Privacy policy
This Policy describes which of your personal data are collected by TRISTATE INTERNATIONAL SA (referred to in this notice as “we”), for which purposes and how they are processed.Below you will also find the necessary information to enforce your rights provided for by GDPR.
Generally, we collect your personal data when you create an account on our online store https://bespoke.cpcompany.com/, (hereinafter “Store”), when you purchase the customizable products available for the sale on the Store, when you email or call us for assistance. We hereby inform you that the personal data collected during such procedures will be processed in order to reply to your requests, to allow you to benefit from the services offered on the Store through reserved areas (for instance to process your orders and carry out the related activities, including those required to fulfil tax and administrative obligations, and, whenever requested by you, to send newsletters and information material) as well as to provide better services, marketing and support services for you and for the other customers, as specified below.
1. Who processes your data: Data Controller
Tristate International SA,
Via Canova, 9
Lugano,
CHE 147076577
is the Data controller of the processing of your personal data.
2. Which data we use - Type of processed data
Your contact and account data.We will retain the contact details you provide us (for instance, your first name, surname, address, telephone number, email, country of residence) when you first create an account on our Store, when you purchase a product and/or when you take part in our competitions or promotions.
Your payment and invoicing data. We will retain the payment and invoicing data that you provide us (for instance, your credit card number, post code and address) when you purchase a product, in order to process your order and ship the products. At your request, we can also retain the payment and invoicing details in order to facilitate future purchases.
Website use data.Your use of our website implies the processing of the browsing data and the device that you are using and your IP address (this is the number that identifies a specific device connected to the internet and is required in order for your device to communicate with the websites). We may analyse the site you came from, what you did and what you did not do on our website.
3. Where do we get your data - Data collection methods:
Directly from you. For instance, if you register to make a purchase on the Store, if you create an account, if you take part in a competition, if you ask us a question or contact our call centres.
If you do not provide us with your data, you will not be able to register with our Store and you will therefore not be able to purchase any of the products up for sale.
Through the use of the Store’s functionalities. We use cookies and other technology, such as pixel tags on our websites and emails in order to collect data concerning your behavioural information and to improve promotion targeting. To find out more, please read out our Cookie Policy.
4. Why and for how long we process your data- Purpose and legal basis for data processing; data retention period
To provide you with the products and services you purchased and to give you information about your orders and payments. For instance, we will use your data to process your order, to confirm your purchase and to manage any related services such as the shipping of your purchased products. Without your data, we cannot manage and process your order.
The legal basis of this processing is the performance of the purchase agreement, of which you are a party from the moment you accept the Store’s terms and conditions of sale.
The data retention period is equal to the period required to process the order; should you have created an account with the Store, the period shall be 24 months from the collection of the data.
To provide you with the necessary after-sales support in compliance with applicable legislation relating to the product liability. For instance, we will use your data to provide you with support, to manage the return and/or repair of products that you purchased from our Store in accordance with applicable law and the Store’s terms and conditions of sale.
The legal basis of this processing is the compliance with legal obligations and the data retention period is equal to that required by law (specifically by the Italian Consumer Code).
To correctly manage your administrative status.We process your data for accounting, administrative and tax purposes, directly connected to the Data Controller’s business activities as required by the applicable legislation.
The legal basis of this processing is the compliance with the legal obligations and the retention period is equal to that required by law (specifically tax, anti-money laundering, banking and public security laws).
To let you to interact with customer care operators. We may use your email and phone number, as well as your name and/or address to assist you in the event you require support using the products purchased from the Store.
The legal basis of this processing is the performance of the sale and purchase agreement that you executed with Tristate when you accepted the Store’s terms and conditions of sale and the compliance with the legal obligations in terms of warranties and customer care.
To monitor and improve our products and the Store.With your consent, we analyse the data concerning your use, preferences and consumption of our products in order to improve our approach towards you and our customers in general, through automated processings, including profiling. We do this in order to make better decisions related to services, advertising, products and content, based on greater awareness of how our customers use our services and to ensure you a more customized user experience. For such pupose, we may also collect your mobile device’s ID for advertising (IDFA - Identifier for Advertising - for iOS devices and AAID - Google Advertising ID - for Android devices) so that we can always provide you with targeted, relevant adverts based on your preferences and interests.
The legal basis of this processing is your explicit consent.
The retention period of your data is 12 months from the collection of your data.
