Privacy policy

Information on the processing of personal data pursuant to and for the purposes of Art. 13 of the New European Regulation 2016/679 on the protection of individuals with regard to the processing of personal data (GENERAL DATA PROTECTION REGULATION - GDPR)

YOUR PRIVACY

Poke House S.r.l. with registered office in Milan, Corso Giuseppe Garibaldi 12, tax code and VAT number 10300540969 (hereinafter, "Poke") is constantly committed to protecting the privacy of its users. This document has been prepared pursuant to Article 13 of the EU Regulation 2016/679 (hereinafter, the "Regulation") in order to allow you to know how your personal information is managed when (i) you navigate on the website www.pokehouse.it, (ii) you land on squad.pokehouse.it by scanning our QR code on the website and/or on promotional materials (flyers, in-store material, etc.. ), and (iii) you use Poke House Squad (hereinafter, the "Mobile Wallet"), which allows you to be always updated on all the latest initiatives and offers dedicated to you ((i), (ii), and (iii), hereinafter, jointly, the "Platforms") and, where applicable, to give your express and informed consent to the processing of your personal data.In accordance with the provisions of the Regulation, the processing of data by Poke shall be carried out in accordance with the principles of lawfulness, fairness, transparency, purpose limitation and storage, data minimisation, accuracy, integrity and confidentiality.We also remind you that the services offered by Poke through the Platforms are intended only for persons over 18 years of age. Persons under 18 years of age may only use the services with the consent of their parents or legal guardian. If Poke becomes aware of personal data of persons under the age of 18 without the valid consent of a parent or legal guardian, Poke will immediately delete the data.If you would like to know more about how Poke handles your personal data, please also read our "Cookie Policy", which contains information about (i) the use of cookies within the Platforms and (ii) the terms and conditions of our services.Please note that some services may be subject to specific legal terms, in which case we will provide you with appropriate information from time to time.

The data controller

The Data Controller of your data is Poke House S.r.l. with registered office in Milan, corso Giuseppe Garibaldi 12, tax code and VAT no. 10300540969 (hereinafter referred to as "Poke").
Contact the Data Controller at any time by sending a request to privacy@pokehouse.it, for any clarification, question or requirement related to your privacy and the processing of your personal data.

Types of data processed and purposes of processing

Poke processes the personal data you provide when you place an order and purchase products, and the data it collects while you are browsing or using the services offered on the Website, as well as the data you provide through your registration to the Newsletter. Poke may therefore collect data about you such as, for example:

  1. your personal data such as your first and last name, gender, date of birth, language, the city where you usually come to eat at Poke;
  2. browsing data (IP address, login information, browser type and version, browser plug-in types and versions, operating system and platform, visit information including URL clickstream to/from the Site);
  3. data about your purchasing habits for our products (preferred poke, for example);
  4. we collect your email address when you subscribe to our newsletter service and/or get the Mobile Wallet;
  5. we process the personal data you provide when you contact our Customer Service in order to be able to provide you with the assistance you require;
  6. the data you provide us with when you register with the Platforms and take advantage of the services offered to registered users such as, but not limited to, promotions, updates on our products, discounts, etc. This activity is only possible by entering certain personal information, which is necessary to ensure the identification of the specific user;
  7. information contained in any CVs that are sent to us; this information will only be used to assess compatibility with any open positions. CVs are kept for a maximum period of six months.

If you do not wish to receive any further communications from Poke or change your consent, you can let us know by simply clicking on the "unsubscribe" link at the bottom of each communication, logging into your Mobile Wallet and clicking on the three dots in the top right hand corner of the card, and/or contacting our customer service team at privacy@pokehouse.it. Please note that you may receive further communications from us even after you have submitted your unsubscribe request, as some mailings may have already been scheduled, our systems may take some time to process your request.

In connection with all of the above activities, we will process your personal data mainly by means of computerised and electronic tools; the tools we use guarantee high standards of security, in full compliance with current legislation.

