Preamble
With this document, Crasta & C Srl Unipersonale, with registered office at Corso Giuseppe Garibaldi 367, 80142 Naples (Italy), owner of the website https://www.crastaspedizioni.it/, intends to inform users about the methods used to manage the website with regard to the processing and protection of personal data of individuals (users) who browse it, whether through direct access from the home page or from internal pages.
While browsing the website, personal data relating to identified or identifiable natural persons may be collected. This Privacy Policy is drafted in compliance with applicable national and European legislation on the protection of personal data, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), Legislative Decree No. 196/2003, as well as any other applicable Italian data protection legislation, including provisions issued by the Italian Data Protection Authority (Garante), hereinafter collectively referred to as the “Privacy Regulations.”
This Privacy Policy applies exclusively to the website https://www.crastaspedizioni.it/, owned by the Company, and does not apply to other websites that may be accessed by users through links available on this website.
The principles outlined below represent the cornerstones of Crasta & C Srl Unipersonale’s approach to privacy matters.
Your personal data will be:
- processed lawfully, fairly and transparently;
- collected for the specific, explicit and legitimate purposes set out below and subsequently processed in a manner compatible with those purposes;
- adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
- accurate and, where necessary, kept up to date. To this end, the Company undertakes to adopt all appropriate measures to ensure that inaccurate data are rectified and/or erased without delay with regard to the purposes for which they are processed;
- kept in a form which permits identification of the data subject for no longer than is necessary for the achievement of the purposes for which they are processed;
- processed in a manner that ensures appropriate security of personal data, including protection, through appropriate technical and organisational measures, against unauthorised or unlawful processing and against accidental loss, destruction or damage.
Data Controller and Processors
The Data Controller is Crasta & C Srl Unipersonale, with registered office at Corso Giuseppe Garibaldi 367, 80142 Naples (Italy).
Data processed and purposes of processing
Browsing data
The information systems and software procedures used to operate the website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified data subjects; however, due to its nature, it may, through processing and association with data held by third parties, allow users to be identified.
This category of data includes IP addresses or domain names of the computers used by users connecting to the website, the URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response provided by the server (successful, error, etc.), and other parameters relating to the user’s operating system and IT environment.
The data thus collected may be used to ascertain liability in the event of cybercrimes committed against the website.
Data provided directly by the user
Data requested in the various sections of the above-mentioned website, such as name, surname and email address, are used in order to handle the user’s requests (purely by way of example and without limitation: when requesting information or clarification by writing to the email addresses shown on the website’s home page or internal pages; when spontaneously sending a curriculum vitae in order to apply for a position; or when making direct calls or sending faxes to the numbers shown in the “Contacts” section).
Nature and legal basis of processing
Browsing data are processed as necessary to carry out IT and telematic protocols. The provision of personal data by users is free and optional; however, failure to provide such data may result in the inability to access the services offered through the portal.
The legal basis for processing is consent.
Processing methods and retention periods
Data collected through the above-mentioned website are processed through IT and telematic procedures. Technical data are stored on the Company’s servers. Personal data acquired through the web services offered by the Company are stored at Crasta & C Srl Unipersonale, Corso Giuseppe Garibaldi 367, 80142 Naples (Italy) and are processed only by technical staff authorised to process the data, or by authorised personnel in connection with occasional maintenance activities.
Such data are retained by the Data Controller in full compliance with the principles of necessity, minimisation and storage limitation, through the adoption of technical and organisational measures appropriate to the level of risk of the processing, for no longer than is necessary to achieve the purposes for which they are processed and, in any case, for the period required by law.
Cookies
The Data Controller uses certain cookies as set out in detail in the specific cookie notice available on the Company’s website.
Data subject’s rights
Pursuant to Articles 15 et seq. of the GDPR, the data subject may exercise specific rights, including:
- the right to obtain confirmation as to whether or not personal data concerning them are being processed;
- the right of access to personal data and to the following information (the purposes of the processing, the categories of data, the recipients of the data, the retention period, etc.);
- the right to request rectification of, or restriction of, the processing of personal data;
- the right to obtain erasure of personal data where the relevant grounds apply;
- the right to lodge a complaint with a supervisory authority.
Finally, the data subject has the right to withdraw consent to the processing of their personal data at any time. Withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
In order to allow the exercise of rights under the Privacy Regulations, the Data Controller provides the following email address: info@crastaspedizioni.it.
Communication and disclosure
The data collected will not be disclosed, sold or exchanged with third parties without the data subject’s explicit consent, except for any communications to authorised third parties—bound by confidentiality obligations or, where appointed, acting as data processors pursuant to Article 28 of the GDPR—(such as IT support companies and hosting providers) where necessary for the above purposes.
Data may also be communicated to the competent authorities, in accordance with applicable law.
Transfers abroad
For the pursuit of the purposes set out above, personal data may be transferred to group companies located abroad. Please note that some countries do not provide the same level of legal protection for the processing of personal data. In such cases, the Company undertakes to ensure the existence of adequate safeguards for the protection of personal data in accordance with applicable legislation and to promptly inform the data subject of such safeguards.
Email info@crastaspedizioni.it.