To prevent or assess unlawful conducts, to protect and enforce our rights. For instance, we may use your data to prevent or prosecute the breach of our intellectual property rights (for example, counterfeiting of our brands and/or of our partners' brands) or theft (including credit card cloning and theft that we may believe occurred during a competition, contest or event) or other offences, as allowed by applicable law
The legal basis of this processing is the legitimate interest of the Data Controllers.
The retention period of your data is equal to the time that is reasonably necessary to enforce our rights from the moment we became aware of the offence or of its potential commission.
For marketing purposes. With your prior consent, you may be contacted by email, text message, telephone or by other means with information or offers concerning forthcoming events, products or services (including the newsletter).
The legal basis of this processing is your explicit consent.
The retention period of your data is 12 months from the collection of your data.
Other purposes permitted by law. In certain circumstances, we may process your data if Tristate International SA has a legitimate interest, in accordance with Article 6, paragraph 1 (f) of the GDPR.
For the above-mentioned purposes, personal data are processed using manual, digital and online tools with a software that is closely connected to the said purposes and, in any case, such data are processed so as to ensure the safety and confidentiality of the said data in accordance with the applicable legislation.
5. Where your data are processed – Transfer of data
The Data are processed and stored at the offices of Tristate International SAat Via Rime 38, 6850 Mendrisio (CH).
6. With whom we share your data – recipients of personal data
Being understood that, where required by law, we will obtain your prior consent and complete any formalities required by said law, we may share your data with the following third parties (acting as external processors):
Our service providersWe may share your data with third parties in order for them to provide us with services (for instance, IT service providers for the management of the Store, couriers, and companies managing call centres and warehouses and providing logistics services) but in such cases, we will enter into an agreement with them pursuant to Article 28 of the GDPR in order to protect your data. These parties will only be in possession of the data required to perform their functions and shall only use it for the purpose of providing services on our behalf or complying with the law. You can find out the details of these processors pursuant to Article 28 of the GDPR by sending an email to privacy@eu.tristateww.com. In the event any of these providers operates outside the EU, before transferring any data to such providers we will secure compliance with the relevant conditions under art. 45-47 of GDPR.
Where we deem it necessary in order to comply with our legal obligations or to legally protect ourselves or third parties.Where permitted or required by the law, we may also share the data requested by an administrative authority or by another authorised third party or organisation, in order to protect or enforce our rights or those of third parties, or to limit or prevent fraud (including credit card fraud or other fraud, that we believe may have occurred during a raffle, promotion or event) and other offences.
7. Minors
Our Store is not intended for minors under the age of 16, but rather for adults. If you are a parent or guardian and you believe your child may have sent us their personal data, please feel free to contact us at privacy@cpcompany.com.
8. Security Measures
We adopt the security measures required by law.
We adopt security measures to protect your data. The standard security measures we use depend on the type of data that we process, and meet the requirements provided for by law and by the standards of European governmental agencies.
9. Your rights
You can contact Tristate International SA to request the access to, the rectification or erasure of your personal data, or the restriction of the processing, or to object to the processing and to request the portability of your data; you can also withdraw your consent at any time (this shall not affect the lawfulness of processing based on consent granted before its withdrawal).
When you exercise your right of access, you have the right to know whether your data is being processed, as well as the purpose of the processing, the categories of data being processed, the recipients or categories of recipients to whom your data have been disclosed (and, if they reside in a third country, the guarantees in place), the retention period for your data (or the criteria for determining the retention period), whether automated processing is being carried out (for instance through profiling), the reason for the processing, and the source of the data (when not initially collected by us).
You have the right to submit a complaint to the Italian Data Protection Authority and to request to the Data Controller, at any time, information about the processors and the parties that are authorised to process your data.
You can exercise your rights by contacting Tristate International SA (at the address mentioned above or by sending an email to: privacy@eu.tristateww.com).
In any case, you can amend or withdraw your consent through the Store's settings.
You can withdraw your consent to receive marketing communications including newsletters. To stop receiving marketing communications, you can access your account and change your settings or follow the instructions in the promotional message that you’ve received. Alternatively, you can withdraw your consent by emailing one of the addresses mentioned above.
You can control and disable cookies and other profiling tools. To find out how we use cookies and other profiling tools, click here.
You can amend your preferences regarding marketing emails and data processing through profiling in the privacy settings of your account or by writing to one of the email addresses mentioned above.
10. What happens if we amend this Policy
We may amend our privacy policy. We will notify you in relation toany such changes, in accordance with the law. We will also publish an updated version on our website. It will have a different date and version number to the ones shown below. Please visit the site periodically to check for updates.