Casalgrande Padana. Pave your way

 

INFORMATION NOTICE TO DATA SUBJECTS ON THE PROCESSING OF PERSONA

This Information notice to data subjects (hereinafter the “Information Notice”) is issued pursuant to sect. 13 of the EU Regulation 679/2016 (General Data Protection Regulation – hereinafter the “GDPR”) and aims to inform You, as a user of our website and "data subject", regarding the processing of Your personal data carried out by the data controller, in the course of Your visit to the website. 

The website is available at: http://www.casalgrandepadana.com

and at the other URLs connected to it:

- www.casalgrandepadana.fr

- www.casalgrandepadana.it

- www.casalgrandepadana.de (hereinafter, the “Website”).

The Information Notice is provided for this Website only and not for other websites that the user may consult through links.

THE DATA CONTROLLER 

The data controller – i.e. the entity who determines the purposes and the means of processing – is Casalgrande Padana S.p.A., with registered office at Casalgrande (RE), c.a.p. 42013, Via Statale 467, 73 (ITALY), P. IVA 01270230350, C.F. 01622500369 (hereafter the “Data Controller”).

If you have any questions or requests, or if you require clarifications regarding the processing of your personal data, you may contact the Data Controller in the following ways:

  • by sending an e-mail to privacy@casalgrandepadana.it;

  • by writing to: Via Statale 467, 73 42013 - Casalgrande (RE)

  • by telephone: +39 0522 9901.

THE PROCESSING OF PERSONAL DATA 

While You browse the Website, the Data Controller may process your personal data (since personal data is defined, as per sect. 4 of GDPR, as “any information relating to an identified or identifiable natural person”) in many instances, as described below. 

Please also refer to the Extended Information Notice on Cookies, which supplements and completes this Information Notice.

Moreover, please note that within commercial relationships between Data Controller and its clients and suppliers,, it processes personal data of such clients and suppliers’ references and personnel members with which the Data Controller interacts with the main purpose of executing the related contracts. A complete information notice on such specific processing is made available of each client / supplier within the contractual relationship.

  • E-mails sent by you to the addresses of the Data Controller available on the Website

Sending of e-mails to the addresses available on this Website involves the acquisition of the sender's e-mail address, as well as of any other personal data and information included in the communication. 

This personal data is provided voluntarily by You (and the failure to provide with this data may result in the impossibility to obtain what is required).

purpose

legal basis

data retention

to provide with feedback and answers to your questions and requests for information sent by e-mail 

processing is necessary for the performance of a contract (sect. 6(1)(b) of gdpr).

until the task is executed.

to give a feedback to requests made by administrative, judicial or law enforcement authorities. 

processing is necessary for compliance with a legal obligation of the data controller (sect. 6 (1)(c) of gdpr).

until this purpose is fulfilled. 

 

  • Processing of navigation data and information

The IT systems needed for the operation of this Website acquire some personal data over the course of their normal operation. The acquisition and transmission of this personal data is implicit in the use of Internet communication protocols such as IP address).

This information is not collected to be matched with identified persons but given its very nature it may, through processes and matching with third-party data, allow to identify the users.

This category includes, including but not limited to: IP addresses of the devices connecting to the Website, information on the users’ activities on the Website (such as date and hour of the connection, visited sections and pages of the Website), and information regarding the device and the operating system of the user. This information is collected automatically over the course of Your navigation on the Website. 

 

purpose 

legal basis

data retention

to obtain anonymous statistical information on the use of the website and check for its correct operation. 

legitimate interests of the data controller to improve the website and offer an adequate browsing experience (sect. 6(i)(f) of gdpr). 

no longer than 7 (seven) days. 

to ascertain liability in the event of computer crimes against the website and/or to exercise or defend the rights of the data controller in judicial or extrajudicial proceedings

legitimate interests of the data controller to defend its own legal rights (sect. 6(i)(f) of gdpr).

until it is necessary to fulfil this purpose (for example, until the end of the controversy)

to give a feedback to requests made by administrative, judicial or law enforcement authorities. 

processing is necessary for compliance with a legal obligation of the data controller (sect. 6 (1)(c) of gdpr).

until this purpose is fulfilled. 

