Privacy policy
PRIVACY AND COOKIE POLICY
This Privacy and Cookie Policy informs users (“Users”) of the www.calligaris.com site (the “Site”) about the processing of their personal data by the data controller and about the data protection rights available to them. This Privacy and Cookie Policy concerns this Site only and not any other sites that the User might access via links on this Site.
THE DATA CONTROLLER
The data controller is Calligaris Spa, with registered office at Via E.T. Moneta, 40 - 20161 Milano (MI), Italy and operational headquarters at Via Trieste 12, Manzano (UD) Italy, contact email: [email protected]. (the “Data Controller”, “we” or “Calligaris USA Inc”).
LEGAL BASIS FOR DATA PROCESSING
The personal data referred to on this page are processed by the Data Controller for the purposes of managing the Site, providing dedicated information notices and where necessary obtaining the consent of the data subjects involved, so as to be able to offer and perform services on the Site.
Where the Data Controller uses, for direct marketing of its products or services, the details of the email supplied by a data subject for the sale of a product or service, the Data Controller can refrain from requesting the data subject’s consent on condition that the products and services in question are similar to those sold and that the data subject, once suitably informed, does not object to such use either initially or on receiving subsequent communications. The data subject must be informed of the option of objecting to such processing at any time, easily and free of charge, both at the time of collecting the data and when sending any communications for the purposes referred to above. In this case the legal basis for data processing is the legitimate interest of the Data Controller.
TYPE OF DATA PROCESSED
Browsing dataThe IT systems and software procedures used to power this Site collect, as part of their normal workings, personal data, the transmission of which is implicit in the use of internet communications protocols. This information is not collected for the purpose of being linked to the relevant identified Users, but such information could by its very nature be employed to identify Users through specific procedures and correlation with data held by third parties. This data category includes: IP addresses and domain names of computers used by Users connecting to the Site; the addresses of the resources requested in URI (Uniform Research Identifier) form; the time of the request; the method used to submit the request to the server; the size of the file obtained in response; the numerical code indicating the status of the response given by the server (successful, error, etc.); and other parameters relating to the operating system and the IT environment of the User. Such data are used exclusively to collect anonymous statistical information on Site use and to monitor the correct working of the Site and are deleted immediately after processing. Where appropriate they could also be used to identify guilty parties in cases of unlawful computer activities against the Site. Except in such cases, such data on web contacts are currently not stored for more than seven days.
This Website uses Google Signals, a feature of Google Analytics that associates the information about views collected by this Website with Google information coming from the accounts of Google users who have consented to this association for the personalization of ads. This Google information may include the User's location, search history, YouTube history and data from Google partner sites and is used to provide aggregate and anonymous information on the transversal behavior of Users.
If a User falls within the association described above, he may access and/or delete such Data through the MyActivity function provided by Google (at https://myactivity.google.com/myactivity?pli=1).
The optional, express and voluntarily sending of emails to the addresses specified on this Site and the subscription to our newsletter will involve subsequent recording of the user’s email address, name and country, which is necessary to respond to the request, together with any other personal data contained in the message. Relevant information notices are provided or viewable on the dedicated pages of the Site for provision of certain services on a request basis. [Additionally, by registering for an account on the Site or making a purchase, we will collect your name, address, email address, credit card information, and phone number.
Third Party Sources
The Site may collect information from third parties to whom you have provided your information, and consented to the sale, rental or transfer thereof (for example, through social media).
OPTIONAL DATA
Apart from the provisions regarding browsing data, Users are free to provide their personal data as entered into request forms. Failure to provide such data may render the service requested impossible.
TYPE OF DATA PROCESSEDOnly data collected through browsing protocols, data resulting from use of cookies and data voluntarily provided during browsing or during subsequent contacts will be processed.
RECIPIENTS OF DATAThe data collected following accessing of the Site as specified above may be disclosed to the entities appointed as data processors, for the services of development, provision and operational management of the technological platforms used.
The personal data collected are also processed by the persons in charge of processing appointed by the controller, acting in accordance with specific instructions provided on the purposes of and methods used for processing. These include couriers, IT service providers, marketing agencies, customer services and other entities. Third parties who perform these operations are only permitted to use the information provided to them to perform their function and for no other purpose. Please contact us at [email protected] to receive a full list of third party providers who may receive your information.
We may share your information with companies affiliated with Calligaris (including without limitation companies operating under the Connubia, Ditre and Luceplan names), including licensees and joint venture partners, who may be located outside the United States, including for such companies’ marketing purposes. These parties may only use your information in compliance with this Privacy Policy.
In the event that there is a change in the corporate structure of the Data Controller including, by way of example, a merger, consolidation, sale, liquidation or transfer of substantial assets, we may communicate the personal data collected on and through the Site to one or more third parties involved in the corporate transaction. In this case, it will be up to the new legal entity, the Data Controller, to provide the data subject with an updated privacy policy.
We may disclose a user’s information when required to do so to comply with applicable law or legal process or to respond to a request from law enforcement authorities. We may also provide your information where necessary for the defense of legal claims or for fraud prevention purposes.
PROCESSING METHODS AND PURPOSES
Personal data will be processed using automatic means for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures will be put in place to avoid loss, unlawful or improper use and unauthorized access to the data.
All marketing and personal data profiling activities will be performed only after obtaining the express and unequivocal consent of the data subject in question.
