Privacy policy

Dear user,

in accordance with EU Regulation 679/2016 (GDPR), Legislative Decree 196/2003 (Privacy Code) and subsequent amendments, as well as the Provisions of the Guarantor for the Protection of Personal Data (GPDP), we provide you with information related to the processing and protection of personal data, as an Interested Party under the privacy regulation.

This information is provided in compliance with current legislation on the processing and protection of personal data. Data processing will be conducted according to principles of fairness, lawfulness, transparency, and protection of privacy.

By entering data in the form for requests for information and/or dedicated quotes, Users/Interested Parties/Customers voluntarily communicate their personal data on the CASA39 website.

IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER

The Data Controller is CASA39 S.r.l., VAT number IT05021690754, with registered office in Taviano (LE) - Italy, via Matino 149, phone number 0833 1851201, email info@casa39.it, hereinafter referred to as "Data Controller" or "Controller" or "CASA39." The Data Controller has appointed the Data Protection Officer (DPO), whose contact details are dpo@datacentersecurity.it.

PURPOSES AND LEGAL BASIS OF PERSONAL DATA PROCESSING

The personal data of users browsing the website sample.now/en are used for specific processing purposes (the purpose is the objective for which personal data are processed) and in accordance with EU Regulation 679/2016; the processing carried out must always have a legal basis, as described below:

• USE OF SERVICES ON THE WEBSITE

Purpose: the correct and complete execution of the assigned task:

• easy navigation of the website pages;
• use of services on the website;
• response to messages;
• proper management of obligations imposed by current regulations.

Legal basis: the processing is necessary for the execution of pre-contractual measures or contractual obligations; the communication of data is mandatory for the establishment of the relationship and the provision of the service.

• INFORMATION ACTIVITIES RELATED TO SERVICES

Purpose: to receive by e-mail, on a sporadic basis, including through the newsletter, information and communications related to the services provided.

Legal basis: the processing is based on the legitimate interest of the Data Controller, balanced against the interests or fundamental rights and freedoms of the data subject. The user, at the time of data collection and on the occasion of each communication sent for the purposes described in this paragraph, is informed of the possibility to object at any time to the processing, in a simple and easy way.

COMMUNICATION AND RECIPIENTS OF PERSONAL DATA

The communication of data is a contractual obligation and, as a requirement of the contract, is necessary for its conclusion and for the consequent provision of the requested services; therefore, the lack, partial or incorrect provision of data will not allow the establishment of the contractual relationship, with the consequent impossibility of providing the service.

The Data will not be disseminated, but may be communicated to third parties exclusively for the purposes related to the professional mandate conferred and who perform technical or organizational tasks on behalf of the Data Controller, functional to the provision of the requested services.

The subjects who process data on behalf of the Data Controller have been authorised as external Data Processors pursuant to Article 28 of EU Regulation 679/2016, through a written act.

DATA RETENTION PERIOD AND CRITERIA USED FOR ITS DETERMINATION

Users’ personal data will be stored in accordance with current legislation, for a period not exceeding that necessary for the purposes for which they were collected and processed. In compliance with the principles of proportionality, minimization, and necessity, personal data will be stored in a form that allows the identification of data subjects for a period not exceeding the achievement of the purposes for which they are processed, considering: the need to continue to store the collected personal data to offer the agreed services with the Data Subject or to protect the legitimate interest of the Data Controller, as described in the purposes indicated above and the existence of specific regulatory or contractual obligations that make it necessary to process and store the data for certain periods of time.

RIGHTS OF THE DATA SUBJECT AND THE RIGHT TO LODGE A COMPLAINT WITH THE SUPERVISORY AUTHORITY

The Data Subject may, at any time, by sending a communication to the Data Controller at the references listed above, exercise the right:

• to access the personal data;
• to withdraw consent;
• to rectify personal data;
• to erase (so-called right to be forgotten) personal data;
• to restrict the processing of personal data;
• to object to the processing of personal data;
• to data portability;
• to lodge a complaint with the Guarantor for the Protection of Personal Data and/or another Guarantor Authority, if he believes that his rights have been violated by the Data Controller and/or a third party.

METHODS AND PLACE OF PERSONAL DATA PROCESSING

Personal data are processed with paper and electronic tools, recorded and stored on databases with specific security measures aimed at preventing data loss, illicit or incorrect use, and unauthorized access.
The personal data provided by the data subjects may be processed at the offices, by their own personnel, responsible for the management of the website and by subjects authorised as Data Processors.
Where necessary, additional data may be requested, necessary for the provision of additional requested services.
Processing for "service information" purposes will take place through the use of remote communication techniques, such as email.

FINAL INFORMATION

The User agrees to receive invitation emails to leave a review on Trusted Shops and/or Trustpilot following a purchase, a quote request, the completion of the Best Price Guarantee form, or the use of communication channels such as email, WhatsApp, Tawk.To, and phone, in order to provide feedback on their shopping experience and/or the product purchased. CASA39 reserves the right to partially or completely modify the Privacy Policy or simply update its content (e.g., following changes to applicable legislation). The Data Controller will publish any updates on this website; therefore, we invite you to periodically check the information in order to be aware of your rights.