 

  • Contact form / Registration at the newsletter / Request for a quote

Personal data provided by You to obtain information belong to the following categories:

  • identification information (such as, including but not limited to, name and surname);

  • contact information (such as, including but not limited to, personal address, e-mail address, telefax and phone number);

  • information on Your professional activity (such as, including but not limited to, Your profession, Your business, Your company);

  • data and information of Your personal interests in the products provided by the Data Controller.

 

The processing of the personal data above is necessary to contact the Data Controller; thus, You must at least voluntarily provide with the mandatory data marked through a star. Should You not at least provide with this mandatory personal data marked through a star, such data will not be processed; anyway, the Data Controller will not be able to provide with a feedback to You.

 

PURPOSE 

LEGAL BASIS

DATA RETENTION

to provide with a feedback to your query and/or request for a quote 

processing is necessary for the performance of a contract (sect. 6(1)(b) of gdpr).

until the task is executed – without prejudice to conservation for different periods for other purposes (such as transmission of newsletter and other communications as described below).

to send by e-mail and / or mail the “newsletter”, publications, catalogues and other information and updates on ceramic, the related market innovations, similar matters

consent (sect. 6(1)(a) of gdpr)

until you will unregister for the service, anyway for max 2 years from registration (at that term, you will receive a communication to renew your consent) 

to fulfil law obligations and to give a feedback to requests made by administrative, judicial or law enforcement authorities. 

processing is necessary for compliance with a legal obligation of the data controller (sect. 6 (1)(c) of gdpr).

until this purpose is fulfilled. 

to exercise or defend the rights of the data controller in judicial or extrajudicial proceedings

legitimate interests of the data controller to defend its own legal rights (sect. 6(i)(f) of gdpr).

until it is necessary to fulfil this purpose (for example, until the end of the controversy)

 

CATEGORIES OF RECIPIENTS OF THE PERSONAL DATA 

To fulfil the purposes stated above and carry out the processing activities described above, Your personal data may also be processed by third parties, other than the Data Controller: such entities can either process Your personal data on behalf of the Data Controller (therefore, acting as "data processors"), or as autonomous data controllers. 

In particular, Your personal data will be processed by the following subjects or categories of subjects:

  • suppliers of services necessary for the correct operating of the Website, of IT services and of communication services, among which, including and not limited to: [name of the service provider hosting the website], located in [•], e-mail [•];

  • providers of the e-mail services used by the Data Controller (for example name of the e-mail provider);

  • providers of products, services or activities necessary for the purpose of implementing CRM and for sending the Data Controller’s newsletter, among which, including and not limited to, RV System, with registered office at [•], VAT no. [•], and MailUp, with registered office at [•], VAT no. [•];

  • the Data Controller's network of agents and distributors and Data Controller’s affiliates, when necessary to provide with a feedback to Your queries;

  • administrative, judicial or law enforcement authorities, as required by the law, with reference to obligations of communication of personal data or other legal fulfilments.

If you wish to know the identity of all the parties to whom your personal data are disclosed, You can contact the Data Controller at the contact information given above. 

TRANSFER OF YOUR PERSONAL DATA OUTSIDE THE EUROPEAN ECONOMIC AREA 

The Data Controller will transfer your personal data outside the European Economic Area only toward countries that ensure an adequate level of protection for the data subjects' personal data, based on an adequacy decision by European Commission, or as a result of the adoption of appropriate or suitable safeguards, anyway in full compliance with the GDPR. 

These transfers take place in exceptional cases, for example when it is necessary to transfer the data subjects' communication to an agent in a third country. 

The Data Controller will provide You, at Your request, with detailed information on how personal data are transferred, on the appropriate or suitable safeguards adopted and on the means by which it is possible to obtain a copy of the transferred data or where they have been made available.

In any other case, the personal data are processed by the Data Controller at its offices or by recipients located within the EU.

PROCESSING BY AUTOMATED INDIVIDUAL DECISION-MAKING

The Data Controller does not carry out any processing by automated individual decision-making (sect. 22 of GDPR)

DATA SUBJECTS' RIGHTS

You have several individual rights, that You can exercise in any moment towards the Data Controller, by contacting it at the contact information above. The Data Controller will reply to Your requests without undue delay.

