Privacy Policy

privacy legislation

Articles 5-6-7-12-13 of EU Regulation no. 679/2016

INFORMATION AND CONTACT DETAILS OF THE DATA CONTROLLER

Art. 13, paragraph 1, letter. a) EU Reg. n. 679/2016

Data Controller: Pernigotto srl with headquarters in Via Sesia 40, Marnate (VA), VAT number 04917300016
Contact details of the Data Controller: Tel: 0331367244 – Fax: 011.64.16.16. - E-mail: info@pernigotto.com

Pernigotto srl with registered office in Via Sesia 40, Marnate (VA), VAT number 04917300016 as Data Controller of your personal data (hereinafter also “Data Controller”), informs you, pursuant to articles. 12 and 13 of EU Regulation no. 679/2016 (General Data Protection Regulation, hereinafter referred to for brevity as "GDPR"), that your personal data will be processed by specifically authorized parties and limited to the purposes and in the manner specified below.

OBJECT AND PURPOSE OF THE TREATMENT

Pernigotto srl, as Data Controller, informs you that it will process your personal data and, specifically, your (i) common personal data, i.e. name and surname, residence address, tax code, e-mail address and number telephone/fax number, accounting, tax, banking data, and (ii) identifiers and IP addresses or domain names, according to the purposes and methods defined and specified below.

Users' personal data, as described above:
(i) With reference to the Website www.cegoceramiche.com, they will be processed in the ways and forms prescribed by the GDPR, for the performance of the Website's own functions, with particular reference to: 1) the data collection procedures described therein to fill out the form to request quotes on the products and services offered by PERNIGOTTO SRL on the page http://www.cegoceramiche/contatti/; 2) to the data collection procedures described therein for completing the subscription form to the PERNIGOTTO SRL newsletter
(ii) With reference to the e-commerce portal www.cegoceramiche.com, they will be processed in the ways and forms prescribed by the GDPR, for the performance of the portal's functions, with particular reference to: 1) the procedures described therein data collection for completing the registration form and login to the reserved area of ​​the site "Register a new user" on the page https://www.cegoceramiche.com/it-it/login.php functional to the purchase of products and services offered by PERNIGOTTO SRL 2) to the data collection procedures described therein for completing the subscription form to the PERNIGOTTO SRL newsletter

In particular, the personal data provided to the Data Controller will be processed for the pursuit of the following purposes:
a) to allow registration on the Site and use the services reserved for registered users, including the possibility of making online purchases via the portal www.cegoceramiche.com;
b) to allow the conclusion of the purchase contract and the correct execution of the operations connected to the same, including post-sales assistance activities;
c) to follow up on specific requests addressed to PERNIGOTTO SRL by the User via the Website http://www.cegoceramichecom and its communication tools, aimed at conveying requests for information relating to the products on sale at the show room of PERNIGOTTO SRL as well as on the e-commerce portal www.cegoceramiche.com;
d) to send requests for information relating to the products displayed at the headquarters of PERNIGOTTO SRL and advertised on the portal www.cegoceramicheceramiche.it, as well as requests for clarification on the products on sale on the portal www.cegoceramiche.com;
e) for administrative-accounting purposes as well as to fulfill legal obligations;
f) for direct marketing purposes, in particular for sending newsletters, information on products, discount coupons and vouchers, commercial and promotional activities and services, initiatives of the Company, of the commercial network headed by the Company itself or of third parties, reporting advertising events, promoting them through letters, telephone, advertising material, communication systems, the Internet, carrying out statistical surveys aimed at monitoring the progress of relationships with customers, market research or surveys of the degree of satisfaction with quality of the services rendered and the activity carried out through personal or telephone interviews, questionnaires.
g) administration of contracts, orders, shipments and invoices; reliability and solvency check, credit transfer, request for information);
h) management of disputes (contractual breaches; warnings; transactions; debt collection; arbitration; litigation and legal disputes);
i) internal control services (of safety, productivity, quality of services, integrity of assets).

