COOKIE POLICY

On this website, we use cookies to make browsing easier, faster and more interactive. This policy describes the cookies used on this website, how you can enable or disable them, and your rights regarding your personal data. We periodically update the content of this page, so we invite you to consult it regularly along with our Privacy Policy.

Data Controller and DPO

The Joint Controllers of the processing are Tezenis S.p.A. and Calzedonia S.p.A., with legal seat in via Portici Umberto Primo 5/3, Malcesine (Verona, Italy) and administrative seat in via Monte Baldo 20, Dossobuono di Villafranca (Verona, Italy), e-mail: privacy@oniverse.it. E-mail of the Data Protection Officer: dpo@oniverse.it.

What cookies do we use? How can you enable or disable them?

We use various types of cookies, which differ in type and purpose. They are divided into:

• Technical cookies: they ensure an optimal use of our website, making navigation smoother; they are therefore used solely to facilitate the use of our online services. They are necessary and cannot be disabled: without them, some features of our web pages would not be accessible or would be difficult to use. Technical cookies do not require your consent for their use, and the legal basis that allows us to use them is our legitimate interest in ensuring the proper functioning of our website. The category of technical cookies includes:

• functional cookies that enable navigation based on a series of selected criteria (e.g. language);

• analytical cookies that allow us to collect data in aggregate form (e.g. number of visitors and use of the website) for statistical analysis purposes. If the information includes identifying data (IP address), the cookies used for this purpose will be classified as “profiling cookies” and will only be active with your consent.

• Profiling cookies, used – only with your consent – to collect information about your browsing habits (e.g. pages visited, items added to your shopping cart, etc.) which we use to offer you personalised content and targeted advertising. Profiling cookies may be proprietary (or first-party) if managed directly by Tezenis S.p.A. and Calzedonia S.p.A., or third-party if owned by our commercial partners. All profiling cookies can be enabled/disabled through the cookie configurator on our website or by changing the settings of the browser you are using.

We may disclose personal information to third parties to engage them for online advertising and may collect your personal information when you visit our websites. In such cases, such information may be transferred to third parties through profiling cookies only on the basis of your explicit consent. For this reason, since we require your explicit consent to the use of third-party profiling cookies and the subsequent communication of such information to these third parties, the right to opt-out of your personal information sale, established by CCPA, does not apply.

Sharing excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Currently, we do not sell personal information, except in the case indicated above with reference to profiling cookies.

Origin and list of cookies used

Some cookies are set by us and are called first-party cookies. For example, these cookies include those that allow us to remember your preferred language or login data.

We also use third-party cookies – cookies from a domain other than the website you are visiting – for our advertising and marketing purposes.

In particular, we use cookies and other tracking technologies for the following purposes:

Cookie settings/Cookie duration

Based on their duration, cookies can be divided into:

• Temporary (or session) cookies: the data collected is stored only for the duration of the browsing session.

• Permanent cookies: these store data collected on the device used for browsing even after the browser is closed (e.g. the password for accessing restricted areas, so that it does not have to be entered each time you visit the webpage). You can find out how long cookies last by accessing the cookie configurator.

Communication and transfer of your data

The information collected through cookies will be communicated to:

• Tezenis S.p.A. and Calzedonia S.p.A. staff in charge of managing and monitoring the website;

• suppliers and consultants, appointed as Data Processors.

The personal data collected may be transferred outside the United States of America, in particular within the European Union, and in some cases also to other countries around the world, in particular the United Kingdom (e.g. in connection with cookies, social media plug-ins and other software applications from third-party providers). In any case, the transfer will take place in compliance with local legislation (if any) and EU Regulation 2016/679 (“GDPR”) (in particular, the data will only be transferred after signing the Standard Contractual Clauses approved by the EU Commission by Decision 2021/914/EU or to countries able to guarantee an adequate level of protection of personal data and therefore recipients of an Adequacy Decision adopted by the EU Commission).

Your rights

To exercise your rights under EU Regulation 2016/679 (‘GDPR’), you can write to privacy@oniverse.it. We will answer within 30 days of receiving your request. In some cases, we may ask you for further information if we need to verify your identity in relation to your request. We have listed the rights you can exercise. If you want to know more, we have also indicated the relevant regulatory reference:

• RIGHT OF ACCESS, i.e. the right to know whether personal data concerning you is being processed and, if so, to obtain a copy of such data and be informed about: the origin of the data, the categories of personal data that are processed, the recipients of the data, the purposes of the processing, the existence of automated decision-making (including profiling), the data retention period, the rights provided for by the GDPR (Art. 15 GDPR);

• RIGHT TO OBTAIN THE RECTIFICATION OR COMPLETION OF YOUR DATA if it is inaccurate or incomplete (Art. 16 GDPR);   

