• Data controller:: Civera Carlo S.n.c.
• Registered office: Via dei Mille 20D, 25122 Brescia (Italia)
• Data controller email address: [email protected]

1. Foreword

When you use our website or enjoy its services (referred to as the “Website” and “Services“), we collect information and personal data about you. Carlo Civera S.n.C. as data controller (“Carlo Civera”) informs you that your personal data are processed according to policies and procedures consistent with the purposes set out below and in compliance with EU Regulation 679/2016 (General Data Protection Regulation, the “Regulation”).

We have created this document (“Privacy Policy“) in order to describe what personal data we collect, the purposes and methods of processing them and the security measures we take to protect them.

2. Data source and purpose of data processing

Navigation data

The IT systems responsible for the functioning of the website acquire, during their normal activity, some of your personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected for the purpose of identifying you, but could lead to your identification if, for example, it were combined with data held by third parties. This information is not collected for the purpose of identifying you, but could lead to your identification if, for example, it were combined with data held by third parties. This category of data includes the IP address and domain name of your computer, the notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response and other parameters relating to your operating system. We use these data for the sole purpose of obtaining anonymous statistical information (Google Analytics – Google Inc.) on the use of the website and to check its correct functioning. We delete the data collected in this way immediately after their processing. The data could be used to determine responsibility in case of computer crimes committed against the services.

Registration information and additional information provided by the user

The use of our website does not require the creation of a personal account. However, in order to access certain services (e.g. newsletters, contact form), the transmission of personal data will be necessary upon acceptance of this policy. We invite you to read it in order to be aware of the purposes of the collection, of the compulsory or non-compulsory conferment of the data, of the subjects to whom the data may be transmitted or communicated.

If you were to collect, process and share with us information relating to third parties, you will have to do so in accordance with the provisions of the Privacy Policy and, therefore, you will have to give them prior notice of the processing and, if necessary, you will have to collect their explicit consent before processing.

Interactions with social networks and external platforms

This type of service allows, through special buttons or icons, to interact with social networks, or other external platforms, directly from the pages of the website. Interactions and information acquired by carlocivera.com are in all circumstances subject to the user’s privacy settings for each social network. If a service is installed for interactions with social networks, it is possible that, even if users do not use the service, it will collect traffic data on the pages where it is installed.

Purpose of the data processing

Carlo Civera collects and processes the personal data you provide for the purposes described below:

• management of relations with the user and to provide the user with information, estimates, assistance and services requested by them;
• for marketing purposes related to market research and customer satisfaction surveys, as well as sending promotional material about products, services, initiatives, and events offered by Carlo Civera.

Providing the above information is necessary to enable you to use our services, allow us to respond to your requests for information or requests for free activation of certain services (e.g. newsletters). Your refusal would prevent you from using our services and prevent us from responding to your requests.

Legal basis of the data processing

We will process your personal data only where there is one of the legal prerequisites provided for by current legislation, and specifically the legitimate interest of Carlo Civera, with particular reference to the ordinary management and maintenance of the website.

3. Data processing and storage methods

We process your personal data with the help of electronic tools (CRM software) and always in compliance with the security requirements of the applicable legislation, with particular but not exclusive reference to Annex B of D. Decree 196/2003 (Technical Regulations regarding minimum security measures). Our security measures include contractual means with any contractor (e.g. service providers) or agent to ensure the protection of the security and confidentiality of your personal data in accordance with the provisions of the Privacy Policy.

Your personal data are kept for the time that is strictly necessary to pursue the purposes for which they are collected and for the fulfilment of the applicable legal and regulatory obligations. The data will be cancelled or permanently anonymized when the above-mentioned purposes are achieved, unless Carlo Civera is required to keep the data for a longer period of time in order to comply with legal or regulatory obligations.

With particular reference to the judicial protection of our rights, we specify that we adopt a period of retention of personal data of ten years starting from the closure of the account, based on the ten-year limitation period referred to in art. 2946 Italian Civil Code.

