Thank you for visiting our website www.agathoparfum.com (hereinafter the "Site"). Below, we describe the methods of processing your personal data, which are collected and/or provided through the Site, as well as the purposes and legal bases for such processing, and your rights. Therefore, we inform you as follows, in accordance with the provisions of REGULATION (EU) 2016/679 ("GDPR") and the Italian legislation that implements it, namely Legislative Decree 196/2003, as subsequently amended.
The data controller is Caminus Capodimonte S.r.l., with its registered office at Via Ausonia Km 1500, 03043 Cassino (FR), represented by its legal representative (hereinafter referred to as "Caminus Capodimonte" or the "Controller").
The types of personal data processed by the Controller are as follows:
Data collected through cookies
Data voluntarily provided by Site users
2.3 Data voluntarily provided by users
Through the Site, users may voluntarily provide personal data, as required for the provision of certain services provided by the Controller. These data will be processed solely for the execution of the service requested by the user. Please note that the voluntary sending of email by the Site user to the email addresses indicated on the site will result in the acquisition of the sender's address, as well as any other information contained in the message. Such personal data will be used solely for the purpose of providing the requested service or performance.
2.1 Navigation data
Navigation data includes IP addresses or computer domain names used by users who connect to the Site, URL addresses (Uniform Resource Locators) of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the server's response status (successful, error, etc.), and other parameters related to the user's operating system. During navigation on the Site, the site's ordinary software procedures acquire certain personal data, the transmission of which is implicit in the use of internet communication protocols. These are pieces of information that are not intended to be associated with identified users, but which, if associated with other data held by third parties (such as your internet service provider), could allow the identification of Site users.
In addition to technical and functional cookies, and only with your express consent, activities of analysis and profiling will be carried out through the use of electronic tools to improve the services offered through the Site, as well as for commercial information, market research on services provided by the Controller in line with users' interests. Personal data will also be processed, with your consent, for sending commercial and promotional information, as well as market research on the Controller's products and services. Please note that failure to consent to profiling activities would make it impossible to improve the marketing offer provided by the Controller and make it in line with the user's interests. For more details on cookies, please refer to the relevant information [www.agathoparfum.com].
3 METHODS AND PRINCIPLES OF PROCESSING
- Data processing will be carried out in accordance with the GDPR, Legislative Decree no. 196/03 and subsequent amendments, as well as the principles of lawfulness, fairness, correctness, transparency, minimization, relevance, proportionality, adequacy, and limitation of retention. Data processing will be done using both paper and electronic methods by persons authorized by the Controller and with the adoption of appropriate protection measures to ensure data security, integrity, and confidentiality. Processing related to the web services offered by the Site takes place at the Controller's registered office and, if necessary, at the locations of external data processors and is handled by persons in charge of processing responsible for managing requested services, marketing activities when requested by the user, data storage, and maintenance operations.
4 PURPOSES AND LEGAL BASIS OF PROCESSING
- For convenience and ease of understanding, we provide a list of the purposes for which your personal data are processed and the related legal bases that legitimize the processing of your data by the Controller.
To monitor and improve your user experience on the Site through statistical analytics exercises, as well as to ensure the proper functioning of the Site's web pages and their content.
(Marketing) To inform you about commercial initiatives, using traditional methods or automated tools, related to promotions and/or offers in the interest of the Controller.
4.2 LEGAL BASIS
These treatments are based on the legitimate interest of the Data Controller.
Such processing is carried out with the specific consent provided by the user, with the exception of commercial communications (in paper or electronic form) related to products and/or services similar to those already subscribed to by the user, for which the user may, in any case, object at the time of data collection and at any time, free of charge and using the methods indicated in point 7 below.
Processing for these purposes is necessary for the fulfillment of contractual obligations and does not require specific consent from the data subject. Processing for these purposes is carried out with the specific consent provided by the user.
5. SECURITY MEASURES
Caminus Capodimonte uses "secure" technologies that are adequate to protect personal data in order to minimize the risks of data destruction or loss, unauthorized access, or unauthorized processing that is not in line with the purposes of the data collection.
6. DATA RETENTION PERIOD
Caminus Capodimonte retains your personal data for as long as it is necessary to achieve the purposes for which they were collected. Additionally, the data controller retains personal data when required by legal obligations and until the expiration of the statute of limitations in order to assert any legal claims.
Navigation data will be retained for no more than 30 days, unless necessary for investigating crimes by the judicial authorities.
For direct marketing purposes, we retain your data for a maximum period as provided by applicable regulations (up to 24 months).
For analysis aimed at developing and improving the service, user personal data may be subject to a retention period of 36 months.
The retention of personal data will occur in both paper and/or electronic/information technology formats on servers located within the European Union. It is understood, however, that the data controller, if necessary, may have the option to move the servers outside the EU. In such cases, the data controller ensures in advance that the transfer of data outside the EU will comply with applicable legal provisions.
7. DATA SUBJECT'S RIGHTS
As the data subject, you are granted all the rights specified in Articles 15 and following of the GDPR, including the right to access, rectify, and delete your data, the right to limit and object to the processing, the right to withdraw consent to the processing (without affecting the lawfulness of processing based on consent before withdrawal), the right to receive your personal data provided to us in a structured, commonly used, and machine-readable format, and the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei dati personali) if you believe that the processing of your data violates the Regulation. You can exercise these rights by submitting a written communication via email, by registered mail to the address of the Data Controller, and by email to the address email@example.com.
You have the right to object at any time, for your own reasons, to the processing of your personal data based on the legitimate interest of the data controller as mentioned above.