PRIVACY POLICY PURSUANT TO ART. 13 REG. EU 2016/679 (GDPR)
For Camera Italiana Buyer Moda (“CBI”) your privacy and the security of your personal data are important; for this reason, we collect and manage your personal data with the utmost attention and adopt specific measures for their treatment in line with the privacy legislation pursuant to EU Regulation 2016/679 (“GDPR“).
Below you will find key information about how CBI processes your personal data when you browse camerabuyer.it (the “Site“).
Pursuant to art. 5 of the GDPR, CBI among others: a) processes personal data processed lawfully, fairly and in a transparent manner in relation to the data subject (“lawfulness, fairness and transparency”); b) collects the data for specified, explicit and legitimate purposes; c) processes the data in an adequate, pertinent and limited manner to what is necessary with respect to the purposes for which they are processed (“data minimisation”); d) keeps the data in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; e) processes the data in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (‘integrity and confidentiality’).
Who is the Data Controller?
The Data Controller is the legal entity that determines the purposes and means of processing personal data.
The Data Controller is Camera Italiana Buyer Moda with registered office in Via Andrea Solari, 9, 20144, Milan; VAT number 12911040967 (email: privacy@camerabuyer.it)
What data do we process?
CBI processes various types of personal data concerning you, including:
- personal data, such as your e-mail address when you subscribe to our newsletter service;
- when you give your consent, your personal data for marketing purposes;
- personal data when you register on the Site, such as name and surname, your e-mail address, password and your date of birth. If you are a registered user, we collect information about your access to the reserved area of the Site. When you provide the consent, we analyse your personal data and we can process information regarding your interests and your preferences with respect to our products and services, order to present you proposals and offers in line with your tastes. In case of account authentication via external social networks, we collect from these third parties the data necessary for registration/authentication via Facebook and Google. We also collect information about you from third parties and, in particular, from Facebook and Google+;
- information about your browsing the Site, such as the pages you visit and how you interact with the single page and we save this information on our servers.
We inform you that CBI does not process personal data relating to minors. If you access the Site and use the services offered by CBI, you declare that you are of legal age.
For what purposes do we process the data and what is the legal basis?
1 Your personal data are processed to execute the contract you are a part of pursuant to art. 6, paragraph 1, lett. b) of the GDPR; and for:
– registration on the Site and use of services reserved for registered users.
It is mandatory that you provide your personal data; otherwise, you will be unable to use the service.
2 With your consent, pursuant to art. 6, paragraph 1, lett. a) of the GDPR we process your personal data for:
– marketing communications on our products and services in order to update you on new arrivals, exclusive products, our offers.
– market research in order to improve our services and the relationship with our users;
– marketing activities, surveys and market research;
– create group and/or individual profiles which allow us to send you personalised communications that are in line with your interests.
The processing of your data is based on your voluntary consent; providing your data is optional. However, without it, you will be unable to purchase our products online.
You may unsubscribe from newsletters in the corresponding section of your personal account or by clicking the respective link, which appears at the bottom of every commercial communication or by writing to e-mail address of CBI indicated above.
3 For the legitimate interest of CBI pursuant to art. 6, paragraph 1, lett. f) GDPR.
Some of your personal data may be processed to carry out anti-fraud activities: we have a legitimate interest in carrying out this activity to prevent and prosecute any fraudulent activities.
The Data Controller guarantees that he has previously carried out an assessment aimed at ensuring the proportionality of the processing so that the rights and freedoms of the users are not affected, taking into account the reasonable expectations of the same in relation to the specific processing activity.
4 to fulfill a legal obligation to which CBI is subject pursuant to art. 6, paragraph 1, lett. c) GDPR.
To comply with legal obligation of the Data Controller (for example, the legislation to prevent and fraud detection, identification and reporting of illegal and illegal activity regulations)
Who will process your data?
Duly informed personnel (employees and associates) will process the data.
Third parties will process personal data and they were appropriately selected by the Data Controller and they offer a suitable guarantee of compliance with personal data processing rules. These third parties, based on an appropriate designation by the controller (each of them with respect to their own area of authority) may conduct their activities as data processors, pursuant to art. 28 of the GDPR.
These third parties belong to the following categories: internet providers, companies specialized in IT and telematic services; companies that carry out marketing activities; companies specialized in market research and data processing.
Furthermore, your data may be disclosed to third parties, including in the following case:
(i) when disclosure is required by the applicable laws and regulations for legitimate third party recipients of communications, such as public entities and authorities that process your data as independent controllers for the respective institutional purposes;
Methods of data processing
In relation to the aforementioned purposes, the processing of personal data may consist of the activities indicated by art. 4, paragraph 1, no. 2) of the GDPR, namely: collection, registration, organization, conservation, consultation, processing, communication by transmission or any other form of making available, limitation, cancellation and destruction of personal data.
The processing may be carried out using automated tools, with logic strictly related to the aforementioned purposes and, in any case, with methods such as to guarantee the security and confidentiality of the data, in addition to compliance with the specific obligations established by the legislation in force and applicable from time to time.
How long do we retain your data?
We retain your personal data for a limited period of time which depends on the purpose for which they were collected, at the end of which your personal data will be deleted or in any case irreversibly anonymized.
The retention period differs according to the purpose of the processing, in particular:
- a) registered user data: the data will be retain until deletion is requested;
- b) data included in the CV sent to the Site: six months from receipt;
- c) data provided for marketing communications activities, surveys and market research: until interruption is requested and in any case when two years have elapsed since your last interaction with CBI.
In any case, for technical reasons, the termination of the treatment and the consequent definitive cancellation or irreversible anonymization of the relative personal data will be definitive within thirty days from the terms indicated above.
Security measures
We protect your personal data with specific technical and organizational security measures, aimed at preventing your personal data from being used illegitimately or fraudulently. In particular, we use security measures which guarantee: the pseudonymisation or encryption of your data; the confidentiality, integrity, availability of your data. Furthermore, CBI undertakes to regularly test, verify and evaluate the effectiveness of the technical and organizational measures in order to guarantee continuous improvement in the security of the treatments.
What are your rights?
GDPR (arts.- 15-21) grants you the right to exercise specific rights, including that of obtaining from the Data Controller confirmation of whether or not your personal data is being processed and, if it is, to obtain access to or a copy of such personal data; you also have the right to obtain the updating, correction and integration of your data, cancellation, transformation into anonymous form or blocking of data processed in violation of the law; you have the right to object, for reasons related to you specific situation, to the processing of your data for the purpose of a legitimate interest of the controller.
The User may at any time exercise their rights in the following ways:
by e-mail, at the address: privacy@camerabuyer.it;
by ordinary mail, to the address of the CBI registered office: Via Andrea Solari, 9, 20144 Milan
Complaint
Pursuant to art. 77 of the GDPR, you can submit a claim to one of the competent supervisory authorities on compliance with the personal data protection standards, if you believe that your data was unlawfully processed.
In Italy, a claim may be filed with the Personal Data Protection Authority
More information on how to present it is available on https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/4535524.
Last update 12/05/2023