Privacy & Cookie Policy – BLANCAH

BLANCAH is temporarily unavailable.
We thank our customers for their interest and support.


Extra 20% off Sale with code EXTRA20

Privacy & Cookie Policy

Privacy Policy

This policy applies to the processing of personal data of users (hereinafter, "User / Users") processed through the website  (hereinafter, "Site") also in relation to e-commerce services performed there (hereinafter, "Services"). By using the Services, the User will make purchases from Drop S.r.l., whose full address is visible at point 6 below and in the general conditions of sale.


Data Controller

Through this document, HIM Co S.p.A , with registered office in Via Orobia, 34 - 20139 Milano, P.I. 06868090488, as the controller of the processing of personal data (hereinafter, "Controller"), intends to convey  the information referred to in Articles. 13 et seq. of EU Regulation 679/2016 (hereinafter, the "Regulation"), in relation to the processing of personal data through the Site.


1. Type of data processed and types of processing

a) Navigation data: the computer systems and software procedures used to operate this Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified interested parties, but by their nature could, through processing and associating data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by Users connected to the Site, URI (Uniform Resource Identifier) of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc..) and other parameters relating to the operating system and computer environment. These data are used only to obtain anonymous statistical information on the use of the Site and to check its proper functioning and are deleted immediately after processing.

b) Data provided voluntarily by the User to purchase a product on the Site and / or use of a Service: the finalization of the sale of a product through the Site and/or use of the Services involves the processing of User data, with the sole purpose of offering the Services and to fulfill its contractual and administrative obligations, including, for example, process the order and payment, send the product purchased. The data subject of the treatment are: name, e-mail address, domicile, and other data which may be useful to conclude and execute the sale contracts; data included in special categories are excluded.

c) Data provided voluntarily by the User for sending promotional communication relating to the Services: in the event where the interested party subscribes the newsletter Service or expresses his consent to the receipt of commercial communication by the Controller, the data will be processed for sending such communication by e-mail or postal mail to the addresses provided by the interested party. The data subject of the treatment are: name, e-mail address, domicile, and other data which may be useful to address the promotional communication; data included in special categories are excluded.

d) Cookies: for the processing of data through cookies, please see the relevant policy.


2. Purpose and legal basis of the processing

The data of the Users collected will be processed by the Controller for:

- Website operation: to pursue a legitimate interest of the Controller, consisting in ensuring the security of the Site and of the information exchanged on it, i.e. the ability of this Site to withstand, at a given level of security, unforeseen events or unlawful or malicious acts that compromise the availability, authenticity, integrity, and confidentiality of personal data stored or transmitted and the security of the related Services offered or made accessible. The legal basis for the processing is Article 6(1)(f) of the Regulation.

- Use of Services: to use the Services offered through the Site, for example, to allow the User to purchase a product, etc. The legal basis for the treatment is art. 6, par. 1, letter. b) of the Regulation being the processing necessary for the execution of the contract of which the person concerned is a party;

- Sending of advertising/marketing communication of the Controller: if the interested party has given his explicit consent, to send invitations to training courses, events organized by the Controller or to send promotional communication of the activities of the Controller, including marketing research. The legal basis for the processing is art. 6, letter a) of the Regulation, i.e. the consent of the interested party.


3. Duration of processing and storage period of data

For the purposes of Article. 2) above, personal data will be processed for the period strictly necessary to achieve the above objectives and also subsequently, for the performance of legal obligations and/or for purposes of a defensive nature; in this second case, the processing shall consist exclusively in storing the contractual information for ten years i.e. the period set as statute of limitation for civil and tax/fiscal purposes.

The data provided for commercial communications, opinion surveys and market researches will be kept until the request of the interested party to interrupt the activity, or for 2 years.


4. Modalities of the treatment

The processing will be carried out both on paper and by telematic means, with the help of modern computer systems and with manual methods, only by persons expressly appointed for this purpose. The data will be processed with logic and through forms of organization of the data strictly related to the obligations, tasks or purposes mentioned above. The Controller uses technical and organizational measures to protect the data in his possession from manipulation, loss, destruction and against access by unauthorized persons. Security measures are constantly improved according to technological development.


5. Mandatory or optional nature of data provision

The provision of the data referred to in point 1, letter b) is optional. In case of refusal, however, the User will not be able to purchase on the Site.

