Privacy Policy

AWARDS SHOES S.R.L. informs users of the website brunopremi.com about the processing of their personal data, pursuant to articles 13 and 14 of Regulation (EU) 2016/679 and to Legislative Decree no. 196 of 30 June 2003, as amended by Legislative Decree no. 101 of 10 August 2018. On this page you will find which data we collect, for what purposes, on what legal basis, for how long we keep it, to whom it may be disclosed and which rights you can exercise.

This policy covers only the website brunopremi.com and not third party websites reachable through links. At specific collection points, additional short notices may be presented which supplement this policy without replacing it.

1. DATA CONTROLLER

The data controller is AWARDS SHOES S.R.L., registered office at Via dell'Industria 14, 35020 Brugine (PD), Italy, tax code and VAT number 05539300284, registered with the Companies Register of Padua under REA no. 474561, certified email awardsshoes@lamiapec.it, email support@brunopremi.com.

No Data Protection Officer has been appointed, as the conditions of article 37 of the Regulation do not apply. For any matter relating to personal data you can write to support@brunopremi.com.

2. WHAT DATA WE PROCESS

Depending on how you use the website, we may process:

  • browsing and technical data: IP address, browser, operating system, device, pages visited, date and time of access, referring page, server logs
  • identification and contact data: first name, last name, email, telephone, shipping and billing address
  • purchase data: products purchased, amounts, payment method, order number and status, order history, returns and refunds
  • payment data: we do not collect or store the full details of payment instruments, which are processed directly by the payment service providers. We only receive the outcome of the transaction and minimal data that cannot be used to make a payment
  • tax data: tax code or VAT number, where needed for the tax document
  • account credentials: email and password, the latter stored in encrypted form
  • behavioural and interaction data: products viewed, abandoned carts, opening of our emails and clicks on content
  • preferences and consents, with date and method

We do not request and do not intentionally process special categories of data within the meaning of article 9 of the Regulation. Please do not enter any such data in the free text fields of the website.

3. PURPOSES, LEGAL BASES AND RETENTION PERIODS

3.1 Operation and security of the website
Delivery of the website, stability, prevention of abuse and unauthorised access.
Legal basis: our legitimate interest in the security and proper functioning of our systems, article 6(1)(f).
Retention: technical logs for a maximum of twelve months, unless unlawful acts are being investigated.

3.2 Performance of the purchase contract
Order management, collection of payment, preparation and delivery, service communications, account management.
Legal basis: performance of a contract to which you are party and pre contractual measures taken at your request, article 6(1)(b).
Retention: ten years from the end of the relationship, in line with the ordinary limitation period for contractual rights and with accounting retention obligations.

3.3 Tax, accounting and administrative obligations
Issue and retention of tax documents, accounting records, compliance with requirements towards the authorities.
Legal basis: compliance with legal obligations, article 6(1)(c).
Retention: ten years from issue of the document, or the longer period set by specific rules.

3.4 Returns, withdrawal, legal guarantee and complaints
Handling of returns, refunds, lack of conformity and complaints.
Legal basis: performance of the contract and legal obligations, article 6(1)(b) and (c).
Retention: together with the order data, for ten years.

3.5 Customer service
Handling of enquiries received through the contact form or by email.
Legal basis: performance of the contract or of pre contractual measures, article 6(1)(b); if the enquiry is not connected to a contract, our legitimate interest in replying, letter (f).
Retention: 24 months from closure of the enquiry.

3.6 Fraud prevention
Anti fraud checks on orders and payments.
Legal basis: our legitimate interest and that of third parties in preventing fraud, article 6(1)(f).
Retention: together with the order data.

3.7 Marketing communications, subject to consent
Sending by email of newsletters, promotional communications and information about new collections, initiatives and offers. Communications are personalised on the basis of the products you have purchased and viewed and of how you interact with the messages you receive.
Legal basis: your freely given, specific, informed and revocable consent, article 6(1)(a) of the Regulation and article 130 of Legislative Decree no. 196/2003.
Withdrawal of consent: at any time, as easily as it was given, through the link at the bottom of every communication and through the preference management page.
Retention: until consent is withdrawn, with periodic review of your interest and a possible request for confirmation in the event of prolonged inactivity. Evidence of consent and of its withdrawal is kept for a further five years for the sole purpose of demonstrating compliance with legal obligations.

