Privacy and Cookie Policy

Types of Data collected

Among the types of Personal Data that this Application collects, by itself or through third parties, there are: Cookies and Usage Data.

Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or by specific explanation texts displayed prior to the Data collection.
Personal Data may be freely provided by the User, or, in case of Usage Data, collected automatically when using this Application.
Unless specified otherwise, all Data requested by this Application is mandatory and failure to provide this Data may make it impossible for this Application to provide its services. In cases where this Application specifically states that some Data is not mandatory, Users are free not to communicate this Data without consequences to the availability or the functioning of the Service.
Users who are uncertain about which Personal Data is mandatory are welcome to contact the Owner.
Any use of Cookies – or of other tracking tools – by this Application or by the owners of third-party services used by this Application serves the purpose of providing the Service required by the User, in addition to any other purposes described in the present document and in the Cookie Policy, if available.

Users are responsible for any third-party Personal Data obtained, published or shared through this Application and confirm that they have the third party's consent to provide the Data to the Owner.

Mode and place of processing the Data

Methods of processing

The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data.
The Data processing is carried out using computers and/or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated. In addition to the Owner, in some cases, the Data may be accessible to certain types of persons in charge, involved with the operation of this Application (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Owner. The updated list of these parties may be requested from the Owner at any time.

Legal basis of processing

The Owner may process Personal Data relating to Users if one of the following applies:

• Users have given their consent for one or more specific purposes. Note: Under some legislations the Owner may be allowed to process Personal Data until the User objects to such processing (“opt-out”), without having to rely on consent or any other of the following legal bases. This, however, does not apply, whenever the processing of Personal Data is subject to European data protection law;
• provision of Data is necessary for the performance of an agreement with the User and/or for any pre-contractual obligations thereof;
• processing is necessary for compliance with a legal obligation to which the Owner is subject;
• processing is related to a task that is carried out in the public interest or in the exercise of official authority vested in the Owner;
• processing is necessary for the purposes of the legitimate interests pursued by the Owner or by a third party.

In any case, the Owner will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.

Place

The Data is processed at the Owner's operating offices and in any other places where the parties involved in the processing are located.

Depending on the User's location, data transfers may involve transferring the User's Data to a country other than their own. To find out more about the place of processing of such transferred Data, Users can check the section containing details about the processing of Personal Data.

Users are also entitled to learn about the legal basis of Data transfers to a country outside the European Union or to any international organization governed by public international law or set up by two or more countries, such as the UN, and about the security measures taken by the Owner to safeguard their Data.

If any such transfer takes place, Users can find out more by checking the relevant sections of this document or inquire with the Owner using the information provided in the contact section.

Retention time

Personal Data shall be processed and stored for as long as required by the purpose they have been collected for.

Therefore:

• Personal Data collected for purposes related to the performance of a contract between the Owner and the User shall be retained until such contract has been fully performed.
• Personal Data collected for the purposes of the Owner’s legitimate interests shall be retained as long as needed to fulfill such purposes. Users may find specific information regarding the legitimate interests pursued by the Owner within the relevant sections of this document or by contacting the Owner.

The Owner may be allowed to retain Personal Data for a longer period whenever the User has given consent to such processing, as long as such consent is not withdrawn. Furthermore, the Owner may be obliged to retain Personal Data for a longer period whenever required to do so for the performance of a legal obligation or upon order of an authority.

Once the retention period expires, Personal Data shall be deleted. Therefore, the right to access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after expiration of the retention period.

The purposes of processing

The Data concerning the User is collected to allow the Owner to provide its Services, as well as for the following purposes: Remarketing and behavioural targeting.

Users can find further detailed information about such purposes of processing and about the specific Personal Data used for each purpose in the respective sections of this document.

What kinds of personal information does White & Co. collect and how does it collect this personal information?

White & Co. will, from time to time, collect personal information in the course of its business.

When you use our services or interact with us, either electronically (e.g. via websites, apps, social media, chats, telephone, emails and/or SMS), telephone or as otherwise permitted by law, we may collect and hold personal information about you. We may also collect personal information about you from third parties where you have agreed with them that your information may be disclosed with us, and with whom we have business relationships.