This information is effective only with reference to the web portal www.cegoceramiche.com but not with reference to other and different portals or websites that may be consulted via the links therein, of which PERNIGOTTO SRL is in no way the owner.

The processing of data provided in a generic manner will be carried out, also following automatic collection during navigation, for the sole purpose of ascertaining and/or controlling access to the Website and/or for the sole purpose of improving its functionality, for in order to guarantee a better browsing experience. For further information, please refer, in any case, to the specific Cookie Policy .

LEGAL BASIS OF THE PROCESSING

Apart from what is specified for navigation data, the communication by you to the Data Controller of the personal data specified above has the following legal bases as prerequisites for the lawfulness of the processing:

Article 6, par. 1, letter b) of the GDPR, concerning the execution of a contract of which the interested party is a party or the execution of pre-contractual measures adopted at the request of the same, for the purposes referred to in points a), b), c) , d), e), g), h), i).

Article 6, par. 1, letter a) of the GDPR, concerning your express, free, specific, informed and unequivocal consent, for the purposes referred to in point f).

The provision of your personal data is necessary for the complete fulfillment of the purposes referred to in points a), b), c), d), e), g), h), i) and, consequently, your any refusal to provide the data may result in the failure to provide the aforementioned services and functions of the aforementioned portals; the provision of your personal data is, however, merely optional for the processing aimed at carrying out commercial activities and direct marketing referred to in point f), and, therefore, any lack of consent does not prevent the fulfillment of the other purposes indicated . In any case, any consent given by you may be revoked at any time, with immediate effect interrupting the aforementioned company activities and services.

PROCESSING METHODS

The processing of personal data communicated by you is carried out by means of the operations indicated in the art. 4 no. 2) of the GDPR, and precisely: "collection, recording, organisation, conservation, consultation, processing, modification, selection, extraction, comparison, use, interconnection, communication, cancellation and destruction of data".

The personal data communicated by you are subjected to automated processing for the time strictly necessary to achieve the purposes for which they were collected, with technical and organizational methods adopted to prevent data loss, illicit or incorrect use and unauthorized access, and such, therefore, as to guarantee a level of safety adequate to the risk pursuant to art. 32 of the GDPR, by specifically authorized subjects, in compliance with the provisions of the art. 29 of the GDPR, or employees and/or collaborators of the Data Controller in their capacity as authorized subjects and/or system administrators, who may carry out consultation, use, processing, comparison and any other appropriate operation in compliance with the provisions of law necessary to guarantee, among other things, the confidentiality and security of the data as well as the accuracy, updating and relevance of the data in compliance with the declared purposes and methods.

It is specified, in particular, that the personal data communicated by you will be processed only at the headquarters of the Data Controller, except as specified below, they will therefore not be disclosed, and, pursuant to art. 13, paragraph 1, letter. (e), they may only be processed by authorized parties and/or by any external data processors pursuant to art. 28 of the GDPR (in the person of individual professionals and/or complex professional associations), and/or by subjects who operate as independent data controllers, whose list is available at the headquarters of PERNIGOTTO SRL and is provided following the written request of the interested party, and among which explicitly include the hosting companies and/or technical personnel in charge of the management and/or maintenance of the website, but only and exclusively for the purposes expressly and specifically indicated above.

SCOPE OF DATA DISSEMINATION

In relation to the purposes indicated above, the data may be communicated to the following subjects and/or the categories of subjects indicated below, or they may be communicated to companies and/or people who provide services, including external ones, on behalf of the Data Controller.

