Privacy Policy

Information notice pursuant to Art. 13 of the Regulation (EU) 2016/679 (“GDPR”)


Personal data

Any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (such as name, last name, date of birth, address, email, telephone number).

Browsing data

During their ordinary course of operation, the IT systems and software procedures required to run this website acquire certain Personal Data, whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified Data Subjects but, by its very nature, it could enable identification of the users through the processing and matching of data held by third parties. This data category includes IP addresses or domain names of computers used by the users who visit the site, as well as the URI addresses (Uniform Resource Identifier) of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in reply, the numerical code indicating the status of the reply from the server (done, error, etc.) and other parameters related to the operating system and the IT environment of the user.

Data provided voluntarily by the user

The optional and voluntary disclosure of personal data (e.g.: sending of emails to the email addresses indicated on this website and/or the completion of a data collection form on this website) entails the collection and processing of the voluntary disclosed user’s data, necessary to reply to the request, as well as other personal data included in the email message (such as name, last name, address, telephone number, email address).


To get more info on cookies used in this website please read our Cookie Policy.


Data Controller, pursuant to art. 4 and art. 24 of the Regulation (EU) 2016/679 is ONIRO Group s.r.l., with registered address in Via Montesolaro, 14/b – 22063 Cantù (CO), represented by the legal representative pro tempore. You can contact the Controller at any time at the following contacts: email



Legal basis

Data retention

Nature of data provision

Browsing on this website

Controller’s legitimate interest

See cookie policy

The provision of data is necessary for the navigation of the website.

Use of cookies and similar technologies.

For non-technical cookies, processing is based on consent

See cookie policy

For technical cookies, the provision of cookies is necessary to enable browsing.


For non-technical cookies, optional; failure to consent will not affect navigation on the site


In addition to navigation, personal data will be processed for:


Legal basis

Data retention

Nature of data provision

A) Request for informations – contacts

Controller’s legitimate interest 

1 year

The provision is optional. Failure to provide personal data may only result in the impossibility of obtaining the information or services requested provided through this website.

B) Soft spam: direct e-mailing marketing in order to promote goods or services similar to those already purchased by the data subject

Controller’s legitimate interest 

Until users’ objection (opt-out)

The provision is necessary in order to provide communications relating to products purchased by the data subject

C) Subscription to the newsletter service for brands Jcp, Etro, Ferre', Roberto Cavalli, Collection (direct marketing)


Withdrawal of consent – opt out

The provision is optional. Failure to provide personal data may result in the impossibility of obtaining the services requested provided through this website.

D)  Creating an account on this website


Until deletion from the platform. 

The provision of your personal data is necessary for the creation of your account. Failure to provide personal data may result in the impossibility of creating an account.

E) E-COMMERCE: sale of products online; management of after-sales services (returns, refunds); related administrative and accounting activities.

Purchases can only be made by registering on the website and creating an account.


Legal obligation

For invoicing, storage in accordance with legal obligations

For the account: until deletion from the platform.

The provision of personal data is necessary to process your order. Failure to provide may result in the impossibility to proceed with your order.


The personal data provided will be communicated to recipients, who will process the data as processors (Article 28 of the GDPR), as persons acting under the authority of the Controller and Processor (Article 29 of the GDPR) or autonomous Data Controllers, for the purposes listed above. Precisely, the data will be communicated to: - subjects dealing with the shipment of orders; - subjects dealing with online payment; - parties that provide services for the management of the information system and telecommunications networks used by the Data Controller (including email, the web platform, newsletter platform); studies or companies in the context of assistance and consultancy relationships; competent authorities for compliance with legal obligations and / or provisions of public bodies, upon request.


The personal data provided will be not transferred outside EEA.


You may exercise your rights pursuant to article 15 et seq. of the GDPR, contacting the Data Controller at In particular, you have the right, at any time, to request the Data Controller to access your personal data and receive the information concerning their processing and to amend or delete your data or limit their processing. With reference to the art. 6(1) point (a) (consent), you have the right to withdraw the consent given at any time. Furthermore, you have the right to object, at any time, to processing of your personal data pursuant to art. 6(1) point (f) GDPR (Data Controller’s legitimate interest). If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for this purpose, by sending an e-mail to the address or by clicking on automatic removal link present in the individual communications that you received. In exercising your right to data portability. In the event that you believe that the processing of personal data violate the provisions of GDPR, you have the right to lodge a complaint to the supervisory authority or to appeal the judge.


The Controller reserves the right to amend, update, supplement or remove parts of this Privacy Policy at its own discretion and at any time. We encourage you to periodically review our Privacy Policy. For your convenience, when we post changes, we will revise the “last update” date of the Privacy Policy.

Last update: 17/02/2022

To Top