In this notice we provide you with all the information regarding the way in which we collect and process your personal data when you browse or use the services of our website.
The data provided to Confezioni Carol s.n.c. through the web address https://www.carol.it/gb/vendita-maglieria-e-abbigliamento-intimo-online-confezioni-carol-snc, will be processed in accordance with the provisions of current privacy legislation, which is based on the EU Regulation 2016/679(GDPR).
The purpose of this Information Notice is to inform you about how we process the personal data that concerns you in the simplest and most detailed way possible. This privacy policy, of course, is made only for this website and not also for third party websites that may be consulted by the user through links.
Data subject to processing
We explain which data may be processed when you navigate the pages of this website.
Navigation data
Our systems and/or those of third party companies, with whom we have direct or indirect collaboration agreements, may record various connection data relating to your browsing session: IP address, date and time of access, address of the resource viewed (URL), any web page of origin (referrer), browser and operating system used. This data may only allow the identity of the holder of the Internet connection to be traced following investigations by the judicial authorities. Under no circumstances will our staff be able to autonomously trace the identity of the visitors by means of such surfing data, and under no circumstances will it be reconciled with other data in our possession or in the possession of third parties.
Cookies
The cookies transmitted directly by this website (first party cookies) are exclusively of a technical nature and are used for purely functional purposes (such as, for example, memorising the user's session in order to allow products to be stored in the shopping cart, access to reserved areas, etc.).
Some third party companies (such as, for example, Google Inc.) transmit cookies through the pages of this website (with regard to cookies and their operation, please refer to the relevant documentation available at the end of this policy).
Data provided voluntarily
In order to access certain services or facilities, the user may be required to fill in forms (e.g. registration forms) that require the disclosure of personal data. The acquisition of data, where required, is a prerequisite for access to the services offered by our site. Data provided voluntarily" also includes data that is sent by electronic mail (e-mail).
Purpose of processing
We explain why we collect and process your data for specific purposes.
We use navigation data, cookies and data that you voluntarily give us only for the purposes for which it was collected. In some cases it is possible that such data may be communicated, processed and/or stored with the help of third party companies, for a list of which please refer to the relevant section of this privacy policy.
Below is a list of the website features/features that, directly or indirectly, may have an impact on your privacy and for each of them the purpose is indicated.
Log files and similar
For technical and security purposes, and in order to comply with specific legal obligations, user connection data is recorded in text files that are stored on our server in order to monitor the correct operation of the site and protect our systems from possible computer attacks.
Forms
Personal data provided voluntarily within the forms are processed for the purpose of:
- (registration forms) provide the e-commerce service, manage shipments and invoicing of any orders;
- (contact forms) process specific user requests related to our business and services;
Statistical analysis
Some of the data collected via cookies is used in order to obtain statistical data relating to the operation of our website. To do this, we use the Google Analytics service (provided by Google Inc.) which has been appropriately configured by activating the "IP anonymisation" option. This makes the processing absolutely respectful of the user's privacy, as the data is collected anonymously and cannot be reconciled by means of the IP address (which is not recorded).
We also use the sales tracking system provided by Google Ads to measure the effectiveness of our online advertising campaigns. Through this system we are able to track any sales generated by clicking on advertisements within the Google network. this tracking is carried out exclusively to optimise advertising costs.
Legal basis for processing
We explain to you the legal basis on which the various data processing operations carried out by the site are based, and we explain what the requirements are for the validity of your possible consent to the processing of your personal data.
For certain processing operations, the consent of the data subject is not required. In particular, there is no possibility to give or withhold consent with regard to the recording of log files and the sending of cookies that are strictly necessary for the technical operation of the website. In all these cases, in fact, there is a legitimate interest on the part of Confezioni Carol s.n.c. in the proper functioning of its online activity.
In all other circumstances, processing is based on the consent of the data subject, who is free to give it or withhold it.
Consent of the data subject
In all cases where the consent of the data subject is required for the processing, it must be informed, free and unconditional. Failure to provide data, however, may result in the impossibility of obtaining certain services or benefits (e.g., you cannot access the online shop if you do not consent to the processing of your data at the time of registration).
The data subject must be at least 18 years of age for consent to be valid. The use of all our services involving the processing of data on a voluntary basis is therefore precluded for those who have not reached this age limit.
Method of processing
We explain how your data is processed.
The data being processed is handled using IT tools.
- The management of log files is carried out, in a fully automated manner, by the internet provider that provides the hosting service to this website.
- The management of the data entered in the forms is carried out electronically by the system that governs the operation of our online shop.
Data storage
We tell you where the data we collect ourselves is stored.
- Log files, customer master data and data relating to orders placed via the site are stored on servers provided by our hosting provider.
- Data transmitted by e-mail are stored at our terminals for the time necessary to provide the requested service and/or to manage the underlying business relationship.
Persons authorised to access the data
We tell you who has access to the data we handle in person.
Access to our systems is allowed not only to our appointees, but also to the employees appointed by IKIweb Internet Media S.r.l. in order to carry out the tasks of updating and maintaining the computer systems entrusted to them.
Security measures
We tell you how we protect your data.
Appropriate security measures are observed to prevent data loss, tampering, unlawful use and unauthorised access. In order to guarantee the confidentiality of communications to and from our computer systems, we have implemented the SSL protocol on all pages of this website.
Duration of processing
We explain how long your data will be processed within our systems.
Data are processed for the time necessary to perform the service requested by the user, or required by the purposes described in this document. Users may always request the interruption of specific processing or the complete deletion of their data.
Certain data may be retained even after deletion for the period required to comply with legal obligations, provided that it is not necessary to retain it any longer in order to defend or enforce a right or to comply with any further legal obligations or orders from authorities.
Data controller
We will tell you who the data controller is and how you can contact him or her to ask your questions or exercise your rights.
The data controller is the company Confezioni Carol s.n.c., with registered office in Via Martiri Dairaghesi 21/Bis, Dairago (MI) in the person of the pro tempore administrator. To request information on the processing of personal data you can write to the e-mail address info@carol.it.
Rights of the data subject
We explain what your rights are and how you can exercise them.
The subjects to whom the above-mentioned personal data refer (c.d. "interested parties"), are entitled to exercise their rights in the manner and within the limits provided for by current privacy legislation. In particular, the data subject has the following rights
- access: the data subject has the right to ask whether or not data relating to him are being processed and, if so, he has the right to know such data.
- rectification: the data subject may ask us to rectify or supplement the data that he/she has provided to us or that are in our possession, if they are inaccurate.
- erasure: the data subject may request that his or her data be erased if it is no longer necessary for the purposes for which it was collected or in the event of withdrawal of consent, objection to processing, unlawful processing or if there is a legal obligation to erase it;
- restriction: the data subject may request the restriction of the processing of his or her personal data, when one of the conditions set out in Article 18 of the GDPR is met; in this case, his or her data will not be processed, except for storage, without his or her consent, except as explained in the same article in paragraph 2
- objection: the data subject may object at any time to the processing of his or her data carried out on the basis of a legitimate interest of ours, except where there are legitimate grounds for processing which override his or her own, for example, for the exercise or our defence in court.
- portability: you may request to receive your data, or have your data transmitted to another data controller indicated by you, in a structured, commonly used and machine-readable format.
Furthermore, pursuant to Article 7(3) GDPR, we inform you that you may exercise your right to withdraw your consent at any time, without prejudice to the lawfulness of the processing based on your prior consent.
To exercise these rights, report problems or ask for clarifications on the processing of your personal data, you can write to info@carol.it.. If you feel that you have not received an adequate and timely response to your privacy request, you have the right to contact the competent authority.