4. Privacy Policy related to video surveillance at Via dei Mille 20D showroom, Brescia

1. Types of processed data The video surveillance system is capable of capturing and recording images that concern you, whether you are a customer or a visitor. Such images constitute personal data according to the current regulations on the protection of personal data.
2. Purposes and legal basis Carlo Civera’s video surveillance system is installed for the protection of company assets, in accordance with Article 6, paragraph 1, letter f) of the GDPR and in compliance with current legal provisions, using electronic methods and tools suitable for ensuring security and confidentiality. The processing is carried out for prevention purposes to prevent individuals from committing legal violations against Carlo Civera and to comply with obligations regarding the security of company premises. The purpose of the video surveillance is to ensure the safety and protection of company assets and to safeguard employees from potential intrusions or external aggressions. It also serves to retain evidence for investigating crimes and taking civil action for damages in case of illicit acts such as property damage, manipulation of access tools, or unauthorized entry. The processing of recorded images through video surveillance tools is legally grounded in the legitimate interest of the data controller in protecting company assets, aiming to prevent the perpetration of unlawful acts, and in complete adherence to the measures adopted over time by the Garante for the Protection of Personal Data concerning video surveillance. The recorded images will be used, if necessary, solely to ensure the security of the company in conducting its business activities, to safeguard company assets, and to enhance the adoption of suitable measures to prevent, impede, and otherwise hinder the perpetration of criminal acts within the company premises.
3. Data Retention The recorded images will be stored for 48 hours, after which they will be automatically deleted. Their further retention will only be provided in relation to offenses that have occurred or to judicial or police investigations and, in any case, for the purpose of asserting or defending a right in court.
4. Sharing and transfer of data Subject to the fact that recorded images may be provided to the Judicial Authority or Public Security Authority upon their explicit request, and subject to communications made to comply with legal obligations, only expressly authorized individuals, acting as data processors or authorized personnel, may view the images in compliance with the instructions provided by the company in the relevant appointment document. This is to ensure the proper handling of the processed images, and they may consult the images only for the aforementioned purposes and in accordance with the specified procedures. The data will not be subject to transfer outside the European Economic Area.
5. Your Rights Information Request Upon your request, we will inform you about the personal data we hold about you and the purposes for which it is kept. In justified cases, you can also request the deletion, correction, or limitation of the processing of your personal data. If your personal data is transferred to a country outside the EU that does not provide adequate protection, you can request a copy of the contract ensuring adequate protection of personal data. Right to Object You can also object to the processing of your personal data unless Carlo Civera’s interests take precedence. If we use your personal data on the basis of a balance of interests, you will be able to object to the use of your data. In this case, we will no longer use your data unless our interests are overriding or we are legally required to continue use.

5. Scope of communication

Internal and external communication of personal data

Your personal data will be processed internally only by entities that have been previously appointed as data processors in charge. In particular, your data may be communicated to the following categories of external parties: service providers (professional and technical) and legitimate recipients under the law. The recipients of the data act as owners, controllers or appointees according to the applicable legislation.

Transfer of data abroad

Your personal data may be transferred by us outside of Italy to third party recipients established within the European Union. This transfer is unrestricted as all European Union countries guarantee an adequate level of data protection. However, for the purposes indicated above, we may also transfer your data to third countries, not belonging to the European Union, which do not guarantee the same level of data protection. However, we inform you that such transfer to third countries will always take place in accordance with the Privacy Policy, i.e. by collecting your consent, when necessary, or by taking any other measures necessary to ensure the security of the data being transferred. These measures include possible contractual agreements based on the so-called standard contractual clauses as elaborated by the European Commission.

6. Rights of the interested party

At any time you can exercise your rights under the Privacy Policy, and may, for example, request additions, updates, changes, cancellation, object to or request the limitation of processing, or even ask for data portability. To exercise these rights, please contact us using the contact details provided in paragraph 6.

7. Owner and Data Protection Officer

The website and the services are managed by Carlo Civera S.n.C. with registered office in Via dei Mille 20D, 25122 Brescia, email: [email protected], which acts as data controller.

Last modification date: February 2023