3.8 Profiling for marketing purposes
Analysis of purchase, browsing and communication interaction data, in order to build recipient segments and estimates of your interests and to send more relevant communications, including automated communications triggered by specific behaviour such as not completing an order.
Legal basis: your consent, given by submitting your email address through the subscription form, which sets out the purposes pursued, article 6(1)(a).
Retention: until consent is withdrawn, with periodic review of your interest and a possible request for confirmation in the event of prolonged inactivity.

3.9 Detection of email opens
Our communications may contain invisible markers which, when the message is opened, allow us to detect that the email has been opened together with related information such as date and time, device type and email client. We use this information to measure the effectiveness of our communications and to personalise subsequent messages.
Legal basis: your consent, article 6(1)(a) of the Regulation and article 122 of Legislative Decree no. 196/2003.
Granular withdrawal: you can refuse tracking while continuing to receive our communications as normal. Every email contains a dedicated link for managing tracking preferences, separate from the unsubscribe link, allowing you to choose whether to receive emails with tracking, receive them without tracking or stop receiving them. Refusing tracking in no way limits the service or your ability to make purchases. The choices you make are recorded.
Retention: until consent is withdrawn, with periodic review of your interest and a possible request for confirmation in the event of prolonged inactivity.

3.10 Advertising and measurement on third party platforms
Measurement of campaign effectiveness and delivery of personalised advertising on third party platforms, by means of pixels, conversion interfaces and similar technologies.
Legal basis: your consent given through the cookie preference management tool, article 6(1)(a) of the Regulation and article 122 of Legislative Decree no. 196/2003.
Retention: according to the periods indicated in the Cookie policy and in the notices of the individual providers.

3.11 Defence of rights
Establishment, exercise and defence of a legal claim of ours.
Legal basis: our legitimate interest, article 6(1)(f).
Retention: for the duration of the dispute and until the deadlines for appeal have expired.

4. PROFILING AND AUTOMATED DECISION MAKING

The profiling described in section 3.8 consists in building recipient segments and estimates of interests and propensity to purchase. The only consequence for you is receiving differentiated communications. This profiling does not give rise to automated decisions producing legal effects or similarly significantly affecting you.

If you choose a deferred or instalment payment method, the service provider, acting as an independent controller, may carry out an automated assessment of your creditworthiness, the outcome of which may lead to the payment method being refused. The assessment is carried out by the provider and not by us. The related rights, including the right to obtain human intervention, to express your point of view and to contest the decision, must be exercised towards the provider in accordance with its privacy policy.

Apart from what is described above, we do not carry out decision making based solely on automated processing within the meaning of article 22 of the Regulation.

5. COOKIES AND TRACKING TOOLS

The website uses cookies and similar technologies. Technical cookies are installed on the basis of article 122 of Legislative Decree no. 196/2003 and do not require consent. Non anonymised analytics cookies, profiling cookies and third party cookies are installed only with your prior consent, given through the banner shown on first access, which you can change or withdraw at any time through the preference management link. For the full list, see the Cookie policy.

6. WHO WE SHARE DATA WITH

Data is processed by our authorised staff, instructed pursuant to article 29 of the Regulation, and may be disclosed to the following categories of recipients.

Parties who process personal data on our behalf and on our instructions:

  • the provider of the e-commerce platform, hosting and related technology services
  • the provider of the email marketing and contact management platform
  • the providers of logistics, order fulfilment and shipping services
  • the providers of IT, development, maintenance and technical support services
  • the agencies and external consultants appointed for communication and marketing activities
  • the professionals and companies providing us with support services, when acting on our instructions

Parties acting as independent controllers:

  • the payment service providers used on the website, for the execution, verification and security of transactions
  • the carriers and couriers appointed for transport, who receive the data needed for delivery
  • our tax and accounting adviser, within the scope of their professional obligations
  • public authorities and supervisory bodies, in the cases provided for by law or at their request

Limited to the data collected through the measurement and advertising tools of Meta, Facebook and Instagram, we and Meta Platforms Ireland Limited act as joint controllers for the collection and transmission of the data, on the terms set out in the contractual conditions made available by the platform, the essential content of which can be consulted on its website. Subsequent stages are carried out by the platform as an independent controller.