The provision of the data referred to in point 1, letter c) is optional. The user may revoke his or her consent at any time and without giving reasons. The easiest way to do this is to click on the "Unsubscribe" link, which is found in each newsletter or communication received. Alternatively, the user can send the unsubscription request to the Controller, at the address


6. Scope of communication and dissemination

The User's personal data will be processed by persons authorised to carry out these tasks, duly appointed as data processors or persons in charge of processing, equipped with security measures to guarantee the confidentiality of the persons concerned to whom the data refer and to avoid undue access to third parties or unauthorised personnel. If necessary, the data collected may be communicated, within the limits strictly pertinent to the obligations, tasks or purposes referred to in paragraph 2, to public or private entities (insurers, auditing and certification companies, etc..) or to the competent authorities for the purposes of prevention, detection or repression of crime, with the observance of the rules governing the matter. No data will be disclosed.

With specific regard to the e-commerce platform, Drop Digitale S.r.l. (with registered office in Viale Sarca 336, Building 16, 20126 Milan, VAT number and registration number with the Register of Companies of Milan 02912880966) is appointed processor for the processing of personal data of Users for purposes related to the sale through the Site, in all its phases (navigation on the site and its use based on the conditions of use, registration, administrative activity, legal obligations), delivery, returns, customer care.

The updated list of all the processors is available near the center of Onward Luxury Group S.p.A. and will be able to be demanded to the following address e-mail: Such list can be subsequently integrated and/or updated to the need.

The data of the Users, memorized on electronic support, are guarded and filed on a server in legitimity availability of Drop Digitale S.r.l. situated in the European Union.


7. User rights

Users are entitled to know their rights, consisting essentially in the right to receive information about the existence of the processing of their personal data, and to access their data, to obtain the rectification, integration, updating, cancellation or blocking. Furthermore, the User will also have the right to obtain a copy of his/her data, to limit the processing and/or, again, to oppose their processing, as well as the right to data portability and to lodge a complaint with the competent control authorities under the conditions and within the limits indicated in art. 13 of the Regulation.

Each data subject is guaranteed the following rights as per articles 15 et seq. of the Regulation:

  • Right to information;
  • Right of access to the interested party;
  • Right of rectification;
  • Right of cancellation (right to be forgotten);
  • Right of limitation of treatment,
  • Right to data portability;
  • Right of opposition.

The User can then know which of his personal data are in the possession of the Controller, their origin and how they are used, request their updating, rectification or integration and, in the cases provided for by current regulations, the cancellation, limitation of treatment or oppose their treatment. Any interested party may, if they wish, request to receive a copy of the personal data held by the Controller concerning them in a format readable by electronic devices and, where technically possible, the Controller may transfer the data directly to a third party indicated by the interested party.

If the User considers that the processing of his personal data has been carried out unlawfully, he may lodge a complaint with one of the competent supervisory authorities for compliance with the rules on the protection of personal data. In Italy, the complaint can be submitted to the Guarantor for the Protection of Personal Data (


8.  Exercise of rights

To exercise these rights, Users may send a communication to Controller to the email address, indicating in the subject line "Privacy - exercise of rights".

*** *** ***

This Privacy Policy was published on 20/07/2020. Any updates will always be published on this page.




Cookie Policy

HIM Co S.p.A, with registered office in Via Orobia, 34 - 20139 Milano, P.I. 06868090488 (hereinafter, the “Company”), intend to inform users as follows.

In this information, pursuant to art. 13 of EU Regulation 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data (hereafter, "Regulation"), you will be explained how we collect this data, for what purposes and what are your rights. This document is a part of the Information Note on the Processing of Personal Data, available at the following link.

The internet website (hereafter the "SITE") uses cookies to improve your browsing experience.


What are cookies?

Cookies are small text’s files that websites visited by the user send directly to the user's device (normally to the browser); they are then stored on the device and transmitted to the site again the next time the user visits it (i.e. first party cookie). During navigation on a site, the user can also receive cookies from different sites or web servers on his terminal (so-called third-party cookies); this happens because on the visited website there may be elements such as, for example, images, maps, sounds, specific links to web pages of other domains that reside on servers other than the one on which the requested page is located. In other words, they are those cookies that are set by a website other than the one you are currently visiting.

