ANTONIO CARRARO SPA
, with legal headquarters at Via Caltana, 24 - 35011 CAMPODARSEGO (PD), VAT no. 00186830287 (hereinafter “Owner
”), owner of the website https://eshop.antoniocarraro.it
”), as Owner of the Treatment of the personal data of users navigating the website or registered to it (hereinafter “Users
”), provides here below the Privacy Notice pursuant to article 13 of Italian Legislative Decree no. 196/2003 (hereinafter the “Privacy Code
”) and to article 13 of EU Regulation no. 2016/679 of 27 April 2016 (hereinafter the EU Privacy Regulation, which together with the Privacy Code will be referred to as “Applicable Regulations
This Website, and the services offered through the same, are intended for individuals 18 years old and over. The Owner does not therefore collect data of individuals below 18 years old. On request of the User, the Owner will promptly delete all the personal data referring to individuals below 18 years old unintentionally collected.
The Owner has the utmost respect for the right to privacy and the protection of the personal data of Users. For all information in relation to this privacy notice, Users may contact the Owner at any time using the following means:
• By sending a recorded delivery letter with acknowledgement of receipt to the legal address of the Owner
• By sending an email message to the following address: email@example.com. Purposes of the treatment
The personal data of Users will be lawfully processed for the following purposes by the Owner pursuant to article 6 of the EU Privacy Regulations:
• navigation of the website
, as regards to the possibility of obtaining from the User, during their navigation of the site, the data necessary for technical purposes, such as for example the IP address;
• contractual obligations and supply of the services in case of online purchase
s, for the fulfilment of the General Sales Conditions - accepted by the User during registration to the Website - and the specific requests of the User. The data of the User collected by the Owner for registration to the Website include: Mandatory
: Email, Password, Name, Surname, Dispatch address, Post code, City, Province, Country. Optional
: all the personal information voluntarily provided by the User. Unless the User gives to the Owner a specific and voluntary consent to the processing of their personal data for the additional purposes discussed in the following sections, such data shall only be used by the Owner for the sole purpose of ascertaining the identity of the User (also through the validation of the email address), therefore avoiding possible fraud or abuse, and of contacting the User only for service purposes (for example forwarding notifications regarding the services offered by the Website). Without prejudice to any provisions outlined elsewhere in this Privacy Notice, under no circumstances shall the Owner make the personal data of Users available to other Users and/or third parties;
• administration-accounting purposes
, or to carry out organisational, administration, financial and accounting activities, such as internal organisational activities and activities that are functional to the fulfilment of contractual and pre-contractual obligations;
• answering requests
received through contact forms;
• sending out newsletter
containing information and news about Antonio Carraro;
• legal obligations
, or to comply with the provisions of laws, authorities, regulations or European regulations.
The supply of personal data for the above purposes is voluntary but necessary, as failure to do so will result in the impossibility for the User to navigate the Website, register to the Website and take advantage of the services offered by the Website Owner.2. Further purposes of the treatment: marketing and newsletter (forwarding of advertising material, direct sale and commercial correspondence)
Following the free and voluntary consent of the User, some personal data (name, surname, email address, full dispatch address, etc.) may be processed by the Owner also for marketing and newsletter forwarding purposes (forwarding of advertising material, direct sale, commercial correspondence, forwarding of newsletters containing information or relevant news for the sector of activity of the Website), and to allow the Owner to contact the User by email to recommend the purchase of the products and services offered, introduce offers, promotions and commercial opportunities. Failure to supply consent will result in the impossibility for the Owner to forward the above promotions.
In case of provided consent, the User shall be entitled to withdraw the same by sending a request to the Owner following the procedures indicated in section 5 that follows.
The User may also easily oppose to the forwarding of further promotional materials and newsletters by email by clicking the appropriate links provided to withdraw consent, which can be found in every promotional email or newsletter. After withdrawing consent, the User will receive from the Owner a confirmation e-mail message.
