Privacy policy

PRIVACY POLICY
This privacy policy (“Privacy Policy”) is provided in accordance with Art. 13 of EU Regulation 2016/679 (“GDPR”), to describe how your personal data are processed, as a user who browses the website https://www.corradi.eu (“Website”) and uses the services available therein.
Contents

1. Data controller
2. Type of personal data processed
3. Purpose and method of data processing
4. Legal basis of the processing
5. Data collection and consequences of failure to provide data
6. Withdrawal of consent
7. Recipients/Categories of recipients of the personal data
8. Data retention period
9. Data subject’s rights
10. Complaint with the Data Protection Authority
11. Personal data of children
12. Updates and modifications
13. Links to other websites
14. Interactions with social networks
15. Joint controllership with Meta for statistical data processing

1. Data Controller

The Data Controller is Corradi S.r.l. (“Corradi” or “Data Controller”), Via M. Serenati, 20, 40013, Castel Maggiore (BO), Tel.: +39 051 41884111, E-mail: hello@corradi.eu, PEC (certified email address): Corradi2015@legalmail.it .

2. Type of personal data processed

Corradi collects and processes your personal data (“Personal Data” or just “Data”) and specifically:

• Browsing data: the IT systems and the software procedures used to operate the Website acquire, during their normal operation, some data whose transmission is implicit in the use of Internet communication protocols.

This information is not collected to be associated with specific individuals, but, by its very nature, could enable users to be identified through processing and association with data held by third parties. This category of data includes, among others, the IP addresses or domain names of the computers used by users who connect to the Website, the URI addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file that was obtained in response, the numerical code indicating the status of the response given by the server (e.g. successful, error, etc.) and other parameters related to the operating system and the user’s IT environment.
These data are not disseminated but are used only for the purpose of obtaining anonymous statistical information on the use of the Website and to check its correct functioning and are kept for the time defined by the legal regulations of reference. Such data could however be used for the determination of liability in the case of hypothetical cybercrime against the Website.

• Data you provide voluntarily by filling in on-line forms: personal identification and contact data, such as name, surname, e-mail address, address, telephone number, date of birth, qualifications obtained, desired job title, business category.

• Cookies: text files that websites (so-called publisher or first party) visited by the user or other websites or web servers (so-called third parties) place and store in a terminal device available to the user (so-called browser) to record certain parameters and data communicated to the IT system. For more information, please visit the Cookie Policy page.

3. Purpose and method of data processing

The Personal Data you voluntarily provide by filling in the on-line forms are collected and processed for the following purposes:

1. be contacted by the Data Controller (“General Information”, “Press Info” and “Are you interested? Contact us for more information” sections of the Website), whose privacy policy can be found at the following link;
2. receiving the newsletter of Corradi (“Keep in touch” section of the Website), whose privacy policy can be found at the following link;
3. direct marketing by the Data Controller, whose privacy policy can be found at the following link1; link2;
4. management of your registration and/or access to the “Ask Corradi” section of the Website, whose privacy policy can be found at the following link;
5. evaluation of your application, whose privacy policy can be found at the following link.

Further information is contained in the specific privacy policies on the Website prepared for the relevant Services.
The processing of Personal Data will be carried out by the Data Controller, the Data Processors and the subjects in charge of the processing, in compliance with every measure suitable to guarantee data security and confidentiality, through paper supports and with the help of information technology tools, according to the principles of law, protecting the confidentiality of the data subject and their rights by adopting the appropriate technical and organisational measures to ensure a level of security adequate for the risk, pursuant to and in compliance with the provisions of Art. 32 GDPR.

4. Legal basis of the processing

The legal basis of the processing for the purposes referred to in point 3, letters A), (B), (D) and (E) is the implementation of pre-contractual and contractual measures, pursuant to Article 6, par. 1, letter b) GDPR.
The legal basis of the processing for the purpose referred to in point 3, letter C) is your express and free consent pursuant to Article 6, par. 1, letter a) GDPR.
Further information is contained in the specific privacy policies on the Website prepared for the relevant Services.

5. Data collection and consequences of failure to provide data

The provision of your Personal Data marked with an asterisk (*) in the on-line forms present on the Website is optional but necessary for the purposes indicated in point 3, letters A), B), D) and E). The failure to provide them will have no other consequence except the impossibility to use the Services offered through the Website.
Further information is contained in the specific privacy policies on the Website prepared for the relevant Services.

6. Withdrawal of consent

It is your right to withdraw at any time the consent previously expressed for the purposes referred to in point 3, letter C), without, however, prejudicing the lawfulness of the processing carried out on the basis of the consent given before the revocation.
In order to withdraw your consent to the processing, it will be sufficient to send your request for withdrawal to the Data Controller by registered letter, fax or e-mail to the addresses indicated in point 1 of this Privacy Policy.

