PRIVACY POLICY PURSUANT TO REGULATION EU 2016/679
(GENERAL DATA PROTECTION REGULATION)
To the Users of
the Website "https://english.hamletcom.com/"
Pursuant to Art. 13 of Regulation EU
2016/679 and in relation to the personal data that the undersigned
Data Controller, Careca S.p.A., will come
into possession of, we hereby inform you of the following:
1. Data Controller
The Data Controller is
Careca
S.p.A.,
VAT no.
01529990358
Street address
Martiri della Libertà 66,
42019-Scandiano (RE)
email:
privacy@careca.com,
tel
0039 0522 991711, fax
0039 0522 991702.
2. Type of data processed
- Browsing
data
During normal operation, the computer systems and software
procedures used to operate this website acquire certain personal
data that are then implicitly transmitted in the use of internet
communication protocols. This is information that by its very
nature could, through association and processing with data held by
third parties, make it possible to identify users/visitors (e.g. IP
address and browsing data). These data are used for the sole
purpose of anonymous statistics on the use of the website and to
monitor its correct operation.
- Data provided for
downloading
IP address
In addition to so-called "browsing data" and "data provided for
downloading", certain data may be collected by means of cookies as
set out in the relevant Cookie Policy, to which
reference is made. Personal data voluntarily provided by the user
when interacting with the website or filling in the forms may also
be processed. Specifically:
- Data provided by email in
the "Personal Area"
Personal area accessed by end users and resellers as follows:
- Login: Email and Password
- Registration:
- End user area: email, password, first name, surname, city,
province (required); address and postcode (optional)
- Reseller area: email, password, first name, surname, company
name, VAT number, address, postcode, city, province, telephone
(required); mobile phone and fax (optional)
3. Purpose of the data processing
The purpose of the processing is:
- Browsing of the website and use of its contents
- Access to a reserved area to benefit from support services and
assistance with products
- Access to a reserved area as a reseller, in order to receive
information on the Hamlet partnership programme
- Comply with the obligations incumbent on the company and laid
down in current regulations
- Defence of a right in court or before judicial authorities
exercising judicial functions
4. Legal basis for the processing
The processing is lawful because:
- It is necessary for the performance of a contract you are party
to, or the performance of pre-contractual measures taken at your
request and/or the performance of a service your requested.
- It is necessary to fulfil a legal and/or contractual obligation
of the data controller.
- It is necessary for the pursuit of the legitimate interest of
the data controller, the defence of a right of the data controller
in court or before judicial authorities.
- It is based on express consent (Art. 6, para. 1, lett. a of
Regulation EU 2016/679), for:
- Access to a reserved area to benefit from support services and
assistance with products as users
- Access to a reserved area as a reseller, in order to receive
information on the Hamlet partnership programme
5. Methods of the data processing
The processing is carried out in a manner strictly necessary to
fulfil the purposes set out above, by means of some of the
operations or set of operations indicated in Article 4, no. 2 of
Regulation EU 2016/679: collection, recording, organisation,
structuring, storage, consultation, processing, adaptation,
modification, selection, retrieval, alignment, use, combination,
blocking, disclosure, erasure and destruction of the data. The
operations may be carried out with or without the aid of
electronic, online or otherwise automated tools.
6. Provision of the data
The provision of personal data is not a legal obligation, but a
necessary requirement to fulfil what is requested.
7. Data retention
The personal data will be processed and stored for as long as is
necessary for the complete performance of the contract you are a
party to, as well as for the proper fulfilment of storage
obligations envisaged by laws or regulations. Storage is envisaged
for as long as is necessary for the pursuit of the legitimate
interest of the data controller, for the purpose of defending its
own right in court or before judicial authorities and in any case
until the expiry of the limitation period of the rights arising
from the contractual relationship.
8. Disclosure of the data
For the purposes referred to in point 4 and to provide, improve,
protect and promote services, the personal data may be disclosed to
or seen by:
- Parties authorised to process the data.
- Data processors and related additional data processors and
authorised parties including but not limited to: accountants,
consultants, suppliers of IT services, cloud computing services or
assistance thereto, and related technical staff, contractors,
persons tasked with occasional maintenance, all adequately trained
in the protection of confidentiality.
- Entities that process data in execution of specific legal
obligations.
9. Profiling
The personal data may be subject to fully automated decision-making
processes, including profiling.
10. Transfer of data abroad
Your personal data may be transferred to countries outside the
European Union as the data controller uses the following services:
- "YouTube", headquartered at 901 Cherry Avenue,
San Bruno, CA 94066, United States, offered by Google
LLC, which has offices located in the United States.
- "LinkedIn", located at 1000 W. Maude Avenue
Sunnyvale, CA 94085, United States, offered by LinkedIn
Corporation, with offices located in the United States.
- "Twitter", based in Dublin, Ireland, offered
by Twitter International Company, which has offices in the United
States.
- "Pinterest", based in San Francisco,
California.
- "Facebook", "Facebook
Messenger" and "Instagram", headquartered
at 1601 Willow Road, Menlo Park, CA 94025, United States, offered
by Meta Platform Ireland, which has offices located in the United
States.
In any case, the transfer of your personal data to countries
outside the European Union is compliant with the GDPR, as it is
governed by special standard contractual clauses as set out in
Commission Decision no. 2010/87/EU, as authorised by the Data
Protection Authority, made available on the websites.
To consult the privacy policies and thus learn how they process
your data, please visit the following pages:
For the transfer of data relating to cookies, please see the
relevant policy.
If the website refers to links to third-party websites not
directly managed by the Data Controller, please see the relevant
Privacy Policy.
11. Rights of the data subject
Pursuant to Articles 15-18 and 20-21 of Regulation EU 2016/679, you
have the right to obtain confirmation of the existence or otherwise
of personal data concerning you, even if not yet recorded, and its
communication in an intelligible form. You have the right to obtain
information on: a) the origin of the personal data; b) the purposes
and methods of the processing; c) the logic applied in the event of
processing carried out with the aid of electronic instruments; d)
the identity of the data controller and any data processors; e) the
parties or categories of parties the personal data may be disclosed
to or who may become aware of them in their capacity as data
processors or persons tasked with processing. You also have the
right to: a) have your data updated, corrected or, if you wish,
completed; b) the cancellation, transformation into anonymous form
or blocking of data processed in breach of the law, including data
whose storage is not necessary for the purposes the data were
collected for or subsequently processed; c) certification to the
effect that the operations as per letters a) and b) have been
communicated - as also related to their contents - to the entities
the data were disclosed or disseminated to, unless this requirement
proves impossible or involves a manifestly disproportionate effort
compared with the right that is to be protected. You have the right
to wholly or partially object: a) on legitimate grounds to the
processing of your personal data, even if pertinent to the purpose
of their collection; b) to the processing of your personal data for
the purpose of sending advertising or direct sales materials or for
the performance of market surveys or commercial communications. You
have the right to data portability, i.e. to receive your personal
data in a structured, commonly used and machine-readable format,
and you have the right to transmit such data to another data
controller without hindrance. You also have the right to lodge a
complaint with a supervisory authority (in Italy, the Personal Data
Protection Authority: www.garanteprivacy.it). You may exercise your
rights by submitting a written request to the data controller at
the addresses (registered office, email) provided in point 1.
12. Subjects processed
The list of data processors for limited sectors and operations is
constantly updated and available by request addressed to the data
controller, including to the addresses provided in point 1.
Privacy Policy pursuant to Regulation EU 2016/679 - Rev. 02 of
18/07/2023
privacy
