Table of Contents1. Information on the Processing of Personal Data 1.1. Name and Address of the Data Controller 1.2. General Information on Data Processing 2.2. Creating a customer account and logging into the customer account 2.3. Processing of orders on the website 2.5. Newsletters and marketing communications 2.8. Management of customer reviews and reputation 2.9. Reporting of Irregularities / Anti-Corruption Reporting System 3. Disclosure of Personal Data
|
Privacy PolicyDIM Brands International (“DBI”) is a socially responsible company and a leader in the production and marketing of everyday apparel under well-established brands. In Europe, DIM Brands International markets brands such as Playtex, DIM, Nur Die, Bellinda, Abanderado, and Lovable. At DBI, we respect our customers and recognize the importance of protecting the privacy and security of user information. This Privacy Policy provides an overview of the practices of DIM Brands International, its subsidiaries, affiliates, and associates regarding the collection, use, and disclosure of personal data.
1. Information on the Processing of Personal Data |
|
1.1. Name and Address of the Data ControllerLovable Italy Srl Share Capital: 6,000,000.00 euros Phone: 035-678111 Data Protection Officer Team: lovable.privacy@dim.com
1.2. General Information on Data ProcessingAt DBI, we place great importance on the confidentiality and security of our customers’ data. Therefore, as a matter of principle, personal data is processed only if there is a legal basis that permits it. A legal basis includes, for example, the fulfillment of a contract entered into with you, compliance with a legal obligation to which we are subject, or your consent to the processing of your personal data. The processing of personal data is carried out in accordance with the applicable provisions of the General Data Protection Regulation (GDPR).
1.3. Categories of Data ProcessedBelow is information about the main categories of personal data we may process and the purposes for which we process them. · Personal identification data (e.g., name, address, contact information) · Contractual data (e.g., shopping cart contents, orders, invoices) · Payment-related data (e.g., transactions processed through payment service providers) · Usage data (e.g., IP address, pages visited, access times) · Communication data (e.g., email, contact form content, newsletters, customer relationship management (CRM)) · Other data you voluntarily provide to us We may use third-party service providers to deliver certain services. More information on this is available in the sections “Disclosure of Personal Data” and “Social Media Presence.”
1.4. Retention PeriodWe store the data until the specified purposes of processing have been fulfilled, but no later than 3 years if there has been no contact—i.e., for example, no related orders and no connection to the website—unless another legal basis requires a longer retention period.
|
2. Processing Activities
|
2.1. Website visitsOur website is hosted by SHOPIFY International Limited, with its registered office at Victoria Building 1-2, Haddington Road, Dublin 4, D04XN32, Ireland.
The hosting provider acts as our data processor and processes data exclusively in accordance with our instructions. If personal data is transferred outside the European Economic Area (EEA), such transfers are protected by appropriate safeguards in accordance with applicable data protection laws. We use OneTrust as our consent management platform (CMP). The platform allows you to view information on each cookie, including its category, purpose, provider and storage period, and to manage or withdraw your consent at any time.
Every time a user visits our website, our system automatically collects data and information from the device used at . The following data is collected in what are known as server log files · Information about the type and version of the browser used · The user’s operating system · The user’s Internet service provider · The user’s IP address (access device) · Date and time of access · Websites from which the user’s system accesses our website, known as the referring URL (the previously visited website) · Websites that the user’s system accesses via our website The legal basis for the temporary storage of data and log files is the company’s legitimate interest (Article 6(1)(f) of the GDPR). Server log files may be used, on the one hand, for security purposes—for example, to prevent server overload—and, on the other hand, to ensure the proper operation and stability of the servers. The temporary storage of the IP address by the system is also necessary to enable the website to be displayed on the user’s computer.
|
|
|
2.2. Creating a Customer Account and Accessing the Customer AccountOn our website, we offer users the option to create a password-protected customer account by providing personal data. Creating a customer account is optional and serves to provide you with the greatest possible convenience. The data is entered into an input form, transmitted to us, and stored. The following data is collected during the registration process: · Guest account (optional) · Title (optional) · First and last name · Address · Email address · Password · Phone number (optional) · Date of birth (optional) The following data is also stored upon registration: · User's IP address · Registration date
Your data is used to create and customize your user profile as part of the provision of a contractual service. The legal basis for data processing is the fulfillment of the contract. User registration is necessary for the fulfillment of a contract with you or for the implementation of pre-contractual measures. If you wish to delete your account, please contact our Customer Service. contact@lovable.it |
2.3. Order Processing on the WebsiteIf you place an order selecting Italy as the destination country, we process your personal data to fulfill your order. You can choose from various payment methods. The following data is collected during the registration process: · Registration (email, name, etc.) · Shipping and billing addresses · Promo code (if applicable) · Payment methods
We process personal data on the legal basis of fulfilling the contract entered into with the user.
