Privacy Policy

This policy indicates the personal data we collect when you use this website or visit our boutiques and describes the rights you have as a “Data subject”. We reserve ourselves the right to update the content of this page periodically, so we invite you to consult it regularly. 

The Data Controller is Antonio Marras S.r.l., with legal seat in Alghero (SS), Località Salondra n. 64, e-mail data.protection@oniverse.it

You may find below a list of all the purposes for which we collect your personal data.

Purpose: to allow web browsing; to carry out aggregate statistical analysis aimed at measuring the correct functioning of this websiteand, in the event of computer crimes, to ascertainanyresponsibility.

Processed data: IP addresses, domain names, URIs. These data are acquired by the IT systems responsible for the proper functioning of this website.

Legal basis:

• Provision of services aimed at allowing users to browse this website; 
• Legitimate interest consisting in ensuring the proper functioning of IT systems and in proceeding with the investigation of possible crimes (possibly also based on the existence of a legal obligation). 

Retention period: 30 days after the collection, unless legal provisions or provisions of Public Authorities impose a different retention time in relation to investigations related to any computer crimes.

Purpose: fulfilment of purchase orders and performance of related activities (sending of goods, invoicing, payment management, shipment tracking, delivery of goods, possible activation of the return and refund process of the order, management of the return, etc). 

Processed data: contact details (name, surname, e-mail address, telephone number, name and surname of the holder of the payment instrument used) and shipping address.  In the event of a return, we will ask you to also communicate your IBAN code, which is necessary to refund the price of the goods you have returned. We do not process the data relating to the payment method indicated by you (e.g. payment card number and security code), which are instead collected exclusively by the  selected payment service provider. 

Legal basis: execution of the sales contract. 

Retention period: time necessary to fulfil the contractual and regulatory obligations regarding the purchase and sale of products (e.g. tax legislation). 

Purpose: we provide you with an assistance service  for any request relating to the purchase of our products or the use of our services. You can contact Customer Care by e-mail or by using the chat available on the website. We retain your requests for assistance if they are related or connected to a claim made by you against us or are necessary for the protection of our rights. 

Processed data: data necessary to reply to your requests for assistance  Your requests via chat will be answered within the chat itself or by e-mail. For this reason, when you use the chat, you will be asked to enter your name and e-mail address. 

Legal basis: 

• execution of the contract for the purchase and sale of products or pre-contractual measures adopted following your request; 

Retention period: time strictly necessary to fulfil your requests. If a complaint is filed or legal proceedings are initiated, the data will be retained for 10 years. 

Purpose: to protect our rights and enable the defence of such rights in the event of a judicial or extrajudicial dispute. 

Data processed: your assistance requests sent to our customer service 

Legal basis: our legitimate interest in the defence of our rights in and out of court 

Retention period: 10 years from the completion of the assistance request; if an out-of-court dispute is initiated, the data will be stored until the dispute is concluded; if, on the other hand, a court dispute is initiated, the data will be stored until the decision became final.

Purpose: with your consent, we will send you commercial communications regarding our products, services and offers via e-mail, instant messaging services (e.g. WhatsApp), post and social media channels (e.g. Facebook, Instagram, etc.). We may also conduct market research and surveys to detect your level of satisfaction with Antonio Marras products. 

Processed data: contact details (e.g. name, surname, e-mail address, telephone number). 

Legal basis: your consent that you may revoke at any time by writing to data.protection@oniverse.it or by clicking on the unsubscribe link contained in all our communications. 

Retention period: until you revoke your consent. 

Purpose: with your consent, we will send you personalised commercial communications based on your profile, your purchasing and browsing habits. In addition, our client advisors will be able to assist you in all our boutiques with information on colours, models and sizes relating to purchases made in our stores.    

Processed data: data relating to your purchases, your country of origin, your gender and your age, your interaction with us through our website. We may also enrich your profile with information lawfully acquired from third parties and made available to Antonio Marras, with statistical information (e.g. demographic information, georeferencing data, etc.) as well as information relating to the electronic tools you use to interact with us. 

Legal basis: your consent that you may revoke at any time by writing to data.protection@oniverse.it.

Retention period:  Data will be retained for 5 years, except for gender, age and country of origin which will be retained until your consent is withdrawn. 

Purpose: creation of a reserved area ("account") that will allow you to save some content (e.g. your purchase history, etc.). 

Processed data: personal details and contact information provided in the online form for registering for the reserved area. Some fields specifically marked are to be considered mandatory: should this information not be provided,  you will not be able to create your account. 

Legal basis: execution of the website registration contract. 

Retention period: If the account is not used for more than 5 years,  it will be deleted. 

Purpose: to enable booking and participation in events organised by the ‘Antonio Marras’ brand. 

Processed data: personal details and contact data  requested in the online form dedicated to the booking of our events: data marked with an asterisk are essential for completing the booking; should they not be provided, it will not be possible to make the booking. 

