Privacy Policy

Privacy policy notice in accordance with art. 13 Regulation (EU) 2016/679

 

Welcome to our website!

CM Srl, as data controller, would like to provide you with some information on the browsing data acquired when you visit

www.centumbrie.myshopify.com, in accordance with Regulation (EU) 2016/679.



-----------------------------

Place of data processing

Your browsing data and any data collected (provided voluntarily by you) and stored through the website, will be kept at the IT facilities of the hosting provider and will be processed by them in the manner indicated in their privacy policy



Data controller

CM Srl

email: amministrazione@centumbrie.com - telephone: (+39) 331 6793746



-----------------------------

Data processed


Browsing data (personal data)

- IP addresses or domain names of the computers and terminals you use, the

URI/URL addresses of the requested resources, the method used to submit

a request to the server, the size of the file received in reply, the numeric status code

issued by the server in response to the request (successful, error, etc.) and other parameters related to

your operating system and device used for the connection, no. of clicks

The data is provided by the data subject



Purpose of the processing

 

- to establish the communication requested by you in order to be able to browse our website and to be able to use the services our business offers



Data subjects

website visitors



Legal basis for processing

Personal Data:

the processing of personal data is strictly necessary to fulfil a legal obligation to which the data controller is subject


Provision of data
mandatory - to be able to browse the site

Data retention period

Browsing data will be kept for 3 days, except in the case where judicial authorities need investigate into possible offences.



Categories of recipients

- information technology (IT) services

- consultants, professionals and/or companies duly assigned to perform specific activities



Transfers to third countries

Data is normally not transferred to countries outside of the EEA (European Economic Area). However, should

this be necessary, the Controller hereby ensures that the transfer of data to non-EU countries shall be performed

in compliance with the provisions of applicable law and the provisions of the Italian Data Protection Authority



-----------------------------

Data processed

Contact form (personal data)
- name, e-mail address
The data is provided by the data subject

Purposes of the processing

- handling contacts and queries

 

Data subjects

website visitors

 

Legal basis for processing

Personal Data:

pursuant to art. 6 [1.b] GDPR the processing of personal data is required for

the performance of an agreement to which the data subject is party

 

Provision of data

mandatory - otherwise, it is impossible to provide the requested service

 

Data retention period

data shall be kept for the time necessary to process the request

 

Categories of recipients

- staff involved at different levels

- consultants, professionals and/or companies duly assigned to perform specific activities

 

Transfers to third countries

Data is normally not transferred to countries outside of the EEA (European Economic Area)



-----------------------------

Data processed

Newsletter signup (personal data)

- name, email address

The data is provided by the data subject

 

Purposes of the processing

- subscription to our newsletter

 

Data subjects

users

 

Legal basis for processing

Personal Data:

pursuant to art. 6 [1.b] GDPR the processing of personal data is required for

the performance of an agreement to which the data subject is party

 

Provision of data

mandatory - if you do not provide this data or provide inaccurate data will make it impossible to pursue the activities contemplated and listed in the purposes

 

Data retention period

for a period of 24 months from the last operation, at the end of which the user will be given the opportunity to remain on the mailing list

 

Categories of recipients

- identified internal staff

- consultants, professionals and/or companies entrusted to perform specific activities

 

Transfers to third countries

Data is normally not transferred to countries outside of the EEA (European Economic Area)



-----------------------------

Data processed

Shop (personal data)

- contact information: full name, address, phone numbers, email address

- payment methods and details (IBAN, credit card no., etc)

The data is provided by the data subject

 

Purposes of the processing

- to fulfil fiscal and accounting obligations

- to complete sales transaction via the website

 

Data subjects

buyers

 

Legal basis for processing

Personal Data:

pursuant to art. 6 [1.b] GDPR the processing of personal data is required for

the performance of a contract to which the data subject is party

 

Provision of data

mandatory - otherwise, it is impossible to provide the requested service

 

Data retention period

for accounting and tax purposes, data will be kept for the times set by relevant laws,

at least 5 years or 10 years

 

Categories of recipients

- identified internal staff

- consultants, professionals and/or companies entrusted to perform specific activities

 

Transfers to third countries

Data is normally not transferred to countries outside of the EEA (European Economic Area)



Rights of interested parties

As data subject, you are entitled to the rights laid down in art. 15 et seq. of GDPR 2016/679, by contacting the Data controller whose contact details are provided in this document. Requests will be processed as quickly as possible and, in any case, within one month. Data subjects have the right to obtain from the Controller, in the cases provided for, access to their personal data, rectification or erasure of their personal data, or restriction of processing of personal data concerning them or to object to processing.



art. 15 - right to obtain access to personal data;

art. 16 - right to rectification of inaccurate personal data concerning data subject without undue delay;

art. 17 - right to erasure of personal data ("right to be forgotten");

art. 18 - restriction of processing data concerning the data subject;

art. 7 - right to withdraw the consent provided at any time without affecting the processing operations performed up until that time




Data subjects who believe that their personal data has been processed in breach of the Regulation have the right to lodge a complaint with the Data Protection Authority or to take appropriate legal action.



Rev. magg.022

BACK TO TOP