Privacy Policy

OISHIIPLANET.IT COLLECTS SOME PERSONAL DATA FROM ITS USERS.

This Privacy Policy came into effect from the date of the last update, August 9, 2020.

This document can be printed using the print command available in the settings of any browser. 

The Data Controller: Cai Yucong

How we collect your data

• when you provide it to us (e.g., contacting us, placing an order on our website, subscribing to our email newsletter, responding to a quiz, or creating an account);
• from your use of our website, using cookies and similar technologies;
• occasionally, from third parties.

Types of data collected: email, first and last name, shipping address, billing address, phone number, date of birth, payment data, password, IP address, Internet browser and device used, the date and time you visit and how you use our website and access its contents, if you place an order, purchase and payment history.

Methods of processing collected data. The Data Controller adopts appropriate security measures aimed at preventing unauthorized access, disclosure, modification, or destruction of Personal Data. The processing is carried out using IT and/or telematic tools, with organizational methods and logics strictly related to the indicated purposes. In addition to the Data Controller, in some cases, other subjects involved in the organization of this Website (administrative, commercial, marketing, legal staff, system administrators) or external subjects (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the Data, also appointed, if necessary, as Data Processors by the Data Controller. The updated list of Processors can always be requested from the Data Controller.

Data retention period. The Data is processed and stored only for the time necessary for the purposes for which it was collected or because of a legal obligation or by order of an authority.

Legal basis for processing. The Data Controller processes Personal Data relating to the User if one of the following conditions applies:

• the User has given consent for one or more specific purposes; Note: in some jurisdictions, the Data Controller may be authorized to process Personal Data without the User's consent or another of the legal bases specified below, until the User objects ("opt-out") to such processing. However, this does not apply if the processing of Personal Data is governed by European legislation on the protection of Personal Data;
• the processing is necessary for the performance of a contract with the User and/or for pre-contractual measures;
• the processing is necessary to comply with a legal obligation to which the Data Controller is subject;
• the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
• the processing is necessary for the pursuit of the legitimate interest of the Data Controller or third parties.

It is always possible to request the Data Controller to clarify the specific legal basis of each processing and in particular to specify whether the processing is based on law, provided by a contract, or necessary to conclude a contract.

Location. The Data is processed at the Data Controller's operational offices and at any other location where the parties involved in the processing are located. For more information, contact the Data Controller.
The User's Personal Data may be transferred to a country different from the one in which the User is located. For more information about the place of processing, the User can refer to the section regarding details on the processing of Personal Data. The Data Controller may transfer such information to countries outside the European Union and Switzerland, for example to the United States. To the extent that the Data Controller transfers information outside the European Union or Switzerland, such transfer is governed by an agreement that incorporates the standard contractual clauses in accordance with Article 46 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 ("General Data Protection Regulation").

Disclosure of your information to third parties: only to the extent necessary to manage our business, to our service providers, and to fulfill any contract we enter into with you, and where required by law or to enforce our legal rights. We do not sell personal information and will not sell personal information except as described in this Privacy Policy.

Your rights under the GDPR in relation to your information

• access your information and to receive information about their use
• have your information corrected and/or completed
• have your information deleted
• limit the use of your information
• receive your information in a portable format
• object to the use of your information
• withdraw consent to the use of information
• file a complaint with a supervisory authority
• Sensitive personal information: we do not collect sensitive personal information about you.

Data Controller

Company Name: Cai Yucong
Registered Office: Via Cusago 29 - 20153 Milan, Italy
VAT Number: 11315300969

Data Controller's email address: info@oishiiplanet.it

Types of Data collected

Information collected automatically when you visit our Website: IP address, internet browser and device used, the date and time of your visits and how you use our website and access its content, if you place an order, purchase and payment history.

Information provided when you create an account or make a purchase: email, first and last name, shipping address, billing address, phone number, payment data, date of birth, password.

Information provided when you contact us through our Customer Service: email, first and last name, phone number. 

