Privacy Policy

This policy indicates the personal data we collect when you use this website or visit our boutiques and describes the rights you have as a “Data subject”. We reserve ourselves the right to update the content of this page periodically, so we invite you to consult it regularly. 

Under the California Consumer Privacy Act (“CCPA”), California consumers shall receive certain notices and information regarding the collection and use of their personal information. This page is intended to provide the Notice at Collection and Privacy Policy required by the CCPA. We may collect Personal Information (hereinafter also “Personal Information”) from you and use it for specified purposes. For a list of categories of Personal Information that we collect and the purposes for which we use such Personal Information, see the sections: 

• What categories of Data do we process? 
• For what purposes do we process your personal Data and what are the legal bases? 

We may disclose Personal Information to third parties to engage them for online advertising and may collect your personal information when you visit our websites. In such cases, such information may be transferred to third parties through profiling cookies only on the basis of your explicit consent. For this reason, since we require your explicit consent to the use of third-party profiling cookies and the subsequent communication of such information to these third parties, the right to opt-out of your personal information sale, established by CCPA, does not apply. To learn more about profiling cookies and how to manage the use of such cookies, please visit our Cookie Policy. 

Sharing excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties. 

Currently, we do not sell personal information, except in the case indicated above with reference to profiling cookies. 

The Data Controller is Antonio Marras S.r.l., with legal seat in Alghero (SS), Località Salondra n. 64, e-mail data.protection@oniverse.it

To give you access to our services and contents, we may collect: 

• Personal and contact data collected through our online forms; 
• to make a purchase, in addition to the data indicated on the online forms, you may be asked for additional information, such as data relating to the means of payment used and data for the shipment of products and any billing. We do not process data relating to the payment method you have chosen (e.g. credit card number and security code), which are instead collected exclusively by the chosen payment service provider. 

Providing such data is optional, but some of our fields are marked with asterisks. Those fields are mandatory and, failing that, we won’t be able to provide you with the service you requested. 

We will never ask neither for special categories related Data (revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, health status, sexual orientation and so on) or judicial data (related to criminal records, the status of accused or suspected and so on). We may also collect: 

• information that we may acquire when examining your interactions with us via e mail and newsletters, through our websites and apps that may be developed by us or by third party (for more information we invite you to read the related privacy policy); 
• information shared by you through your social networks. 

We will process the data you will provide us with only for the purposes related to each service requested and used. We may use your data for other purposes, only with your prior consent or, in certain limited cases, in the presence of our legitimate interest. 

You may find below a list of all the purposes for which we collect your personal data. 

Purpose: to allow web browsing; to carry out aggregate statistical analysis aimed at measuring the correct functioning of this website.  

Processed data: IP addresses, domain names, URIs. These data are acquired by the IT systems responsible for the proper functioning of this website. 

Legal basis: Provision of services aimed at allowing users to browse this website; 

Retention period: 30 days after the collection, unless legal provisions or provisions of Public Authorities impose a different retention time in relation to investigations related to any computer crimes. 

Purpose: fulfilment of purchase orders and performance of related activities (sending of goods, invoicing, payment management, shipment tracking, delivery of goods, possible activation of the return and refund process of the order, management of the return, etc). 

Processed data: contact details (name, surname, e-mail address, telephone number, name and surname of the holder of the payment instrument used) and shipping address.  In the event of a return, we will ask you to also communicate your IBAN code, which is necessary to refund the price of the goods you have returned. We do not process the data relating to the payment method indicated by you (e.g. payment card number and security code), which are instead collected exclusively by the  selected payment service provider. 

Legal basis: execution of the sales contract. 

Retention period: time necessary to fulfil the contractual and regulatory obligations regarding the purchase and sale of products (e.g. tax legislation). 

Purpose: we provide you with an assistance service  for any request relating to the purchase of our products or the use of our services. You can contact Customer Care by e-mail or by using the chat available on the website. We retain your requests for assistance if they are related or connected to a claim made by you against us or are necessary for the protection of our rights. 

Processed data: data necessary to reply to your requests for assistance  Your requests via chat will be answered within the chat itself or by e-mail. For this reason, when you use the chat, you will be asked to enter your name and e-mail address. 

Legal basis: execution of the contract for the purchase and sale of products or pre-contractual measures adopted following your request; 

Retention period: time strictly necessary to fulfil your requests. If a complaint is filed or legal proceedings are initiated, the data will be retained for 10 years. 

Purpose: to protect our rights and enable the defence of such rights in the event of a judicial or extrajudicial dispute. 

Data processed: your assistance requests sent to our customer service 

Legal basis: our legitimate interest in the defence of our rights in and out of court 

Retention period: 10 years from the completion of the assistance request; if an out-of-court dispute is initiated, the data will be stored until the dispute is concluded; if, on the other hand, a court dispute is initiated, the data will be stored until the decision became final. 