It is important to remember that even after exercising the right of opposition to the forwarding of promotional communications and newsletters by e-mail, due to technical and operational reasons (e.g. new contact lists compiled shortly before the Owner received the request to be removed) Users may still receive for a period of time some further promotional messages and newsletters. Any Users receiving promotional communications and newsletters for more than 24 hours after asking to be removed, should notify the Owner at the contact addresses indicated in section 5 that follows.3. Data processing procedure and conservation times
The Owner will process the personal data of Users using manual and computerised means, following logics strictly correlated to the purposes, always in such a way to guarantee the confidentiality and safety of the data.
The personal data of Website Users will be stored for the periods of time strictly necessary to achieve the primary purposes as indicated in section 1 above, or in any case as far as necessary for the safeguard of the interests of both Users and Owner in civil environments.
In the cases contemplated in the previous section 2, the personal data of Users will be stored for the periods of time strictly necessary for the fulfilment of the indicated purposes, and in any case within the limits contemplated by the Applicable Regulations.4. Data communication and disclosure framework
The personal data of Users may be disclosed to employees and/or partner of the Owner in charge of the management of the Website. Such parties, formally appointed by the “Owner” as “data processors”, will only process the data of Users for the purposes indicated in this notice, and in compliance with the provisions of the Applicable Regulations.
The personal data of Users may also be disclosed to third parties that may process personal data on behalf of the Owner as “External Data Processors”, such as, for example, suppliers of computerised and logistic services that are functional for the operation of the Website, outsourcing or cloud computing service suppliers, professionals and consultants.
Users have the right to obtain a list of the Data Processors appointed by the Owner by sending a request to the same following the procedures indicated in section 5 that follows.5. Rights of the Data Subjects
Users may exercise their rights pursuant to the Applicable Regulations by contacting the Owner in the following ways:
• By sending a recorded delivery letter with acknowledgement of receipt to the legal address of the Owner.
• By sending an email message to the following address: firstname.lastname@example.org
Pursuant to the Applicable Regulations, the Owner informs that Users have the right to obtain the following information: (i) the origin of the personal data; (ii) the processing purposes and procedures; (iii) the logic applied in case of processing using electronic means; (iv) the identification details of the Owner and the Data Processors; (v) the identification details of the parties or categories of parties to whom the data may be communicated, or who may become aware of the data as responsible or appointed individuals.
Moreover, Users have the right to obtain:
a) the access,
, the correction
or, if interested, the integratio
n of the data;
b) the cancellation
, transformation into anonymous format
, or the block
of the data processed in breach of the law, including those for which conservation is not necessary for the purposes for which they were collected and subsequently processed;
c) the confirmation that the actions indicated at letters a) and b) have been notified, also as far as content, to those to whom the data were disclosed or distributed, with the exception of those cases in which such notification is impossible, or entails the use of means disproportional in relation to the right protected.
Users also have:
a) the right to withdraw their consent at any time
, for processing activities based on their consent;
b) the right of portability of the data
(the right to receive all their own personal data in a structured format, commonly used and readable by an automatic device), the right to the limitation of the processing of personal data
and the right to obtain their cancellation (“right to be forgotten”);
c) the right to oppose
i) in full or in part, for legitimate reasons, to the processing of their personal data, including those relevant for the purpose of their collection;
ii) in full or in part, to the processing of their personal data for the purpose of forwarding advertising or direct sale material, and for carrying out market researches, or for commercial correspondence;
iii) at any time for personal data processed for direct marketing purposes, to the processing of their data for such purposes, including profiling, if in connection with such direct marketing activities.
d) should they believe that the processing activities of their own data are in breach of the regulations, the right to file a complaint with the Control Authority
(in their usual country of residence, in the country where they work, or in the country where the alleged breach occurs). The Italian control authority is the Data Protection Authority
, which can be reached at the following address: Piazza di Monte Citorio n. 121, 00186 – Roma (http://www.garanteprivacy.it