THE DATA CONTROLLER
The data controller is Calligaris Spa, with registered office at Via Trieste, 12, 33044 Manzano (UD), Italy, contact email: [email protected]. (the “Data Controller”, “we” or “Calligaris USA Inc”).
LEGAL BASIS FOR DATA PROCESSING
The personal data referred to on this page are processed by the Data Controller for the purposes of managing the Site, providing dedicated information notices and where necessary obtaining the consent of the data subjects involved, so as to be able to offer and perform services on the Site.
Where the Data Controller uses, for direct marketing of its products or services, the details of the email supplied by a data subject for the sale of a product or service, the Data Controller can refrain from requesting the data subject’s consent on condition that the products and services in question are similar to those sold and that the data subject, once suitably informed, does not object to such use either initially or on receiving subsequent communications. The data subject must be informed of the option of objecting to such processing at any time, easily and free of charge, both at the time of collecting the data and when sending any communications for the purposes referred to above. In this case the legal basis for data processing is the legitimate interest of the Data Controller.
TYPE OF DATA PROCESSEDBrowsing data
The IT systems and software procedures used to power this Site collect, as part of their normal workings, personal data, the transmission of which is implicit in the use of internet communications protocols. This information is not collected for the purpose of being linked to the relevant identified Users, but such information could by its very nature be employed to identify Users through specific procedures and correlation with data held by third parties. This data category includes: IP addresses and domain names of computers used by Users connecting to the Site; the addresses of the resources requested in URI (Uniform Research Identifier) form; the time of the request; the method used to submit the request to the server; the size of the file obtained in response; the numerical code indicating the status of the response given by the server (successful, error, etc.); and other parameters relating to the operating system and the IT environment of the User. Such data are used exclusively to collect anonymous statistical information on Site use and to monitor the correct working of the Site and are deleted immediately after processing. Where appropriate they could also be used to identify guilty parties in cases of unlawful computer activities against the Site. Except in such cases, such data on web contacts are currently not stored for more than seven days.Data provided voluntarily by the User
The optional, express and voluntarily sending of emails to the addresses specified on this Site and the subscription to our newsletter will involve subsequent recording of the user’s email address, name and country, which is necessary to respond to the request, together with any other personal data contained in the message. Relevant information notices are provided or viewable on the dedicated pages of the Site for provision of certain services on a request basis. [Additionally, by registering for an account on the Site or making a purchase, we will collect your name, address, email address, credit card information, and phone number.
Third Party Sources
The Site may collect information from third parties to whom you have provided your information, and consented to the sale, rental or transfer thereof (for example, through social media).
Apart from the provisions regarding browsing data, Users are free to provide their personal data as entered into request forms. Failure to provide such data may render the service requested impossible.TYPE OF DATA PROCESSED
The data collected following accessing of the Site as specified above may be disclosed to the entities appointed as data processors, for the services of development, provision and operational management of the technological platforms used.
The personal data collected are also processed by the persons in charge of processing appointed by the controller, acting in accordance with specific instructions provided on the purposes of and methods used for processing. These include couriers, IT service providers, marketing agencies, customer services and other entities. Third parties who perform these operations are only permitted to use the information provided to them to perform their function and for no other purpose. Please contact us at [email protected] to receive a full list of third party providers who may receive your information.
We may disclose a user’s information when required to do so to comply with applicable law or legal process or to respond to a request from law enforcement authorities. We may also provide your information where necessary for the defense of legal claims or for fraud prevention purposes.
PROCESSING METHODS AND PURPOSES
Personal data will be processed using automatic means for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures will be put in place to avoid loss, unlawful or improper use and unauthorized access to the data.
All marketing and personal data profiling activities will be performed only after obtaining the express and unequivocal consent of the data subject in question.
Your information is used, without limitation, for the following services:
Browser data are stored only for the time strictly necessary for the purposes of browsing. Data provided on a voluntary basis will be stored for the period of time necessary for the requested services to be performed.
The Site will consider various factors to determine the appropriate storage period for personal data processed by the Site with the User's consent, so as to ensure that personal data is not kept for longer than necessary. Such factors include the purpose for which the Site processes personal data and the current type of relationship with the data subjects in question (how often they access their account on the Site and open newsletters, or how regularly they browse or buy on the Site, etc.);
The Site will erase the personal data or render them anonymous once their storage is no longer possible or necessary in accordance with the applicable laws.
LINKS TO THIRD PARTY SITES
We provide hyperlinks to third party websites only for the convenience of our users and is not a recommendation that users access such third party websites. We do not guarantee the services or goods provided and sold by such third party websites to Internet users. YOU AGREE THAT YOUR USE OF ANY THIRD PARTY WEBSITE IS AT YOUR SOLE RISK AND WITHOUT WARRANTIES OF ANY KIND BY CALLIGARIS SPA, EXPRESS, IMPLIED OR OTHERWISE, INCLUDING, BUT NOT LIMITED TO, WARRANTIES OF TITLE, FITNESS FOR A PARTICULAR PURPOSE, MERCHANTABILITY OR NONINFRINGEMENT. UNDER NO CIRCUMSTANCES SHALL CALLIGARIS SPA BE LIABLE FOR DAMAGES ARISING FROM ANY TRANSACTION BETWEEN YOU AND ANY THIRD PARTY WEBSITE OR FOR ANY INFORMATION APPEARING ON THIRD PARTY WEBSITES.
Information Collected From And/Or Shared With Social Media Sites
When accessing the Site through a third party social media site and/or application, we may access some of your information from your social media account, such as name, email address, profile picture, location, friend list, posts and/or likes. Please note that some aggregate information, that does not personally identify you, such as content viewed on the social media site/application, may also be collected by us if you access the Site through a third party social media site.
DATA SUBJECT RIGHTS
Data subjects have the right to request of the Data Controller access to and rectification and erasure of their personal data, as well as limitation of the processing of such data, or to oppose data processing. Requests should be sent using the contact details given above.
Specifically, data subjects have the right to obtain:
Users also have the right to withdraw consent to processing of their data at any time.
Data subjects have the right object, in all or in part, to the processing of their personal data on legitimate grounds, both where the data are relevant to the purposes for which they have been collected, and in cases where they are used for advertising communication or marketing purposes.
For all correspondence and to exercise their rights, data subjects can contact the controller at the email address: [email protected].RIGHT OF COMPLAINT
Data subjects have the right to lodge a complaint with the supervisory authority if they believe that their data was processed in violation of the GDPR, or to take action before the courts.
RIGHTS OF CALIFORNIA RESIDENTS
If you are a California resident, please read our Calligaris Privacy Notice for California Residents (https://www.calligaris.com/US/ea/legal-area) for additional information concerning the collection and processing of your personal information and the rights granted to you with respect to such information.
While we do not sell products or services for purchase by children, we may sell children’s products or services for purchase by adults. If you are under 18 years old, you may use the Site only under the supervision of a parent or guardian. In accordance with the Federal Children's Online Privacy Protection Act of 1998 (COPPA), we do not knowingly collect, solicit or use personal information of children under the age of 13 provided without parental consent. Should we become aware that a user under the age of 13 has registered without verifiable parental consent, any such information will be deleted.
DO NOT TRACK SIGNALS
Our Site does not recognize Do Not Track signals. Some third parties may collect aggregate information about the users’ online activities over time and across websites when they use the Site. While this information does not include personally identifiable information, certain processing activities that combine aggregate information with other information in possession of such third parties could result in the identification of users.