PRIVACY INFORMATION AND CONSENT TO PROCESSING OF PERSONAL DATA (pursuant to Articles 13 and 14 of EU Regulation 679 of 2016)
Pursuant to the provisions of EU Regulation 679 of 2016 on the protection of natural persons with regard to the processing of personal data, we inform you that ROBERTO COIN S.p.A. will access, collect and process the personal data you provide. Specifically, in compliance with the legislative procedures laid down in the General Data Protection Regulation (GDPR) and respecting the fundamental rights and freedoms of natural persons, we inform you that in this document we set out the modalities of the management of our website as regards the processing of the personal data of the users that consult it. You are requested to read the following privacy information, given as prescribed in Articles 12, 13 and 14 (if the personal data have not been obtained from the data subject but from other sources) of the GDPR as subsequently amended and added to, so that you can fully understand on what basis the personal data are collected, how they are used and stored and to whom they are disclosed, with particular regard to:
This information is provided, in its capacity as controller of the processing of the personal data, by ROBERTO COIN S.p.A. (hereinafter also referred to as the Company), with its registered office at Viale Trieste 13, 3600 Vicenza, Italy, VAT No. and Tax Code 02193150246. In order to contact the controller, you may write to the address given above or to email address firstname.lastname@example.org.
Types of data processed, purpose of processing and legal basis
We inform you that ROBERTO COIN S.p.A. will process your personal data (hereinafter only the “Personal Data” – see Article 4.1 of the Regulation) after you have browsed the website.
What are the Personal Data?
Information that, directly or indirectly, enables the data subject to be identified as a natural person: “directly” means through his or her forename, surname and address; “indirectly” means when the Personal Data are processed together with other information.
Specifically, the Personal Data processed through the website are the following:
The information systems and software procedures for the functioning of this website, during their normal operation, acquire some personal data whose transmission is implicit in the use of internet communication protocols. The information is not collected to be associated with identified interested parties, but could, by its nature, allow users to be identified through processing and association with data held by third parties. This category of data includes IP addresses or domain names of computers employed by users connecting to the site, the addresses of the requested resources in Uniform Resource Identifier (URI) notation, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.), the times of the beginning and end of the session and other parameters related to the operating system and the user’s IT environment.
Purposes of and legal basis for the processing. The Personal Data are used for the sole purposes of gaining anonymous statistical information on the use of the site and checking that it functions correctly. The Personal Data could also be used in order to establish liability in the event of digital crimes against the site (controller’s legitimate interest).
Storage period. The Personal Data are normally erased immediately after having been processed and are therefore stored for short periods of time, except for any extensions of the storage period required for investigations. In this event the Personal Data could be used by the competent authorities to establish liability should digital crimes have been committed against the site.
Provision of Personal Data. The Personal Data are not provided by the data subject but acquired automatically by the site’s technological systems.
Cookies are small text files that websites visited by users send to their devices, in which they are memorised in order to be re-transmitted to the same websites on the next visit. Third-party cookies, on the other hand, are set by a website other than the site the user is visiting. This is because elements can be present on any website (images, maps, sounds, links to web pages of other domains, etc.) that reside on servers other than those of the websites visited.
According to their duration, cookies may be either session cookies (i.e. temporary files that are automatically erased from a user’s device at the end of the browsing session) or persistent cookies (i.e. files that are stored on the device until they expire or are deleted by the user).
Cookies are used for various purposes. Primarily, they are used to transmit the communication or provide the service required by the user; more precisely, they enable the website and optimise its functions, carry out digital authentication and prevent abuse, monitor sessions and enhance browsing experience, for example by keeping the connection to restricted areas active while the user browses the pages of the site without it being necessary for the user ID and password to be re-entered; and by storing specific information regarding users (including preferences and the type of browser and computer employed).
Data voluntarily provided by the data subject
Except as stated for browsing data, the data subject is free to provide the Personal Data requested when carrying out the following operations:
If the Personal Data referred to above are not provided, it may not be possible to render the service requested.
The Personal Data, in any case, will be stored for as long as is compatible with the purpose for which they have been collected.
Contacts form for the processing of client and supplier data
The Personal Data are processed in order to:
Purposes of and legal basis for the processing: the purposes are administrative and accounting and the legal basis is consent (as regards a request for information), the performance of a contract or the controller’s legitimate interest.
Storage period: a time compatible with the purposes of collection.
