Personal Data Protection Policy
Information notice pursuant to Article 13 of EU Regulation 2016/679 on the protection of personal data.
CAMPIONTEX S.R.L. UNIPERSONALE, VIA DELLE PRESE 32, SANTORSO (VI), VAT No.: 01781890247, in its capacity as Data Controller, informs you, pursuant to Article 13 of EU Regulation 2016/679 (Regulation on the protection of personal data, hereinafter referred to as “GDPR”), of the essential elements of the processing activities carried out, as illustrated below. We would like to emphasize that our organization operates in full compliance with the applicable Italian data protection legislation and the GDPR, recognizing its utmost importance.
Before proceeding with browsing, we invite you to carefully read this privacy notice (hereinafter referred to as “Notice”), as it contains important information regarding the protection of personal data and the security measures adopted to ensure its confidentiality.
This Notice also:
- applies only to the website http://campiontex.it/ (“Website”) and not to other websites that may be consulted through external links;
- is to be understood as the information notice provided pursuant to Article 13 of the GDPR to those who interact with the Website.
These are the essential elements of the processing activities carried out.
Personal data subject to processing
Personal data means any information relating to an identified or identifiable natural person, in particular with reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more elements specific to their physical, physiological, psychological, economic, cultural, or social identity.
The personal data collected by the Website are as follows:
a) Browsing data: the Website’s IT systems collect certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to identify you, but by its very nature could, through processing and association with data held by third parties, allow you to be identified. Among the data collected are, for example, IP addresses or domain names of the devices used to connect to the Website, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server’s response (successful, error, etc.), and other parameters relating to your operating system and computer environment;
b) Data voluntarily provided: through the Website you have the option to voluntarily provide personal data, for example, your name and e-mail address for subscription to the newsletter service or to contact us through the “Contact Us” form available on our Website. We will use this data in compliance with the applicable legislation, assuming that it refers to you. Should the data relate to third parties, you act as an independent data controller, thereby assuming all legal obligations and responsibilities. In this regard, you provide the broadest indemnity with respect to any dispute, claim, or request for damages from processing, etc., that may be brought against our organization by third parties whose personal data have been processed through your use of the Website in violation of the applicable legislation.
Purposes and legal bases of processing
Specifically, your personal data are processed for the following purposes and legal bases:
- website display and browsing (these are activities connected to the correct provision of the various functionalities you requested, for security reasons and to establish responsibility in the event of possible computer crimes against the Website, as well as to obtain anonymous statistical information on the use of the Website and to check its correct functioning); the legal basis for this purpose is the contract and pre-contractual measures (Art. 6.1, letter b, GDPR);
- activities related to contact management (examples include: completing the contact form on the Website or more generally sending an email, which involve the processing of personal data such as name, surname, subject; the legal basis for this purpose is the contract and pre-contractual measures (Art. 6.1, letter b, GDPR);
- activities related to the execution of the contract of which you are a party, including the pre-contractual phase (examples include: the provision of a service, responding to a request, a request for contact through the Contact form, subscription to the newsletter service, etc.); the legal basis for this purpose is the contract and pre-contractual measures (Art. 6.1, letter b, GDPR);
- research/statistical analyses on aggregated or anonymous data (this is an activity that does not involve the processing of personal data, since it does not entail user identification and serves, for example, to measure the functioning of the Website, measure traffic, and assess interest);
- activities related to the establishment and/or exercise and/or defense of rights (examples include: disputes regarding proper contractual performance, formal notices, debt collection); the legal basis for this purpose is legitimate interest (Art. 6.1, letter f, GDPR);
- other activities in compliance with legal obligations/Orders from Authorities (such as communication to third parties); the legal basis is legal obligation (Art. 6.1, letter c, GDPR);
- maintenance of IT systems and devices (persons assigned to carry out maintenance and repairs on the Website may accidentally have access to your personal data. These are completely occasional and unforeseeable events and in any case devoid of identification purposes and limited in duration to the execution of the maintenance/repair work); the legal basis for this purpose is legitimate interest (Art. 6.1, letter f, GDPR).
We do not carry out processing involving automated decision-making or profiling. Specific notices will be published on the Website pages prepared for the provision of certain services (e.g. contact form, newsletter).
Data retention periods
Your personal data will be retained for the time strictly necessary to fulfill the purposes described above and to comply with legal obligations. In particular, for website display and browsing your data are deleted after 7 days, unless they are needed for the exercise or defense of rights; for activities related to contact management your personal data are deleted once the purpose of contact, response, or correspondence has been definitively exhausted; for activities related to the execution of the contract of which you are a party (including the pre-contractual phase), your personal data are retained for the entire duration of the contractual relationship and, once concluded, for the verification/exercise/defense of rights they will be retained for the time necessary to protect a right; for activities related to the establishment and/or exercise and/or defense of rights, until the time permitted by national law for the protection of our interests (Articles 2946 and 2947 of the Civil Code), subject to further retention in the event of interruption of the limitation period; for activities in compliance with legal obligations/Orders from Authorities and for maintenance of IT systems and devices, referring to personal data we hold for the other purposes indicated in this Notice, the retention periods coincide with those identified for the respective purposes.
