PRIVACY POLICY

This Privacy Policy describes the procedures and purposes of the processing by the company Memphis S.r.l. with a sole shareholder, having its registered office in Pregnana Milanese (Milano), via Olivetti No. 9, registered in the Companies Register of the Milan Chamber of Commerce, Financial and Administrative Information Index No. MI-1079287, tax code/VAT No. 06196580150, Tel.: (+39) 02 93290663; Fax: (+39) 02 93591202; e-mail: store@memphis-milano.it (“Memphis”), of the personal data of users (the “users”), who access and use the website www.memphis-milano.com (“memphis-milano.com” or the “website”) and of users (the “customers”) who order and purchase through the website design furniture and objects by the most famous Italian and foreign designers, which are manufactured and distributed, under licence, by Memphis (the “products”) and are included in the Memphis on-line catalogue (the “catalogue”).

This Privacy Policy is binding on any user who accesses and uses the website and any customer who has placed an order with Memphis, through the website, for the purchase of one or more products (the “order”). The user and the customer declare that they have read and that they are aware and accept the Privacy Policy. Memphis recommends users and customers to carefully read the Privacy Policy before accessing and using the website and before placing an order through store.memphis-milano.com.

The information contained in our Privacy Policy is provided pursuant to article 13 of Legislative Decree June 30th 2003, no. 196 – Personal Data Protection Code (“Privacy Code”) to all the users accessing and using store.memphis-milano.com and to all the customers ordering and purchasing products through the website.

PERSONAL DATA CONTROLLER

Pursuant to the Privacy Code, the Data Controller of the personal data of users and customers is Memphis. Personal data are processed solely by authorised staff of Memphis, through remote access to the server hosting the website at the server farm of third eYe consulting of Zamagni Gianluca, having its registered office at Via Delfico, 12 – Rivazzurra di Rimini (RN), VAT code 03564440406.

The website and the personal data of users and customers of Memphis may therefore be accessed by individuals authorised by Memphis, such as its technical staff and any other individuals in charge of occasional maintenance of the website itself. Personal data are also processed at the offices of Memphis for the purpose of handling any requests and orders received from users and customers as well as for any other activity connected to the business transactions carried out through the website for the purchase, shipping and delivery of the products.

PERSONAL DATA PROCESSING PROCEDURES

Personal data are processed electronically and on paper for the time strictly necessary for the purposes for which the data were collected or subsequently processed. Memphis has implemented specific safety measures to prevent the loss of data, their unlawful and incorrect use and unauthorised access to the website and to the data themselves.

PERSONAL DATA DISCLOSURE

Memphis does not disclose users’ and customers’ personal data collected through its website under any circumstance. Personal data are disclosed for the performance of autonomous processing other than the data processing performed by Memphis by the following categories of individuals and always for the purposes set forth in this Privacy Policy and as above-mentioned: (i) suppliers of product shipping, transport and delivery services and in particular the business partners of Memphis carrying out these activities; (ii) suppliers of remote electronic payment systems, like PayPal®.

Moreover, personal data supplied by users and customers on their own initiative for the sending of advertising material and of information on products and on how to purchase same are processed for the sole purpose of providing the service or the required performance and are disclosed to third parties only where necessary for this purpose (as in the case of suppliers of the shipping services for the relevant material).

CONSENT

No consent of the user or customer is required for any processing of personal data. For example, no consent is required in the event that the user or customer accesses or visits the website or places an order to purchase products through store.memphis-milano.com; the consent is instead required for specific purposes (for example, receiving newsletters, special offers and promotions, commercial communications and advertisements). Memphis shall request the consent, from time to time, where necessary (for example during the registration process on the website or during the screen-based placing of orders for products).

TYPES OF PERSONAL DATA PROCESSED AND PURPOSES OF DATA PROCESSING

The computer systems and software procedures connected to the functionality of the website of Memphis acquire, during their normal exercise, some personal data the disclosure of which is implied in the use of the Internet communication protocols. These are pieces of information that are not collected to be associated with identified individuals, but that on account of their own nature could, through processing and association with data held by third parties, allow the identification of users.

