Privacy Policy

Below you will find the most important information on the processing of your personal data in relation to your browsing of the website and the use of the services offered. For detailed information on how Urban Kimono handles your personal data, please read carefully this document (Privacy Policy) and our Privacy Notice. Please also read the Cookie Policy and the General Terms of Use of the Site, which contain detailed information on the terms and conditions of our services.

This Privacy Policy refers only to our Site, and does not apply to any third party site referred to within the pages of our Site.


The following information regarding the processing of personal data describe the processing of data submitted or collected via the website the (hereinafter, the “Website”) and other websites where the given notice is published, pursuant to art. 13 of EU Regulation 2016/679 (following stated “GDPR”).


The data Controller is Urban Kimono SRL, an Italian company with registered office in Via Dell’Orso 16, 20121 Milano (MI), email (following stated as “Company” or “Controller”).


Via the company Website we gather the following kind of data: personal data, anonymous data and aggregate data. In particular we collect the following categories of personal common data:

  • Browsing data, such as IP address, name and domain of computers in use by the users connecting to the website, URI (Uniform Resource Identifier) address of requested resources, time of the request, used method of request submission to the server, response file dimension, numerical code of server response status (success, error, etc.) and any other parameter related the operating system and the IT environment of the user;
  • Data voluntarily submitted by the user in to websites owned or operated by the Controller which collect data for specific purposes (such as support, contact form, newsletter) supplying the inherent information notice;
  • Log in information to the website restricted area, including name, surname, e-mail and password;
  • Cookies set on the website as further described in the Cookie Policy.


  • A. Collection of statistical information through the collection of browsing data
    IT sistems and software procedures for the correct functioning of the Website may gather, during their normal operation, some personal data.
    Such information is not collected in order to be linked to identified data subjets, but they could allow, through the elaboration and connection with data held by third parties, the identification of the users.
    These data are processed only to obtain statistical anonymous information about the use of the website in order to verify its correct functioning. These data are immediately erased after the elaboration.
    These data could be used for ascertaining responsibilities in the eventual case of cybercrimes against the website.
    The legal basis for the processing of these data is the legitimate interest of the Controller; the retention period is limited to the length of the navigation session on the website.
  • B. Data voluntarily submitted by the user
    Some sections of the Website and of the other websites ran by the Controller, will require the submission of personal data. In these cases a specific Information Notice in accordance to art. 13 of the GDPR stating the data processing purposes will be provided.
  • C. Data collection through cookies
    Cookies are text files created by some websites on the users’ computer by the time he or she connects to such website with the aim to store and transport information.
    Cookies are sent by a web server (the computer on which the visited website is ran) to the browser of the user (Internet Explorer, Mozilla Firefox, Google Chrome, etc.).
    The first time you visit the Website a banner informing that CSP International uses the cookies described in the Cookie Policy will be displayed in the lower part of the monitor.
    In particular, the websites employ: – Browsing and Functionality Cookie: these cookies do not need the user’s consent since they are necessary to guarantee the normal browsing and fruition of the website. These cookies allow the user to browse the website following a series of entered criteria (such as language, products selected in your shopping cart) in order to enhance the services rendered by the website. Blocking these cookies may cause malfunctioning of the website or the non-retention of your preferences and settings for further visits.
    – Analytic Cookie (even third parties’, such as Google Analytics): the website uses these cookies to collect information on the use of the website, such as which pages are visited, and which errors may be encountered. These coookies are anonymous and are used only to help CSP International to enhance the functioning of the website and to understand better its users.
    – Users may oppose the storing of cookies on their hard disk configuring their browser (Internet Explorer, Mozilla Firefox, Safari etc.) in order to disabling cookies. After doing so, however, certain web pages may not perform correctly.
  • D. Allowing the access to the restricted area of the website
    Despite the browsing of the Website is free, is possible to take advantage of some of the online services offered by the company (for example multiple shipping address orders, orders visualization and tracking, etc.) only after having logged in to the customer area.
    The registration process consists in the completion of an online form in order to set off the log in credentials (username/e-mail and password).
    In first place, the data processing purpose is to ensure:
    – Execution the log in procedure;
    – Creation and both technical and administrative maintenance of the account.
    Legal basis of this processing is the need to execute a request of the data subject and to pursue contractual obligations. The retention period is set on ten years after the completion of the contract (for instance the closing of the account from the user).
  • E. Online purchase of products and services
    The data collection (name, surname, e-mail, billing and shipping addresses, telephone number, payment information) is due to fulfill the purchasing made though the website, in particular to guarantee the correct order execution and shipping (and related billing), as well as sending communications to the user regarding his/her transactions.
    Legal basis of this processing is the need to execute a request of the data subject and to pursue contractual obligations. The retention period is set on ten years after the order being made and/or the completion of the contract.
  • F. Direct Marketing
    Data collected by the Company for the purposes previously mentioned can be used by the Controller for merchandising and commercial activities. Given activities involve the mailing, with both automated (such as sms, e-mail, social networks, instant messaging app, push notification, etc.) and traditional means (operated phone calls and mail), of merchandising and commercial communications related to products and services offered by the Company or informing about company events as well as customer satisfaction surveys, statistical analysis and market investigations.
    Legal basis of this processing is the Subject’s consent. Data will be retained until the consent is not withdrawn.
  • G. Profiling Marketing
    Data collected by the Company for the purposes previously mentioned can be used by the Controller for the analysis of your purchasing preferences, habits, behaviors and interests through the evidences of your previous purchases or through the use of cookies (browsing analysis, monitoring of selected products and virtual shopping cart) with aim of sending customized commercial communications/offers/services fitting your requirements.
    Legal basis of this processing is the Subject’s consent. Data will be retained until the consent is not withdrawn (exception made for the data related to purchases, retained for 24 months after the collection).
  • H. Third parties Marketing
    The data collected by the Company can be transmitted to third parties for marketing activities made by the partners. In particular these subjects can send, with both automated (such as sms and e-mails) and traditional means of contact (such as operated phone calls and mail), promotional and commercial communications and/or newsletters related to their own products and services, as well as statistical analysis and marketing investigations.
    Legal basis of this processing is the Subject’s consent. Data will be retained until the consent is not withdrawn.


In exception of what previously stated regarding navigation data and what contained in the information notices in accordance to art. 13 of GDPR supplied in the specific section of the website, Data provisioning for further purposes is optional.
The non-provision of the data may result in the impossibility to pursue such purposes.


Your personal data will be processed through automated tools only for the time strictly necessary to pursue the purposes of their collection.
Specific security measures have been taken in order to prevent data loss, fraudulent or erroneous use of the data or unauthorized access.


Data will be processed by employees in company departments who are responsible for carrying out the activities outlined above and have been authorized to process the Data and have received suitable operating instructions (such as employees charged to ran the website and users requests).
Data may be communicated, only on request, to parties operating as data controllers, such as Public Organisations, Authorities, Istitutions and certifying bodies both public or private, entitled to request the data.


Regarding the processing of personal data operated by the Controller, you can ask the Company for access to personal data, or the correction or deletion of personal data, and also have the right to restrict processing of the data in the cases set out in article 18 of the GDPR, and object to processing in the case of legitimate interests of the controller.
Furthermore, in the case where processing is based on consent or a contract and carried out with automated tools, data subjects have the right to receive the personal data in a structured, commonly used and machine-readable format, and to transmit the data to another data controller without obstruction.
In any case Data subjects have the right to lodge a complaint to the competent Supervisory Authority and to resort to any other mean of enforcement laid down in the regulation.
In order to exercise your rights you can contact the data Controller via mail to