Privacy policy

Privacy notice on the processing of personal data pursuant to Article 13 of EU Regulation No. 679/2016 (the “Regulation”), as implemented under national legislation.

This page describes how the website is managed in relation to the processing of personal data of users who consult it. This privacy notice is also provided pursuant to Article 13 of EU Regulation No. 679/2016 (“GDPR” or the “Regulation”) to those who interact with the web services of the company Space Leather S.R.L. (the “Company”), accessible electronically at the following address: www.hibourama.it (the “Website”), corresponding to the homepage of the Company's official website. This privacy policy applies solely to this website and not to any other websites accessed by the user via links.

The data controller is Space Leather S.R.L., with registered office in Rome (RM), Via Gregorio XI 12, 00166, Tax ID 12704191001, certified email spacethersrls@legalmail.it, email info@hibourama.it, represented by its legal representative pro tempore, domiciled for this purpose at the Company’s registered office.

The same entity also acts as the data processor. The updated list of all internal and external data processors is kept at the data controller’s registered office and is available upon request by data subjects.

As for the data processed, the website's IT systems and software procedures, during normal operation, acquire certain personal data whose transmission is implicit in the use of Internet communication protocols. This includes, but is not limited to, IP addresses or domain names of users' devices, the URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the response file, the numeric code indicating the response status (success, error, etc.), and other parameters related to the user’s operating system and IT environment.

Additionally, the processing covers personal data voluntarily provided by users, including identification, demographic, tax, and contact details (such as name, surname, address, phone number, and email) and any other personal data submitted to the controller and/or processor during registration on the website, when filling out forms, when requesting activation of services like the newsletter, when communicating with the Company via the contact section, when purchasing Hibourama products or entering into a purchase contract, or when information about purchasing habits and preferences is collected through website navigation or cookies.

Your personal data will be processed by the data controller and its authorized staff and/or collaborators, as well as by processors, including via electronic tools and IT systems, in accordance with the Regulation and national laws, including any applicable guidelines from the relevant supervisory authority.

For information regarding the cookies used on the Hibourama website, please refer to the cookie policy.

By registering on the website, completing forms, subscribing to the newsletter, or purchasing products, the user confirms that they are at least 16 years old or, at the very least, not younger than the age limit established by the laws of their country of residence.

Personal data collected via the website will be processed lawfully and fairly for the purposes specified. With regard to browsing data, the purposes include enabling the controller to obtain anonymous statistical information on the use of the website and verify its correct functioning; ensuring security (such as spam filters, firewalls, and virus detection); preventing damage to the site or harm to users; preventing unlawful or criminal activity; and allowing the controller to fulfil legal, accounting, fiscal, administrative, and contractual obligations related to website management and service provision, as well as managing relations with authorities, regulators, and public bodies.

With regard to voluntarily provided data, the purposes include performing and delivering the requested services, such as user registration and order fulfilment, as well as managing the contractual relationship; fulfilling administrative and legal obligations (e.g., accounting and tax obligations, or responding to legal authorities); with consent, sending promotional messages, newsletters, and marketing materials (via post, email, phone calls, fax, SMS, MMS, social media, or chat apps) related to Hibourama products and services, including catalogues, brochures, invitations to events, and general communications about the brand and its initiatives, as well as conducting market research and customer satisfaction surveys; with consent, conducting profiling activities based on purchase data and preferences, by entering your data into the Company’s CRM system to analyse your purchasing behaviour and send you personalized promotional messages.

Profiling involves analysing your consumption patterns and preferences, and creating a personal profile using data provided by you in combination with your purchase history, in order to deliver tailored marketing communications. This profiling does not produce legal effects nor significantly affect you, beyond the delivery of personalized offers. You may object to newsletter, marketing, or profiling activities at any time by emailing info@hibourama.it.

Providing your data for purposes related to browsing and those listed under points a) and b) above is mandatory. Refusing to provide this data will make it impossible for the Company to fulfil its contractual and legal obligations. Providing your data for marketing and profiling purposes (points c and d) is optional and subject to your explicit consent. Refusal to provide consent will not have any consequence except that you will not receive updates about Company initiatives or personalized offers.

Your data will be processed by the controller, its authorized staff, and processors using both digital and manual methods, in line with applicable data protection laws, ensuring the confidentiality of the data subject through appropriate technical and organizational security measures. Specific safeguards are in place to prevent data loss, misuse, or unauthorized access.

As for retention, browsing data is stored for no longer than seven days unless needed for criminal investigations. Personal data provided for purposes a) and b) will be processed for the duration of the relationship and as long as necessary to meet the stated objectives. Data necessary to fulfil legal obligations will be retained accordingly, as per applicable laws. For data processed for marketing and profiling purposes, considering the nature of luxury products and the infrequent purchase frequency, such data will be stored for a maximum of seven years. After this period, data will be deleted or anonymized, although you may choose to give new consent.

The legal basis for processing includes your consent, the need to perform a contract, and compliance with legal obligations.

Your personal data may also be processed by the Company’s internal staff, who are authorized to do so, and by external processors. Depending on the circumstances, data may be shared with independent controllers such as companies within the Hibourama group; consultants or professionals (for marketing, legal, accounting, and administrative purposes); service providers involved in fulfilling the contract (couriers, customer service, payment processors, IT maintenance providers, etc.); and public authorities as required by law.

A complete list of entities acting as data processors or independent controllers is available at the data controller’s registered office. Your data may also be transferred to public bodies, judicial authorities, or law enforcement upon request or when legally required.

Some recipients may be located outside the EU or EEA in countries not offering an adequate level of data protection as defined by the GDPR. In such cases, the Company will implement safeguards such as EU-approved Standard Contractual Clauses. You may request more information about data transfers by contacting us at the addresses provided.

The Hibourama website may use so-called social plug-ins, which incorporate social network functions (e.g., Facebook's "Like" button). These plug-ins are marked by the social network's logo. When you interact with a plug-in (e.g., by clicking "Like" or commenting), your browser transmits the corresponding data directly to the relevant social network, which then stores it. For information on how social networks collect and use personal data, please refer to their privacy policies.

Data subjects have rights under Articles 15–21 of the GDPR, including the right to confirm the existence of their personal data and access its content; request updates, corrections, or deletions; request restrictions or object to processing; withdraw consent at any time without affecting prior lawful processing; lodge complaints with supervisory authorities; and receive a copy of their personal data in a structured, commonly used, machine-readable format, and request its transmission to another controller.

Requests may be addressed to the Company via email at info@hibourama.it or by post at the registered office of the controller or processors.

The Company reserves the right to review, modify, or update this privacy policy at any time, with or without prior notice, including in light of changes in applicable laws or regulations. Changes may be notified via email to registered users and/or published on the website homepage and shall become binding as soon as they are communicated or posted. We therefore encourage you to regularly check this section or your inbox for the most recent updates.

The full text of EU Regulation 679/2016 is available on the website of the Italian Data Protection Authority: www.garanteprivacy.it.