Among these, for greater clarity, the following are indicated by way of example but not limited to: professionals and consultants, including those in associated form; subjects that the company uses for the acquisition of commercial information related to contractual or pre-contractual needs; companies, bodies, external consortia, banks and credit institutions, non-bank financial intermediaries, operators in the insurance sector in compliance with regulatory limits; subjects who carry out control, audit and certification activities of the activities carried out by the company, possibly also in the interests of customers; entities that provide services for the management of the IT system and telecommunications networks (including email and management of web portals and websites - cloud storage - hosting services); competent authorities and/or supervisory bodies for the fulfillment of legal obligations; accounting and tax consultancy company; employment consultants; companies and law firms for the protection of contractual rights; subjects who carry out control, review and certification obligations of the activities carried out by the Data Controller.

This website may share some of the data collected with services located outside Italy and the European Union area. In particular with Google, Facebook and Microsoft (LinkedIn) also through social plugins and the Google Analytics service. Transfer outside the EU is authorized on the basis of specific decisions of the European Union Commission and the Guarantor for the protection of personal data, in particular decision 1250/2016 (Privacy Shield), for which no further consent is required. The companies mentioned above guarantee their adherence to the Privacy Shield.

In any case, in the event that a possible extra-EU transfer of personal data should be necessary, the Data Controller hereby ensures that the data transfer will take place in compliance with the applicable legal provisions and in particular in accordance with articles 44 – 45 – 46 – 47 – 48 and 49 of the GDPR.

DATA RETENTION PERIOD

We inform you that, in compliance with the principles of lawfulness, limitation of purposes and storage and minimization of data, pursuant to art. 5 of the GDPR, the retention period of your personal data is established for a period of time not exceeding the achievement of the purposes for which they are collected and processed - 10 years in the case of purchase of a product/service on the e-commerce portal www .cegoceramiche.com - or for the entire duration of the fulfillment of the aforementioned purposes, and, therefore, once the purposes of the processing have been exhausted, your data will be deleted from any logical and/or physical support and data base.

AUTOMATED DECISION MAKING AND PROFILING

The Data Controller informs you that, for the purposes of processing your personal data, it does not make use of automated decision-making processes, i.e. those aimed at making decisions based solely on technological means based on pre-determined criteria (i.e. without human involvement).

Pernigotto srl informs you that, subject to your specific consent pursuant to art. 22 par. 2 lett. c) of the GDPR to the use of profiling cookies, as well as with your specific consent art. 22 par. 2 lett. c) provided during registration on the e-commerce portal www.cegoceramiche.com, will use your personal data, limited to navigation data as well as certain common data provided during registration on the portal (tax code, telephone number, postal code , email address), in order to carry out profiling activities with automated means aimed at offering a more personalized service. These activities specifically consist of:

- In monitoring and tracking user behavior by collecting and recording data relating to navigation (e.g. pages visited, categories of products viewed, whether you have purchased or not purchased, abandoned carts, access device) and data purchase (e.g. type of product purchased, frequency of purchases, amounts spent, payment methods);

- In the analysis and processing of navigation data, where provided, together with the common data communicated by the user during registration on the portal as mentioned above, in order to display banners with personalized offers to the user, as well as in order to identify and offer, when requesting a quote from the user, the products deemed to be of greatest potential interest to the user.

The profiling activity carried out by the Data Controller is exclusively aimed at providing the user with a personalized offer of products and services and, therefore, a better and more complete experience of using the e-commerce portal www.cegoceramiche.com, and not produces legal effects that significantly affect the person.

The provision of your personal data for profiling purposes is purely optional and occurs exclusively through the expression of consent to the use of the relevant cookies, therefore, any failure to consent does not prevent the fulfillment of the other purposes. In any case, any consent you may have given may be revoked by you at any time, deactivating the provision of consent to the use of profiling cookies and revoking consent to the use of your common data provided during registration on the portal www .cegoceramiche.com for the aforementioned purpose.