Data regarding your name and address is processed for the purpose of fulfilling the sales contract and processing your order. If you use a promotional code when placing your order, we will process your data to verify that the code’s terms and conditions are met. To process payments, we work with payment service providers. For this purpose, we transmit your order data to the payment service provider you have selected, which then processes the payment under its own responsibility. We may receive limited, transaction-related information from the payment service provider (e.g. confirmation that payment was successful, transaction ID, amount, timestamp). We do not receive full payment card details (e.g. card number, CVV) or other sensitive payment credentials unless explicitly stated elsewhere. If you place an order for export countries (by selecting another country than Italy as destination), sales activities are handled by our partner Global-E. With regard to these processing activities, we and Global-E are independent data controllers. Therefore, we recommend that you contact our partner directly if you wish to exercise any of your data protection rights:
Global-E France SAS 320 rue Saint-Honoré 75001 Paris France Data Protection Officer’s email: dataprotection@Global-e.com
|
2.4. Loyalty ProgramIf you have enrolled in our loyalty program (CLUB LOVABLE), your data may be processed online. To participate in our loyalty program and for information on the processing of personal data, please review the terms and conditions provided therein.
|
2.5. Newsletters and Marketing CommunicationsOn our website and, at times, also through our trusted wholesale or retail partners, you can subscribe to a free newsletter that you will receive via email. When you subscribe to the newsletter, the data you enter in the registration form is transmitted to us. The following data may be collected: · Last name, first name · Address · Email address · Cell phone number
In addition, the following data is collected during registration: · IP address of the device from which the request originates · Date of registration
Providing personal data is optional. We will contact you for advertising purposes only if you have given your consent; your consent serves as the legal basis. You may withdraw your consent at any time and unsubscribe by following the instructions provided in the communication or by contacting our customer service at contact@lovable.it,. Withdrawal does not affect the lawfulness of data processing operations already carried out. The collection of the user’s email address is intended for the purpose of sending the newsletter and other promotional communications. The collection of other personal data during the registration process is intended to prevent misuse of the services or the email address provided.
|
2.6. Online SweepstakesFrom time to time, we may offer the opportunity to participate free of charge in sweepstakes, prize contests, or games—such as the “Wheel of Fortune”—collectively referred to as “Sweepstakes”—to win discount coupons, online credits for use in our online store, or other prizes.
The personal data that may be processed in this context, depending on the scope of the drawings, includes: · Name (first name, last name) · Contact information (email address) Additional data that may be collected regarding the winner for the purpose of delivering the prize, depending on the scope of the Sweepstakes, may include: · Mailing address
Participation is always voluntary. The legal basis for processing is the user’s consent.
We process personal data exclusively for the purposes of conducting the sweepstakes, selecting and notifying the winner, and delivering the prize. The scope of the data collected depends on the type of sweepstakes and the type of prize being offered. More information is available in the respective terms and conditions.
|
2.7. Customer ServiceWe offer customer service that can be contacted via email, phone, or contact form for questions regarding products, your order, changes to your customer account information, or any other questions you may have. The personal data that may be processed in this context includes: · Name · Contact information (email / phone number) · Order ID · Invoice number · Any other information you choose to provide When the message is sent, the following data is also stored: · Date and time of contact
The legal basis for data processing is the user’s consent when contacting us on their own initiative and/or the fulfillment of (pre)contractual obligations. Personal data is processed for the purpose of handling the request made as part of the contact. Your feedback and responses also help us further develop and improve our product portfolio.
|
2.8. Customer Reviews and Reputation ManagementFollowing an interaction with customer service, you may receive an invitation from SimpleSat to leave a review. SimpleSat processes customer feedback on our behalf and may act as independent controller for that feedback. Data shared with SimpleSat typically includes survey responses and ratings, contact details when provided and technical/usage metadata.
Lovable uses a product review and rating service called Judge.me. The service aggregates ratings, calculates average scores and rankings. Personal data processed typically includes review content, product identifiers, timestamps, basic account information (display name, email if provided) and limited technical data (IP address, device/browser). We are the data controller for data collected on the platform. Judge.me may process data as processor or separate controller under their own privacy terms.