Personal Data may be freely provided by the User or collected automatically during the use of this Website.
Unless otherwise specified, all Data requested by this Website is mandatory. If the User refuses to provide it, it may be impossible for this Website to provide the Service. In cases where this Website indicates some Data as optional, Users are free to refrain from providing such Data, without this having any consequence on the availability or operation of the Service.
Users who have doubts about which Data is mandatory are encouraged to contact the Data Controller.
The possible use of Cookies - or other tracking tools - by this Website or by the owners of third-party services used by this Website, unless otherwise specified, aims to provide the Service requested by the User, in addition to the further purposes described in this document and in the Cookie Policy, if available.

The User assumes responsibility for Personal Data of third parties obtained, published, or shared through this Website and guarantees to have the right to communicate or disseminate it, releasing the Data Controller from any liability towards third parties.

Purposes of the Data Processing collected

User Data is collected to allow the Owner to provide the Service, fulfill legal obligations, respond to requests or enforcement actions, protect its rights and interests (or those of Users or third parties), and identify any malicious or fraudulent activities. The Owner may also provide the collected User Data to other companies, which may process the information on behalf of the Owner, including companies that assist with:

• The completion or delivery of your order;
• Data storage and protection;
• Payment processing;
• Marketing activities, analysis, and fraud detection; or
• customer support service.

The Owner may share User Data as required or permitted by law, for example, if it believes such disclosure is necessary to cooperate with any investigative inquiries regarding possible illegal activities, to enforce terms and conditions of use, or to protect the rights or property of ourselves or others.

Finally, the Owner may provide User Data to one or more third parties in the event of a merger, acquisition, or corporate reorganization.

Facebook permissions requested by this Website

This Website may request some Facebook permissions that allow it to perform actions with the User's Facebook account and collect information, including Personal Data, from it. This service allows this Website to connect with the User's account on the Facebook social network, provided by Facebook Inc.
For more information on the following permissions, refer to the Facebook permissions documentation and the Facebook privacy policy.
Basic information. The basic information of the User registered on Facebook which normally includes the following Data: id, name, image, gender, and localization language and, in some cases, Facebook "Friends." If the User has made additional Data publicly available, it will also be accessible.

Access to private data. Allows access to the private data of the User and their friends. 

Details on the processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

Services for statistics and data analysis

The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to track User behavior.

Google Analytics (Google Ireland Limited)
Personal Data processed: Cookies; Usage Data.

Place of processing: Ireland – Privacy Policy – Opt Out. Subject adhering to the Privacy Shield.

Platform and hosting services

These services aim to host and operate key components of this Website, making it possible to deliver this Website from a single platform. These platforms provide the Owner with a wide range of tools such as analytics tools, user registration management, comment and database management, e-commerce, payment processing, etc. The use of these tools involves the collection and processing of Personal Data.
Some of these services operate through servers located in different geographical locations, making it difficult to determine the exact place where Personal Data is stored.

Shopify (Shopify Inc.)
Shopify is a platform provided by Shopify Inc. that allows the Owner to develop, operate, and host a website dedicated to e-commerce.
Personal Data processed: various types of Data as specified by the service's privacy policy.
Place of processing: Canada – Privacy Policy. Entity adhering to the Privacy Shield.

Payment management

Unless otherwise specified, this Website processes all payments by credit card, bank transfer, or other means through external payment service providers. In general, and unless otherwise indicated, Users are asked to provide payment details and personal information directly to these payment service providers.
This Website is not involved in the collection and processing of such information: it will only receive a notification from the relevant payment service provider about the completed payment.

Amazon Payments (Amazon) Amazon Payments is a payment service provided by Amazon.com, Inc., which allows the User to make online payments using their Amazon credentials.
Personal Data processed: various types of Data as specified by the service's privacy policy.
Place of processing: See Amazon's privacy policy – Privacy Policy.

Apple Pay (Apple Inc.) Apple Pay is a payment service provided by Apple Inc., which allows the User to make payments using their mobile phone.
Personal Data processed: various types of Data as specified by the service's privacy policy.
Place of processing: United States – Privacy Policy.

Google Pay (Google Ireland Limited). Google Pay is a payment service provided by Google Ireland Limited, which allows the User to make online payments using their Google credentials.
Personal Data processed: various types of Data as specified by the service's privacy policy.
Place of processing: Ireland – Privacy Policy. Entity adhering to the Privacy Shield.

PayPal (Paypal). PayPal is a payment service provided by PayPal Inc., which allows the User to make online payments.
Personal Data processed: various types of Data as specified by the service's privacy policy.
Place of processing: See Paypal's privacy policy – Privacy Policy.