The computer systems and software procedures connected to the functionality of the website of Memphis acquire, during their normal exercise, some personal data the disclosure of which is implied in the use of the Internet communication protocols. These are pieces of information that are not collected to be associated with identified individuals, but that on account of their own nature could, through processing and association with data held by third parties, allow the identification of users.

This information includes IP addresses or domain names of the computers used by users connecting to the website, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in reply, the numeric code indicating the status of the reply provided by the server (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment.

These data are used to the sole purpose of obtaining anonymous statistical information on the use of the website and to check its correct functioning and are immediately deleted after being processed. The data may be used to ascertain liability in the event that computer crimes are discovered by the relevant authority to the detriment of the website: with the exception of this event, data on web contacts currently do not remain more than 7 days.

Personal data concerning information supplied, on a voluntary and explicit basis by the customer, upon registration on the website, such as e-mail address, are processed solely to allow customers to easily check their current and previous product orders placed on store.memphis-milano.com and to be able to make purchases on the website faster. During the screen-based order placing process, some data concerning e-mail address, name and surname, company name, VAT number and tax code are collected, together with the relevant data on the charge of the prices for the products purchased on the website.

In respect of the sending of the newsletter of store.memphis-milano.com, Memphis will request the e-mail address only if the user or customer is interested in receiving it.

Personal data marked with an asterisk on the registration form and/or order are mandatory to allow Memphis to process the orders or to answer the specific requests of each user and customer. Failure to provide them on the part of the user or customer will solely entail the impossibility for Memphis to process the orders or to answer any specific requests. Data not marked with an asterisk are instead optional and failure to provide them does not have any consequence.

Specific summary information notices will be posted or displayed progressively on the pages of the website that are set up for specific services on demand such as for example for the sending of the newsletter of Memphis.

COOKIES

Two types of cookies are used on store.memphis-milano.com: (a) session cookies (that are not stored permanently on the user’s computer and disappear when the browser is closed); and (b) permanent cookies (that remain in the cookie file of your Internet browser for a longer period of time. Cookies are sent by our server to the user’s Internet browser. Session cookies are used to improve the navigation of its website and to collect aggregate and anonymous data. These aggregate and anonymous data are used by Memphis solely for internal purposes and are not disclosed to third parties. Session cookies are not stored on the user’s computer or on the server hosting the website; they are disappear when the user closes the Internet browser and leaves the website. Permanent cookies are used on the website to store data on the user’s computer for various purposes, among others to recover certain information that the user previously supplied (for example login and password), to help understand which sections of the website the user finds more interesting and to customize the navigation on the website based on the user’s preferences. Many Internet browsers are configured so as not to accept cookies or to alert when a cookie is sent. The user can deactivate at any time cookies from his/her Internet browser and delete cookies from his/her computer following the instructions provided by his/her Internet browser.

USER’S AND CUSTOMER’S RIGHTS

Each website user and customer have, at any time, the right to receive confirmation of the existence or otherwise of personal data on them and information on the content of same and their origin, to check their correctness or request them to be supplemented, updated or amended pursuant to article 7 of the Privacy Code. Pursuant to the same article, the user and customer also have the right to request their data to be cancelled, to be transformed into anonymous data or for the data processed in breach of the law to be blocked as well as to oppose, for legitimate reasons, their processing.

Requests can be sent to Memphis to the following e-mail address: store@memphis-milano.it.

UPDATES

This Privacy Policy may be amended by Memphis, at any time, without warning or notice to users and customers. Amendments are binding from the date of their publication on store.memphis-milano.com; therefore Memphis recommends to access the website frequently and to always read the Privacy Policy for updates. This Privacy Policy is updated to April 2012.

LINKS TO OTHER WEB SITES

The website may contain links to other web sites that are not managed or controlled by Memphis. Before accessing these sites, it is recommended to read carefully the relevant conditions for use and privacy policy before disclosing personal data. Memphis may not be held liable for the contents of these websites nor for how these websites will process personal data.

APPLICABLE LAW

This Privacy Policy is governed by Italian law.