Cookies may have a limited duration to a single browsing session on the browser (so-called session cookies), and in this case they are automatically deactivated when the browser is closed by the user; or they may have a predetermined deadline and, in this case, they will remain stored and active on your hard disk until this expiration date, continuing to collect information during different browsing sessions on the browser (so-called persistent cookies).

Cookies are used for different functions. Some are necessary to allow you to browse the site and take advantage of its features (so-called technical cookies). Others are used to obtain statistical information, whether aggregated or not, on the number of users accessing the Website and on how the Website is used (so-called tracking or analytics cookies). Others, finally, are used to track your consumer profile and make you display advertisements on the site that may be interesting for you, as they are consistent with your tastes and your consumption habits (so-called profiling cookies).

To learn more in detail these different categories of cookies continue reading this statement. Find out how they work and what they are for, and freely choose whether to consent to their use or prevent it.


First party cookies

The Site uses the following types of first-party technical cookies, for which no users' consent is required but for which the Data Controller is obliged to provide adequate information:

(a) Transient or session cookies: these are essential as they allow the user to move from one page to another on our Site and make use of the services provided; as they are not stored on the user's device, they disappear when the browser is closed;

(b) Persistent cookies: used solely to improve Site browsing speed, as they memorise certain settings selected by the user (such as language selection).

They are therefore instruments used by the Company to guarantee, among other, efficient browsing, session stability, continued login settings throughout the entire session and the selected navigation Country. They also remember the selections made by the user related to the viewing of certain page elements, such as for instance, information and communication banners.

The use of technical cookies and the processing activities related to the same, do not require prior consent of the user, according to the current laws in force.

The possibility remains, in any case, for users to prevent the installation of technical cookies at any moment in time using the settings on the browser used; this does mean, however, that such settings may make the Site slow, complicated or even impossible to navigate.

The Company acts as Data Controller exclusively for the first party cookies installed on the Site.

The cookies installed on the Site are the following:







First party

Registers a unique ID that is used to generate statistical data on how the visitor uses the website.

2 years.


First party

Used by Google Analytics to throttle request rate

1 day


First party

Registers a unique ID that is used to generate statistical data on how the visitor uses the website.

1 day


First party

Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers.

3 months


Third party

Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers.

3 months


Third party

Used by Google DoubleClick to register and report the website user's actions after viewing or clicking one of the advertiser's ads with the purpose of measuring the efficacy of an ad and to present targeted ads to the user.

1 year


Third party

Used by Facebook to deliver a series of advertisement products such as real time bidding from
third party advertisers.



Third party

Used by Vimeo to collect analytics tracking information.

2 years


Third party

Used by Vimeo to collect analytics tracking information.

2 years


Third-party cookies

It is possible that some cookies are placed on your device when browsing our Site which are not directly controlled and managed by the Company. This happens, for instance, if the user visits a page that contains third party website content.

In this respect, please be advised that the Company has no role in the processing of the data collected by this type of cookie, given its status as mere technical intermediary.

Third party cookies are required to view customised advertising on the Site and other websites, and are based on the browsing activities of each individual user. This type of cookie may also be used by third parties to display their products and services on the Site.

The Site also uses analytic cookies which are used to collect, as a mere example, the following information:

(a) number of visitors, pages viewed and navigation from page to page within the Site;

(b) efficacy of the acquisition campaigns based on web traffic sources;

(c) details on products viewed and/or downloaded from the Site.

These cookies, along with the purposes for which the same are used outside the Site, fall under the direct and exclusive responsibility of the third part that installs them on the users' terminals and are used to display advertising media to the user that may be of interest to the same (as in the case of third party cookies used for profiling/retargeting strategies).

Should the user decide not to receive third party cookies on his/her device, it is possible to use the links below and access the information notice and consent forms provided by such third parties to reject setting of all such cookies.

The table below shows all the cookies found on the Site, highlighting their specific characteristics and, in the case of third party cookies, links to the respective privacy information notices, so that the user can make an informed decision on whether or not to grant consent to the use of the same, and which cookies to block or erase.


How to disable cookies

When visiting the Site for the first time, the user can accept all cookies by clicking the "OK" button or the "X" closure button in the banner, or any web page element outside the actual banner itself.

In all other cases, and during every subsequent visit to the Site, the user can access this information note (clicking on the "Cookie Policy" link at the bottom of the Site homepage), and deny his/her consent to the installation of cookies clicking on the relative links provided above.