You may refer to the same contact information, should You need more detailed information on the evaluation carried out by the Data Controller on the balancing between legitimate interests pursued and the interests, rights and freedom of the data subjects.

  • Access

You have the right to request from the Data Controller the access to the personal data concerning You, as provided by sect. 15 GDPR, particularly requesting information on: 

  • the purpose of the processing;

  • the categories of the processed personal data;

  • the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;

  • where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;

  • the existence of the right to request from the Data Controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;

  • the right to lodge a complaint with a supervisory authority;

  • where the personal data are not collected from You, any available information as to their source;

  • the existence of automated decision-making, including profiling, referred to in sect. 22(1) and 22(4) of GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for You

 

  • Withdrawal of consent

You have the right to withdraw Your consent at any time, pursuant to sect. 7(3) of GDPR, without affecting the lawfulness of processing based on consent before its withdrawal, and the lawfulness of processing under different legal basis.

 

  • Rectification 

You have the right to request the rectification of the inaccurate personal data, or to have incomplete personal data completed, as provided by sect. 16 of GDPR. 

 

  • Erasure (i.e. "right to be forgotten")

You have the right to require to the Data Controller the cancellation of Your personal data, as provided by sect. 17 of GDPR. The exercise of this right may not be granted (or may be granted only partially) should the data processing be necessary for compliance with a legal obligation to which the Data Controller is subject, or for the establishment, exercise or defense of legal claims, or for other events set forth by sect. 17(3) of GDPR.

 

  • Restriction of Processing 

You have the right to require to the Data Controller the restriction of processing where (a) the accuracy of the personal data is contested by You, (b) the processing is unlawful, and You oppose the erasure of Your personal data; (c) the Data Controller no longer needs such personal data for the purposes of the processing, but they are required by You for the establishment, exercise or defense of legal claims; and (d) You have objected to processing. 

 

  • Portability

You can obtain from the Data Controller the portability of Your personal data processed on a consent or contractual basis and by automated means: in this case, You may receive the personal data concerning You, in a structured, commonly used and machine-readable format. Moreover, the You have the right to transmit those data to another data controller. 

 

  • Object

You have the right to object to the processing of Your personal data as provided by sect. 21 of GDPR, unless the Data Controller demonstrates, in response to such a request, the existence of a compelling legitimate grounds for the processing which override Your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

In the event of failure to answer, or negative or inaccurate or unsatisfactory answer to Your request, You have the right to lodge a complaint to a supervisory authority.

If You are a British citizen, habitually reside in UK or are professionally based in UK, or believe the alleged violation by the Data Controller has been carried out in UK, You may at any time contact the Information Commissioner’s Office – https://ico.org.uk/ – to obtain ad adequate protection of Your rights.

If You are citizen of another EU member State, habitually reside or are professionally based in another EU member State, believe the presumed violation by the Data Controller has been carried out in another EU member State, please consult the web page http://ec.europa.eu/justice/article-29/structure/data-protection-authori... to have detailed information on competent supervisory authority.

 

MODIFICATIONS AND UPDATES TO THIS INFORMATION

 

If this Information Notice is modified or updated, the Data Controller will take all reasonable measures to inform you of such modifications (for example with appropriate communications - through banners or similar tools - on the Website's homepage).

Nonetheless, we invite You to check regularly the "Privacy" section of the Website, where this Information Notice is displayed, and to consult the most recent version of it. 

 

 

CUSTOMERS AND SUPPLIERS ISSUED

PRIVACY NOTICE for clients and suppliers  

In compliance withRegulation (EU) 2016/679 (General Data Protection Regulation, hereinafter “the GDPR”), this privacy notice explains how we process personal data after entering into a commercial and contractual relationship with our clients and suppliers (hereinafter “Contract”) and during its execution.

DATA CONTROLLER

The Data Controller – i.e. the natural or legal person who determines the purposes and means of the processing of personal data – is Casalgrande Padana S.p.A., with registered office in Casalgrande (RE), post code 42013, Via Statale 467, 73, VAT No. 01270230350, Tax code 01622500369 (hereinafter the “Controller”). 