• RIGHT TO ERASURE of personal data if such data is no longer necessary for the purposes for which it was collected, or if we are no longer authorised to process it (Art. 17 GDPR);

• RIGHT TO RESTRICTION OF PROCESSING of personal data in the following cases: i) you have contested the accuracy of the personal data; in this case you may request a restriction of processing for the period necessary to verify the accuracy of the data; ii) we are no longer authorised to process the data, and instead of deleting it, you can ask us to limit its use; iii) if the personal data in our possession, although no longer necessary for the purposes for which it was collected, is necessary for you to establish, exercise or defend a right in court; iv) pending verification of the prevalence of our legitimate interest over your legitimate reasons as the data subject if you have objected to a processing based on our legitimate interest (Article 18 of the GDPR);

• RIGHT TO DATA PORTABILITY, e. the right to receive your personal data in a structured, commonly used and machine-readable format, as well as the right to request to transmit such data to another data controller (Art. 20 GDPR);

• RIGHT TO WITHDRAW CONSENT in relation to processings based on it (Art. 7 GDPR). In relation to profiling cookies, you can withdraw your consent through the cookie configurator on our website;

• RIGHT TO OBJECT to the processing of personal data based on our legitimate interest, including profiling (Art. 21 GDPR).

Furthermore, if you believe that the processing of your personal data is in breach of the provisions of the GDPR, you have the RIGHT TO LODGE A COMPLAINT with the competent data protection supervisory authority.

In particular, if you are a Californian resident, under the CCPA, you have the right to request the deletion of personal information that we have collected from you. Once we receive and confirm your verifiable consumer request to delete, we will delete (and communicate to our service providers to delete) your personal information from our records, unless an exception applies (e.g. retaining the information necessary for us or our service provider(s) in order to complete the transaction for which we collected the personal information, providing a good or service that you requested, complying with a legal obligation etc.). With reference to the right to access/to know and the right of erasure/to delete, you may submit your requests, free of charge, by writing to data.protection@oniverse.it  . We will need to verify your identity before processing your request, which may require us to request additional personal information from you or require you to log into your account. We will only use personal information provided in connection with a consumer rights request to review and comply with the request. Once submitted the request, you will receive an e-mail as soon as feasibly possible, but no later than 10 business days, confirming that we have received your request and providing information about how we will process your request. We will respond to your request to access/to know or erasure/delete within 30 days (as required by GDPR) from the day we receive the request even if, in case of Californian consumers, the CCPA sets a longer period of 45 days. Any disclosure in response to a request to access/to know will cover the entire period from the date of your registration to the website (as required by GDPR) even if, in case of Californian consumers, the CCPA sets that disclosure of personal information must cover the 12-months preceding the business’ receipt of the request to know. In certain circumstances, we may decline a request to access/to know and/or erasure/delete, particularly where we are unable to verify your identity.

If you are a Californian resident, under the CCPA, you may institute a civil action for statutory damages on an individual or class-wide basis (providing Calzedonia with 30 days’ written notice identifying the specific provisions violated) in the following cases: nonencrypted and nonredacted information subject to unauthorized access and exfiltration, theft or disclosure as a result of a business's lack of implementation of reasonable security procedures and practices.

If Calzedonia within 30 days cures the noticed violation and provides the consumer an express written statement that the violations have been cured and that no further violations occur, no action for individual statutory damages or class-wide statutory damages may be initiated against Calzedonia.
If you are a Californian resident, under CCPA, also the following rights will be applied:

• Right to Opt-Out of Personal Information Sale
  Currently, we do not sell personal information, except in the case of profiling cookies. To learn more about profiling cookies, how to manage the use of such cookies and how to disable them, please see the section “What cookies do we use? How to deactivate or activate them?”.

• Right to Non-Discrimination
  You have the right not to receive discriminatory treatment, in terms of price or services that we offer, for exercising any of the rights described above.
  However, please note that if the exercise of the rights described above limits our ability to process personal information (such as in the case of a deletion request), we may no longer be able to provide you with our products or services or engage with you in the same manner.

• Financial Incentives
  You have the right to be notified of any financial incentives offers and their “material terms” (terms and conditions), the right to opt-out of such incentives at any time, and to not be included in such incentives without your prior informed opt-in consent.
  We do not offer any incentives at this time.

Authorized Agent
In certain circumstances, you are allowed to use an authorized agent to submit the above requests on your behalf by writing to data.protection@oniverse.it. If you choose to submit a request through an authorized agent, we will require proof that the authorized agent has your written permission to submit a request on your behalf and, if necessary, we may require you to verify your identity with us.
If the agent cannot provide your signed permission, we may deny the request.

Last update: January 2026