7. Recipients/Categories of recipients of the Personal Data

The Data may be communicated, within the EU, to the structures, subjects and external companies (including consultants and service providers) whose services are used by the Data Controller for the management of the Website and for carrying out the related instrumental activities or the activities resulting from the performance of the Services offered by the Website.
Your Data may also be communicated to categories of recipients located in a country outside the European Union if this is necessary for the performance of the contract concluded between you and the Data Controller or for the execution of pre-contractual measures adopted upon your request.
Your Data will not be circulated in any case.
Further information is contained in the specific privacy policies on the Website prepared for the relevant Services.

8. Data retention period

Without prejudice to legal obligations, your Personal Data will be kept for a specified period, depending on the nature of the Services that the Website provides and that you use.
Further information is contained in the specific privacy policies on the Website prepared for the relevant Services.

9. Data subject’s rights

At any time you may exercise your rights towards the Data Controller in accordance with Articles 15 et seq. GDPR that, for your convenience, we quote here:

• Right of access and rectification (Articles 15 and 16 GDPR): You have the right to obtain the confirmation as to whether or not your Personal Data are being processed, and, where that is the case, access to them. You also have the right to obtain the rectification of inaccurate data and the completion of incomplete data. You can exercise these rights by directly writing to hello@corradi.eu. If you wish, we will provide you with a copy of your data in our possession.
• Right to erasure (Art. 17 GDPR): in the cases provided by the law in force (e.g. personal data are no longer necessary with respect to the purposes for which they have been collected or otherwise processed, withdrawal of consent, unlawful processing, etc.) you have the right to obtain the erasure of your Personal Data without undue delay by Corradi.
• Right to restriction of processing (Art. 18 GDPR): in the cases provided for by the law in force (inaccuracy of personal data, unlawful processing of data, etc.) you have the right to obtain a restriction on the processing of your Personal Data.
• Right to data portability (Art. 20 GDPR): You have the right to receive your Personal Data in a structured, commonly used and machine-readable format in order to transmit them to another controller or, if requested, we will directly transmit your Data to another controller.
• Right to object (Art. 21 GDPR): You have the right to object at any time, for reasons connected with your particular situation, to the processing of your Personal Data pursuant to Article 6, par. 1, letters e) or f) of the Regulation (legitimate interest of the Data Controller).

In general, to exercise these rights, it will be sufficient to contact the Data Controller by registered letter, fax or e-mail at the addresses indicated in point 1, using, if necessary, the form made available on the website of the Authority for the Protection of Personal Data (https://www.garanteprivacy.it).
Corradi will take all the necessary actions within one month of receiving your request. During this period, despite the exercise of your rights, you may receive further automated communications that were scheduled to be sent before your request.
The period of one month can be extended by two months in the case of a complex request or numerous requests.

10. Complaint with the Data Protection Authority

Should you believe that there has been a breach of your right to personal data protection, it is your right to complain to the Data Protection Authority in the manner and in compliance with the terms stated on the Website of the Data Protection Authority (https://www.garanteprivacy.it).

11. Personal data of children

The services on this Website are intended for general public use and are not intended for children under the age of 18. We do not knowingly collect personal information from users below this age. If personal data of a person below the age of 18 are communicated, the Data Controller will immediately erase them.

12. Updates and modifications

The Data Controller may modify, supplement or simply update, in whole or in part, this Privacy Policy also in view of legislative changes or the entry into force of new regulations in the sector.
Updates and changes will be communicated through publication on the Website. Please access this section regularly to verify that the latest and most current Privacy Policy is published.

13. Links to other websites

This Privacy Policy is provided for this Website and is not valid for other external websites which may be accessed through links.

14. Interactions with social networks

The Website allows interacting with social networks through a direct link by means of the so-called social buttons, i.e. special buttons present on the Website that represent the icons of Facebook, Instagram, YouTube and LinkedIn and that allow users who are browsing the website to reach the social platforms with a “click” and directly interact with them. They will then be able to acquire the data concerning your visit.
For further information, please see the privacy policies of the individual social networks.

15. Joint controllership with Meta for statistical data processing

This Privacy Policy is also provided for the page https://www.facebook.com/Corradioutdoorliving/?fref=ts in relation to which Corradi is a joint Data controller for the statical data processing together with Meta Platforms Ireland Limited.
The processed personal data are statistical data collected through the Insight feature of the Facebook page, which provides aggregated data that help understand how people interact with social network pages.
At this link it is possible to consult the section of the “Page Insights Controller Addendum” Facebook page that indicates the division of responsibilities between Meta Platforms Ireland and the user (in this case Corradi) as administrator of the page https://www.facebook.com/Corradioutdoorliving/?fref=ts.
On this page you can consult the data policy of Facebook and find, among others, the following information:
—   Type of information collected by Facebook and Instagram
—   How Facebook and Instagram use this information 
—   How this information is shared
—   How Meta’s companies work together
—   The legal basis for data processing 
—   How to exercise the rights under the GDPR
—   The data retention period, account deactivation and cancellation
—   How legal requests are fulfilled
—   Management and transfer of data within global services
—   Policy updates and changes
—   Meta Platforms Ireland contact details for personal data protection issues