You can get in touch with the Controller for any doubt or question about personal data processing: 

DATA SUBJECTS AND THE PERSONAL DATA WE PROCESS

Personal data means “any information relating to an identified or identifiable natural person”. The GDPR does not apply to legal persons. 

Therefore, our data subjects are clients, suppliers, and the following natural persons:

  • contact persons, employees, collaborators of clients and suppliers who interact with the Controller in the fulfilment of the contract;

  • legal representatives of clients and suppliers who enter into a contract with the Controller
    (hereinafter the “Data Subject/s”),

The Controller will process the following personal data provided voluntarily by the data subjects for the following purposes:

  • identification (including but not limited to name, surname, date of birth, tax code, address);

  • contacts (including but not limited to email addresses and telephone numbers);

  • information regarding their position at the client’s or supplier’s company

These personal data need to be processed for us to fulfil the contractual relationship; therefore, failure to provide such data will make it impossible for us to execute the Contract. 

 

purpose

legal basis

retention period

taking steps prior to entering into the contract; performance of the contract; managing the contractual relationship

performance of a contract (art. 6(1)(b) gdpr). 

time required to provide an answer 

compliance with legal obligations upon entering into or during the performance of the contract (including but not limited to accounting, administrative, tax, contractual document archiving, and bookkeeping (pursuant to art. 2220 of the italian civil code) obligations, fulfilled, if necessary, through third parties

compliance with a legal obligation (art. 6(1)(c) gdpr)

for the entire duration of the contract and for the subsequent 10 (ten) years

answering requests by administrative, judicial, or public security authorities

compliance with a legal obligation (art. 6(1)(c) gdpr)

time required to pursue this purpose

exercising or defending the controller’s rights in judicial or extrajudicial proceedings or during disputes and controversies

legitimate interest pursued by the controller to defend its rights (art. 6(1)(f) gdpr)

time required to pursue this purpose (e.g. until the dispute is settled)

sending advertising material by post, email, fax, text messages, etc.

legitimate interest pursued by the controller to inform its clients and suppliers about its products (art. 6(1)(f) gdpr)

for the entire duration of the contract

assessing and carrying out extraordinary corporate transactions (e.g. conversions, mergers, spinoffs) or sale of corporate branches

legitimate interest pursued by the controller to make decisions regarding the corporate structure and the corporate bodies it comprises (art. 6(1)(f) gdpr)

for the entire duration of the contract

 

For further information about how we balance our legitimate interests and your interests, rights, and fundamental freedoms, please contact us using any of the methods described above.

WHO ELSE CAN RECEIVE YOUR PERSONAL DATA

To pursue the purposes and carry out the activities described above, personal data can be processed by third parties on behalf of the Controller (data processors) or as independent controllers. 

Personal data will be processed by the following third parties:

  • suppliers of products and services required for the performance of the Contract (including but not limited to ICT service providers, software and management system suppliers, tax consultants, law firms, notary publics, accountants, carriers, forwarders);

  • Our network of distributors, where necessary for the execution of the Contract;

  • judicial, administrative (including tax authorities) and/or public security authorities, with reference to legal or regulatory personal data disclosure obligations or other obligations;

  • third parties and/or bodies in charge of monitoring and auditing our corporate activities (including but not limited to board of auditors, the supervisory board, auditors); 

  • third parties potentially or currently involved in extraordinary transactions, and/or the sale/acquisition of our corporate branch (including but not limited to subjects directly involved in such transactions and their consultants);

  • companies of our same Group (subsidiaries, sister companies, affiliated companies) to ensure the services required for performing the Contract or complying with administrative, tax, and accounting obligations.

For further information about who else can receive your personal data, please contact us using any of the methods indicated above. 