2.9. Whistleblowing and Anti-Corruption SystemWe operate a Whistleblowing and Anti-Corruption System that allows employees and external parties to report suspected legal or compliance violations. The system is managed by an external service provider acting as our data processor (NAVEX Global) pursuant to Article 28 of the GDPR. Personal data submitted through the reporting system is processed solely for the purpose of receiving, investigating, and handling reports. Reports may also be submitted anonymously. Access to the information is limited to authorized personnel and, where required, to the relevant authorities.
3. Disclosure of Personal DataWe may share personal data with selected recipients, such as other companies within our DBI Group (pursuant to Article 6(1)(f) and (b) of the GDPR). We use carefully selected service providers to support our business operations. These primarily include marketing agencies, marketing software providers, IT or software service providers, CRM system providers, hosting and content distribution services, as well as candidate tracking systems for managing the recruitment process. These service providers act exclusively in accordance with our instructions (pursuant to Article 28 of the GDPR). To process and deliver your order, we may also share your data with payment service providers and couriers for order shipping. Each of these acts as an independent data controller (pursuant to Article 6(1)(b) of the GDPR). In addition, personal data may be disclosed to public authorities (e.g., tax authorities, police, prosecutors, supervisory authorities) if we are required to do so (Article 6(1)(c) of the GDPR).
In the course of our business relationships, your personal data may be transferred or disclosed to third-party companies that may be located outside the European Economic Area (EEA), i.e., in third countries. Such processing is carried out exclusively to fulfill contractual and business obligations and to maintain your business relationship with us. Even if the recipients, such as service providers, are based within the EU or the EEA, it is possible that the recipient may transfer personal data to other recipients in a third country. The transfer of personal data to third countries takes place only if adequate safeguards exist in accordance with applicable data protection laws. Transfers may be based on an adequacy decision by the European Commission or, in the absence of such a decision, on Standard Contractual Clauses (SCCs) and additional safeguards. The purpose is to ensure an adequate level of protection. Where necessary, additional technical and organizational measures are implemented.
|
4. Social Media PresenceOur company is active on various social media platforms (e.g., Facebook, Instagram, YouTube[SL1] [(D2] , LinkedIn, TikTok). When you click on an external link, your browser establishes a connection with the respective platform. In this process, technical information such as your IP address and the time of access may be transmitted to the provider. Further processing of your personal data on the respective platform is carried out under the responsibility of the platform operator in accordance with its privacy policies. We have limited influence over the data processing activities carried out by the platform operators. If you post a comment on our social media channels, your comment will be publicly displayed and accessible worldwide. You can delete your comment yourself at any time. Please note that publicly shared content may remain accessible to third parties even after deletion.
|
5. Your rightsIf your personal data is processed, you have the following rights, which you can exercise by contacting
a) Right of Access, Article 15 of the GDPR You may request confirmation as to whether we are processing your personal data. In particular, you may request information regarding the purposes of the processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the intended retention period, and—if the data was not provided directly by you—the source of your data.
b) Right to Rectification, Article 16 of the GDPR You have the right to have your personal data rectified and/or supplemented if the personal data we process concerning you is inaccurate or incomplete.
c) Right to Withdraw Consent, Article 7(3) of the GDPR You have the right to withdraw your consent at any time. The withdrawal of consent is effective only for the future and does not affect the lawfulness of processing based on consent prior to withdrawal.
d) Right to erasure, Article 17 of the GDPR You have the right to request the erasure of your personal data if the requirements set forth in Article 17 of the GDPR are met, provided that there are no statutory retention obligations or other legal grounds requiring its retention.
e) Right to restriction of processing, Article 18 of the GDPR You have the right to request the restriction of processing under the conditions set forth in Article 18 of the GDPR.
f) Right to data portability, Article 20 of the GDPR You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another data controller without hindrance, where technically feasible.
g) Right to object, Article 21 of the GDPR You have the right to object at any time to the processing of your personal data carried out on the basis of Article 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions. If your personal data is processed for direct marketing purposes, you have the right to object at any time, free of charge.
h) Right to lodge a complaint with a supervisory authority, Article 77 of the GDPR Without prejudice to any other administrative or judicial remedies, you have the right to lodge a complaint with a supervisory authority—in particular in the Member State where you reside, work, or where the alleged infringement occurred—if you believe that the processing of your personal data violates the GDPR.
|
|
Last updated: September 2026 We reserve the right to modify or update this privacy policy at any time, in accordance with applicable data protection laws.
|
Cart 0
Your cart is currently empty.
Start Shopping