This privacy statement describes the processing of personal data relating to users and visitors to the website.
The data controller may modify this privacy policy in accordance with future improvements or changes made to the Site. In the event of substantial changes, the Data Controller will publish a notice on the Site to draw the attention of Users to the changes and collect, if necessary, any requests to exercise rights in accordance with the applicable legislation on the protection of personal data.
OWNER OF THE TREATMENT
The data controller is Casabonaria srl, with registered office in Via Nora, 123
09050 Pula (CA) Italy – Italy (hereinafter "Owner").
COLLECTED DATA
2.1 Personal data provided by Users
The personal data collected through the Site are provided by Users through any communications or e-mails sent directly to the Data Controller, using the contact details made available in the "Contact" section of the Site.
The content of the communications received, including any personal data contained therein, will be processed to answer any questions and follow up on the requests received.
Users are invited to provide the Owner with updated and relevant data, limited to what is necessary in relation to the purposes for which they are shared.
2.2 Browsing data and cookies
The Data Controller may collect the personal data of Site users in the following ways:
PURPOSE OF THE TREATMENT
The personal data of the Users mentioned in paragraphs 2.1 and 2.2 (jointly the "Data") will be processed for the following purposes.
3.1 Follow up on Users' requests
The Data will be processed to respond to and follow up on requests that Users send to the Data Controller via the email address and contact details found in the various sections of the Site.
The legal basis of this treatment is the legitimate interest of the Data Controller to pursue its commercial activities to follow up on Users' requests. This legitimate interest has been duly balanced with the reasonable expectations of the data subjects and, since it does not affect the rights of the data subjects involved and the Data processing is carried out at the User's request, it has been deemed to prevail.
The provision of Data for the purposes indicated above is necessary for the correct management and execution of the User's requests. Any partial or total refusal to provide the Data for these purposes will make it impossible for the Data Controller to fulfill these requests.
3.2 Proper functioning and maintenance of the Website
The Data will also be processed to monitor the correct functioning of the Site and to allow the Owner to make changes and improvements to it, as well as to resolve any malfunctions. The provision of Data takes place automatically with connection to the Site and any partial or total refusal to provide Data for these purposes will make it impossible for the Owner to correctly manage the functioning and maintenance of the Site.
3.3 Exercise the rights of the Owner (legal protection)
The Data will be processed to exercise the rights of the Data Controller, such as the right of defense in court, based on the legitimate interest of the Data Controller. This legitimate interest is to be considered prevalent as it corresponds to a constitutionally guaranteed right and, as such, is socially recognized as prevailing over the interests of the interested party.
The provision of data for this purpose is necessary to allow the owner to defend himself in court.
PROCESSING METHODS AND DATA RECIPIENTS
The Data will be processed using manual and IT tools and will be communicated and may be known (i) by employees and collaborators of the Data Controller, duly instructed and designated for processing and to whom the Data Controller has given detailed instructions, with particular regard to the implementation of suitable technical and organizational security measures; (ii) by third parties who provide ancillary or instrumental services to the activities of the Owner, in relation, for example, to the development, supply and operational maintenance of the Site; and (iii) external subjects operating as independent data controllers such as, by way of example, supervisory and control Authorities and bodies and, in general, to subjects – including private individuals – entitled to request such Data (such as, for example, consultants accountants, legal consultants), Public Authorities who expressly request it for administrative or institutional purposes, in compliance with the provisions of current national and European legislation.
The complete list of Data recipients is available upon request, to be sent to the addresses indicated in point 7 below.
CONSERVATION PERIOD
The Data collected and processed by the Data Controller, for the purposes referred to in point 3 above, may be kept for the period necessary to achieve the purposes of the processing and, in particular:
Purpose 3.1:
in the case of sharing information through the contacts made available by the Data Controller on the Site, for a period of 12 months from the last contact made and, where applicable, for the entire duration of any contractual relationship established with the Data Controller, as well as for the time necessary to (i) fulfill regulatory and/or legal obligations envisaged and (ii) ensure the jurisdictional protection of the rights of the Data Controller, in compliance with the prescribed statute of limitations. ;
Purpose 3.2:
in the case of data processing for the correct maintenance and functioning of the Site, for the time necessary to resolve any problems or make any changes to the Site, and in any case for a period not exceeding 12 months;
Purpose 3.3:
in the case of legal protection of the Data Controller, and in particular in the event of legal disputes, for a period equal to the entire duration of such disputes, until the terms for appeals are reached.
PLACE OF DATA PROCESSING AND TRANSFER
However, in the case of subscribing to the newsletter service and/or accepting third-party cookies, such transfers could take place. It is advisable to consult the specific information newsletters and cookie policies on the Site.
In the event of transfers of Data outside the European Union to countries for which no adequacy decision has been adopted by the European Commission, the Data Controller will adopt the adequate guarantees referred to in Article 46 of the GDPR, and, specifically, the Standard Contractual Clauses prepared by the European Commission.
YOUR RIGHTS AND CONTACT DETAILS
Users, as interested parties (i.e., subjects to whom the Data refer), are holders of the rights conferred by the GDPR. In particular, pursuant to articles 15-22 of the GDPR, the interested parties have the right to request and obtain, at any time, access to their personal data, information on the treatment carried out, the rectification and / or updating of personal data, the cancellation and limitation of the treatment. Furthermore, they also have the right to oppose the processing and to request data portability (i.e. to receive personal data in a structured format of common use, readable by automatic devices). Finally, interested parties always have the right to withdraw their consent at any time (this, in any case, will not affect the lawfulness of the processing carried out on the basis of the consent given before the revocation) and to lodge a complaint with a supervisory authority ( in Italy: the Guarantor for the Protection of Personal Data).
Requests relating to the exercise of the above rights must be addressed to the following addresses:
by mail, to Casabonaria srl, Via Nora, 123
09050 Pula (CA) Italy – Italy, to the attention of the Human Resources Manager; or
to the e-mail address info@casabonaria.com
To the same addresses indicated above, Users may also send requests regarding the recipients of the Data, as well as requests for clarification regarding this privacy policy.
LINKS TO OTHER WEBSITES
This privacy policy relating to the processing of personal data exclusively concerns the Data collected through the Site and with reference to the purposes identified in paragraph 3 and, therefore, is not and will not be deemed applicable to other websites consulted and/or consultable via links and /o widgets (e.g. social networks): these additional websites will process any data collected as independent data controllers and according to the respective privacy policies, the consultation of which by Users is expressly recommended.
I declare that I have read the privacy information on the processing of personal data, pursuant to article 13 of the General Data Protection Regulation (GDPR) (mandatory)
Information updated on 04.04.2023