Privacy e Policy
Dear user,
This page describes the management methods of the site in relation to the processing of your personal data.
Pursuant to articles 13 and 14 of European Regulation no. 679/2016 on the protection of personal data (hereinafter referred to as GDPR), we therefore provide the information below in order to provide correct and transparent information on the data collected by our website and on the related methods of use.
The information is also inspired by Recommendation no. 2/2001 that the European authorities for the protection of personal data, gathered in the Group Established by art. 29 of Directive no. 95/46/EC, adopted on 17 May 2001 to identify some minimum requirements for the collection of personal data online and, in particular, the methods, times and nature of the information that data controllers must provide to users when they connect to web pages, regardless of the purposes of the connection.
1. Data acquisition
The personal data subject to processing are freely provided by you and acquired by us as part of your navigation on our website https://ciar.it as well as through interaction with our services, for example, to use our customer service to receive technical/commercial information, to contact us via the “Contacts” section or, again, to finalize an order in our online shop.
2. Data subject to processing
The processing will concern the following information:
a) Navigation data:
When you visit our website, we send cookies or similar technologies to your devices, which allow us to monitor your behavior. These cookies provide data retransmission to our information analysis devices. We are therefore able to track which marketing channel your contact was generated from (for example Google AdWords, email, newsletter) and which pages you visited, and other similar information. We also receive information on how you use and interact with the site, as well as the time spent on the site. Our website server also collects basic information relating to the search that was performed on your browser when you visited the site. This data may contain information on the date and time of the last visit, the date and time of the browser search, your IP address, basic HTTP header information (such as URL referrers and user agent) and the previous URLs searched by your browser.
On this site you can also select some features that operate on personal data by sharing them with other entities or websites (such as Facebook, Twitter, Instagram, Pinterest). These features transmit data to third parties who can use personal information in accordance with their own privacy policies. These features are operated by third parties, not associated with us, whose privacy policies we strongly recommend you view.
The use of cookies and other digital tools with similar functionality is described in more detail in our cookie policy, which can be consulted online in the appropriate section.
b) Personal and contact details:
When you intend to request any information through the “Contacts” section of the website or through the form in the Catalogue to request technical/commercial information, you will be asked for some personal, biographical and/or contact data in order to process your requests.
When you purchase one of our products online we will collect the data necessary to issue the invoice such as identification data, contact details and billing address.
When you enter third-party data, you assume responsibility for the personal data of third parties obtained, published or shared through this website and guarantee that you have the right to communicate or disseminate them, freeing the Owner from any liability towards third parties.
c) Information relating to payment methods:
When you make an online purchase, in addition to your contact details, for the purposes of sending and/or any invoicing, we will collect payment information.
3. Methods of processing
The processing will be carried out, including but not limited to, with the aid of computerised and/or automated means, with methods suitable for guaranteeing the security, protection and confidentiality of the data and for preventing and limiting the risk of loss, deterioration and theft of the data and for ensuring their restoration within a reasonable time in the event of a “data breach”.
The processing will take place through operations of: collection, recording, organization, structuring, conservation, adaptation or modification, extraction, consultation, use, communication, comparison or interconnection, limitation, cancellation and destruction of data.
4. Purpose of the processing
Your personal data will be processed for the following purposes:
a) To enable the technical and functional management of our website (including maintaining IT security), for example by identifying parts of the website that have low latency;
b) For purposes related to the customer care service, in the event that you wish to request information by contacting us, in the forms available online or by telephone or, again, by email, through the published contacts, so as to allow us to process your requests;
c) To execute your purchase orders;
d) For the so-called soft-spamming purpose: if you have already purchased a product from us and/or used one of our services, our company may use the email address provided to send you communications relating to the direct sale of products similar to those already purchased, without requiring your consent, provided that you do not exercise your right to object;
e) To fulfill obligations established by law, by a regulation, by European Union legislation as well as by provisions of Authorities authorized to do so or by competent supervisory or control bodies (for example obligations relating to tax regulations or for anti-money laundering registers). In this case, your consent is not necessary as the data processing is related to compliance with such obligations/provisions.
5. Legal basis of the processing
The processing of your personal data will be based on the following legal bases:
a) on the pursuit of the legitimate interest of the Data Controller;
b) as necessary for pre-contractual/contractual fulfillment (such as managing information requests or fulfilling orders);
c) on the fulfillment of an obligation provided for by the legislation in force.
