Privacy Policy

Privacy Policy of Carpenteria Grillanda Srl updated on 21/10/2024

This Application collects some Personal Data of its Users.

Data Controller
Carpenteria Grillanda Srl
Via Massafiscaglia, 815 – 44123 Denore (FE)
info [ @ ] carpenteriagrillanda.com

Phone: 0532 427355
C.F. and VAT: 02051880389

Types of Data Collected


Among the Personal Data collected by this Application, either independently or through third parties, there are: Cookies, Usage Data, email, first name, last name, phone number, address, postal code, and city.

Complete details on each type of collected data are provided in the dedicated sections of this privacy policy or through specific information texts displayed prior to the data collection.

Personal Data may be freely provided by the User, or, in the case of Usage Data, collected automatically during the use of this Application.

Unless otherwise specified, all Data requested by this Application is mandatory. If the User refuses to provide it, it may be impossible for this Application to provide the Service. In cases where this Application indicates certain Data as optional, Users are free to refrain from communicating such Data, without consequences on the availability or functioning of the Service.

Users who have doubts about which Data is mandatory are encouraged to contact the Data Controller.

Any use of Cookies – or other tracking tools – by this Application or by the owners of third-party services used by this Application, unless stated otherwise, is for the purpose of providing the Service requested by the User, in addition to the other purposes described in this document and in the Cookie Policy, if available.

The User assumes responsibility for the Personal Data of third parties obtained, published, or shared through this Application and confirms that they have the right to communicate or broadcast it, relieving the Data Controller of all responsibility towards third parties.

Method and location of Data processing


Method of processing

The Data Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data.

The processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the indicated purposes. In addition to the Data Controller, in some cases, the Data may be accessible to other parties involved in the organization of this Application (administrative, commercial, marketing, legal personnel, system administrators) or external parties (such as third-party technical service providers, postal carriers, hosting providers, IT companies, communication agencies) appointed, if necessary, as Data Processors by the Data Controller. The updated list of Data Processors can always be requested from the Data Controller.

Legal basis of processing

The Data Controller processes Personal Data relating to the User in the following cases:

  • The User has given consent for one or more specific purposes;
  • Processing is necessary for the performance of a contract with the User and/or for any pre-contractual obligations;
  • Processing is necessary for compliance with a legal obligation to which the Data Controller is subject;
  • Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
  • Processing is necessary for the legitimate interests pursued by the Data Controller or by a third party.

It is always possible to request the Data Controller to clarify the legal basis of each processing and in particular to specify whether the processing is based on law, a contract, or necessary to enter into a contract.

Location

The Data is processed at the operational offices of the Data Controller and in any other places where the parties involved in the processing are located. For more information, contact the Data Controller.

The User’s Personal Data may be transferred to a country other than the one in which the User is located. To obtain further information about the place of processing, the User can refer to the section regarding the details of the processing of Personal Data.

The User has the right to obtain information about the legal basis of Data transfers outside the European Union or to an international organization governed by public international law or set up by two or more countries, such as the UN, and about the security measures taken by the Data Controller to safeguard their Data.

If such a transfer takes place, the User can refer to the respective sections of this document or inquire with the Data Controller using the contact details provided.

Retention period

Personal Data is processed and stored for the time required by the purposes for which it was collected.

Therefore:

  • Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User will be retained until such contract has been fully performed.
  • Personal Data collected for purposes related to the legitimate interest of the Data Controller will be retained as long as needed to fulfill such purposes. The User may obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.
  • When processing is based on the User’s consent, the Data Controller may retain Personal Data longer until such consent is revoked. Furthermore, the Data Controller may be obliged to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority.

At the end of the retention period, Personal Data will be deleted. Therefore, the right to access, deletion, rectification, and the right to Data portability cannot be exercised after the expiration of this period.

Purpose of Data Processing

The User’s Data is collected to allow the Data Controller to provide its Services, as well as for the following purposes: Statistics, Interaction with social networks and external platforms, and Contacting the User.