Some examples of the types of information that White & Co. collects from you and how we collect this personal information are outlined below.

If you sign up as a customer, including online or using our mobile apps: we will collect your name, date of birth, gender, delivery address, country of origin, billing address and email address. Your details will not be included in the mailing lists of any third parties. We may also collect login information (including registration passwords and usernames) and other user IDs (including for systems and third party services integrated with our service offering).

If you use a third-party authentication service or social account (for example, Google or Facebook) to log in to our website, this allows our website to make a request for data about you. If you choose to log in with an authentication service or social account, your data will be shared between those social networks and us. You should therefore stay updated on your social networks' privacy policies, and only agree to share the personal information that you wish to share. We will use the information we collect during this process to send you marketing communications unless you let us know that you want to opt-out.

If you do not sign up as a customer: we may collect general site traffic data (see the paragraphs on “When you use our websites” and “When you use our apps” below).

If you subscribe to our loyalty programs: we will collect your name, date of birth, gender, address, country of origin, delivery address and email address. We will also collect information about purchases which contributes to your loyalty spend as well as your use of the loyalty rewards or benefits.

When you place an order, including online or using our mobile apps, or browse our sites or apps: we collect your name, billing address, delivery address, email address, telephone number, information about your orders and purchases, including what, how, and when you buy from us, information about your browsing behaviour on our internet sites and apps, including promotions you activated, as well as items you have added to your carts, information collected and held via our secure financial systems about the payment method you use for your purchases from us (including payment card and transaction details), website and app browsing data (see below “When you use our websites” and “When you use our apps”), comments, feedback or survey responses. This information must be provided to allow us to effect delivery of the products that you order, and to contact you if necessary. Your email address may also be used to contact you in the event that you discontinue a shopping session. We or our service providers may contact you by email to see if there were any problems and if we can help you to complete your transaction. Other information you provide at the checkout, such as comments or survey responses is stored by us and is used to better plan future items to add and developments for our websites or apps.

If you elect to pay online using your credit card: your credit card details are not stored by us. They are encrypted and passed directly to the Bank through our security provider. You can read more about our payment systems and security in the Help section of our website.

When you use our websites: General site traffic data is collected for the purpose of site maintenance and improvement and provides information about which and how often certain pages are viewed. This helps us to understand what sorts of products our customers are interested in and alerts us to any areas of the site that may be difficult to navigate. The data we collect may include your IP address, your approximate geographic location, and data sent to us by your web browser, such as your operating system, browser type and version, computer type, MAC address and screen resolution. We may also collect metadata including social media content (including tags, handles and other social media profile information). This information may be collected directly and/or via cookies. Cookies and other tracking technologies are used by us and our third-party partners, such as our advertising and analytics partners and our fraud prevention service provides, to provide functionality and to recognise you across different services and devices. You may opt out of sending us cookie data but this may adversely affect your experience using our services.

When you use our apps: We may collect information via our apps on mobile devices or smart devices (e.g. smart watches), for example device type and model and version of your browser and, your device ID and other device metrics, as allowed by your device permission. We may also collect metadata including social media content (including tags, handles and other social media profile information) when you create your White & Co. account and authenticate with a third party social media service.

When you apply for a job with us: Personal information collected from employment applications by post or by email to White & Co. will only be used for the purpose of assessing a person’s suitability for available employment positions. Your employment application will be stored by us on file for the duration that it is relevant to the role you have applied for and then destroyed. This information will be disclosed to third parties as required for the purpose of assessing your application. The range of personal information that may be collected about applicants for employment include name, contact information (including email address, telephone number and postal address,) employment and training history and other information included as part of an application, resume or curriculum vitae. Information may also be obtained from psychological or aptitude tests and from referees.

When you engage in business with us: White & Co. may collect personal information from you when you provide it to us in the ordinary course of business, for example when you contract with us or otherwise engage with our business.

Enquiries: when you make an enquiry of us online or by phone, we may collect your name and contact details in order to respond to your enquiry.

By giving us access to this information, you are consenting to our ability to collect, store, use and disclose such information strictly in line with our Privacy Policy.

The rights of Users

Users may exercise certain rights regarding their Data processed by the Owner.

