THE PRIVACY POLICY OF THIS WEBSITE (www.culti.com)
REASONS FOR THIS NOTICE
In this page we describe the way we process the personal data of the users visiting our website www.culti.com.
Pursuant to art. 13 del Legislative Decree 196/2003 – Personal Data Protection Code and according to the provisions set out in Regulation (EU) 2016/679, this privacy notice is intended for the users who interact with the web services of Culti Milano S.p.A., which may be accessed online at:
(www.culti.com), the home page of the Internet site of Culti Milano S.p.A.
The information given herein applies solely to the site Culti Milano S.p.A. of Culti Milano S.p.A. (www.culti.com), and does apply to any other sites that users may reach by clicking links contained in our website.
This notice also follows the guidelines provided in Recommendation no. 2/2001 issued by the European authorities for the protection of personal data on 17 May 2001, in the course a meeting of the Working Group set up pursuant to art. 29 of Directive no. 95/46/CE, with a view to identifying a set of minimum requirements to be observed in the collection of personal data online, with special regard to the modalities, the timing and the nature of the information that the Data Controllers are required to supply to users visiting a web page, irrespective of the purposes of the visit.
The Recommendation and a brief description of its purposes can be consulted in the Internet.
By reading this notice, the users will become aware of the purposes and the modalities of the collection and processing of any personal data they supply while navigating our website www.culti.com.
Users can freely navigate our website, www.culti.com, without having to provide any personal data. At no time while they are visiting the site, will it be possible to identify the Customer, who will remain anonymous, unless they decide to enter their personal data, or to place an order, which can only be filled if they have to enter their basic data.
This privacy notice can be printed and/or saved, using the normal functions of the browser (“File” => “Save as”).
THE "DATA CONTROLLER”
The data processed following a visit to this website may include data relating to identified or identifiable users.
The Data Controller, i.e., the person who determines the purposes for which and the manner in which personal data are to be processed, as well as the security measures to be adopted in order to ensure the confidentiality, integrity and availability of the data is Culti Milano S.p.A., with registered office in Milan (Italy), Via Santa Sofia no. 27, in the person of the interim Managing Director of the company.
THE "DATA PROCESSOR”
LThe Data Processor is an external organisation appointed to see to the maintenance of the technological aspects of the website.
Any data subject, at any time, can request the data of the external organisations to whom their data have been disclosed for the intended purposes.
DATA PROCESSING VENUE
The processing operations carried out in connection with the online services offered by this website take place at the aforementioned registered office of Culti Milano S.p.A. and are entrusted exclusively to personnel duly trained in personal data security matters and the right to privacy. If necessary, service data may be processed by the staff of the company in charge of maintaining the technical aspects of the website, that has been appointed as external data controller.
TYPES OF DATA PROCESSED
Navigation data
In the course of their normal operation, the IT systems and the software procedures used to run our website acquire some personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected with a view to associating it with identified subjects, however, on account of its very nature, and through processing and association with data held by third parties, this information could be used to identify the users.
This group of data includes the IP addresses and the domain names of the computers used by the users who visit the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time a request was made, the method used to submit a request to the server, the size of the file obtained in reply, the numerical code reflecting the status of the reply given by the server (successful, error, etc.) and other parameters of the operating system and the IT environment of the user.
Such data are used for the sole purpose of collecting anonymous statistical information on the use of the site and to verify its proper operation, and it is deleted immediately after processing. The data could be used to ascertain liabilities in the event of hypothetical IT related crimes being committed against the site, and in this case web contact data will have to be retained over a longer period of time, according to the needs of the authorities in charge.
Data supplied freely by the user
The elective, explicit and voluntary sending of e-mail messages to the addresses posted on this website entails the acquisition of the sender's address, which is necessary to answer queries, and any other personal data included in the e-mail message.
OPTIONAL NATURE OF DATA PROVISION
Aside from navigation data information, as described above, users may freely decide whether or not to supply the personal data requested in the forms to be compiled when requesting an e-commerce service, or to obtain answers to queries, requests for information materials or requests for other items.
Refusal by a data subject to provide their data may result in our company being unable to provide the information requested or fill the order received or deliver the goods ordered.
In the registration form, the data required to be able to use the online services requested are marked with an asterisk. Users may decide at their sole discretion to enter their data in fields that are not marked with an asterisk.
PROCESSING MODALITIES
Personal data are processed by means of automated tools for the time strictly necessary to fulfil the purposes for which they have been collected, and, in any event, for no longer than ten years, unless otherwise specified by law or by an order of the judicial authorities.
Specific security measures are put in place to prevent loss, illicit or improper uses of the data, and unauthorised access to the data.
When their retention period has expired, the data are retained in anonymous form, purely for statistical purposes.
