Catria Confezioni S.p.A., the data controller, informs its customers and users, in accordance with the provisions of Article 13 of the General Data Protection Regulation UE 2016/679, of the possibility of exercising the rights in a simple way provided for by the current legislation on the protection of any information referable to them.
In particular, it makes known that, as the data controller, he is aware of the data entered by the user in the appropriate fields to perform the registration or to request the subscription to the newsletter, for which a suitable separate brief information is made.
In the broader perspective of the contractual relationship between the parties, it is also aware of all the data necessary for completing the order and therefore for the completion of the synallagma and for the management of the related tax and tax obligations.
Consequently, the legal bases that make lawful the processing of such data and those used in the pre-contractual phase are the purchase contract stipulated between the parties and the legislative provisions applicable to the case in point.
Likewise, the purposes of data processing are respectively the refinement of the registration to the site, the subscription to the newsletter and the conclusion of the contractual relationship.
Customer data will only be stored if and as long as they are needed or as long as they will be retained for specific legislative provision.
For some specific types of data, for example those collected through cookies, please refer to the related policy, available on the website.
The data provided by the interested party, to the extent that they are necessary for the conclusion of the contractual obligation, may be transferred to third-country sites, subject to verification of the existence of an adequacy decision or, in the case of transfers referred to Article 46 or 47, or the second paragraph of Article 49, with appropriate or appropriate safeguards.
The data provided at the time of registration are used only for the purpose of allowing the user to improve the contractual relationship through the site. Should the holder recognize the need to use the data for a different purpose, for example for advertising purposes, he will take care to ask for a free, specific, detailed and informed consent.
The interested parties, in accordance with the GDPR UE 2016/679, have in any case the right to access their data, to request rectification, updating, portability or cancellation, without prejudice to the limitations imposed by the contract or by the law in force. relation to the exercise of these rights; they also have the right to oppose the processing or to request its limitation and to file a complaint with the supervisory authority.
The data controller declares that he is processing the data of the subjects with whom he has contractual relationships in compliance with the requirements of GDPR UE 2016/679 and in particular article 32, guaranteeing to hire, following the correct and complete execution of an data protection impact assessment, appropriate measures to the risk that the treatment can exercise on the rights and freedoms of the people.
The revision of these measures takes place every time (for example, when new technological solutions are introduced) the data controller sees the necessity or the opportunity. For this purpose the data controller declares that he will be able to publish the results of this evaluation on the site, together with his own personal data protection policy.
Finally, the data processor informs that, in case of data breach or loss, he is required to inform the supervisory authority and, where applicable, also the customer.
For more information on the specific processing of data entered during navigation, for example those related to credit cards for the execution of the payment, please also refer to the site’s cookies policy, which contains all the measures taken to protect customer data, and to the terms and conditions section.
For the exercise of all rights relating to the protection of personal data, the interested party can directly contact the data controller by sending an e-mail to email@example.com