Purpose: with your consent, we will send you commercial communications regarding our products, services and offers via e-mail, instant messaging services (e.g. WhatsApp), post and social media channels (e.g. Facebook, Instagram, etc.). We may also conduct market research and surveys to detect your level of satisfaction with Antonio Marras products. 

Processed data: contact details (e.g. name, surname, e-mail address, telephone number). 

Legal basis: your consent that you may revoke at any time by writing to data.protection@oniverse.it or by clicking on the unsubscribe link contained in all our communications. 

Retention period: until you revoke your consent. 

Purpose: with your consent, we will send you personalised commercial communications based on your profile, your purchasing and browsing habits. In addition, our client advisors will be able to assist you in all our boutiques with information on colours, models and sizes relating to purchases made in our stores.    

Processed data: data relating to your purchases, your country of origin, your gender and your age, your interaction with us through our website. We may also enrich your profile with information lawfully acquired from third parties and made available to Antonio Marras, with statistical information (e.g. demographic information, georeferencing data, etc.) as well as information relating to the electronic tools you use to interact with us. 

Legal basis: your consent that you may revoke at any time by writing to data.protection@oniverse.it  

Retention period:  Data will be retained for 5 years, except for gender, age and country of origin which will be retained until your consent is withdrawn. 

Purpose: creation of a reserved area ("account") that will allow you to save some content (e.g. your purchase history, etc.). 

Processed data: personal details and contact information provided in the online form for registering for the reserved area. Some fields specifically marked are to be considered mandatory: should this information not be provided,  you will not be able to create your account. 

Legal basis: execution of the website registration contract. 

Retention period: If the account is not used for more than 5 years,  it will be deleted. 

Purpose: to enable booking and participation in events organised by the ‘Antonio Marras’ brand. 

Processed data: personal details and contact data  requested in the online form dedicated to the booking of our events: data marked with an asterisk are essential for completing the booking; should they not be provided, it will not be possible to make the booking. 

Legal basis:  your specific consent expressed by filling out the registration form. 

Retention period: the data is stored for as long as is necessary to manage the event to which the booking relates. 

Purpose: to manage your appointment request at our boutique. 

Processed data: person details and contact information requested in the online form dedicated to booking the appointment, as well as information relating to the appointment itself (selected boutique, date, and time). 

Legal basis: execution of pre-contractual measures adopted at your request. 

Retention period: the data is stored for as long as is necessary to manage the appointment. 

Purpose: to allow you to save your favorite Marras items so you can remember them and, if you wish, add them to your cart. 

Processed data: if you use the wishlist and have logged into your account, data relating to your account and the products you have saved will be processed; if, on the other hand, you use the wish list but do not have an account or have not logged into it, only data relating to the products saved will be processed. 

Legal basis: your consent, which you have given by saving products to your wishlist. 

Retention period: If you have logged into your account and are using the wishlist, the data is stored in your account until you decide to remove it or delete your account. If, however, you do not have an account or have not logged in and are using the wishlist, the products are stored in the wishlist through a specific cookie. For further information, please refer to our Cookie Policy. 

Purpose: to ensure safety in our boutique and protect our staff and customers, we have installed a video surveillance system. In the event of judicial or extrajudicial disputes, the recordings made may be used to ascertain or exercise  our claims and rights. 

Processed data: your image. 

Legal basis: our legitimate interest in protecting   our business assets, ensuring the safety of  our employees and customers, and protecting our  rights in court or out of court. 

Retention period: the images will be stored for a period of 72 hours. In the event of a request from the judicial authorities or the judicial police, or in any case where the images are used in legal proceedings, the retention period may be extended until the proceedings are concluded. 

We process your data using IT and telematic tools and supports, in compliance with the provisions of the law to ensure security and confidentiality, as well as the accuracy, updating and relevance of the data with respect to the stated purposes. Help us ensure that your data is always accurate by communicating the updates to data.protection@oniverse.it   

To achieve the mentioned purposes, we need to communicate them to these categories of subjects: 

• Staff of Antonio Marras S.r.l., in charge of managing our website and the services available online and at our stores; 
• Suppliers of Antonio Marras S.r.l. (e.g. IT service and platform providers, consultants) in their capacity as data processors; 
• Credit institutions, companies that carry out shipping and transport services, insurance companies: these subjects act as independent Data Controllers and their involvement is necessary to carry out necessary operations related to the use of our services (e.g. making payments; deliver the purchased goods). 

The personal data collected may be transferred outside United State of America, in particular within the European Union, and in some cases also to other countries around the world, in particular the United Kingdom (e.g. in connection with cookies, social media plug-ins and other software applications from third-party providers). In any case, the transfer will take place in compliance with local legislation (if any) and EU Regulation 2016/679 (‘GDPR’) (in particular, the data will only be transferred after signing the Standard Contractual Clauses approved by the EU Commission by Decision 2021/914/EU or to countries able to guarantee an adequate level of protection of personal data and therefore recipients of an Adequacy Decision adopted by the EU Commission). 

