of the website registration contract.

Retention period: your account and the data associated with it will be deleted if the account is not used for more than 5 years.

 

Participation in events

Purpose: to enable booking and participation in events organised by the ‘Antonio Marras’ brand.

Processed data: personal details and contact data  requested in the online form dedicated to the booking of our events: data marked with an asterisk are essential for completing the booking; should they not be provided, it will not be possible to make the booking.

Legal basis: execution of pre-contractual measures taken at your request.

Retention period: for the entire duration of the event to which the booking refers.

 

To whom do we communicate your data? 

To achieve the mentioned purposes, we need to communicate them to these categories of subjects:

  • Staff of Antonio Marras S.r.l., in charge of managing our website and the services available online and at our stores;
  • Suppliers of Antonio Marras S.r.l. (e.g. IT service and platform providers, consultants) in their capacity as data processors;
  • Credit institutions, companies that carry out shipping and transport services, insurance companies: these subjects act as independent Data Controllers and their involvement is necessary to carry out necessary operations related to the use of our services (e.g. making payments; deliver the purchased goods).

 

Do we transfer your personal data to countries outside the EU?

The personal data collected may be transferred outside the European Union. In this case, the transfer will take place in compliance with the provisions of EU Regulation 2016/679 (‘GDPR’) (in particular, the data will only be transferred after signing the Standard Contractual Clauses approved by the EU Commission with Decision No. 2021/914/EU or to countries that can guarantee an adequate level of personal data protection and are therefore subject to an Adequacy Decision adopted by the EU Commission).

 

What are the rights that you may exercise as data subject?

You may exercise the rights guaranteed by the GDPR regarding your personal data by writing to data.protection@oniverse.it. We will reply to your request as soon as possible and, in any case, no later than thirty days after receiving your request. If, in relation to your request, it is necessary to verify your identity, we may ask you for additional identifying information or an identity document. In particular, you may exercise the following rights:

  • Right of access, i.e., the right to know if a processing of personal data concerning you is in progress and, if confirmed, to obtain a copy of such data and be informed about: the origin of the data, the categories of personal data processed, the recipients of the data, the purposes of the processing, the existence of an automated decision-making process (including profiling), the data retention period, the rights provided for by the GDPR;
  • Right to obtain the rectification or integration of your data;
  • Right to obtain the deletion of personal data if such data are no longer necessary for the purposes for which they were collected, or if we are no longer authorized to process them;
  • Right to obtain the limitation of the processing of personal data in the following cases: i) you have contested the accuracy of the personal data. You can request a processing limitation for the period necessary to verify the accuracy of the data; ii) we are no longer authorized to process the data, and instead of deleting them, you can ask us to limit their use; iii) if the personal data in our possession, despite being no longer necessary for the purposes for which they were collected, are necessary for you to ascertain, exercise or defend a right in court;
  • Right to data portability, i.e., the right to receive personal data concerning you in a structured format, commonly used and readable by an automatic device, as well as the right to request for such data to be transmitted to another Data Controller;
  • Right to revoke the consent, for the processing based on it;
  • Right to oppose at any moment to the processing of personal data based on our legitimate interest.

 

You also have the right to lodge a complaint with the competent data protection supervisory authority if you believe that the processing of your data conflicts with the provisions of the applicable laws.

 

Last update: September 2025