Centro Calzaturiero protects your privacy for the processing of the personal data acquired through the website www.centrocalzaturiero.it
1. GENERAL INFORMATION
We would like to inform users (hereinafter, also in their capacity of “data subjects”, pursuant to art. 4, para. 1 of the GDPR) of the following general profiles, valid for all processing contexts:
The Data Controller is Centro Calzaturiero S.r.l., in the person of its legal representative, with registered office in Gambolò (27025 - PV) - viale Industria 122, tax code and VAT no.: 01268960182 whom you can also contact at the following addresses: privacy@centrocalzaturiero.it / tel.: +39 0381.3271 – fax: +39 0381.930002.
All user data directly or indirectly referring to natural persons shall be processed lawfully, fairly and transparently where the data subject is concerned, in compliance with the general principles laid down by art. 5 of the GDPR.
We have adopted specific security measures to prevent the loss, unlawful or incorrect uses of the data and unauthorised accesses thereto.
Through the website we collect, with the use of IT or paper-based systems and media (cf.: hard copy print of a computer document), solely “common” data, i.e. information that does not include “special categories of data” (personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation) or “judicial data” (personal data relating to criminal sentences and to offences or related security measures).
The website is hosted by Server Plan s.r.l., Via G. Leopardi, 22, 03043 Cassino FR (Italy), REA 156549, VAT no. 02495250603 and is physically located at Itnet s.r.l. - Wind server farm in Via di Tor Cervara 280, 00155 Roma (Italy); the server used for the purposes of managing the website, therefore, are located inside the European Economic Area; any transfers of the data to sub-processors abroad shall be covered by standard contractual clauses and/or by a related adequacy decision, in compliance with articles 45 and 46 of the GDPR.
The updated list of the persons authorised to perform processing operations on behalf of the Controller and that of the external data processors appointed by Centro Calzaturiero is available at the registered office of the Controller.
Lastly, the privacy policy of Centro Calzaturiero does not include the processing of the personal data of natural persons younger than 14 (pursuant to art. 2-quinques, para. I of (It.) Legislative Decree no. 196/03). This website, therefore, is not intended to intentionally collect personal information concerning such minors. In the event that information on minors is registered by accident, the Controller will promptly delete it, directly and/or on request of the users.
2. YOUR PERSONAL DATA
We hereby describe the methods by which the personal data, that is acquired through this site (www.centrocalzaturiero.it) and may involve interaction with the user, is managed:
(2.1) navigation data
(2.2) contacts
(2.3) reserved area - value card
(2.4) newsletter
(2.5) other data
(2.6) cookies
2.1 Navigation data
The IT systems and software procedures used for running this website acquire, during their normal operation, certain personal data, the transmission of which is implicit in the use of Internet communication protocols. This information is not collected to be associated to identified data subjects, but may, by its very nature and through handling and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by the users who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the resources required, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code that indicates the status of the reply given by the server (success, error, etc.) and other parameters relating to the user’s operating system and IT environment.
|
Purpose and legal basis of the processing (GDPR - art. 13, para. 1, letter c) |
This data is used for the sole purpose of retrieving anonymous statistical information on the use of the website and to control its correct operation. In addition, the data could be used to ascertain liability in the event of hypothetical computer crimes against the website (legitimate interest of the controller - GDPR recital no. 49). |
|
Scope of disclosure (GDPR - art. 13, para. 1, letters e, f) |
The data shall be processed by the Controller’s internal personnel, granted due authorisation and provided with instructions on the processing (GDPR - art. 29) and by duly appointed external processors (see point 1.6). |
|
Data retention period (GDPR - art. 13, para. 2, letter a) |
The data shall be kept for very brief periods of time or for the time that is strictly necessary and required by the navigation. |
|
Provision (GDPR - art. 13, para. 2, letter f) |
The data shall not be provided by the data subject but they shall be acquired automatically by the website’s technological systems. |
2.2 Contact
In the “contacts” section, the data subject may request contact with the staff of Centro Calzaturiero, which shall acquire the contact data received on the data subject’s spontaneous initiative.
|
Purpose and legal basis of the processing (GDPR - art. 13, para. 1, letter e) |
We request only the identification and contact data (name/surname/e-mail) that are necessary for us to be able to reply to the contact requests of the data subjects on fields and/or matters of interest to the user. The request is sent based on the data subject’s freely given and informed consent, expressed through a clear affirmative act (GDPR - art. 6, para. 1, letter a, recital no. 32) through the compilation of the relevant form and/or by virtue of the performance of precontractual measures adopted on request of the data subject (GDPR - art. 6, para. 1, letter b). |
|
Scope of disclosure (GDPR - art. 13, para. 1, letters e, f) |
The data shall be processed by the Controller’s internal personnel, granted due authorisation and provided with instructions on the processing (GDPR - art. 29) and by duly appointed external processors (see point 1.6). |
|
Data retention period (GDPR - art. 13, para. 2, letter a) |
In general, the data is stored for times compatible with the purpose of the collection, in order to reply to such requests; for users who have become Customers, the retention period is equal to the duration of the contractual relationship and up to 2 months from its end; for the other categories of data subjects, the retention period may not exceed 24 months. |
|
Provision (GDPR - art. 13, para. 2, letter f) |
The provision of data (e-mail), which happens automatically when the data subject sends a related e-mail, is necessary in order to receive a reply from the staff of Centro Calzaturiero; any other data contained in the body of the message is fully optional, in that it may facilitate the contact and/or the object of the request sent by the data subject. |
2.3 Reserved area - Value Card
In the “Reserved area” section, the data subject may, having registered and being in the possession of the Controller’s Loyalty Card (“Value Card”), access the management and/or verification of the “loyalty points” on the Card, which confers discounts and/or bonuses to the data subjects who have become customers of the Sales Point affiliated to Centro Calzaturiero.