In particular, Users have the right to do the following:

• Withdraw their consent at any time.Users have the right to withdraw consent where they have previously given their consent to the processing of their Personal Data.
• Object to processing of their Data.Users have the right to object to the processing of their Data if the processing is carried out on a legal basis other than consent. Further details are provided in the dedicated section below.
• Access their Data.Users have the right to learn if Data is being processed by the Owner, obtain disclosure regarding certain aspects of the processing and obtain a copy of the Data undergoing processing.
• Verify and seek rectification.Users have the right to verify the accuracy of their Data and ask for it to be updated or corrected.
• Restrict the processing of their Data.Users have the right, under certain circumstances, to restrict the processing of their Data. In this case, the Owner will not process their Data for any purpose other than storing it.
• Have their Personal Data deleted or otherwise removed.Users have the right, under certain circumstances, to obtain the erasure of their Data from the Owner.
• Receive their Data and have it transferred to another controller.Users have the right to receive their Data in a structured, commonly used and machine readable format and, if technically feasible, to have it transmitted to another controller without any hindrance. This provision is applicable provided that the Data is processed by automated means and that the processing is based on the User's consent, on a contract which the User is part of or on pre-contractual obligations thereof.
• Lodge a complaint.Users have the right to bring a claim before their competent data protection authority.

Details about the right to object to processing

Where Personal Data is processed for a public interest, in the exercise of an official authority vested in the Owner or for the purposes of the legitimate interests pursued by the Owner, Users may object to such processing by providing a ground related to their particular situation to justify the objection.

Users must know that, however, should their Personal Data be processed for direct marketing purposes, they can object to that processing at any time without providing any justification. To learn, whether the Owner is processing Personal Data for direct marketing purposes, Users may refer to the relevant sections of this document.

How to exercise these rights

Any requests to exercise User rights can be directed to the Owner through the contact details provided in this document. These requests can be exercised free of charge and will be addressed by the Owner as early as possible and always within one month.

Cookie Policy

Cookies Policy

This Application uses Cookies. To learn more and for a detailed cookie notice, the User may consult the Cookie Policy.

Additional information about Data collection and processing

Legal action

The User's Personal Data may be used for legal purposes by the Owner in Court or in the stages leading to possible legal action arising from improper use of this Application or the related Services.
The User declares to be aware that the Owner may be required to reveal personal data upon request of public authorities.

Additional information about User's Personal Data

In addition to the information contained in this privacy policy, this Application may provide the User with additional and contextual information concerning particular Services or the collection and processing of Personal Data upon request.

System logs and maintenance

For operation and maintenance purposes, this Application and any third-party services may collect files that record interaction with this Application (System logs) use other Personal Data (such as the IP Address) for this purpose.

Information not contained in this policy

More details concerning the collection or processing of Personal Data may be requested from the Owner at any time. Please see the contact information at the beginning of this document.

How “Do Not Track” requests are handled

This Application does not support “Do Not Track” requests.
To determine whether any of the third-party services it uses honor the “Do Not Track” requests, please read their privacy policies.

Changes to this privacy policy

The Owner reserves the right to make changes to this privacy policy at any time by giving notice to its Users on this page and possibly within this Application and/or - as far as technically and legally feasible - sending a notice to Users via any contact information available to the Owner. It is strongly recommended to check this page often, referring to the date of the last modification listed at the bottom.

Should the changes affect processing activities performed on the basis of the User’s consent, the Owner shall collect new consent from the User, where required.

To opt-out click the link to networkadvertising.org/choices

Data sharing with third parties

We may disclose information we hold to any of the following:

• Our directors, officers, employees and other Associated Entities within our business
• Third party service providers or contractors who provide services or functions on our behalf such as internet service providers, IT systems administrators, mailing houses, couriers, payment processes and data entry service providers.
• Third party platforms and services who process sales, store and analyse data and information, provide web support, send marketing messages, deliver products or information. These services are hosted and managed by organisations other than ourselves.
• Our business advisors, including lawyers, accountants or other professional service providers, to the extent reasonably required;
• If required by law, to any person authorised by such law. This may include the police service, ambulance service, or government departments or regulators within Australia or New Zealand in connection with law enforcement activities; and
• For any other purpose permitted by law.