Your information is used, without limitation, for the following services:
- Registration for an account or newsletter;
- Order fulfilment and related activities;
- Management of payments, including anti-fraud control when paying by credit/debit card;
- Marketing communications;
- Customization of content;
- Responding to customer service requests and similar communications from you; and
- Technical assistance.
Browser data are stored only for the time strictly necessary for the purposes of browsing. Data provided on a voluntary basis will be stored for the period of time necessary for the requested services to be performed.
The Site will consider various factors to determine the appropriate storage period for personal data processed by the Site with the User's consent, so as to ensure that personal data is not kept for longer than necessary. Such factors include the purpose for which the Site processes personal data and the current type of relationship with the data subjects in question (how often they access their account on the Site and open newsletters, or how regularly they browse or buy on the Site, etc.);
The Site will erase the personal data or render them anonymous once their storage is no longer possible or necessary in accordance with the applicable laws.
LINKS TO THIRD PARTY SITES
The Site contains links to third party websites, which we do not operate, control, monitor, endorse or guarantee. This Privacy Policy does not apply to the collection and use of information by such third party websites. We suggest that you carefully read the privacy policy and other policies of all third party websites.
We provide hyperlinks to third party websites only for the convenience of our users and is not a recommendation that users access such third party websites. We do not guarantee the services or goods provided and sold by such third party websites to Internet users. YOU AGREE THAT YOUR USE OF ANY THIRD PARTY WEBSITE IS AT YOUR SOLE RISK AND WITHOUT WARRANTIES OF ANY KIND BY CALLIGARIS SPA, EXPRESS, IMPLIED OR OTHERWISE, INCLUDING, BUT NOT LIMITED TO, WARRANTIES OF TITLE, FITNESS FOR A PARTICULAR PURPOSE, MERCHANTABILITY OR NONINFRINGEMENT. UNDER NO CIRCUMSTANCES SHALL CALLIGARIS SPA BE LIABLE FOR DAMAGES ARISING FROM ANY TRANSACTION BETWEEN YOU AND ANY THIRD PARTY WEBSITE OR FOR ANY INFORMATION APPEARING ON THIRD PARTY WEBSITES.
Some of the Site’s services are integrated with social sharing features, e.g., liking or sharing a product on a social media platform. Depending on your settings on your social media accounts, these activities may show up on your profile and be visible to your friends/followers and/or the public. Please note that this Privacy Policy does not apply to third party social media sites, and you should always refer to the privacy policies of the relevant social media sites for information concerning their collection and processing of information.
Information Collected From And/Or Shared With Social Media Sites
When accessing the Site through a third party social media site and/or application, we may access some of your information from your social media account, such as name, email address, profile picture, location, friend list, posts and/or likes. Please note that some aggregate information, that does not personally identify you, such as content viewed on the social media site/application, may also be collected by us if you access the Site through a third party social media site.
DATA SUBJECT RIGHTS
Data subjects have the right to request of the Data Controller access to and rectification and erasure of their personal data, as well as limitation of the processing of such data, or to oppose data processing. Requests should be sent using the contact details given above.
Specifically, data subjects have the right to obtain:
- updating, rectification or, where it is in their interest, completion of the data;
- erasure, anonymization or blocking of data that have been processed unlawfully, including data the storage of which is unnecessary for the purposes for which they have been collected or subsequently processed;
- certification to the effect that the operations as per letters a) and b) have been notified, also with regard to their contents, to the data processors and the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected;
- suspension of data processing, where provided for under the law;
- the portability of personal data, in other words the right to receive personal data concerning them in a structured, commonly used, machine-readable and interoperable format, within the limits provided for under the law;
Users also have the right to withdraw consent to processing of their data at any time.
Data subjects have the right object, in all or in part, to the processing of their personal data on legitimate grounds, both where the data are relevant to the purposes for which they have been collected, and in cases where they are used for advertising communication or marketing purposes.
For all correspondence and to exercise their rights, data subjects can contact the controller at the email address: [email protected].
RIGHT OF COMPLAINTData subjects have the right to lodge a complaint with the supervisory authority if they believe that their data was processed in violation of the GDPR, or to take action before the courts.
RIGHTS OF CALIFORNIA RESIDENTS
If you are a California resident, please read our Calligaris Privacy Notice for California Residents (https://www.calligaris.com/US/ea/legal-area) for additional information concerning the collection and processing of your personal information and the rights granted to you with respect to such information.
CHILDREN’S RIGHTS
While we do not sell products or services for purchase by children, we may sell children’s products or services for purchase by adults. If you are under 18 years old, you may use the Site only under the supervision of a parent or guardian. In accordance with the Federal Children's Online Privacy Protection Act of 1998 (COPPA), we do not knowingly collect, solicit or use personal information of children under the age of 13 provided without parental consent. Should we become aware that a user under the age of 13 has registered without verifiable parental consent, any such information will be deleted.
DO NOT TRACK SIGNALS
Our Site does not recognize Do Not Track signals. Some third parties may collect aggregate information about the users’ online activities over time and across websites when they use the Site. While this information does not include personally identifiable information, certain processing activities that combine aggregate information with other information in possession of such third parties could result in the identification of users.
UPDATES TO OUR PRIVACY POLICY
We may amend or update all or any portion of this Privacy Policy, at any time, without notice, in its sole discretion. Please access this section regularly to verify if any changes were made to our Privacy Policy and to review the updated Privacy Policy.
5/4/2023 10:02:55 AM