Privacy Policy
This Application collects some Personal Data of its Users.
This document can be printed using the print command found in the settings of any browser.
Types of Data Collected Among the Personal Data collected by this Application, either independently or through third parties, are: Cookies; Usage Data; Various types of Data; email; first name; last name; gender; date of birth; phone number; VAT number; company name; profession; address; fax number; country; state; province; zip code; city; tax code; business sector; User ID; website; password; billing address; shipping address.
Full details on each type of data collected are provided in the dedicated sections of this privacy policy or through specific informational texts displayed prior to the collection of such data. Personal Data may be freely provided by the User or, in the case of Usage Data, automatically collected during the use of this Application.
Unless otherwise specified, all Data requested by this Application are mandatory. If the User refuses to communicate them, it may be impossible for this Application to provide the Service. In cases where this Application indicates certain Data as optional, Users are free to refrain from communicating such Data, without this having any consequence on the availability of the Service or its operation.
Users who may have doubts about which Data is mandatory are encouraged to contact the Data Controller. The possible use of Cookies - or other tracking tools - by this Application or the owners of third party services used by this Application, where not otherwise specified, has the purpose of providing the Service requested by the User, in addition to the further purposes described in this document and in the Cookie Policy, if available.
The User assumes responsibility for third party Personal Data obtained, published or shared through this Application and warrants that he or she has the right to communicate or disseminate it, releasing the Owner from any liability to third parties.
Method and place of processing of collected Data
Mode of treatment
The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data.
The processing is carried out by means of computer and/or telematic tools, with organizational methods and logics strictly related to the indicated purposes. In addition to the Data Controller, in some cases, other subjects involved in the organization of this Application (administrative, sales, marketing, legal, system administrators) or external subjects (such as third party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) also appointed, if necessary, Data Processors by the Data Controller may have access to the Data.
An up-to-date list of Data Processors can always be obtained from the Data Controller.
Legal basis for processing
The Owner processes Personal Data related to the User if one of the following conditions exists:
the User has given consent for one or more specific purposes; Note: In some jurisdictions, the Data Controller may be authorized to process Personal Data without the need for the User's consent or another of the legal bases specified below, as long as the User does not object ("opt-out") to such processing. However, this does not apply if the processing of Personal Data is governed by European legislation on the protection of Personal Data; the processing is necessary for the performance of a contract with the User and/or the execution of pre-contractual measures; the processing is necessary to fulfill a legal obligation to which the Data Controller is subject; the processing is necessary for the performance of a task in the public interest or for the exercise of public authority vested in the Data Controller; and the processing is necessary for the pursuit of the legitimate interest of the Data Controller or a third party.
However, it is always possible to ask the Data Controller to clarify the concrete legal basis of each processing and in particular to specify whether the processing is based on law, required by a contract or necessary to conclude a contract.
Location
The Data are processed at the Holder's operational offices and at any other place where the parties involved in the processing are located. For more information, please contact the Data Controller. The User's Personal Data may be transferred to a country other than the country where the User is located. To obtain more information about the location of the processing, the User may refer to the section on Personal Data processing details.
The User has the right to obtain information regarding the legal basis for the transfer of Data outside the European Union or to an international organization under public international law or formed by two or more countries, such as the UN, as well as regarding the security measures taken by the Data Controller to protect the Data.
The User may verify whether any of the transfers just described takes place by reviewing the section of this document on details of the processing of Personal Data or request information from the Controller by contacting it at the contact details given at the beginning.
Retention period
Data are processed and kept for the time required by the purposes for which they were collected.
Therefore:
Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User will be retained until the performance of that contract is completed. Personal Data collected for purposes related to the legitimate interest of the Data Controller will be retained until such interest is satisfied. The User may obtain further information regarding the legitimate interest pursued by the Controller in the relevant sections of this document or by contacting the Controller. When processing is based on the User's consent, the Data Controller may keep the Personal Data longer until such consent is revoked. In addition, the Controller may be obliged to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority.
At the end of the retention period, the Personal Data will be deleted. Therefore, at the expiration of this period the right of access, deletion, rectification and the right to Data portability can no longer be exercised.
Purposes of Data Processing Collected User Data is collected to enable the Data Controller to provide the Service, comply with legal obligations, respond to requests or enforcement actions, protect its rights and interests (or those of Users or third parties), detect any malicious or fraudulent activities, as well as for the following purposes: Viewing content from external platforms, Interaction with social networks and external platforms, Social Features, Contacting the User, Registration and Authentication, Statistics, and Payment Management.
To obtain detailed information on the purposes of processing and the Personal Data processed for each purpose, the User may refer to the section "Detailed Information on the Processing of Personal Data."
Personal data collected for the following purposes and using the following services: Contacting the User Contact form
Personal Data: zip code; city; tax code; last name; date of birth; email; User ID; address; nation; name; fax number; phone number; VAT number; profession; province; company name; gender; business sector; website; state; various types of Data
Mailing List or Newsletter Personal Data: email
Social features Invite and suggest friends Personal Data: Various types of Data
PayPal payment management
Personal Data: various types of Data as specified by the service's privacy policy
Interaction with social networks and external platforms +1 button and social widgets from Google+, Like button and social widgets from Facebook, and Tweet button and social widgets from Twitter Personal Data: Cookie; Usage Data
Registration and authentication Direct registration
Personal Data: zip code; city; tax code; last name; date of birth; email; address; billing address; shipping address; country; first name; phone number; VAT number; password; province; company name; gender; various types of Data
Statistics Statistics collected directly, Google Analytics with anonymized IP and Google Ads Conversion Monitoring Personal Data: Cookie; Usage Data
Displaying content from external platforms Widget Google Maps Personal Data: Cookie; Usage Data
Google Fonts Personal Data: Usage Data; various types of Data as specified by the service's privacy policy
More information about Personal Data
Credit Card Payment Management
Personal Data collected Various types of Data as specified by the Privacy Policy of the service. The service owner CARTASI S.P.A. may collect some of the User's Personal Data, related to payment, and share some of it with the Application. Among the Data shared, however, is never the credit card.
Online sale of goods and services
The Personal Data collected is used to provide services to the User or to sell products, including payment and eventual delivery. The Personal Data collected to finalize the payment may be that related to the credit card, bank account used for the transfer or other payment instruments provided. The Payment Data collected by this Application depends on the payment system used.