Information document pursuant to and for the purposes of art. 13 of Regulation (EU) 2016/679 (GDPR)
Pursuant to Regulation (EU) 2016/679 (hereinafter “GDPR”), this page describes the processing methods of personal data. This is an information notice provided pursuant to art. 13 GDPR. This information notice is not valid for other third-party websites that may be accessed via links on this website for which no responsibility is assumed.
Regarding the processing of personal data carried out by the managers of Social Media platforms used by the Data Controller, reference should be made to the information provided by them through their respective privacy policies. The Data Controller processes personal data provided by users through the dedicated pages of Social Media platforms to manage interactions with users (comments, public posts, etc.) and in compliance with current regulations.
Specific information may be available on the Site’s pages in relation to particular services or data processing provided.
For Cookies and other tracking systems, refer to the cookie policy provided in the site’s footer and at the following link.
The Data Controller is CAPPELLETTI S.R.L., with registered office in via Como n. 78\80, 22066 Mariano Comense (Co), represented by its temporary Legal Representative. Contacts: +39.031.730603, email: info@cappellettisrl.com
| PURPOSE OF PROCESSING | LEGAL BASIS | DATA RETENTION PERIOD | NATURE OF PROVISION |
|---|---|---|---|
Browsing on this website. The data necessary for the use of web services are also processed for the purpose of:
| The processing is necessary for the legitimate interest of the data controller or third parties, provided that the interests, rights, or fundamental freedoms of the data subject do not prevail, requiring the protection of personal data, taking into account the reasonable expectations of the data subject and activities strictly necessary for the functioning of the site and navigation. (Art. 6, par. 1 lett. f and C47 of GDPR) Data subjects are guaranteed the possibility of obtaining information on the balancing test carried out, upon request. | The retention of browsing data will last until the end of the browsing session. | The provision of data is necessary for navigation on the website. |
| Use of cookies and comparable technologies. See the cookies policy in the footer of the website. | For cookies and necessary non-technical comparable technologies, the processing is based on the user’s consent to the processing of personal data (art. 6 par. 1 lett. a and C42, C43 of GDPR). Consent is provided through the banner and the site’s cookie policy. | See the cookies policy in the footer of the website. | See the cookies policy in the footer of the website. |
In addition to navigation, personal data will be processed for:
| PURPOSE OF PROCESSING | LEGAL BASIS | DATA RETENTION PERIOD | NATURE OF PROVISION |
|---|---|---|---|
| A) CONTACTS, sending contact requests, information. | The processing is necessary for the execution of a contract of which the data subject is a part or for the execution of pre-contractual measures adopted at the request of the same (C44). Art. 6, par. 1 lett. b) of GDPR. | Maximum 12 months. | The provision of data is necessary. Failure to provide the necessary data will make it impossible to be contacted and receive information. |
| B) DIRECT MARKETING, for sending advertising or direct sales material or for conducting market research, commercial and promotional communication, newsletters, through automated means (email). The Data Controller, to compare and possibly improve the results of automated communications, uses systems with reports. Thanks to the reports, the Data Controller can know, for example: the number of readers, openings, unique “clickers,” and “clicks”; the devices and operating systems used to read the communication; the details of individual users’ activities; the details of emails sent, emails delivered and not, and those forwarded. All these data are used to compare and possibly improve the results of communications. | The processing is based on consent to the processing of personal data (C42, C43). Art. 6, par. 1 lett. a) of GDPR. | Until consent is revoked (or opt-out). | The provision of data is optional. Failure to provide the necessary data will make it impossible to receive direct marketing communications. |
| C) HANDLING YOUR REQUESTS and data subject rights requests, pursuant to art. 15 and ss. of GDPR (data subject rights). | The processing is necessary to comply with a legal obligation to which the Data Controller is subject (C45). Art. 6, par. 1 lett. c) of GDPR. | 5 years after the request’s closure, unless there is litigation. | The provision of personal data is mandatory, as it is indispensable for the execution of legal obligations. |
Personal data will be communicated to entities that will process the data as autonomous Data Controllers or Data Processors (art. 28 GDPR) and processed by natural persons (art. 29 GDPR) acting under the authority of the Controller and Processors based on specific instructions provided regarding the purposes and methods of processing. Data will be communicated to recipients in the following categories:
The list of Data Processors under art. 28 is available by writing to info@cappellettisrl.com or other contacts indicated above.
Personal data will not be transferred to non-EEA countries.
Personal data will be processed manually, electronically, and automatically, but no fully automated decision-making processes are carried out.
Data subjects can exercise their rights as expressed in art. 15 and ss. GDPR by contacting the Data Controller at the email address: info@cappellettisrl.com, or by writing to the contacts indicated above. The Controller guarantees data subjects the right to request access to their personal data (art.15), rectification (art.16), deletion (art.17), and restriction of processing (art.18) at any time. The Data Controller communicates (art. 19) to each recipient to whom the personal data have been transmitted any rectifications or deletions or limitations of processing carried out. The Data Controller informs the data subjects who request it of such recipients. The Controller guarantees the right to data portability (art.20) and, in case of requests pursuant to art.20, will provide the data subjects with the data in a structured, commonly used, and machine-readable format. Data subjects have the right to object (art.21), at any time, to the processing of data based on legitimate interest by writing to the contacts indicated above with the subject “objection.” In case of exercising the right to object to processing based on legitimate interest, the Data Controller guarantees the possibility of obtaining information on the balancing test carried out, upon request. Data subjects have the right to withdraw consent at any time without affecting the lawfulness of the processing based on consent before its withdrawal. To stop receiving automated direct marketing communications (email), data subjects are invited to write an email to info@cappellettisrl.com with the subject “cancellation from automated” or to use our automatic cancellation systems provided for email (opt-out). If data subjects believe that the processing of their personal data carried out by the Data Controller violates the provisions of Regulation (EU) 2016/679, they are free to lodge a complaint with the national supervisory authority, particularly in the Member State where they habitually reside or work, or in the place where the alleged violation of the Regulation occurred (Garante Privacy https://www.garanteprivacy.it/), or take the appropriate judicial action.
The Data Controller may change, modify, add, or remove any part of this Privacy Policy. To facilitate checking for changes, the information will contain the date of updating of the notice itself.
Date: 26/09/2024