Dear User, we would like to inform you that pursuant to art. 13 of the European Regulation (EU) 2016/679 (hereinafter "GDPR") and Legislative Decree 196/2003 as amended by Legislative Decree 101/2018 ("Privacy Code"), we will process some of your personal data collected through the website www.rossicarta.it ("Site") for the purposes described below.
DATA CONTROLLER AND CATEGORIES OF DATA: Rossi Carta SRL Unipersonale, with registered office in Cesena (FC) – Via Primo D'Altri 76 and VAT number 00111730404, which can be contacted by telephone at +39 0547 346160 or at the e-mail address amministrazione@rossicarta.it, Rossi Carta S.r.l., in its capacity as data controller, will process the following personal data: Company title, name, surname, company/company name, VAT number/Tax Code, address, house number, city, postal code, province, country, e-mail, mobile phone number, any other information you voluntarily provide when contacting us.
In addition to the above, we add the browsing data we collect (directly or through our suppliers), requesting your prior consent when necessary:
at. Technical information, including IP address, information on the devices used by visitors to the Site, browser and operating systems, etc.
b. Information on navigation on the Site, including URLs of the pages visited and activities that are carried out on the page (for example, with reference to the products you view or buy), dates and times of navigation, time spent on the Site.
This information is collected for the proper functioning, management, maintenance and improvement of our Site, as well as to ensure that your browsing takes place safely and smoothly and to be able to ascertain responsibility in the event of security breaches and unlawful access. They are also used to allow us to obtain statistical analysis on the use of the Site with the possibility of analyzing the data also in aggregate form.
In addition, we can also process browsing data with your consent, made through acceptance of the cookie policy, to identify which products are of most interest to you, so that we can organize truly relevant promotional campaigns.
You are always free to decide whether to provide us with your browsing data. However, the refusal to provide information necessary for the purposes of navigation could make it impossible to carry out activities strictly related to navigation itself.
We only keep this data for as long as is necessary for the purposes for which it is collected. Browsing data is collected through the use of cookies. To learn more about how cookies work, how to activate and deactivate them, consult our cookie policy.
PURPOSES OF DATA PROCESSING AND LEGAL BASIS: The processing of your data is carried out for:
- Provide the information you request through the contact form;
- Provide the product you requested;
- comply with legal obligations under current legislation;
- defend one's own rights in court or out of court;
- subject to your consent:
(i) to send you by e-mail, post and/or text message and/or telephone contacts, newsletters, commercial communications and/or advertising material on products or services offered by the Data Controller and to survey the degree of satisfaction with the quality of services;
subject to your consent for profiling activities aimed at carrying out marketing campaigns targeted on your purchasing preferences with exclusive reference to our products (we will take note of your refusal to give your consent in order not to carry out this kind of processing)
The legal basis for this processing lies respectively in the execution of the pre-contractual or contractual obligations of the service/product requested by you (a and b), in the need to comply with legal obligations (c), in the legitimate interest of Rossi Carta S.r.l. (d) and finally in your consent in relation to the commercial communications referred to in letter e). and profiling referred to in letter f)
SOFT-SPAM (art. 130 c. 4 Privacy Code): We would like to point out that if you are or have been one of our customers, we may send you commercial communications relating to Rossi Carta S.r.l.'s services and products similar to those you have already used, without the need for your consent, the legal basis is legitimate interest. You may object to the processing of your Personal Data for this purpose by writing to the contact details indicated in the "Data Controller and Categories of Data" section of this policy, as well as by using the link at the bottom of each of the communications sent by e-mail.
COMPULSORY OR NON-MANDATORY PROVISION OF DATA: With regard to personal data relating to purposes a) to d), the mandatory provision of data and failure to provide personal data prevents us from providing you with the requested service. With regard to purposes e) and f), the provision of data is optional and failure to provide consent will make it impossible for Rossi Carta S.r.l. to send such communications.