The provider of the e-commerce platform, in addition to acting as a processor on our behalf, processes certain data as an independent controller for its own purposes of providing and improving its services. It is directly responsible for such processing, including in relation to requests to exercise data subject rights, in accordance with its own privacy notice.

Data is not disseminated and is not transferred to third parties for their own marketing purposes. An up to date list of processors is available by writing to support@brunopremi.com.

7. TRANSFERS OF DATA OUTSIDE THE EUROPEAN ECONOMIC AREA

Some of the providers listed in section 6 are based outside the European Economic Area or use infrastructure located there, in particular in the United States of America. Data may therefore be transferred to such countries, exclusively where one of the safeguards set out in Chapter V of the Regulation is in place: an adequacy decision of the European Commission pursuant to article 45, the provider's participation in an applicable adequacy framework, or the standard contractual clauses adopted by the Commission pursuant to article 46(2)(c), supplemented where necessary by additional measures. You can request information on the safeguards applied to each provider by writing to support@brunopremi.com.

8. NATURE OF THE PROVISION OF DATA

Providing the data marked as mandatory in the website forms is necessary in order to conclude and perform the contract, to issue tax documents and to create an account. Refusal makes it impossible to complete the order or to activate the service requested.

Providing data for the purposes based on consent is entirely optional, and refusing or withdrawing consent in no way affects your ability to make purchases and to use the services of the website.

9. YOUR RIGHTS

Within the limits set by law, you can exercise the right to:

  • access your data and information about the processing, article 15
  • rectification of inaccurate data and completion of incomplete data, article 16
  • erasure, article 17, in the cases provided for
  • restriction of processing, article 18
  • data portability, article 20
  • object to processing, article 21
  • not be subject to decisions based solely on automated processing, article 22
  • withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand, article 7(3)

Right to object. You can object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest. You can also object at any time and without giving reasons to processing for direct marketing purposes, including the profiling connected to it.

To exercise your rights, write to support@brunopremi.com or to AWARDS SHOES S.R.L., Via dell'Industria 14, 35020 Brugine (PD), Italy. We reply without undue delay and in any case within one month, a period which may be extended by a further two months for particularly complex requests, of which we will inform you.

You can in any case manage your preferences and unsubscribe from marketing communications through the link at the bottom of every email and through the preference management page, free of charge and without having to submit a request.

Without prejudice to any other remedy, if you believe that the processing infringes the Regulation you have the right to lodge a complaint with the Italian Data Protection Authority, pursuant to article 77, Piazza Venezia 11, 00187 Rome, protocollo@gpdp.it, www.garanteprivacy.it.

10. MINORS

The products on the website are intended for adults with the legal capacity needed to enter into a contract. Services requiring consent, such as subscribing to marketing communications, are reserved for those aged fourteen and over, pursuant to article 2-quinquies of Legislative Decree no. 196/2003. We do not knowingly collect data of children under fourteen and, if we become aware of it, we erase it without delay. Holders of parental responsibility can report this by writing to support@brunopremi.com.

11. SECURITY MEASURES

We process data using automated tools and, where necessary, manually, adopting appropriate technical and organisational measures pursuant to article 32 of the Regulation, including encryption of communications through the HTTPS protocol, encryption of credentials, restriction of access to authorised staff on a need to know basis and selection of providers offering sufficient guarantees.

12. CHANGES TO THIS POLICY

We may amend or update this policy as a result of changes in the law or in the services offered. The updated version is published on this page with the date on which it was last updated. Where changes are substantial and affect processing based on consent, we give specific notice.

This document is drawn up in Italian. In the event of any discrepancy between the Italian version and versions in other languages, the Italian version prevails.

Last updated: 21 September 2026