|
Purpose and legal basis of the processing (GDPR - art. 13, para. 1, letter e) |
We shall only request the necessary identification data (card code - password) to enable the data subject to view the site contents that pertain to the management of the Loyalty Card. The request is sent based on the data subject’s freely given and informed consent, expressed through a clear affirmative act (GDPR - art. 6, para. 1, letter a, recital no. 32), by checking the special check box. |
|
Scope of disclosure (GDPR - art. 13, para. 1, letters e, f) |
The data shall be processed by the Controller’s internal personnel, granted due authorisation and provided with instructions on the processing (GDPR - art. 29) and by duly appointed external processors (see point 1.5). |
|
Data retention period (GDPR - art. 13, para. 2, letter a) |
In general, the data shall be stored for a period of time compatible with the purpose of the collection and, therefore, for the entire validity period of the Loyalty Card, except in the event that the data subject withdraws his/her consent earlier. |
|
Provision (GDPR - art. 13, para. 2, letter f) |
The provision of data, which happens automatically when the data subject sends a related computerised request, is necessary - and thus mandatory - for the data subject to be able to access the content of the website’s Reserved Area. |
2.4 Newsletter
The newsletter of Centro Calzaturiero (“newsletter/register”) makes it possible to receive continuous in-depth and useful information on the reference sector (clothes/accessories) and on events organised by Centro Calzaturiero, and on offers of commercial and/or promotional activities organised by the Controller.
|
Purpose and legal basis of the processing (GDPR - art. 13, para. 1, letter e) |
We shall only request the e-mail address, for the sole purpose of sending the newsletter. The registration is subject to the acceptance of specific, freely given and informed consent (GDPR - art. 6, para. 1, letter a) |
|
Scope of disclosure (GDPR - art. 13, para. 1, letters e, f) |
The data shall be processed exclusively by personnel that has been duly authorised and instructed on the processing (GDPR - art. 29) and by duly appointed external processors (see point 1.5). |
|
Data retention period (GDPR - art. 13, para. 2, letter a) |
The data shall be stored until such time as the consent is withdrawn by the data subject, which may be done freely at any time by entering the e-mail address in the relevant electronic “Unsubscribe from newsletter” form, or on related request sent to the e-mail address of the Controller info@centrocalzaturiero.com |
|
Provision (GDPR - art. 13, para. 2, letter f) |
Failure to provide the e-mail address and consent will make it impossible to obtain the newsletter service. |
2.5 Other data willingly provided by the user.
The optional, explicit and voluntary sending of e-mail and/or regular post to the other addresses indicated on this website (info@centrocalzaturiero.it) shall result in the subsequent acquisition of the sender’s address, necessary to reply to the requests, and of any other personal data entered in the message. Should the sender send his/her CV as a candidate for a job, he/she shall be solely responsible for the pertinence and exactitude of the data sent. In any case, the sender must refrain from sending information that falls under “special categories of data” or “judicial data” (see point 1.4 - General Information); in case it is received, this information will be erased and will in no way be processed by the Controller.
2.6 Cookies
You may view the cookies policy in the specific section: insert http://www.centrocalzaturiero.it/eng/privacy-policy/
3 External links - www.modadistrict.com
From the Controller’s website you can connect to another web address, always at the discretion of the Controller, to the address www.modadiscrict.com, a website whose purpose is to manage the e-commerce activity related to the Controller’s products, on which you may view a specific related information notice on the processing of data.
4. YOUR RIGHTS
4.1 You may freely exercise the following rights in relation to the processing of data by Centro Calzaturiero:
Obtain confirmation that data concerning you is being processed or otherwise and, in that case, obtain access to the data and information that relates to the processing.
Request the rectification of inaccurate data;
Request the erasure of the data in the event, inter alia, that they are no longer necessary for the purposes for which they were requested; in such case, Centro Calzaturiero will cease processing the data, except in the case in which said data is necessary to ascertain, exercise or defend a right.
Request that the limitation of data processing be applied, in which case said data may only be processed with the previous consent of the data subject; this does not apply to the retention of said data and to its use to ascertain, exercise or defend a right, or for the protection of the rights of other natural or legal persons, or for reasons of substantial public interest of the European Union or a Member State.
Object, wholly or partially, for legitimate reasons to the processing of your data; in this case, Centro Calzaturiero must cease processing said data, except where it is necessary for defence against possible complaints.
Receive, in a structured, commonly used, machine-readable format, the data provided to Centro Calzaturiero, or request that Centro Calzaturiero transfers the data to another controller, if this is technically feasible.
Withdraw the consent granted, where applicable, for the purposes specified under point 2 above, without prejudice to the lawfulness of the processing based on consent provided before the withdrawal.
4.2 The aforementioned rights of access, rectification, erasure, limitation, objection and portability of the data may be exercised directly by the data subject or by his/her legal or authorised representative, by a request addressed to Centro Calzaturiero at its contact data by sending a registered letter with proof of receipt to the registered office of Centro Calzaturiero S.r.l. in Gambolò (27025 - PV) - viale Industria 122 or an e-mail to the address privacy@centrocalzaturiero.it or, lastly, a certified e-mail to the address centrocalzaturiero.000@pec.it.
The data subject shall be entitled to lodge a complaint with the competent Supervisory Authority.
5. POLICY UPDATE
We would like to point out that this information notice may be periodically revised, also in relation to the reference regulatory framework and case law. Any significant changes shall be shown on the website’s home page for an adequate period of time. We would, therefore, like to invite the data subjects to consult this policy periodically. This is an information notice provided pursuant to art. 13 of the GDPR; it is valid exclusively for the website www.centrocalzaturiero.it and is not valid for other websites that may be consulted by the user via links.