Personal data processing notice

Dear User,
in accordance with the obligations imposed by Regulation (EU) 679/2016 – General Data Protection Regulation (hereinafter “GDPR”), CACCARO Srl (hereinafter, the “COMPANY”) intends to inform you about how your personal data are processed, to request your consent where necessary and to make you informed and aware of your rights and how to easily exercise them.

Identity and contact details of the data controller and data processor

The data controller is CACCARO Srl with registered office in via Corse at no. 13 in VILLA DEL CONTE (PD), tax code and VAT no. 02325900286. The COMPANY has appointed a Privacy Manager who can be contacted at [email protected].

Type of data processed and sources of data collection

The COMPANY, in order to be able to provide you with what you have requested and to pursue the purposes described in more detail in the specific paragraph below, also in view of any consents that may be requested, may process several types of personal data (e.g. personal details, address, telephone numbers, e-mail addresses, profession, etc.). The COMPANY collects personal data about you only and directly from you through direct contact, by filling in contact forms at events, as well as through forms on our website, or also through your entries in forms on websites where we are advertisers, or from one of our dealers. You may provide us with your personal data when requesting information, quotes, when you visit one of our dealers, when you participate in a trade fair we are exhibiting at and/or at an event we are organising, when you purchase our products and, in general, when you request services, however qualified or named, also by visiting our website.

Methods and logic of processing

Your personal data are processed both manually, in paper format, and by means of electronic and computerised tools, with logic strictly related to the purposes indicated. In all cases, your personal data is protected by means of appropriate technical and organisational measures to ensure its security and confidentiality, in accordance with the regulations in force. The COMPANY has implemented specific security measures to prevent the loss or destruction of data, unauthorised access, unauthorised processing or processing that is not in accordance with the purposes for which it was collected.

Purpose and legal basis of processing

The COMPANY processes personal data for multiple purposes. In order to facilitate your understanding and ensure greater clarity, we have deemed it appropriate to explicitly distinguish between the individual purposes, as set out below:

1. operational management purposes (PRIMARY PURPOSES): by this term we mean the performance of all those activities strictly functional to the fulfilment of your requests, as well as all activities related or instrumental to these, functionally linked to the operations of the COMPANY, compliance with rules or regulations, and the protection of your rights. These purposes include all the activities required to provide you with information (including periodical information such as newsletters of a non-promotional and commercial nature), assistance, and the services requested or of interest to you. The aforementioned processing operations are lawful since they are necessary to execute your request, to comply with a legal obligation or regulation, as well as for a legitimate interest of the data controller, such as for example the exercise and protection of your rights.
2. subject to your consent, your data will be processed for marketing purposes and to build customer loyalty (OPTIONAL or SECONDARY PURPOSES), i.e. for sending advertising, commercial and promotional material, including periodical communications relating to goods, services, accessories, products, events and initiatives promoted by the COMPANY, either by telephone or by electronic means of communication. Unless you express a different preference, this may be done either through traditional methods of contact, such as sending paper mail and telephone calls, or through electronic mail, including periodic mail. It is specified as of now that any subsequent objection to the use of automated contact methods automatically extends to the traditional ones as well, without prejudice to the possibility of exercising this right only in part (only for the automated methods or some of them), in the manner better specified in the following paragraph “Rights of the interested party”.

Withdrawal of consent

If you have given your consent to authorise a specific processing operation referred to in point b), we inform you that you may revoke it at any time by contacting the Data Controller in the manner indicated in the “Data Subject’s Rights” paragraph below. Such revocation, in any case, will not affect the lawfulness of the processing based on the consent given before the revocation. If consent is revoked, personal data may still be processed further where there is a different legal basis legitimising the processing.

Provision of data and consequences of refusal

The provision of your personal data is always subject to your free will. However, the provision of personal data for the Primary Purposes referred to in point a) is necessary and indispensable to enable the COMPANY to respond to your requests and failure to do so will make it impossible for the COMPANY to provide you with the services or information requested. The provision of your personal data is, on the other hand, absolutely free and optional for Optional Purposes and failure to provide them will have no consequences for you other than making it impossible for the COMPANY to carry out what is set out in point b).

Knowledge of data and their communication

Your personal data are processed by persons specifically authorised or appointed by the Data Controller within its structure (employees and collaborators, however named), by reason of the performance of the duties and tasks assigned to each. Your personal data may also be processed by other external parties working on behalf of the COMPANY under specific contractual obligations or, in any case, duly authorised or appointed as data processors pursuant to Article 28 GDPR. By way of example, where necessary, your personal data may be processed by: suppliers of IT, telematic and technological services, including hosting and maintenance services; business partners of the COMPANY; suppliers of maintenance, updating and development services for websites and related functions; subjects involved in the printing, transmission, enveloping, transport and sorting of communications; subjects involved in document filing and storage; companies specialising in marketing and commercial information activities. The updated list of external data processors is available at the headquarters and may be consulted upon request.

Please note that your personal data may always be disclosed to third parties for the purpose of exercising a right in court or in any other forum.

Your personal data are not passed on to third parties, are not subject to dissemination or automatic decision-making processes.

Data transfer to non-EU countries

The COMPANY mainly processes its data within its own premises or, in any case, within the EU. Also by virtue of the computer applications used, where necessary the COMPANY may transfer your personal data to countries outside the European Union. In any event, we assure you that the transfer and processing of your personal data will take place in accordance with the conditions imposed by the GDPR, such as Commission adequacy decisions, standard contractual clauses or other safeguards deemed appropriate.

Rights of the data subject

We remind you that, as an ‘interested party’, you may at any time exercise your rights under the law, where and insofar as applicable, including:

• obtain confirmation as to whether or not personal data concerning you are being processed and, if so, obtain access to the personal data, possibly by obtaining a copy thereof;
• obtain the rectification of inaccurate personal data concerning you without undue delay;
• obtain the deletion of personal data concerning you without undue delay;
• obtain restriction of processing when the case arises;
• not be subject to a decision based solely on automated processing which produces legal effects concerning you or significantly affects you in a similar way;
• lodge a complaint with the competent supervisory authority if the data processing carried out by the COMPANY is unlawful

To exercise the above rights, you may contact the COMPANY at any time. In order to handle your request more correctly, we invite you to write to us by sending an email to [email protected]. We will check that you are entitled to exercise your rights and we will normally reply to you within one month.

We remind you that you may at any time request to unsubscribe from the service of sending periodic communications of a commercial nature to the contact details that you have provided. Where technically possible, the COMPANY will in fact allow you to exercise this right directly without the need to send specific communications, for example, by clicking on the link at the bottom of the text (“Unsubscribe” or other equivalent form) in messages sent by e-mail.

Changes and updates *

The COMPANY undertakes to notify you of any changes or updates to this policy through the same channels used to contact you. We trust that you will appreciate our commitment to transparency and our desire to make you fully aware of what we do with your personal data

* Information update: 06_2023