In any case, given that most browsers are programmed to accept cookies automatically, the user can choose to block receipt of the same, especially in those cases where the third party in question has not provided the opt-out option correctly, by accessing the browser settings and disabling the use of such cookies, according to the procedure illustrated in the links indicated below:


Internet Explorer:

Mozilla Firefox:

Google Chrome:







For further information on cookies visit the site (for the services granted by this platform only), to obtain instructions on how to eliminate or manage cookies according to the browser used and to select the settings to be applied to third party cookies.

Your Online Choices is an Internet site run by the European Interactive Digital Advertising Alliance (EDAA) non-profit association, whose Italian version can be found at, which provides information on behavioral advertising based on profiling cookies ( and allows Internet users to easily oppose (opt-out) the installation of the main profiling cookies installed by advertising operators and used on Internet sites ( Before using this tool, we advise you to read carefully the general conditions of service of the site Your Online Choices (, the frequently asked questions (FAQ) ( and the user guide (

Use Your Online Choices consciously. Although, in fact, Your Online Choices brings together many of the most important advertising companies that use cookies, some of the third parties that install cookies through the Site may not have joined Your Online Choices. Therefore, the use of Your Online Choices does not guarantee that you will receive third-party cookies by browsing the Site. Also remember that by deleting all cookies from your browser, even technical cookies issued by Your Online Choices to remember your choices could be deleted, making third-party cookies active again.

To disable analytical cookies and prevent Google Analytics from collecting your navigation data, download the browser add-on to disable Google Analytics:

We shall store the user preferences regarding cookies using a specific technical cookie with the characteristics indicated in the table above.  


Processing methods and data storage times

As highlighted in the introduction to this statement, the Company collects and processes some of your personal data through cookies that it carries directly on the Site (first-party cookies). The Company acts as Controller of the processing of this data, while Drop S.r.l., with registered office Drop S.r.l., Via S.Pertini 1, 63812 Montegranaro (FM), registered with the Macerata Chamber of Commerce, Register of Companies no. 01383870431 is the data processor appointed in accordance with the provisions of the Rules. Your data will be processed only with electronic tools, in a totally automated way and without human intermediation. Therefore, The Company employees and collaborators will never access the content of your personal data obtained through cookies, which means that they will never be able to access and / or have direct personal identification information.

Some of Company's or processor’s employees and collaborators may carry out maintenance work on the computer systems that host your data, without ever being able to access their actual content. Personal data may be stored on servers managed by third parties (eg IT systems providers) or may be managed by subjects specialized in online advertising, acting as external data controllers on the basis of a specific appointment in writing by part of the Company. Your personal data will not be disclosed to third-party data controllers nor will they be disseminated.

The personal data of users of the Site will be kept for the time strictly necessary to perform the primary purposes described in this statement, or in any case as necessary for the protection of the rights of both the interests of users and the Company.


Your data's rights

To exercise your rights, or obtain any further information or clarification in relation to this Cookie Policy, please contact the Company in the following ways:

• By sending a registered letter to the registered office: Via Cassia 69, 50023 Tavarnuzze - Impruneta (FI)., P.I. 06868090488;

• By sending an email to

Pursuant to the Regulation, the Company informs the users have the right to obtain indications on:

a) the source of the personal data;

b) the purposes and methods of the processing;

c) the logic applied to the processing, if the latter is carried out with the aid of electronic means;

d) the identification data concerning the Data Controller and data processors;

e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of such data in their capacity of Data Processors or Designated Officers.

3. The users has the right to obtain:

a) access, updating, rectification or, where interested therein, integration of the data;

b) erasure, anonymisation or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;

c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.

In addition, the users withdraw consent at any time, if the treatment is based on their consent;

b) (where applicable) the right to the portability of data (right to receive all personal data concerning them in a structured format, commonly used and readable by automatic device), the right to limit the processing of personal data and the right to the cancellation ("right to be forgotten");

to oppose, totally or partially on legitimate grounds, the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;

totally or partially, the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys;

d) if they believe that the treatment that concerns them violates the Regulation, the right to lodge a complaint with a Supervisory Authority (in the Member State in which they usually reside, in the one in which they work or in the one in which the alleged violation has occurred ). The Italian Supervisory Authority is the Guarantor for the protection of personal data (