EXPRESS CONSENT BY THE SUBJECT OF THE DATA
By acknowledging this privacy notice, a customer gives his/her express consent to the processing and communication of his/her personal data for the purposes, and according to the modalities, described in the previous Section. This consent is recorded in the IT systems of CULTI Milano and may be revoked by the customer at any time, with immediate effect, save for the uses made when the consent was in force and without prejudice to the possible consequences thereof.
RIGHTS OF THE DATA SUBJECTS
The subjects whom the personal data refer to are entitled at all times to request confirmation of the existence of their personal data, and to get to know the content and origin of such data, verify their accuracy, request that the data be supplemented, updated, or amended.
Moreover, they have the right to have their data deleted, converted to anonymous form, and to have any data processed in violation of the law blocked. They can oppose the use of their data for any legitimate reason.
The subjects of the data can also exercise their right to oblivion and the right to data portability: the former is the right to have the data controller delete their personal data without undue delay; the latter is the right to receive, from an automatic device (in a structured and legible format of a type in common use) their personal data supplied to a data controller and transmit such data to a different data controller without impediments on the part of the data controller they originally supplied the data to.
All requests must be addressed to:
- via e-mail, to: culti@culti.com
- by postal mail, to Culti Milano S.p.A., at its registered office in Via Santa Sofia no. 27, MILAN (Italy).
In any event, personal data will be erased after ten years, unless otherwise specified or required by law or by an order of the judicial authorities. After this period, the data will be retained in anonymous form, only for statistical purposes.
PURPOSES OF DATA PROCESSING
We collect, store and process your personal data in order to provide the services offered through our website, as well as to meet legal requirements.
The data collected will be used exclusively for the following purposes:
-Meet legal requirements arising from taxation and accounting rules and any other applicable regulation;
-Supply the services offered and manage day-to-day company needs;
-Enable the users to register and have access to specific sections of the website;
-Effectively manage the website and the services offered therein;
-Send our newsletters;
-Contact the users directly (e.g., via e-mail) upon receiving a request through the website;
-For marketing and profiling activities, for statistical analysis and market surveys.
FOR E-COMMERCE SITES:
-Make sure that the information provided for the transaction are valid, exhaustive, non fraudulent;
-Supply assistance services to customers;
-Contact a customer for any problem to do with the management of the order or with subsequent requests concerning the order;
-Supply to the customers the Offers requested or purchased by them;
-Process orders and payments made through the website;
-Manage the processes necessary to deliver the service requested (including after-sale procedures, such as warranty, technical support, delivery and the like).
Subscription to the Newsletter
If you subscribe to our newsletter, you will receive communications on promotions, offers and initiatives. By subscribing to this service you accept to provide your data necessary for such purposes. The information required consists of the data we need to send you our communications. You can subscribe to our newsletter when registering with our site, or from the personal area once you have registered.
To stop the reception of promotional material you can inform us at any time that you no longer with to receive the service. To this end, all you have to do is use the “Unsubscribe” option by clicking the link provided at end of each mail.
Registered user area
If you are a registered user and your personal data have changed, we invite you to update the data online in your personal area.
You can register with the site and create a personal account to use some of the services available, such as, for instance, making a wish list, or requesting an estimate for a project.
Creating a personal account is not mandatory and once you have created it, you can erase it at any time.
In order to create an account you must provide your identification and contact data; the data marked as required are indispensable to complete the registration procedure: lacking such data our company will be unable to fulfil your request.
If you have registered and your personal data have changed, we invite you to update the data online in your personal area.
Online purchases
You can make online purchases as a guest or as a registered user.
To make your online purchases you must provide your address, telephone contacts, electronic contacts. If you do not enter all the required data, the purchasing process cannot be completed successfully.
The data entered for e-commerce purposes will necessarily be transmitted to the courier service that delivers the goods ordered, which has provided ample guarantees of compliance with GDPR provisions.
During the purchasing process, required and optional data are clearly indicated and you can choose not to provide the optional data and still continue to use the website and make online purchases.
If you have registered with the site and the data provided have changed, we invite you to update the data online in your reserved area.
ADDITIONAL PROVISIONS
Use of the website by minors
The website is not intended for use by persons under the age of 18.
Data transfer
Your personal data are stored in databases on our serves or the servers of our trusted suppliers acting as data controllers, in the Italian territory, in countries in the European Economic Area, or in Switzerland, where approved contractual clauses on the secure transfer of data are in force.
UPDATES TO OUR PRIVACY POLICY AND COOKIE POLICY
The Data Controller reserves the right to change this privacy policy, as well as the cookie policy, fully or partially, without having to inform the users, who are required to read such policies in their entirety every time they access our website.
RDP contact: EKO Sicurezza di Colonnello Francesco, francesco.colonnello@protonmail.com
