There are no items in your shopping cart.
Welcome to our website!
CM Srl, as data controller, would like to provide you with some information on the browsing data acquired when you visit
www.centumbrie.myshopify.com, in accordance with Regulation (EU) 2016/679.
-----------------------------
Your browsing data and any data collected (provided voluntarily by you) and stored through the website, will be kept at the IT facilities of the hosting provider and will be processed by them in the manner indicated in their privacy policy
Data controller
CM Srl
email: amministrazione@centumbrie.com - telephone: (+39) 331 6793746
-----------------------------
Browsing data (personal data)
- IP addresses or domain names of the computers and terminals you use, the
URI/URL addresses of the requested resources, the method used to submit
a request to the server, the size of the file received in reply, the numeric status code
issued by the server in response to the request (successful, error, etc.) and other parameters related to
your operating system and device used for the connection, no. of clicks
The data is provided by the data subject
Purpose of the processing
- to establish the communication requested by you in order to be able to browse our website and to be able to use the services our business offers
Data subjects
website visitors
Legal basis for processing
Personal Data:
the processing of personal data is strictly necessary to fulfil a legal obligation to which the data controller is subject
Provision of data
mandatory - to be able to browse the site
Data retention period
Browsing data will be kept for 3 days, except in the case where judicial authorities need investigate into possible offences.
Categories of recipients
- information technology (IT) services
- consultants, professionals and/or companies duly assigned to perform specific activities
Transfers to third countries
Data is normally not transferred to countries outside of the EEA (European Economic Area). However, should
this be necessary, the Controller hereby ensures that the transfer of data to non-EU countries shall be performed
in compliance with the provisions of applicable law and the provisions of the Italian Data Protection Authority
-----------------------------
Contact form (personal data)
- name, e-mail address
The data is provided by the data subject
Purposes of the processing
- handling contacts and queries
Data subjects
website visitors
Legal basis for processing
Personal Data:
pursuant to art. 6 [1.b] GDPR the processing of personal data is required for
the performance of an agreement to which the data subject is party
Provision of data
mandatory - otherwise, it is impossible to provide the requested service
Data retention period
data shall be kept for the time necessary to process the request
Categories of recipients
- staff involved at different levels
- consultants, professionals and/or companies duly assigned to perform specific activities
Transfers to third countries
Data is normally not transferred to countries outside of the EEA (European Economic Area)
-----------------------------
Newsletter signup (personal data)
- name, email address
The data is provided by the data subject
Purposes of the processing
- subscription to our newsletter
Data subjects
users
Legal basis for processing
Personal Data:
pursuant to art. 6 [1.b] GDPR the processing of personal data is required for
the performance of an agreement to which the data subject is party
Provision of data
mandatory - if you do not provide this data or provide inaccurate data will make it impossible to pursue the activities contemplated and listed in the purposes
Data retention period
for a period of 24 months from the last operation, at the end of which the user will be given the opportunity to remain on the mailing list
Categories of recipients
- identified internal staff
- consultants, professionals and/or companies entrusted to perform specific activities
Transfers to third countries
Data is normally not transferred to countries outside of the EEA (European Economic Area)
-----------------------------
Shop (personal data)
- contact information: full name, address, phone numbers, email address
- payment methods and details (IBAN, credit card no., etc)
The data is provided by the data subject
Purposes of the processing
- to fulfil fiscal and accounting obligations
- to complete sales transaction via the website
Data subjects
buyers
Legal basis for processing
Personal Data:
pursuant to art. 6 [1.b] GDPR the processing of personal data is required for
the performance of a contract to which the data subject is party
Provision of data
mandatory - otherwise, it is impossible to provide the requested service
Data retention period
for accounting and tax purposes, data will be kept for the times set by relevant laws,
at least 5 years or 10 years
Categories of recipients
- identified internal staff
- consultants, professionals and/or companies entrusted to perform specific activities
Transfers to third countries
Data is normally not transferred to countries outside of the EEA (European Economic Area)
As data subject, you are entitled to the rights laid down in art. 15 et seq. of GDPR 2016/679, by contacting the Data controller whose contact details are provided in this document. Requests will be processed as quickly as possible and, in any case, within one month. Data subjects have the right to obtain from the Controller, in the cases provided for, access to their personal data, rectification or erasure of their personal data, or restriction of processing of personal data concerning them or to object to processing.
art. 15 - right to obtain access to personal data;
art. 16 - right to rectification of inaccurate personal data concerning data subject without undue delay;
art. 17 - right to erasure of personal data ("right to be forgotten");
art. 18 - restriction of processing data concerning the data subject;
art. 7 - right to withdraw the consent provided at any time without affecting the processing operations performed up until that time
Data subjects who believe that their personal data has been processed in breach of the Regulation have the right to lodge a complaint with the Data Protection Authority or to take appropriate legal action.
Rev. magg.022