Shopify Payments (Shopify Inc.)After placing an order on our website, you will need to make payment for the ordered products or services. To process your payment, we use a third-party payment processor (Shopify Payments). Your payment will be processed by Shopify Payments.

Personal Data processed: Shopify Payments collects, uses, and processes your information, including payment information, in accordance with their privacy policies. You can access their privacy policy via the following link: Shopify Payments: https://pay.shopify.com/tos-privacy-policy
Place of processing: Canada – Privacy Policy. Entity adhering to the Privacy Shield.

Mailing list or newsletter

By registering for the mailing list or newsletter, the User's email address is automatically added to a contact list to which email messages containing information, including commercial and promotional content, related to this Website may be sent. The User's email address may also be added to this list as a result of registering on this Website or after making a purchase.

Personal Data processed: shipping address; last name; first name; email.

Access to accounts on third-party services

This type of service allows this Website to retrieve Data from your accounts on third-party services and perform actions with them.
These services are not activated automatically but require the User's express authorization.

Access to Facebook account (Facebook, Inc.) This service allows this Website to connect with the User's account on the social network Facebook, provided by Facebook, Inc.
Permissions requested: Access to private data.

Place of processing: United States – Privacy Policy. Entity adhering to the Privacy Shield.

Cookie Policy

This Website uses technologies that allow this Website to achieve the purposes described below. These technologies enable the Owner to collect and save information (for example through the use of Cookies) or to use resources (for example by running a script) on the User's device when the User interacts with this Website.

For simplicity, these technologies are hereinafter collectively defined as "Tracking Tools," unless there is reason to differentiate.
For example, although Cookies can be used in both web and mobile browsers, it would be inappropriate to talk about Cookies in the context of mobile device applications, since these are Tracking Tools that require the presence of a browser. For this reason, within this document the term Cookie is used only to specifically indicate that particular type of Tracking Tool.

Some of the purposes for which Tracking Tools are used may also require the User's consent. If consent is given, it can be freely revoked at any time by following the instructions contained in this document.

This Website only uses Tracking Tools managed directly by the Owner (commonly called "first-party" Tracking Tools).
Duration and expiration of first-party Cookies and other similar Tracking Tools may vary depending on what is set by the Owner. Some of them expire at the end of the User's browsing session.

Types of cookies used by this Website

Absolutely necessary cookies
These cookies are strictly necessary to provide the requested services and are essential for browsing the website and using its features, such as the shopping cart and product purchase.

Statistics cookies
These cookies collect anonymous information about the pages visited and information about website visitors, such as which pages are visited most frequently and which errors are displayed. They do not collect information that identifies a visitor and are used only to improve the website's operation.

Functional cookies
These cookies allow the website to remember choices made (such as name, language, or region you are in) and provide optimized and personalized features, including access to products you have created or orders you have placed. These cookies are also used to remember preferences regarding text size, fonts, and other customizable features. 

Advertising cookies
These cookies are used to present promotional campaigns of potential interest. They are also used to limit the number of times a campaign is viewed and to measure its effectiveness. These cookies are usually provided by third parties.

Third-party cookies
When using this Website, content provided by a company other than ours may be displayed. Also, if you share content from this Site Web with friends via social networks like Facebook or Twitter, you may receive cookies from these social networks. This Site Web does not have access to or control over the cookies used by these companies or third-party websites.

How to manage preferences or withdraw consent

There are various ways to manage preferences related to Tracking Tools and to give or withdraw consent, where necessary:

Users can manage preferences related to Tracking Tools directly through their device settings – for example, they can prevent the use or storage of Tracking Tools.

Additionally, whenever the use of Tracking Tools depends on consent, the User can give or withdraw such consent by setting their preferences within the cookie policy or updating these preferences through the tracking settings widget, if available.

Thanks to specific functions of the browser or device, it is also possible to remove previously saved Tracking Tools.

Other Tracking Tools stored in the browser's local memory can be removed by clearing the browsing history.

Locate the settings related to Tracking Tools

Users can, for example, find information on how to manage Cookies in some of the most popular browsers at the following addresses:

• Google Chrome
• Mozilla Firefox
• Apple Safari
• Microsoft Internet Explorer
• Microsoft Edge
• Brave
• Opera.