Your personal data are processed for the following purposes:

  1. analysis and statistical surveys. Some information on the use of the Platforms is used for statistical analysis and surveys in order to improve our offer and services, as well as for promotional and marketing activities;
  2. providing services offered on the Platforms such as, inter alia, sending push notifications, when you give us your consent;
  3. sending communications relating to time-based offers (for example, by time slot and/or time period), in the form of discounts and/or free products, via Mobile Wallet;
  4. with your express consent, the contact details provided may be used for commercial communications about our products and services, offers and promotions, exclusives, new arrivals, etc.. These communications will be made through different means such as, but not limited to, e-mail, SMS, telephone, Whatsapp, communication channels enabled through social media such as Instagram and/or Facebook, etc.;
  5. only with your consent, Poke may personalise your experience by offering you previews and offers in line with your tastes and by sending you commercial communications that are personalised according to your interests or on the basis of the data you have provided (gender, date of birth, etc.), by means of different methods such as, by way of example but not limited to, e-mail, SMS, telephone, Whatsapp, communication channels enabled through social media such as Instagram and/or Facebook, etc.
  6. to fulfil any obligations under applicable laws, regulations or EU legislation, or to comply with requests from the authorities;
  7. respond to specific requests addressed to Poke;
  8. to comply with any applicable laws, regulations or EU legislation or requests from authorities.

Personal data voluntarily provided by you
This privacy policy also applies to the processing of personal data voluntarily provided by you through the Platforms.

Personal data of third parties voluntarily provided by you

The use of particular services of the Platforms may involve the processing of personal data of third parties that you have directly communicated to Poke. In this case, you act as an autonomous data controller, assuming all obligations and responsibilities under the law. In this sense, you grant Poke the widest possible indemnity against any dispute, claim and/or request for compensation for damages caused by processing that Poke may receive from third parties, whose personal data has been processed through your use of the Platforms services in violation of the applicable data protection laws. In any case, should you provide or otherwise process the personal data of third parties when using the Platforms, you warrant as of now - assuming all related liability - that this particular processing hypothesis is based on the prior acquisition - by you - of the third party's consent to the processing of the information concerning him/her.

legal basis of the processing

The legal basis for the processing of your data for the purposes of article 3(a) and (b) is article 6(1)(b) of the Regulation ([...]the processing is necessary for the performance of a contract to which the data subject is party or for the performance of pre-contractual measures taken at the request of the data subject), as the processing is necessary for the provision of our services. The provision of your data for these purposes is optional, but failure to provide/revoke the processing would make it impossible for Poke to provide you with its services.The purpose referred to in Article 3(c) is a lawful processing of your data within the meaning of Article 6(1)(c) of the Regulation ([...] processing is necessary for compliance with a legal obligation to which the controller is subject). Once the data has been provided, in fact, the processing is indeed necessary to comply with legal obligations to which Poke is subject.The processing of your data for primarily marketing purposes under Section 3(d), (e) and (f) is based on your own consent under Section 6(1)(a) ([...] you have given your consent to the processing of your personal data for one or more specified purposes). The provision of your personal data for the above-mentioned purposes is therefore entirely optional and does not affect the use of the services offered by Poke on the Platforms. If you wish to object to the processing of your data for the above-mentioned purposes, you may contact us at any time at the following address: privacy@pokehouse.it.Processing for the purposes of profiling, as referred to in Article 3(g), is based on the granting of your consent in accordance with Article 6(1)(a) ([...] you have given your consent to the processing of your personal data for one or more specific purposes) and Article 22(2)(c) of the Regulation.

geo localisation

Among the services offered by the Platforms there is the possibility for the user to receive, only upon express consent, push notifications informing you that you are near a Poke venue. This location data is not transmitted or made accessible outside of your mobile device through Poke; Poke therefore does not process this data.On the other hand, Apple's and/or Google's systems, with your express permission, process your location data in order to provide you with services (e.g. suggesting the nearest venue to you). You can deny access to your location data via your device settings.

subjects authorised to process your data

Your personal data is processed by the trained and instructed staff of Poke as Data Controller. Your data may also be processed by parties other than Poke, in accordance with applicable laws.If some of these entities are located in non-EU countries, your personal data will be transferred to such countries in accordance with the guarantees provided by law.

transfers of personal data

In addition, your data may be shared with:

  • subjects who typically act as data processors, i.e.: i) persons, companies or professional firms that provide assistance and consultancy to Poke in accounting, administrative, legal, tax and financial matters; ii) subjects with whom it is necessary to interact in order to provide our services and/or the operation of the Platforms (e.g. hosting providers, payment processors, subjects delegated to carry out technical maintenance of the Platforms and/or the servers where your data is stored);
  • persons, entities or authorities to whom it is mandatory to communicate your data by virtue of legal provisions or orders from the authorities
  • persons authorised by Poke to process personal data in order to carry out activities strictly related to the provision of our services, who have committed themselves to confidentiality or have an adequate legal obligation of confidentiality (collectively, the "Recipients").
  • Your personal data is stored on servers and processed by Poke within the European Economic Area.
  • Poke ensures that the processing of your information by such Recipients is in accordance with the Regulation.
  • Indeed, transfers may be based on an adequacy decision, the Standard Contractual Clauses approved by the European Commission or another appropriate legal basis.