In more detail:
The legal basis for the purposes under a) and d) of the previous art. 4 is represented by art. 6.1 f of the GDPR, for the purposes under b) and c) it is represented by art. 6.1 b of the GDPR and for the purpose under e) it is represented by art. 6.1 c of the GDPR.
6. Mandatory or optional nature of the processing
The provision of your data for the purpose detailed in the previous point 4 “Purpose of processing” letter b), c) and e) is mandatory; therefore, your eventual refusal will make it impossible to process the request you intend to make. In any case, your right to revoke your consent, at any time, by objecting to the processing, remains intact.
7. Recipients of personal data
The personal data collected will be processed by the Data Controller, the Data Processor appointed by him and the formally authorised and appropriately trained data processors (pursuant to art. 29 of the GDPR).
Your data may also be processed by consultants of any kind, as Data Processors, engaged in carrying out technical and support tasks on behalf of the company. The updated list of Data Processors is kept at the company headquarters and can be viewed upon request.
Your data will not be disclosed but may be communicated to inspection bodies responsible for checks and controls relating to the regularity of legal obligations.
8. Transfer of data to a third country
Your data will not be transferred outside the European Union.
Only in the event that you proceed to finalize a purchase order, using the payment platforms selected by us (PayPal/Stripe), some of your personal data may be transferred to non-EU countries. These functions, in fact, transmit data to third parties, who operate as independent Data Controllers, and use personal information in accordance with their own privacy policies, which we strongly recommend you read.
9. Data retention period
The navigation data collected will be used for the sole purpose of obtaining anonymous statistical information on the use of the site as well as to check its correct functioning and will be deleted following processing.
Other personal data will be processed for the time strictly necessary to manage the requested service.
Your data will also be stored by the Data Controller for the time necessary to ensure mutual protection of rights in court as well as to comply with legal obligations, including those of a tax nature.
10. Rights of the interested party
We inform you that, at any time, pursuant to articles 15-22 of EU Regulation no. 679/2016, you may exercise the following rights:
1) To have confirmation of the existence or otherwise of the processing of personal data concerning you and, where that is the case, to obtain access to the same data and to all information relating to the processing itself (right of access pursuant to art. 15 GDPR);
2) Obtain the rectification of inaccurate personal data without unjustified delay and the integration of incomplete data, including by means of a supplementary declaration (right of rectification pursuant to art. 16 GDPR);
3) Obtain the erasure of your personal data without undue delay if: the data are no longer necessary for the purposes for which they were collected or processed; they have been processed unlawfully; they must be erased to comply with a legal obligation; you have revoked your consent or oppose the processing (right to be forgotten pursuant to art. 17 GDPR);
4) Obtain the restriction of processing when one of the following hypotheses applies: if you contest the accuracy of the personal data, for the period necessary for the Data Controller to verify such accuracy; if the processing is unlawful and you oppose the erasure of the data and instead request that their use be limited; although the Data Controller no longer needs them for the purposes of the processing, the personal data are necessary for the establishment or exercise of a right in court; if you have objected to the processing, pending the verification of whether the legitimate grounds of the Data Controller override yours (right to restriction pursuant to art. 18 GDPR);
5) To object, in whole or in part, to the processing. If personal data are processed for direct marketing purposes, you have the right to object at any time to the processing, including profiling to the extent that it is related to such direct marketing. If personal data are processed for scientific or historical research purposes or statistical purposes, for reasons related to your particular situation, you have the right to object to the processing, unless the processing is necessary for the performance of a task carried out for reasons of public interest (right to object pursuant to art. 21 GDPR);
6) To lodge a complaint with the Authority for the protection of personal data.
11. Data controller
To exercise the rights described above, you may contact the Data Controller Ciar SpA at any time by sending a communication via email to the following email address info@ciar.it or via registered mail to the following address: Via Vincenzo Molaroni n. 3, 61122 Pesaro (PU).
12. Changes
In compliance with current legislation, the Data Controller reserves the right to make changes to this information at any time, providing appropriate notice and ensuring in any case adequate and similar protection of personal data. In order to view any changes, the user is invited to regularly consult this information, which in any case reports the date of the last modification.
The Data Controller
Ciar SpA
Updated 11/14/2024