Users can also manage some Tracking Tools for mobile applications by disabling them through the appropriate device settings, such as mobile advertising settings or general tracking settings (Users can check the device settings to find the relevant one).

Advertising Industry Initiatives for Consent Management

Without prejudice to the above, Users are informed of the possibility to use the information available on YourOnlineChoices (EU), Network Advertising Initiative (USA), and Digital Advertising Alliance (USA), DAAC (Canada), DDAI (Japan) or other similar services. With these services, it is possible to manage tracking preferences for most advertising tools. Therefore, the Data Controller recommends that Users use these resources in addition to the information provided in this document.

The Digital Advertising Alliance also provides an application called AppChoices that helps Users control behavioral advertising on mobile applications.

Data Protection

The Data Controller implements appropriate technical and organizational measures such as storing information on protected servers, encrypting data transfers to or from our servers using Secure Sockets Layer (SSL) technology, encrypting payments made on or through our Website using Secure Sockets Layer (SSL) technology, granting access to your information only when necessary and only to trusted individuals who have been trained and informed about the proper handling of personal information. Once an account is opened on this Website, you can choose a password to help protect your information. You must choose a secure password and keep it safe. The User can change the password by clicking here and receiving an email to reset the password.

User Rights

Users can exercise certain rights with regard to the Data processed by the Data Controller. In particular, the User has the right to:

• withdraw consent at any time.The User can withdraw consent to the processing of their previously given Personal Data.
• object to the processing of their Data.The User can object to the processing of their Data when it is carried out on a legal basis other than consent. Further details on the right to object are provided in the section below.
• access their Data.The User has the right to obtain information about the Data processed by the Data Controller, on certain aspects of the processing, and to receive a copy of the processed Data.
• verify and request correction.The User can verify the accuracy of their Data and request its updating or correction.
• obtain the restriction of processing.When certain conditions are met, the User can request the restriction of the processing of their Data. In this case, the Data Controller will not process the Data for any purpose other than their storage.
• obtain the deletion or removal of their Personal Data.When certain conditions are met, the User can request the deletion of their Data by the Data Controller.
• receive their Data or have it transferred to another controller.The User has the right to receive their Data in a structured, commonly used, and machine-readable format and, where technically feasible, to have it transferred without hindrance to another controller. This provision applies when the Data is processed by automated means and the processing is based on the User's consent, on a contract to which the User is a party, or on contractual measures related to it.
• file a complaint.The User can file a complaint with the competent personal data protection supervisory authority or take legal action.

Details on the right to object

When Personal Data is processed in the public interest, in the exercise of public powers vested in the Data Controller, or to pursue a legitimate interest of the Data Controller, Users have the right to object to the processing for reasons related to their particular situation. Users are informed that, if their Data is processed for direct marketing purposes, they can object to the processing without providing any reason.

How to exercise rights

To exercise User rights, Users may send a request to the email info@oishiiplanet.it. Requests are submitted free of charge and processed by the Data Controller as soon as possible, in any case within one month.

Further information on processing

Legal defense. The User's Personal Data may be used by the Data Controller in legal proceedings or in the preparatory stages of any such proceedings to defend against abuses in the use of this Website or related Services by the User. The User declares to be aware that the Data Controller may be required to disclose the Data by order of public authorities.

Specific notices. Upon User request, in addition to the information contained in this privacy policy, this Website may provide the User with additional and contextual notices regarding specific Services, or the collection and processing of Personal Data.

System logs and maintenance. For operational and maintenance needs, this Website and any third-party services it uses may collect system logs, i.e., files that record interactions and may also contain Personal Data, such as the User's IP address.

Information not contained in this policy. Further information regarding the processing of Personal Data may be requested at any time from the Data Controller using the contact details.

Response to “Do Not Track” requests. This Website does not support “Do Not Track” requests. To find out if any third-party services used support them, the User is invited to consult their respective privacy policies.

Changes to this privacy policy. The Data Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page and, if possible, on this Website as well as, if technically and legally feasible, sending a notification to Users through one of the contact details it holds. Please therefore check this page frequently, referring to the last modification date indicated at the bottom.
If the changes concern processing based on consent, the Data Controller will collect the User's consent again, if necessary.