Legal basis:  your specific consent expressed by filling out the registration form. 

Retention period: the data is stored for as long as is necessary to manage the event to which the booking relates. 

Puporse: issuance of an invoice for a purchase made at an Antonio Marras boutique. 

Processed data: name, surname, contact details, billing address, tax ID number, VAT number, residence address, recipient code (SDI code). 

Legal basis: 

• compliance with regulatory obligations in tax matters; 
• compliance with contractual obligations. 

Retention period: time required to fulfill contractual and regulatory obligations relating to the sale of products (e.g., tax regulations). 

Purpose: to manage your appointment request at our boutique. 

Processed data: person details and contact information requested in the online form dedicated to booking the appointment, as well as information relating to the appointment itself (selected boutique, date, and time). 

Legal basis: execution of pre-contractual measures adopted at your request. 

Retention period: the data is stored for as long as is necessary to manage the appointment.

Purpose: to allow you to save your favorite Marras items so you can remember them and, if you wish, add them to your cart. 

Processed data: if you use the wishlist and have logged into your account, data relating to your account and the products you have saved will be processed; if, on the other hand, you use the wish list but do not have an account or have not logged into it, only data relating to the products saved will be processed. 

Legal basis: your consent, which you have given by saving products to your wishlist. 

Retention period: If you have logged into your account and are using the wishlist, the data is stored in your account until you decide to remove it or delete your account. If, however, you do not have an account or have not logged in and are using the wishlist, the products are stored in the wishlist through a specific cookie. For further information, please refer to our Cookie Policy. 

Purpose: to ensure safety in our boutique and protect our staff and customers, we have installed a video surveillance system. In the event of judicial or extrajudicial disputes, the recordings made may be used to ascertain or exercise  our claims and rights. 

Processed data: your image. 

Legal basis: our legitimate interest in protecting   our business assets, ensuring the safety of  our employees and customers, and protecting our  rights in court or out of court. 

Retention period: the images will be stored for a period of 72 hours. In the event of a request from the judicial authorities or the judicial police, or in any case where the images are used in legal proceedings, the retention period may be extended until the proceedings are concluded. 

To achieve the processing purposes indicated in this policy, we need to communicate them to these categories of subjects: 

• Staff of Antonio Marras S.r.l., in charge of managing our website and the services available online and at our stores; 
• Suppliers of Antonio Marras S.r.l. (e.g. IT service and platform providers, consultants) in their capacity as data processors; 
• Credit institutions, companies that carry out shipping and transport services, insurance companies: these subjects act as independent Data Controllers and their involvement is necessary to carry out necessary operations related to the use of our services (e.g. making payments; deliver the purchased goods).

The personal data collected may be transferred outside the European Union. In this case, the transfer will take place in compliance with the provisions of EU Regulation 2016/679 ‘GDPR’ (in particular, the data will only be transferred after signing the Standard Contractual Clauses approved by the EU Commission with Decision No. 2021/914/EU or to countries that can guarantee an adequate level of personal data protection and are therefore recipients of  an Adequacy Decision adopted by the EU Commission). 

You may exercise the rights guaranteed by the GDPR regarding your personal data by writing to data.protection@oniverse.it. We will reply to your request as soon as possible and, in any case, no later than thirty days after receiving your request. If, in relation to your request, it is necessary to verify your identity, we may ask you for additional identifying information or an identity document. In particular, you may exercise the following rights: 

• Right of access, i.e., the right to know if a processing of personal data concerning you is in progress and, if confirmed, to obtain a copy of such data and be informed about: the origin of the data, the categories of personal data processed, the recipients of the data, the purposes of the processing, the existence of an automated decision-making process (including profiling), the data retention period, the rights provided for by the GDPR;  
• Right to obtain the rectification or integration of your data; 
• Right to obtain the deletion of personal data if such data are no longer necessary for the purposes for which they were collected, or if we are no longer authorized to process them; 
• Right to obtain the limitation of the processing of personal data in the following cases: i) you have contested the accuracy of the personal data. You can request a processing limitation for the period necessary to verify the accuracy of the data; ii) we are no longer authorized to process the data, and instead of deleting them, you can ask us to limit their use; iii) if the personal data in our possession, despite being no longer necessary for the purposes for which they were collected, are necessary for you to ascertain, exercise or defend a right in court; 
• Right to data portability, i.e., the right to receive personal data concerning you in a structured format, commonly used and readable by an automatic device, as well as the right to request for such data to be transmitted to another Data Controller; 
• Right to revoke the consent, for the processing based on it; 
• Right to oppose at any moment to the processing of personal data based on our legitimate interest. 

You also have the right to lodge a complaint with the competent data protection supervisory authority if you believe that the processing of your data conflicts with the provisions of the applicable laws. 

Last update: June 2026