INFORMATION ON THE PROCESSING OF PERSONAL DATA

of users who consult the website www.cloto.it pursuant to article 13 of Regulation (EU) 2016/679

INTRODUCTION
Pursuant to Regulation (EU) 2016/679 (hereinafter "Regulation"), this information illustrates the methods of processing the personal data of users who consult the website www.cloto.it.
DATA CONTROLLER
The owner of the processing of personal data is “PRODUZIONE ARREDAMENTI PAOLA Srl with registered office in Via Niger, 14 - 07026 Olbia (SS) – VAT number 01349730901. For any information you can be contacted at the e-mail address Info@cloto.it
ORIGIN OF YOUR DATA AND CATEGORIES OF DATA PROCESSED
While browsing the site, the Owner may acquire information about the visitor in the following ways:

Browsing data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes: IP addresses, the type of browser used, the operating system, the domain name and addresses of websites from which access was made, information on the pages visited by users within of the site, access time, time spent on a single page, internal path analysis and other parameters relating to the operating system and the user's IT environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site.

Data communicated by the user

This is all personal data provided voluntarily by the visitor when filling out the forms on the site to obtain information, receive orders or for pre-contractual agreements. The data collected are personal details, contact details and shipping address in case of online orders.

Cookies and other tracking systems

A cookie is a text file that resides on the user's hard drive, where it has been sent via the web page of our server. Technical cookies are used strictly limited to what is necessary for safe and efficient navigation of the sites, Google Analytics cookies configured to anonymously collect data on page consultation for aggregate statistics that allow the analysis of some aspects of navigation on the site (for example the most visited pages), Google reCAPTCHA cookies which analyze the traffic of this Website, potentially containing Users' Personal Data, in order to filter it from parts of traffic, messages and contents recognized as SPAM, and cookies third parties including profiling. Google cookies (Analytics and reCAPTCHA) are used by our site for exclusively technical purposes. However, we cannot exclude the possibility that Google traces its use to users who have a Google account. The user can at any time choose whether to activate or deactivate cookies either directly, by choosing them through the preferences box, or by changing the settings of their browser. For further information, please refer to the Cookie Policy on the site.

PURPOSE OF THE TREATMENT
The Data Controller collects and processes your personal data for the purposes illustrated below and according to the lawfulness bases referred to in the GDPR and specified below:
PURPOSE LEGAL BASIS
Respond to specific requests submitted by the user. The processing carried out for these purposes is necessary for the execution of a contract of which the interested party is a party or for the execution of pre-contractual measures adopted at the request of the same (GDPR art. 6 paragraph 1 letter b) and do not require a specific consent from the same.
Provide products purchased online. This includes any action necessary to fulfill our obligations in relation to the sales contract (payment processing, delivery, returns management, etc.) The processing carried out for these purposes is necessary for the execution of a contract of which the interested party is a party or for the execution of pre-contractual measures adopted at the request of the same (GDPR art. 6 paragraph 1 letter b) and do not require a specific consent from the same.
Account administration, management and maintenance. These activities will be performed if the creation of the user's personal profile is requested; the profile information will be integrated with the personal data provided by the user. The processing carried out for these purposes is necessary for the execution of a contract of which the interested party is a party or for the execution of pre-contractual measures adopted at the request of the same (GDPR art. 6 paragraph 1 letter b) and do not require a specific consent from the same.


PLACE OF DATA PROCESSING AND PROCESSING METHODS
The processing is carried out using IT and/or telematic tools, with organizational methods and with logic strictly related to the purposes indicated. Your data is processed at the operational offices of the Data Controller, however, this site may share some of the data collected with services located outside the European Union area, in particular in the United States (by way of example and not limited to Google , Facebook and Instagram via social plugins) based on the adequacy decision of the European Commission of 10.07.2023 EU-US Data Privacy Framework. To manage consent, please refer to the cookie policy and privacy policies of the service providers.

RECIPIENTS OF THE DATA
The personal data processed by the Data Controller are not disclosed, i.e. they are not disclosed to indeterminate subjects, in any possible form, including that of making them available or simple consultation. In addition to the Data Controller, other parties involved in the company organization (administrative, commercial, legal, system administrators) or external parties (such as third party technical service providers, postal couriers, hosting providers, IT companies etc.) appointed may have access to the data. also, if necessary, Data Processors on the part of the Data Controller. The updated list of Managers can always be requested from the Data Controller.

DATA RETENTION PERIOD
The data collected by the site during its operation are kept for the time strictly necessary to carry out the specified activities. Upon expiration, the data will be deleted or anonymized, unless there are no further purposes for storing them.

RIGHTS OF INTERESTED PARTIES
The user may exercise the rights recognized to him at any time, including:
  1. access your personal data, obtaining evidence of the purposes pursued by the Data Controller, the categories of data involved, the recipients to whom they may be communicated, the applicable retention period, the existence of automated decision-making processes;
  2. obtain without delay the rectification of inaccurate personal data concerning you;
  3. to obtain, in the foreseen cases, the cancellation of your data;
  4. to obtain the limitation of processing, when possible;
  5. to request the portability of the data provided to third parties specifically indicated by you, or to receive them in a structured format, commonly used and readable by an automatic device, also to transmit such data to another owner, without any impediment, in all cases where this is necessary by law;
  6. to object at any time to the processing of your data on the basis of our legitimate interest, unless there are legitimate reasons for us to proceed with the processing which prevail over yours, for example for the exercise or defense of legal proceedings.
  7. not to be subjected to a decision based solely on automated processing, including profiling
  8. to lodge a complaint with the Personal Data Protection Authority.
Furthermore, pursuant to art. 7, par. 3, GDPR, the user can exercise his right to withdraw any consent at any time, without prejudice to the lawfulness of the processing based on the consent given previously. To exercise all your rights as identified above, you can contact the Data Controller in the following ways:
  • writing to: PRODUCTION FURNISHINGS PAOLA Srl Via Niger,214 - 07026 Olbia (SS)
  • by sending an email to the email inbox: info@cloto.it


THIRD PARTY WEBSITES
The user is informed that this Privacy Policy does not include the privacy policies adopted by third-party websites to which this site may be linked.
For information on the purposes, type and methods of collection, processing, use and storage of personal data by third-party websites, as well as the methods through which to exercise your rights, please consult the Administration privacy policy , account management and maintenance. These activities will be performed if the creation of the user's personal profile is requested; the profile information will be integrated with the personal data provided by the user.

CHANGES
The possible entry into force of new sector regulations could lead to the need to change these methods. It is therefore possible that this Privacy Policy may undergo changes over time and we therefore invite each user to periodically consult this page. It is understood from now on that any changes to the privacy information provided during the collection of personal data will be communicated to each interested party by the data controller in the manner identified by the latter.

Last update 14.07.2023