We will process your personal data (e.g. title, name, address, e-mail address, phone number, bank details, credit card number) solely in accordance with the provisions of the Italian data protection law and the data protection law of the European Union (EU). The following provisions will inform you, besides the information about the processing purposes, recipients, legal bases and storage periods, also about your rights and the controller for your data processing. This privacy policy applies only to our websites. If you are directed to other sites via links on our pages, please familiarize yourself with the respective use of your data there.
2. INVENTARY DATA
2.1 Purpose of Data Processing
Your personal data you provide us during the ordering process are necessary for the conclusion of a contract with us. You are not obliged to provide your personal data. However, we would not be able to send you the goods without your address. For some payment methods we ask for the necessary payment data in order to pass them on to a payment service provider commissioned by us. Hence, the processing of your data collected during the ordering process is solely for the purpose of contract performance. If you send us a request by e-mail or by using the contact form, etc. before concluding the contract, we process the obtained data to carry out pre-contractual measures and answer your questions about e.g. our products.
2.2 Legal Basis
The legal basis for such processing is set out in Article 6 (1) (b) of the GDPR.
2.3 Recipient Categories
Payment service provider, shipping service provider, hosting provider, if necessary merchandise management system, suppliers if necessary (drop-shipping).
2.4 Duration of Storage
We store the data required for contract execution until the statutory warranty and, if applicable, contractual warranty periods expire. We store the data required under commercial and tax law for the statutory periods, generally ten years, according to the Italian law. The data processed for the execution of pre-contractual measures will be deleted as soon as the measures have been carried out and the contract cannot be concluded.
3. WEB ANALYSIS WITH GOOGLE ANALYTICS
3.1 Purpose of Data Processing
This website uses Google Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses so-called “cookies”, small text files, which are placed on your computer to analyze how you use the website. The information generated by the cookie about your use of this website will be transmitted and saved on server in the United States by Google. If the anonymize IP function is activated on this website, Google will shorten your IP address in advance within the member states of the European Union or in other states which are parties to the Agreement on the European Economic Area. Only in exceptional cases Google will transmit the full IP address on server in the United States and will shorten there. Google will use this information for the purpose of evaluating your use of our website, compiling reports on website activities and providing other services related to website and internet usage for the website operators.
3.2 Legal Basis
The legal basis for such processing is set out in Article 6 (1) (f) of the GDPR.
3.3 Legitimate Interest Our legitimate interest ist the statistical analysis of user behavior for optimization and marketing purposes. for our interest in data protection, this website uses Google Analytics with the extension “anonymize IP”, so that the IP addresses are only processed in an abridged form in order to exclude direct personal reference.
3.4 Recipient Categories
Google and its partners.
3.5 Transfer to a Third Country
Google Ireland Limited is an affiliate of Google LLC. Google LLC is based in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043) and is certified for the EU-US Data Protection Agreement "Privacy Shield", which guarantees compliance with the data protection rates applicable in the EU.
3.6 Duration of Storage
14 months
3.7 Right of Objection
You can prevent the installation of the cookies in your browser settings. If you choose to change your settings you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: optout.
4. INFORMATION ABOUT COOKIES
4.1 Purpose of Data Processing This website uses technically necessary cookies. These are small text files that are stored in or by your Internet browser on your computer system. These cookies enable, for example, the inserting of several products in a shopping basket.
4.2 Legal Basis
The legal basis for such processing is set out in Article 6 (1) (f) of the GDPR.
4.3 Legitimate Interest
Our legitimate interest is the functionality of our website. The user data collected by technically necessary cookies are not used to create user profiles. This preserves your interest in data protection.
4.4 Duration of Storage
The technically necessary cookies are usually deleted when the browser is closed. Persistent cookies have different validity period from a few minutes to several years.
4.5 Right of Objection
If you do not wish these cookies to be stored, please deactivate the use of cookies in your Internet browser. However, this may cause a functional limitation of our website. You can also delete persistent cookies at any time by changing your browser settings.
5. YOUR RIGHTS AS A DATA SUBJECT
If your personal data is being processed, you are the ‘data subject’ in terms of GDPR and you have the following rights towards us, the controller:
5.1 Right to Information
You may request us to provide information about your personal data processed by us under Article 15 of the GDPR.
5.2 Right to Rectification
If your personal data provided to us is not up to date or not accurate you have the right to ask for modifications to your personal data under Article 16 of the GDPR. You also have the right to request us to complete an incomplete data.
5.3 Right to Erasure
You have the right to have your personal data erased and ask for deletion of your data under Article 17 of the GDPR.
5.4 Right to Restriction of Processing
You have the right to restrict the processing your personal data under Article 18 of the GDPR.
5.5 Right to Data Portability
You have the right referred to in Article 20 of the GDPR to receive your personal data provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.
5.6 Right to Revoke the Consent Given under Data Protection Law
You have the right referred to in paragraph 3 of Article 7 to withdraw your given consent based on the data protection provisions at any time. This does not affect the lawfulness of the processing based on consent before its withdrawal.
5.7 Right to Lodge a Complaint with a Supervisory Authority
If you consider that the processing of personal data relating to you infringes the GDPR, you have the right referring to in Article 77 of the GDPR to complain to the supervisory authority against the processing of your personal data (in particular in the Member State of your habitual residence, place of work or place of the alleged infringement ).
Please also note your Right of Objection under Article 21 GDPR:
a) In general: reasoned objection required If the processing of personal data concerning you takes place in order - to perform our overriding legitimate interest (legal basis: Article 6 (1f) GDPR) or - to safeguard the public interest (legal basis: Article 6 (1e) GDPR), you are entitled to object to the processing at any time for reasons arising from your particular situation; this also applies to profiling based on the provisions of the GDPR. In the event of objection, we will no longer process the personal data concerning you unless we can prove compelling grounds for processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defense of legal claims;
b) Special case of direct marketing: simple objection is sufficient If the personal data concerning you are processed for the purpose of direct marketing, you have the right to object at any time to the processing and without stating reasons; this includes profiling to the extent that it is related to such direct marketing. If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
Data Controller: Cappelletti srl e-mail: info@cappelletti.it phone: +39 0734 871121 headquarter: Contrada Brancadoro, Sant'Elpidio a Mare (FM)
VAT 01205600446