Provision of the Personal Data: mandatory for entering into contact with the Company.
Marketing, promotional and advertising activities (newsletter) registration form
Purposes of and legal basis for the processing: marketing, promotional and advertising activities related to the controller’s products and services through automated systems (fax, hard copy mail, email), supplying news and the latest information on the activities of the controller and the submission of sale offers for the products marketed by the controller. The legal basis is consent.
Storage period: the Personal Data will be stored until consent is withdrawn. Once consent has been withdrawn, the controller will cease to use the data for these purposes, but may store them in order to protect itself against possible liabilities based on the processing.
Provision of the Personal Data: explicit and mandatory for receiving the service.
If consent is not given, this impairs the processing of the data for the specific marketing, promotional and advertising purposes concerned, for sending newsletters and for contacting the user by telephone or by other means.
The data will be processed fully respecting the data subject’s fundamental rights, without harming his privacy or dignity, always fairly, lawfully and in a transparent manner and will not be further processed in a manner that is incompatible with these purposes. All the security measures necessary to ensure the confidentiality and integrity of the data will be taken.
Online warranty application
Purpose of and legal basis for the processing: applying for a digital/online warranty instead of a paper warranty. The legal basis is consent.
Storage period: the Personal Data will be stored until consent is withdrawn. Once consent has been withdrawn, the controller will cease to use the Personal Data for this purpose, but may store them in order to protect itself against possible liabilities based on the processing.
Provision of the Personal Data: explicit and mandatory for fulfilling the purpose of the processing. If consent for this purpose is not given, it will not be possible for the controller to render the service.
Purposes of and legal basis of the processing:
The legal basis is the execution of the contract or the controller’s legitimate interest.
Storage period: the Personal Data will be stored for the period of time necessary for the pursuit of the purposes for which they have been collected and processed. After this time the controller will cease to use the Personal Data for these purposes, but may store them in order to protect itself against possible liabilities based on the processing.
Provision of the Personal Data: explicit and mandatory for entering into contact with the Company.
Modalities for processing the Personal Data
The Personal Data are processed with automated tools. They will be processed fully respecting data subjects’ fundamental rights, without harming their privacy or dignity, always fairly, lawfully and in a transparent manner and will not be further processed in a manner that is incompatible with these purposes. All the security measures necessary to ensure the confidentiality and integrity of data subjects’ Personal Data will be taken.
Entities, or categories of entities, to whom the Personal Data could be disclosed
The data subject’s Personal Data could be disclosed to suppliers and third parties that perform certain services on the controller’s behalf, always respecting the arrangements for their processing and, should this be required, with the data subject’s consent. The Personal Data will be shared with and made available to such external services providers only to the extent necessary to satisfy the purposes specified in this informative document. The categories of outside entities of whose services the
Company could avail itself in order to carry out a part of its activities are:
In no circumstances will the Personal Data processed be disclosed to entities unauthorised by the controller except for the disclosure or dissemination of data requested by law by police forces, judicial authorities, information and security bodies or other public bodies for the purposes of the defence or security of the state or the prevention, investigation or repression of criminal offences.
Disclosure of the Personal Data
No Personal Data will be disclosed in any circumstances.
Place of processing
The Personal Data will be processed within the area of the European Union and in non-EU countries.
The data controller reserves the right to amend or merely update the contents of this informative document, either in part or totally, also as a result of changes in applicable laws. The data controller suggests that data subjects visit this section regularly in order to acquaint themselves with the most recent and up-to-date version of this document so that they are always aware of the latest information regarding their Personal Data and of the use to which the data controller puts them.
Data subject’s legal rights
Data subjects are legally guaranteed a series of rights regarding their Personal Data. The data controller undertakes to protect Personal Data and comply with the laws on data protection that come into force at any given time. Fuller information and suggestions regarding data subjects’ rights may be obtained by consulting the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) website.
Data subjects may exercise the above rights by sending a written communication by email to email@example.com or by recorded delivery with acknowledgement of receipt to ROBERTO COIN S.p.A., Viale Trieste 13, 36100 Vicenza, Italy.
Pursuant to Article 8 of EU Regulation 679 of 2016, consent to the processing of Personal Data may only be given by a person who is at least 16 years old. The Personal Data of a minor who has not yet reached the age of 16 may only be processed on the basis of consent given by the holder of parental responsibility over the minor.
Last edition: May 2020