TRANSFERING PERSONAL DATA OUTSIDE THE EUROPEAN ECONOMIC AREA

Personal data will be transferred only to countries outside the European Economic Area that ensure a suitable level of protection of personal data based on a decision of the European Commission, i.e. prior the adoption of appropriate measures and guarantees in compliance with the GDPR. 
Such transfers only occur in exceptional cases, e.g. when your data need to be disclosed to an agent operating in a third country. 
Upon your request, we will provide detailed information about how your personal data will be transferred to third countries, the guarantees, and measures taken to obtain a copy of these data, or the place where they were made available.
In any other case, personal data will be processed at the company headquarters or by processors located within the EU. 

AUTOMATED DECISION-MAKING PROCESSES

We do not make use of automated decision-making processing (art. 22 GDPR). 

YOUR DATA ACCESS RIGHTS

As a data subject, you can exercise your individual rights at any time by contacting us using any of the methods described above. We will take action without undue delay. 

  • Right of access

Pursuant to article 15 of the GDPR, you are entitled to access the personal data we hold about you and in particular: 

  • the purpose of the processing;

  • the categories of personal data processed;

  • the recipients or categories of recipients to whom the personal data has been or will be disclosed, in particular recipients in third countries or international organisations;

  • where possible, the envisaged period for which the personal data will be stored or, if not possible, the criteria used to determine that period;

  • the existence of the right to request from the Controller rectification or erasure of personal data or restriction of processing of personal data concerning the Data Subject or to object to such processing; 

  • the right to lodge a complaint with a supervisory authority;

  • where the personal data are not collected from the data subject, any available information as to their source;

  • the existence of automated decision-making, including profiling, referred to in Article 22 paragraphs 1 and 4 of the GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the Data Subject.

 

  • Rectification 

Pursuant to article 16 of the GDPR, you have the right to obtain the rectification of inaccurate personal data and have incomplete personal data completed.

  • Erasure (right to be forgotten)

Pursuant to article 17 of the GDPR, you have the right to obtain the erasure of your personal data. We may not guarantee this right (or guarantee it only partially) in the event that the processing is necessary for compliance with a legal obligation or the establishment, exercise or defence of legal claims and other cases indicated in article 17(3) of the GDPR.

  • Restriction of processing 

You have the right to obtain restriction of processing where one of the following applies: (a) you contest the accuracy of the personal data; (b) the processing is unlawful and you oppose the erasure of the personal data; (c) we no longer needs the personal data but you require them for the establishment, exercise or defence of legal claims; (d) you have objected to processing.

  • Portability 

You have the right to receive the personal data concerning you and processed on a contractual base with automated means in a structured, commonly used and machine-readable format. You also have the right to transmit those data to another Controller.

  • Right to object

Pursuant to article 21 of the GDPR, you have the right to object to the processing of your personal data, unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
Should you not receive an answer or receive a negative or unsatisfactory answer to your requests, you can contact the supervisory authority. 
If you are an Italian citizen, you reside and work in Italy, or you think to have had your data processing rights violated in Italy, you can contact the Italian Data Protection Authority on www.garanteprivacy.it.
If you are a citizen of or reside and work in another EU Member State, or you think to have had your data processing rights violated in another EU Member State, you can go to http://ec.europa.eu/justice/article-29/structure/data-protection-authori... for further information about the competent supervisory authority.

AMENDMENTS AND UPDATES

We will use every reasonable effort to inform you about any amendment or addition to this privacy notice.

 

DISCLOSURE ON THE USE OF COOKIES

COOKIe NOTICE (extended information notice on cookies)

Date of the drafting of this document: September 2018

Preamble
This "extended information notice on cookies" (“Cookie Notice”) has been drafted and personalized specifically for this website www.casalgrandepadana.com (and related domains) (the “Website”), in accordance with the provisions of the Decision of 8 May 2014 issued by the Garante per la protezione dei dati personali. It complements and updates other Information Notice that can already be found on the Website and / or previously issued by the data controller, in combination with which it provides all the elements required by sect. 13 of EU Regulation 2016/679 ("GDPR").

Object of the Cookie Notice

The data controller uses technologies on these web pages that rely on the so-called "cookies" and this Cookie Notice is designed to explain clearly and precisely to the user how they are used. This document cancels and replaces any previous information provided by the data controller regarding the use of cookies, which are therefore considered outdated.