RIGHTS OF THE INTERESTED PARTY

Right of Access pursuant to art. 15 of the GDPR and Right of Rectification pursuant to art. 16 of the GDPR

As an interested party, pursuant to art. 15 of the GDPR, you have the right to obtain from Pernigotto srl, as Data Controller, confirmation of the existence or otherwise of processing of personal data concerning you, to obtain access to the same and to all the information referred to to the same art. 15, paragraph 1, letters from (a) to (h), by issuing a copy of the data being processed in a structured, commonly used, machine-readable and interoperable format.

You, pursuant to art. 16 of the GDPR, you also have the right to obtain from Pernigotto srl the rectification and/or integration of the data being processed if they are not updated and/or inaccurate and/or incomplete.

Right of cancellation pursuant to art. 17 of the GDPR and Right to limit processing pursuant to art. 18 of the GDPR

As an interested party, you have the right to obtain, without unjustified delay, from Pernigotto srl, exclusively in the cases referred to in the art. 17, paragraph 1, letters (a) to (f), of the GDPR, the cancellation of data concerning you - with the exception of the hypotheses specifically provided for by the art. 17 paragraph 3.

As an interested party, pursuant to art. 18 paragraph 1, letters from (a) to (d), of the GDPR, you have the right to request and obtain from the Data Controller the limitation of the processing of your personal data, or that such data are not subjected to further processing and can no longer be modified. The Data Controller ensures that the limitation of processing is implemented using adequate technical devices that guarantee its inaccessibility and immutability.

Right to data portability pursuant to art. 20 of the GDPR

As an interested party, you have the right to receive, pursuant to art. 20 of the GDPR, from the Data Controller the personal data concerning him, the processing of which is carried out by automated means, in a structured format, commonly used and readable by an automatic device, and also has the right to transmit such data to another data controller processing, or to obtain from the Data Controller, where technically feasible, the direct transmission of such data to another specifically identified Data Controller.

Right to object to processing pursuant to art. 21 of the GDPR

You have the right to object at any time to the processing of personal data concerning you, for reasons related to your particular situation, in cases where the processing of your data is necessary (1) for the execution of a task of public interest and/or connected to the exercise of public powers vested in Pernigotto srl; (2) for the pursuit of a legitimate interest of Pernigotto srl or of a third party; (3) for profiling activities carried out by Pernigotto srl on the basis of the previous points.

You also have the right to object to the processing of your personal data for reasons related to your particular situation if the same are processed for scientific or historical research purposes or for statistical purposes pursuant to Article 89, paragraph 1 of the GDPR, except in the case where the processing is necessary for the performance of a task in the public interest.

How to exercise the above rights

You may exercise the rights listed above by sending a request to the email address info@pernigotto.com or via RACC. AR at the address Via Sesia 40, Marnate (VA) to the kind attention of the Administration Office Mrs. Salina Monica.

The Data Controller will confirm receipt of your request and provide you with information relating to the action taken, with reference to the exercise of your rights provided for in articles 15 to 22 of the GDPR, within 1 (one) month of receiving the request itself. If necessary, and taking into account the complexity and number of requests, the Data Controller may extend this deadline by 2 (two) months, subject to a reasoned communication to be sent within 1 (one) month of receipt of the request.

The Data Controller will communicate any rectification, cancellation, limitation or opposition to all recipients, as identified by the art. 4, paragraph 1, n. 9 of the GDPR, to which such data were transmitted, unless this proves impossible and/or involves a disproportionate effort.

Following the sending of your request for rectification, cancellation, limitation of opposition, if the Owner has reasonable doubts about your identity, he will request further information to confirm it. Such communications will be sent by email from the address privacy@cegoceramiche.com and will be processed by the person specifically authorized for this purpose.

In the event that the Data Controller does not comply with your request within 1 (one) month from receipt of the request, the latter will inform you of the reasons for non-compliance, informing you as of now of your right to lodge a complaint with the Authority of Control (Guarantor for the protection of personal data), as specified pursuant to art. 13, paragraph 2, letter (d) and governed by articles 77 et seq. of the GDPR.