You may exercise the rights guaranteed by the GDPR regarding your personal data by writing to data.protection@oniverse.it. We will reply to your request as soon as possible and, in any case, no later than thirty days after receiving your request. If, in relation to your request, it is necessary to verify your identity, we may ask you for additional identifying information or an identity document. In particular, you may exercise the following rights: 

• Right of access, i.e., the right to know if a processing of personal data concerning you is in progress and, if confirmed, to obtain a copy of such data and be informed about: the origin of the data, the categories of personal data processed, the recipients of the data, the purposes of the processing, the existence of an automated decision-making process (including profiling), the data retention period, the rights provided for by the GDPR;  
• Right to obtain the rectification or integration of your data; 
• Right to obtain the deletion of personal data if such data are no longer necessary for the purposes for which they were collected, or if we are no longer authorized to process them; 
• Right to obtain the limitation of the processing of personal data in the following cases: i) you have contested the accuracy of the personal data. You can request a processing limitation for the period necessary to verify the accuracy of the data; ii) we are no longer authorized to process the data, and instead of deleting them, you can ask us to limit their use; iii) if the personal data in our possession, despite being no longer necessary for the purposes for which they were collected, are necessary for you to ascertain, exercise or defend a right in court; 
• Right to data portability, i.e., the right to receive personal data concerning you in a structured format, commonly used and readable by an automatic device, as well as the right to request for such data to be transmitted to another Data Controller; 
• Right to revoke the consent, for the processing based on it; 
• Right to oppose at any moment to the processing of personal data based on our legitimate interest. 

You also have the right to lodge a complaint with the competent data protection supervisory authority if you believe that the processing of your data conflicts with the provisions of the applicable laws. 

In particular, if you are a Californian resident, under the CCPA, you have the right to request the deletion of personal information that we have collected from you. Once we receive and confirm your verifiable consumer request to delete, we will delete (and communicate to our service providers to delete) your personal information from our records, unless an exception applies (e.g. retaining the information necessary for us or our service provider(s) in order to complete the transaction for which we collected the personal information, providing a good or service that you requested, complying with a legal obligation etc.). With reference to the right to access/to know and the right of erasure/to delete, you may submit your requests, free of charge, by writing to data.protection@oniverse.it . We will need to verify your identity before processing your request, which may require us to request additional
personal information from you or require you to log into your account.
We will only use personal information provided in connection with a consumer rights request to review and comply with the request. Once submitted the request, you will receive an e-mail as soon as feasibly possible, but no later than 10 business days, confirming that we have received your request and providing information about how we will process your request. We will respond to your request to access/to know or erasure/delete within 30 days (as required by GDPR) from the day we receive the request even if, in case of Californian consumers, the CCPA sets a longer period of 45 days. Any disclosure in response to a request to access/to know will cover the entire period from the date of your registration to the website (as required by GDPR) even if, in case of Californian consumers, the CCPA sets that disclosure of personal information must cover the 12-months preceding the business’ receipt of the request to know. In certain circumstances, we may decline a request to access/to know and/or erasure/delete, particularly where we are unable to verify your identity. 

If you are a Californian resident, under the CCPA, you may institute a civil action for statutory damages on an individual or class-wide basis (providing Calzedonia with 30 days’ written notice identifying the specific provisions
violated) in the following cases: nonencrypted and nonredacted information subject to unauthorized access and exfiltration, theft or disclosure as a result of a business's lack of implementation of reasonable security procedures and practices. 

If Calzedonia within 30 days cures the noticed violation and provides the consumer an express written statement that the violations have been cured and that no further violations occur, no action for individual statutory damages or class-wide statutory damages may be initiated against Calzedonia. If you are a Californian resident, under CCPA, also the following rights will be applied: 

• Right to Opt-Out of Personal Information Sale Currently, we do not sell personal information, except in the case of profiling cookies. To learn more about profiling cookies, how to manage the use of such cookies and how to disable them, please visit our Cookie Policy. 
• Right to Non-Discrimination You have the right not to receive discriminatory treatment, in terms of price or services that we offer, for exercising any of the rights described above. However, please note that if the exercise of the rights described above limits our ability to process personal information (such as in the case of a deletion request), we may no longer be able to provide you with our products or services or engage with you in the same manner. 
• Financial Incentives You have the right to be notified of any financial incentives offers and their “material terms” (terms and conditions), the right to opt-out of such incentives at any time, and to not be included in such incentives without your prior informed opt-in consent. We do not offer any incentives at this time. 

Authorized Agent In certain circumstances, you are allowed to use an authorized agent to submit the above requests on your behalf by writing to data.protection@oniverse.it .
If you choose to submit a request through an authorized agent, we will require proof that the authorized agent has your written permission to submit a request on your behalf and, if necessary, we may require you to verify your identity with us. If the agent cannot provide your signed permission, we may deny the request. 

Last update: July 2026