Period of data retention

Your personal data is kept for a limited period of time depending on the purpose for which it was collected. At the end of this period your personal data will be deleted, irreversibly anonymised, and/or disabled. For example, the data used to send you our newsletters is kept until you ask us to stop sending it and to remove you from our mailing list. Specifically: the data processed for the purposes referred to in Article 3 letters a) and b) will be kept for the time strictly necessary to achieve those purposes. In any case, since the processing is carried out for the provision of services, Poke will keep your data for the period of time provided for and allowed by the Italian law to protect its interests (article 2946 c.c. and following).Data processed for the purposes of article 3 letter c) will be kept for the time provided for by the specific obligation or applicable law.For the purposes of article 3 letter d), e), f) and g), your data will be processed, as a general rule, until your consent is revoked. In any case, Poke applies rules that prevent the indefinite storage of data and limits the storage time in accordance with the principle of minimization of data processing.Your personal data will be processed using electronic or automated, IT and telematic tools, or through manual processing with logic strictly related to the purposes for which such data were collected and, in any case, in such a way as to ensure the security of the same.Further information can be requested from the following address: privacy@pokehouse.it.

YOUR RIGHTS

Pursuant to articles 15 and following of the Regulation, you have the right to ask Poke, at any time, for access to your personal data collected, to rectify or cancel them or to oppose their processing, you have the right to request the limitation of processing in the cases provided for by article 18 of the Regulation, as well as to obtain in a structured, commonly used and machine-readable format the data concerning you, in the cases provided for by article 20 of the Regulation. Requests should be made in writing to the following address: privacy@pokehouse.it.

Specifically, your rights consist of:

  • Access to and amendment of data: you have the right to access your personal data and to ask for it to be corrected, amended or supplemented with other information. If you wish, we will provide you with a copy of the data we hold about you.
  • Withdrawal of consent: you may withdraw at any time a consent you have given for the processing of your personal data in connection with any activity with marketing purposes (e.g. sending commercial and promotional communications, conducting market research and surveys, customising Platforms and commercial offers). If you withdraw your consent, we will promptly stop processing your personal data based on that consent, while other processing or processing based on other assumptions will continue to be carried out in full compliance with the provisions in force.
  • Objection to the processing of personal data: you have the right to object at any time to the processing of your personal data carried out on the basis of our legitimate interest, explaining the reasons justifying your request; Poke will subsequently assess the reasons for your request.
  • Deletion of personal data: in the cases provided for by the regulations in force, you may request the deletion of your personal data. After receiving and evaluating your request, if legitimate, we will promptly stop processing and delete your personal data.
  • Temporary limitation of the processing of personal data: in this case Poke will continue to store your personal data but will not process them, subject to legal exceptions. Restrictions on processing may be requested if the accuracy of your personal data is disputed, if processing is unlawful, if you exercise your rights in a court of law and if you object to processing during the period in which we evaluate the reasons for your request.
  • Transfer of your data to a party other than Poke ("right to data portability"). You can request to receive your data: where technically possible, your data may be transferred directly to a third party specified by you.
  • Revocation of consent: you may revoke at any time a consent you have given for the processing of your personal data in relation to any activity with marketing purposes (e.g. sending commercial and promotional communications, conducting market research and surveys, customising Platforms and commercial offers). If your consent is withdrawn, we will promptly cease the processing of your personal data based on that consent, while other processing or processing based on other assumptions will continue to be carried out in full compliance with the provisions in force. Deletion of personal data: in the cases provided for by the regulations in force, you may request the deletion of your personal data. After receiving and evaluating your request, if legitimate, we will promptly terminate the processing and delete your personal data.
  • Temporary limitation of the processing of personal data: in this case Poke will continue to store your personal data but will not process them, subject to legal exceptions. Restrictions on processing may be requested if the accuracy of your personal data is disputed, if processing is unlawful, if you exercise your rights in a court of law and if you object to processing during the period in which we evaluate the reasons for your request.
  • Transfer of your data to a party other than Poke ("right to data portability"). You may request to receive your data: where technically possible, your data may be transferred directly to a third party that you indicate to us.
Complaints