Consent and optional/mandatory nature of providing data
The processing of your personal data, for the purposes described above, may be carried out without your consent. The provision of your data, which you are required to provide by contract or by law, is mandatory and constitutes a necessary requirement for the conclusion of the contract, and failure to provide them will make it impossible for us to proceed with contracts and other related obligations. Any other provision of your personal data (e.g. for sending requests not yet covered by a contract or for browsing the Website) is entirely optional. The only consequence of failure to provide optional data will be the impossibility of providing or performing the requested services.
Categories of recipients
Your personal data may also be communicated to third parties, for technical and operational needs strictly connected to the purposes indicated above, and in particular to the following categories of subjects:
a) parties necessary for the provision of the services offered by the Website, including, by way of example, the sending of emails and the analysis of the Website’s functioning, who typically act as data processors on behalf of our organization;
b) entities, professionals, companies, or other structures entrusted by us with processing activities related to the fulfillment of contractual, administrative, accounting, insurance, and management obligations related to the ordinary course of our business, also for debt collection purposes;
c) public authorities and administrations for purposes connected to compliance with legal obligations or to subjects authorized to access them by virtue of legal provisions, regulations, or EU legislation;
d) banks, financial institutions, or other entities to whom the transfer of such data is necessary for the performance of our company’s activities in relation to the fulfillment of contractual obligations undertaken with you;
e) providers of installation, assistance, and maintenance services for IT and telecommunication systems and all services functionally connected and necessary for the performance of the services covered by the contract;
f) persons authorized by us to process data who have committed themselves to confidentiality or are under an appropriate legal obligation of confidentiality (e.g. employees and collaborators).
Data transfers abroad
The Data Controller does not transfer personal data outside the European Economic Area. However, the Controller reserves the right to use cloud services; in such case, the service providers will be selected from among those who provide adequate guarantees in compliance with applicable legislation.
Methods of processing
The processing of your personal data will take place both in electronic and paper format. The processing will, however, be carried out mainly using IT tools and in any case in compliance with the minimum security and confidentiality measures for data. In particular, technical, IT, organizational, logistical, and procedural security measures have been implemented in order to prevent loss, unlawful or incorrect use of data, and unauthorized access to them.
Cookies
We use cookies to ensure correct display and navigation on the Website. We inform you that you can configure your browser so that it does not automatically accept cookies.
Below are some instructions for disabling cookies on the most common browsers:
Internet Explorer https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies Chrome https://support.google.com/chrome/answer/95647?hl=en
Firefox https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Safari https://support.apple.com/en-us/guide/safari/sfri11471/mac
Data subject’s rights and complaint to the Supervisory Authority
We inform you that, regarding the processing of your personal data, you may exercise the following rights:
a) Right of access to your personal data (Art. 15 GDPR): you may contact us to know whether your personal data are being processed and to receive legal information on the processing;
b) Right to rectification (Art. 16 GDPR): to obtain the correction of your inaccurate personal data or the completion of incomplete data;
c) Right to erasure/“right to be forgotten” (Art. 17 GDPR): to obtain the deletion of your personal data in the cases provided for by law;
d) Right to restriction of processing (Art. 18 GDPR): to have your personal data stored only, with exclusion of other activities, in the cases provided for by law;
e) Right to data portability (Art. 20 GDPR): to obtain your personal data in a structured, commonly used, and machine-readable format and also to obtain their direct transmission to another data controller, in the cases provided for by law;
f) Right to object (Art. 21 GDPR): the right to stop further processing of personal data for reasons related to your particular situation, subject to the overriding compelling legitimate grounds of our organization, in the cases provided for by law;
g) Right to withdraw consent (Art. 7.3 GDPR): the right to withdraw consent at any time, where processing is based on consent.
To exercise the above rights, you may use the Data Controller’s contact details provided in this Notice. The exercise of rights is not subject to any formal constraints and is free of charge. We also inform you of your right to lodge a Complaint with the Supervisory Authority for data protection. Please note that the complaint, pursuant to Art. 77.1 GDPR, may be lodged by the data subject with the Authority of the place where the data subject habitually resides, works, or where the alleged violation occurred.
Data Controller
The Data Controller is CAMPIONTEX S.R.L. UNIPERSONALE
Contact details of the Data Controller:
e-mail: info@campiontex.it
telephone: +390445640262
postal address: VIA DELLE PRESE 32, SANTORSO (VI), ITALY
Changes
This Notice has been in force since 25 May 2018. We reserve the right to amend or simply update its content, in whole or in part, also as a result of changes in applicable legislation. The updated Notice will be promptly published on this Website. We therefore invite you to regularly visit this page to review any updates.