The data controller

The controller of Your personal data – i.e. the entity who determines the purposes and the means of processing - is Casalgrande Padana S.p.A., with registered office at Casalgrande (RE), c.a.p. 42013, Via Statale 467, 73, P. IVA 01270230350, C.F. 01622500369 (hereafter the “Data Controller”).

If you have any questions or requests, or if you require clarifications regarding the processing of your personal data, you may contact the Data Controller in the following ways:

  • by sending an e-mail to privacy@casalgrandepadana.it;

  • by writing to: Via Statale 467, 73 42013 - Casalgrande (RE)

  • by telephone: +39 0522 9901.

What are cookies

Cookies are text strings (small size files) that the websites visited by a user send to his/her device (PC, tablet, smartphone, etc.), where they are stored and later sent back to the original websites during a subsequent visit by the same user.

Types of cookies and related purposes 

The cookies used in the Website are the following types:

  • Technical cookies: they allow the user an optimal and fast navigation in the Website and the efficient use of the services and/or various options it provides. These cookies are needed to improve the user-experience of the websites, though they may also be disabled. The installation of the technical cookies does not require the user's consent; thus, it takes place automatically when the user accesses the Website. 

 

You can find below an overview of the technical cookies used, the purpose of their transmission and their retention periods on your devices:

 

cookie name

purpose

expiration

drupal.tabledrag.showweight, 

drupal.toolbar.collapsed, 

sess6d9a03587a2899a22cd361f3aa03d21e, 

has_js

identification of the user's session, and adaptation of the graphic layout of the website according to the identified device used for the navigation.

closing of the browser

form_token_contactus

wishlistid

storage of any preferences and information included in forms that have been filled in and information for the access to the reserved area of the website.

until browsing information is deleted from the browser (e.g. history, cache), and in any case 1 (one) year from collection.

     cookiealert

correct management and tracking of the user's acceptance of the "cookie information"

until browsing information is deleted from the browser (e.g. history, cache), and in any case 1 (one) year from collection.

 

  • First-party analytic cookies: anonymous and aggregate web analysis tools, which allow gathering information on how users use the Website, how they have reached it, the number and duration of their visits, etc. Such cookies allow improving the Website by making it easier for users to access it and allowing to make statistical analyses. These cookies are not necessary for the optimal use of the Website and as such they may be disabled. The installation of these cookies does not require the user's consent since such they merely collect data that have been anonymized and are analyzed in aggregate form. 

  • Third-party cookies: these are cookies installed in the user device by third party website administrators by means of this Website. In this Website, third party cookies have analytic purposes and are derived from Google Analytics functions. Further information is available on Google Analytics by visiting the following link: http://www.google.it/intl/it/analytics. To disable the cookies and prevent Google Analytics from collecting navigation data, it is possible to download the browser plug-in and disable Google Analytics by visiting the following link:  https://tools.google.com/dlpage/gaoptout

You can find below an overview of the Google Analytics cookies used, the purpose of their transmission and their retention periods on your devices:

cookie name

purpose

expiration

_ga

used to generate statistics on the usage of the website

2 years

_gid

used for session identification

24 hours

 

Browser Settings

We further inform that users may freely configure at any moment their privacy parameters regarding the installation and use of cookies, directly through the same navigation software programme (browser) following the relevant instruction.

More specifically, users may set the so-called “private navigation” clause, whereby the browser immediately stops storing the visited websites’ chronology, the saved passwords as well as cookies and any other information on the visited pages.

This is to notify that if a user should decide to disable all cookies (also the technical cookies), the quality and speed of the services provided in this Website may drastically worsen and the access to some of its sections could be lost.

Instructions for Correct Browser Setting

In order to block or limit the use of cookies, both in this Website and in other websites, directly from the user’s browser, just follow the simple instruction reported below regarding the most commonly used browsers.

In most browsers, you can change the settings as follows:

  • Select the icon "Options" or "Preferences" in the "Tools" or "View" or "Edit" menu;

  • select "Privacy" or "Security" or "Download files" and choose your preferred settings.

Below you can find direct links to the cookie setup screen, available on your primary browser:

Download the free CASALGRANDE PADANA COLORS app on your tablet.

App Store
Play Store
Flag of Germany