For detailed information on the purposes of processing and the specific Personal Data relevant to each purpose, the User may refer to the relevant sections of this document.

Details on the Processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

Contacting the User

  • Contact form (This Application)
    Job application – Contact form
    By filling in the contact form with their Data, the User consents to its use for responding to requests for information, quotes, or any other requests indicated by the form header.
    Personal Data collected: city, last name, email, first name, and phone number.

Statistics

  • Technical or functional cookies
    Some cookies ensure the correct functioning of the website and that your user preferences remain valid. By placing functional cookies, we make it easier for you to visit our website. In this way, you do not have to repeatedly enter the same information when visiting our website, for example, the items remain in your cart until you have paid. We can place these cookies without your consent.
  • Analytics cookies
    We use analytics cookies to optimize the website experience for our users. With these analytics cookies, we obtain insights into the use of our website. We ask for your permission to place analytics cookies.
  • Advertising cookies
    We do not use any advertising cookies on our website.
  • Social media buttons
    Our website includes buttons for Facebook, Twitter, LinkedIn, and Instagram to promote webpages (e.g., “like,” “pin”) or share (e.g., “tweet”) on social networks like Facebook, Twitter, LinkedIn, and Instagram. These buttons work with code from Facebook, Twitter, LinkedIn, and Instagram themselves. This code places cookies. These social media buttons can also store and process certain information, which may result in personalized advertising being shown to you.

Read the privacy policies of these social networks (which can change regularly) to know what they do with your (personal) data that they process using these cookies. The obtained data is anonymized as much as possible. Facebook, Twitter, LinkedIn, and Instagram are located in the United States.

Google Analytics

  • Purpose: Performance
  • Retention period: From session to two years
  • Description: Google Analytics is a web analytics service provided by Google. Google Analytics uses cookies that allow us to analyze the use of our website and compile reports on web activity and internet usage.

WordPress

  • Purpose: WordPress access cookies
  • Retention period: 30 days
  • Description: Cookies used to keep you logged in

Facebook

  • Purpose: Personalized ads
  • Retention period: 1 year
  • Description: Facebook uses cookies to show users personalized ads

Twitter

  • Purpose: Shows personalized ads to users
  • Retention period: 1 year
  • Description: Twitter tracks users to show them personalized ads

LinkedIn

  • Purpose: Tracking purposes
  • Retention period: 6 months
  • Description: LinkedIn tracks users to target them with personalized ads

Instagram

  • Purpose: Personalized ads
  • Retention period: 1 year
  • Description: Instagram uses cookies to show users personalized ads

Google Fonts

  • Purpose: Displaying fonts on your website
  • Retention period: 365 days
  • Description: We use the Google Fonts API to display fonts on your website. The Google Fonts API requires your IP address when visiting our website.

Google Maps

  • Purpose: Displaying maps on your website
  • Retention period: 30 days
  • Description: We have embedded Google Maps on your website. Our website connects to the Google Maps API to display these maps. The Google Maps API requires your IP address.

Read the extended cookie policy

User Rights

Users may exercise certain rights regarding their Data processed by the Data Controller.

In particular, Users have the right to:

  • Withdraw their consent at any time. Users have the right to withdraw consent where they have previously given their consent to the processing of their Personal Data.
  • Object to the processing of their Data. Users have the right to object to the processing of their Data if the processing is carried out on a legal basis other than consent. Further details are provided in the dedicated section below.
  • Access their Data. Users have the right to learn if Data is being processed by the Data Controller, obtain disclosure regarding certain aspects of the processing, and obtain a copy of the Data being processed.
  • Verify and seek rectification. Users have the right to verify the accuracy of their Data and request that it be updated or corrected.
  • Restrict the processing of their Data. Users have the right, under certain circumstances, to restrict the processing of their Data. In this case, the Data Controller will not process their Data for any purpose other than storing it.
  • Have their Personal Data deleted or otherwise removed. Users have the right, under certain circumstances, to obtain the erasure of their Data from the Data Controller.
  • Receive their Data and have it transferred to another controller. Users have the right to receive their Data in a structured, commonly used, and machine-readable format and, if technically feasible, to have it transmitted to another controller without any hindrance. This provision is applicable provided that the Data is processed by automated means and that the processing is based on the User’s consent, on a contract to which the User is a part, or on pre-contractual obligations.
  • Lodge a complaint. Users have the right to bring a claim before their competent data protection authority or take legal action.

