DATA PROCESSING INFORMATION NOTICE
pursuant to Art. 13 of Regulation (EU) 2016/679

Camardo S.p.a., in its capacity as Data Controller, through its legal representative pro tempore, pursuant to and for the purposes of Regulation (EU) 679/2016, hereby informs you of the following:

CONTACT DETAILS

The Data Controller can be contacted via email at: privacy@camardo.it or by mail at: Camardo S.p.A. – Via Bartolomeo Camardo n.2 – 86025 Ripalimosani (CB).

NATURE OF DATA, PURPOSE AND LEGAL BASIS OF PROCESSING

Data processing is carried out by the Controller in the performance of its activities for the following purposes:

• Navigation on this website (legal basis: legitimate interest art. 6 paragraph 1 letter f of Regulation (EU) 679/2016); for this purpose, the controller will process IP addresses or domain names of the computers and terminals used by users, addresses in URI/URL (Uniform Resource Identifier/Locator) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment. These data are necessary for the use of web services.
• Contact or information request (legal basis: legitimate interest art. 6 paragraph 1 letter f) of Regulation (EU) 679/2016); for this purpose, the controller will process the information voluntarily provided to the contact addresses; private messages sent by users to institutional profiles/pages on social media; this will result in the acquisition of the sender’s contact details, necessary to respond, as well as any personal data included in the communications.
• Subscription and management of the newsletter service: consent; art. 6 paragraph 1 letter a) and art. 7 of Regulation (EU) 2016/679 as the legal basis for the processing;
• Registration to the reserved area (art. 6 paragraph 1 letter b) of Regulation (EU) 679/2016); registration is done by filling out a specific form and is entirely optional,
• Online purchases and possible invoicing (art. 6 paragraph 1 letter b) of Regulation (EU) 679/2016); for this purpose, the data strictly necessary for the processing and management of the purchase order (name, surname, tax code, telephone number, email, address) are required. Without this information, the controller cannot proceed with the order fulfillment. In case of payment by credit card and via Paypal, the transmitted data are processed directly by the respective platforms Stripe (privacy link) and Paypal (privacy link).

DATA STORAGE

Processing will be carried out both automatically and manually, using methods and tools aimed at ensuring maximum security and confidentiality, by specially appointed persons. In compliance with the provisions of Art. 5 paragraph 1 letter e) of Regulation (EU) 2016/679, the personal data collected will be kept in a form that allows the identification of the data subjects for a period not exceeding the achievement of the purposes for which the personal data are processed. The storage of personal data provided depends on the purpose of the processing:

• Navigation on this website;
• For contact requests: a maximum of 1 year;
• Receiving newsletters or promotional communications in general via email: a maximum of 24 months;
• Data related to purchase orders: 5 years.

COMMUNICATION, DISSEMINATION AND TRANSFER OF DATA

The personal data provided will be communicated to recipients, who will process the data as processors (art. 28 of Regulation (EU) 2016/679) such as: accounting firms for tax and accounting compliance, transport companies for courier services.

DATA SUBJECT’S RIGHTS

The Data Subject may exercise, in relation to the data processing described herein, the rights provided by the GDPR (Art. 15-21), including:

• Receive confirmation of the existence of Data and access their content (right of access);
• Update, modify and/or correct Data (right of rectification);
• Request deletion or restriction of data processing that violates the law, including those for which storage is not necessary in relation to the purposes for which the data were collected or otherwise processed (right to erasure and right to restriction);
• Object to processing (right to object);
• Withdraw consent, where given, without prejudice to the lawfulness of processing based on consent before its withdrawal;
• Lodge a complaint with the Supervisory Authority (Garante per la protezione dei dati personali www.garanteprivacy.it) in case of violation of data protection regulations;
• Receive an electronic copy of the Data concerning them as Data Subject, when such Data have been rendered in the context of the contract and request that such Data be transmitted to another data controller (right to data portability).

To exercise these rights, the Data Subject may contact the Controller by sending their request to the email address: privacy@camardo.it, or by addressing the communication by mail to: Camardo S.p.A. – Via Bartolomeo Camardo n.2 – 86025 Ripalimosani (CB).

When contacting the Controller, the Data Subject must ensure to include their name, email/postal address and/or telephone number to ensure their request can be handled correctly.