METHODS OF DATA PROCESSING: The processing of your personal data will take place using paper, electronic or automated tools with logics related to the purposes indicated above and, in any case, in such a way as to guarantee the security and confidentiality of the data themselves. Specific security measures are observed to preserve the confidentiality, integrity and availability of your personal data.
The data may be processed by employees and/or collaborators of the company departments responsible for pursuing the purposes indicated above, who have been expressly authorised to process the data and who have received adequate operating instructions.
DATA RECIPIENTS: The data may be communicated to external parties operating as independent data controllers such as, by way of example, supervisory and control authorities and bodies and in general to subjects, including private individuals, entitled to request the data, to the Public Authorities who expressly request it, in accordance with the provisions of the applicable legislation in force, as well as to persons, companies, associations or professional firms that provide assistance and consultancy, credit institutions, payment service providers.
In addition, the data may also be processed, on behalf of Rossi Carta S.r.l., by external parties designated as external processors (pursuant to Article 28 of the GDPR), to whom adequate operating instructions are given. These subjects are essentially included in the following categories:
- consultants and accountants who provide functional services for the purposes indicated above;
- suppliers of software services and IT maintenance, management and hosting of the website, document archiving, freight forwarders and logistics;
- providers of marketing and commercial promotion services.
- Profiling service providers.
Personal data will not be disseminated.
TRANSFER ABROAD: To pursue the purposes of the processing described in this Policy, your personal data may be transferred to countries outside the European Economic Area ("EEA"), which includes Norway, Liechtenstein and Iceland in addition to the Member States of the European Union. In the event that such transfers are necessary, they will take place in accordance with the provisions of art. 44-50 GDPR. In particular, in the case of transfers to countries that do not ensure an adequate level of data protection, Rossi Carta will undertake to adopt one of the appropriate guarantees referred to in art. 46 GDPR, as well as to carry out an assessment of the actual ability of the same to ensure an adequate level of protection for the personal data subject to transfer in the light of the legislation of the country of destination, as established by the Court of Justice of the European Union in the Schrems II judgment (CJEU, 16 July 2020, C-311/18).
RETENTION PERIOD: With regard to personal data relating to purposes a) to c), your data will be stored for the entire duration of the contract and, after termination, for the ordinary limitation period of 10 years from the termination of the contract; with regard to the personal data relating to the purposes referred to in letter d), your data will be stored until the satisfaction of the interest pursued. In the case of judicial litigation, for the entire duration of the same, until the exhaustion of the terms of appeal actions. Finally, with regard to the data referred to in letter e), for a period not exceeding 24 months from the collection of the data. For profiling purposes, your data are stored for 12 months.
After the expiry of the storage terms indicated above, the Data will be destroyed, deleted or made anonymous, compatibly with the technical procedures of deletion and backup.
RIGHTS OF THE DATA SUBJECT - COMPLAINT TO THE SUPERVISORY AUTHORITY: By contacting Rossi Carta S.r.l. by e-mail at amministrazione@rossicarta.it, the data subjects may ask the data controller for access to the data concerning them, their cancellation, the correction of inaccurate data, the integration of incomplete data, the limitation of processing in the cases provided for by art. 18 GDPR, as well as the objection to processing, for reasons related to one's particular situation, in the event of the legitimate interest of the data controller.
Furthermore, in the event that the processing is based on consent or on the contract and is carried out with automated tools, the data subjects have the right to receive the data in a structured, commonly used and machine-readable format, as well as, if technically feasible, to transmit them to another controller without hindrance.
Data subjects have the right to revoke the consent given at any time for marketing purposes, as well as to object to the processing of data for soft-marketing purposes. This is without prejudice to the possibility for the data subject who prefers to be contacted for the aforementioned purpose exclusively through traditional methods, to express his opposition only to the receipt of communications through automated methods.
Data subjects have the right to lodge a complaint with the competent supervisory authority in the Member State in which they habitually reside or work or in the State where the alleged infringement occurred.
Last updated: August 2024.
Rossi Carta S.r.l. Unipersonale