Details about the right to object

Where Personal Data is processed for the public interest, in the exercise of an official authority vested in the Data Controller, or for the purposes of the legitimate interests pursued by the Data Controller, Users may object to such processing by providing a reason related to their particular situation to justify the objection.

Users must know that, however, should their Personal Data be processed for direct marketing purposes, they can object to that processing at any time without providing any justification. To learn whether the Data Controller is processing Personal Data for direct marketing purposes, Users may refer to the relevant sections of this document.

How to exercise these rights

Any requests to exercise User rights can be directed to the Data Controller through the contact details provided in this document. These requests can be exercised free of charge and will be addressed by the Data Controller as soon as possible and always within one month.

Additional information on data processing

Legal defense

The User’s Personal Data may be used by the Data Controller for legal defense or during the preparatory stages of possible legal proceedings against abuses in the use of this Application or related Services by the User.

The User declares to be aware that the Data Controller may be required to disclose the Data by order of public authorities.

Specific information

Upon the User’s request, in addition to the information contained in this privacy policy, this Application may provide the User with additional and contextual information regarding specific Services, or the collection and processing of Personal Data.

System logs and maintenance

For operational and maintenance purposes, this Application and any third-party services it uses may collect system logs, which are files that record interactions and may also contain Personal Data, such as the User’s IP address.

Information not contained in this policy

Additional information regarding the processing of Personal Data can be requested at any time from the Data Controller using the contact details provided.

Response to “Do Not Track” requests

This Application does not support “Do Not Track” requests.

To determine if any third-party services used support them, the User is invited to consult their respective privacy policies.

Changes to this privacy policy

The Data Controller reserves the right to make changes to this privacy policy at any time, giving notice to Users on this page and, if possible, on this Application, as well as, if technically and legally feasible, by sending a notification to Users through one of the contact details available to the Data Controller. Please therefore regularly consult this page, referring to the date of last modification indicated at the bottom.

If the changes affect processing activities performed on the basis of the User’s consent, the Data Controller shall collect new consent from the User, where required.

Definitions and legal references

Personal Data (or Data)

Any information that directly or indirectly, including in connection with any other information, including a personal identification number, makes a natural person identified or identifiable constitutes personal data.

Usage Data

Information collected automatically through this Application (including by third-party applications integrated into this Application), including: IP addresses or domain names of computers used by the User connecting to this Application, URI (Uniform Resource Identifier) addresses, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server’s response (successful, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal connotations of the visit (e.g., the time spent on each page) and the details of the route followed within the Application, with particular reference to the sequence of pages consulted, to the parameters relating to the operating system and the User’s IT environment.

User

The individual using this Application who, unless otherwise specified, coincides with the Data Subject.

Data Subject

The natural person to whom the Personal Data refers.

Data Processor (or Processor)

The natural or legal person, public administration, or any other entity that processes personal data on behalf of the Controller, as set out in this privacy policy.

Data Controller (or Controller)

The natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data and the tools adopted, including the security measures relating to the operation and use of this Application. The Data Controller, unless otherwise specified, is the owner of this Application.

This Application

The hardware or software tool through which the Personal Data of Users is collected and processed.

Service

The Service provided by this Application as defined in the relative terms (if available) on this site/application.

European Union (or EU)

Unless otherwise specified, all references to the European Union contained in this document are intended to be extended to all current member states of the European Union and the European Economic Area.

Cookie

Small piece of data stored inside the User’s device.

Legal references

This privacy notice is drafted based on multiple legislative systems, including Articles 13 and 14 of Regulation (EU) 2016/679.

Unless otherwise specified, this privacy notice applies exclusively to this Application.