Dear user,

we inform you that the D. Lgs. n. 196/2003, as amended, and Regulation no. 2016/679/EU (hereinafter together the “applicable legislation”), govern the protection of the fundamental rights and freedoms of natural persons (hereinafter “Data Subject”), with regard to the processing of personal data.

Cefla S.c., recognizing the importance of the protection of personal data processed and considering their protection as one of the main objectives of its activity, provides this information notice (hereinafter “Disclosure“), in order to describe how it processes personal data collected through its website (hereinafter the “Website”).

1. Personal data controller

Name: Cefla S.c., in the person of the legal representative pro tempore.
Address: via Selice Provinciale n. 23/A, Imola (BO), 40026, Italy
Contact information: e-mail privacy@cefla.it

2. Type of data processed

As part of the use of the Site, the following data may be collected and processed:

I. common personal data (including but not limited to: first name, last name, address, social security number, telephone number, e-mail, contact details) provided by the data subject to register and/or access a restricted area or to receive a specific service;

II. browsing data (including but not limited to: IP address, location – country -, information about the pages visited, access and browsing time on each page, clickstream analysis);

III. cookies (i.e., small text strings that can be sent and recorded on the user’s computer by the websites visited, only to be relayed back to the same sites when the user visits them again. For further details, please refer to the Cookie Policy on the Site

3. Legal basis, purpose of data processing and nature of data provision

Personal data collected may be processed for the following purposes:

(a) Service purposes
To execute a specific request from the data subject and/or provide a requested service;
and/or allow navigation and enjoyment of the services offered through the Site;

(b) Statistical purpose
enable statistical research/analysis on aggregated or anonymous data aimed at measuring the operation of the Site, measuring traffic, and assessing usability and interest;

(c) Marketing purposes
alow the sending of informative, promotional and/or commercial mailing lists/newsletters related to Cefla S.c.’s products and activities;
and/or analyze behaviors, attitudes and consumer propensities of the data subject, in order to improve products and services provided by Cefla S.c.

Processing put in place for service purposes sis necessary for the fulfillment of contractual obligations and, therefore, does not require specific consent from the data subject.

Processes put in place for statistical purposes are based on aggregate and/or anonymous data do not require specific consent.

Processing put in place for marketing purposes is carried out only with the specific consent of the data subject.

4. Scope of data circulation

Data may be communicated and processed:

• by employees and/or collaborators of Cefla S.C., belonging to the offices involved for the purposes set forth as authorized to process;
• by agents, distributors and the entire commercial network in general of Cefla S.c. or by companies controlled by Cefla S.c., associated or otherwise belonging to the Cefla Group, in Italy, in the European Economic Area (EEA) or in countries outside the EEA, by virtue of specific contractual obligations;
• by Cefla S.c.’s suppliers such as, by way of example, technology service providers, email marketing service providers, consultants and/or freelancers who provide assistance, advice or collaboration in accounting, administrative, legal, tax and financial matters and who have committed to Cefla S.c. to security and confidentiality;
• by persons appointed/delegated by Cefla S.c. to carry out the activities or part of the activities related to the provision of sales and after-sales services;
• by judicial authorities and/or public administration in the exercise of their institutional functions.

5. Transfer of data to EEA and non-EEA territory

Exclusively for purposes related to the services requested and on an occasional basis, some data may be transferred outside the EEA territory, including by entering them into databases managed by third party companies, operating on behalf of Cefla S.c.

In the event that it is necessary to transfer data to territories outside the EEA, this will be done in accordance with the standard contractual clauses adopted by Cefla S.c., which are suitable to guarantee an adequate level of data protection and in compliance with the security and protection measures provided for by the applicable legislation on the protection of personal data.

6. Method and duration of treatment

The processing of the data subject’s personal data will be carried out in accordance with the principles of fairness, loyalty and transparency, through manual, computerized and telematic means with logic strictly related to the purposes of processing and, in any case, in such a way as to ensure the security and confidentiality of the data.

With reference to ervice purposes personal data will be kept for the period strictly necessary for the related contractual fulfillment and in compliance with the legal terms for storage.

With reference to marketing purposes and subject to revocation consent by the interested party, personal data will be retained for a maximum period of 24 months starting from the date of their provision and, in any case, within the limits allowed by current legislation.

At the end of the data processing period, the data should be deleted, or permanently anonymized.

7. Rights of the data subject

The interested party may at any time exercise the following rights:

• access your personal data;
• obtain confirmation of the existence or non-existence of personal data concerning him/her and their communication in intelligible form;
• obtain rectification, supplementation, deletion or restriction of the processing of personal data concerning him or her;
• object to the processing;
• exercise the right to data portability;
• revoke consent at any time without affecting the lawfulness of processing based on the consent given before revocation;
• propose complaints to the competent supervisory authority (Privacy Guarantor).

To exercise the above rights, report problems or request clarifications on the processing of personal data, the Interested Party may send a registered letter with return receipt to Cefla S.c., Via Selice Provinciale, 23/A – 40026 – Imola (BO), Italy or write an e-mail to: privacy@cefla.it.

8. Links and other websites and social networks

Links to third-party websites are provided only as a convenience to the user. The interactions and consequent processing of personal data carried out by and on external platforms are to be considered governed by and subject exclusively to the privacy policies established by the relevant data controllers, i.e., the companies operating the relevant websites and social networks.

Changes

This Notice is current as of September 26, 2018. If changes are introduced in the future, Cefla S.c. will give appropriate notice by posting the updated version of the Policy on this Website.