If you believe that the processing of your personal data has been carried out unlawfully, you may lodge a complaint with one of the supervisory authorities responsible for ensuring compliance with the rules on the protection of personal data. In Italy, a complaint may be lodged, pursuant to Article 77 of the Regulation, with the Garante per la Protezione dei Dati Personali.More information on how to submit a complaint is available on the Garante's website at http://www.garanteprivacy.it.

Security measures

Your personal data are processed with specific technical and organisational security measures, aimed at preventing illegitimate or fraudulent use. In particular, we use security measures that guarantee: the pseudonymisation and/or encryption of your data, the confidentiality, integrity and availability of your data. In addition, Poke is committed to regularly testing, verifying and evaluating the effectiveness of technical and organisational measures in order to ensure continuous improvement in the security of processing.

Policy updates

This privacy policy is effective as of 2 July 2020.This privacy policy may be amended and supplemented over time. We invite you to periodically check its contents: where possible, we will endeavour to inform you promptly about the changes made and their consequences.The updated version of the privacy policy will, in any case, be published on this page, indicating the date of its last update.

Cookies

The cookie policy can be viewed on this page.For the site to function, these cookies are necessary https://poke-house.com/it-it/cookie-policy/

Cookies Necessary for the Functioning of the Store

Name Function

_ab

Used in connection with access to admin.

_secure_session_id

Used in connection with navigation through a storefront.

cart

Used in connection with shopping cart.

cart_sig

Used in connection with checkout.

cart_ts

Used in connection with checkout.

checkout_token

Used in connection with checkout.

secret

Used in connection with checkout.

secure_customer_sig

Used in connection with customer login.

storefront_digest

Used in connection with customer login.

_shopify_u

Used to facilitate updating customer account information.

    Reporting and Analytics

    Name

    Tracking preferences.

    _tracking_consent

    Track landing pages

    _landing_page

    Track landing pages

    _orig_referrer

    Shopify analytics.

    _s

    Shopify analytics.

    _shopify_fs

    Shopify analytics.

    _shopify_s

    Shopify analytics relating to marketing & referrals.

    _shopify_sa_p

    Shopify analytics relating to marketing & referrals.

    _shopify_sa_t

    Shopify analytics.

    _shopify_y

    Shopify analytics.

    _y

    Shopify analytics.

    The length of time a cookie remains on your computer or mobile device depends on whether it is a 'persistent' or 'session' cookie. Session cookies last until you stop browsing and persistent cookies last until they expire or are deleted. Most of the cookies we use are persistent and expire between 30 minutes and two years from the date they are downloaded to your device.

    You can control and manage cookies in a number of ways. Please note that removing or blocking cookies may have a negative impact on your user experience and parts of our website may no longer be fully accessible.

    Most browsers automatically accept cookies, but you can choose whether or not to accept cookies through the browser controls, often found in the "Tools" or "Preferences" menu of your browser. For more information on how to change your browser settings or how to block, manage or filter cookies, you can find the help file for your browser or via sites such as www.allaboutcookies.org.

    Also, please note that blocking cookies may not completely prevent the way we share information with third parties such as our advertising partners. To exercise your rights or opt out of certain uses of your information by these parties, please follow the instructions in the "Behavioural Advertising" section above.

    Do Not Track

    Please note that because there is no consistent industry understanding of how to respond to "Do Not Track" signals, we do not alter our data collection and usage practices when we detect such a signal from your browser.

    Changes

    We may update this Privacy Policy from time to time to reflect, for example, changes in our practices or for other operational, legal or regulatory reasons.

    Contact

    For more information about our privacy practices, if you have any questions, or if you would like to make a complaint, please contact us by email at [email address] or by post using the details provided below:

    Poke House srl, Corso Garibaldi 12, 20121 Milan MI, Italy

    Last updated: 05 February 2020

    If you are not satisfied with our response to your complaint, you have the right to lodge your complaint with the relevant data protection authority. You can contact your local data protection authority.