SANDRITA SRL PRIVACY POLICY

PURSUANT TO ARTICLES 13 AND 14 - EU REGULATION 2016/679 (GDPR)

UPDATED TO THE COOKIE GUIDELINES OF THE GUARANTOR 10/06/2021

This Privacy Policy describes how your personal information is collected, used, and disclosed when you visit or make a purchase on SITE NAME.

Data Controller and Data Processor

Sandrita srl, Via Cremona 42/A, 26013 Crema (CR), VAT number IT01759310194, sandritasrl@pec.it

Consent of the interested party

When you visit the Site, we automatically collect certain information from your device, including browser data, IP address, time zone, and data from certain cookies installed on your device. Additionally, as you browse the Site, we collect specific information about the web pages and products you view, the websites or search terms that referred you to the Site, and information about how you interact with the Site. Additionally, when you make a purchase or attempt to make a purchase through the Site, we collect certain information about you, including your first and last name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number. Collecting this information is necessary for shipping and customer service. We collect Device Information using the following technologies:

- "Cookies" are data files that are placed on your device or computer, and often include an anonymous unique identifier. For more information about cookies and how to disable them, visit http://www.allaboutcookies.org.

- “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.

Types of Data collected

Among the Personal Data collected, independently or through third parties, are: Cookies, Usage Data, email address, and various types of personal data mentioned above. Other Personal Data collected may be indicated in other sections of this privacy policy or through informational texts displayed contextually with the collection of the Data. Personal Data may be provided voluntarily by the User or collected automatically while browsing the Site. Any use of Cookies - or other tracking tools - by this Site or by the owners of third-party services used by this Site, unless otherwise specified, is intended to identify the User and record their preferences for purposes strictly related to providing the service requested by the User.

Failure by the User to provide certain Personal Data may prevent the provision of the service. The User assumes responsibility for the Personal Data of third parties published or shared through this Application and guarantees that he or she has the right to communicate or disseminate such data, thereby releasing the Data Controller from any liability to third parties.

Method and place of processing of the collected data

Processing methods: The Data Controller processes Users' Personal Data pursuant to EU Regulation 679/2016 (GDPR – General Data Protection Regulation) by adopting appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data. Processing is carried out using computerized and/or electronic means, following organizational methods and procedures strictly related to the purposes indicated. In addition to the Data Controller, in some cases, categories of persons involved in the organization of the site (administrative, commercial, marketing, legal, system administrators) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communications agencies) may have access to the Data, also appointed, if necessary, as Data Processors by the Data Controller. The updated list of Data Processors may be requested from the Data Controller at any time by email at supporto@sandrita.com.

Location: The data is processed at the Data Controller's operating offices and in any other locations where the parties involved in the processing are located. For further information, contact the Data Controller.

Time: The data is processed for the time necessary to perform the service requested by the User, or required by the purposes described in this document, and the User can always request the interruption of the Processing or the deletion of the Data by sending an email to supporto@sandrita.com.

Purpose of Processing Collected Data

User Data is collected to allow the Owner to provide its services, as well as for the following purposes: Statistics, Interaction with social networks and external platforms, and Contacting the User. The types of Personal Data used for each purpose are indicated in the specific sections of this document.

Details on the processing of personal data

By filling out the contact form with their Data, the User consents to their use to respond to requests for information, quotes, or any other kind indicated by the form header.

Personal Data collected: email address and various types of Data.

Interaction with social networks and external platforms: This type of service allows interaction with social networks or other external platforms directly from the pages of this Application. The interactions and information acquired by this Application are subject to the User's privacy settings for each social network. If a social network interaction service is installed, it may collect traffic data relating to the pages on which it is installed, even if Users do not use it.

Facebook Like button and social widgets (Facebook, Inc.): the “Like” button and Facebook social widgets are services of interaction with the Facebook social network, provided by Facebook, Inc. Personal Data collected: Cookies and Usage Data. Place of processing: USA – Privacy Policy.

Statistics and Behavioral Advertising

The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to track User behavior.

Google Analytics (Google Inc.) is a web analytics service provided by Google Inc. (“Google”). Google uses the Personal Data collected to track and examine the use of this Application, compile reports, and share them with other Google services. Google may use the Personal Data to contextualize and personalize the ads of its own advertising network. Personal Data collected: Cookies and Usage Data. Place of processing: USA – Privacy Policy – ​​Opt Out.

Further information on treatment

Defense in court: The User's Personal Data may be used by the Data Controller to defend itself in court or in the preparatory stages leading to possible legal action against improper use of the same or related services by the User. The User declares to be aware that the Data Controller may be required to disclose the Data at the request of public authorities.

Specific information: upon request of the User, in addition to the information contained in this privacy policy, the Application may provide the User with additional and contextual information regarding specific services, or the collection and processing of Personal Data.

Information not contained in this policy

Further information regarding the processing of Personal Data may be requested at any time from the Data Controller using the contact information.

Exercise of rights by Users: The subjects to whom the Personal Data refers have the right at any time to obtain confirmation of the existence or otherwise of their Personal Data from the Data Controller, to know its content and origin, to verify its accuracy or request its integration, deletion, updating, rectification, portability, transformation into anonymous format, or blocking of Personal Data processed in violation of the law, as well as to object in any case, for legitimate reasons, to their processing. Requests should be addressed to the Data Controller.

To find out whether any third-party services used support them, the User is invited to consult their respective privacy policies.

Changes to this privacy policy

The Data Controller reserves the right to make changes to this privacy policy at any time by giving notice to Users on this page. Therefore, please check this page often, referring to the date of the last modification indicated at the bottom. If you do not accept the changes made to this privacy policy, you must stop using the application and can request that the Data Controller remove your Personal Data. Unless otherwise specified, the previous privacy policy will continue to apply to Personal Data collected up to that point.

Information about this privacy policy

The Data Controller is responsible for this privacy policy, which was drafted by the Data Controller and stored on its servers.

Personal Data (or Data): Personal data means any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

Usage Data : information collected automatically by the application (or by third-party applications used by the application), including: IP addresses or domain names of the computers used by the User who connects to the application, URI (Uniform Resource Identifier) ​​addresses, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal connotations of the visit (for example, the time spent on each page) and details relating to the path followed within the application, with particular reference to the sequence of pages visited, the parameters relating to the operating system and the IT environment of the User.

User : the individual who uses the application, who must coincide with or be authorized by the Data Subject and whose Personal Data is being processed.

Data subject : the natural person to whom the personal data refers.

Data Processor (or Controller): the natural or legal person, public authority, agency, or other body which processes personal data on behalf of the data controller, as set out in this privacy policy.

Data Controller (or Owner): The natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. The Data Controller, unless otherwise specified, is the owner of the application.

This Application : the hardware or software tool by which the Personal Data of Users is collected.

Cookie : small piece of data stored within the User's device.

Sharing Personal Data

We guarantee that all personal data is processed in accordance with this privacy statement and the General Data Protection Regulation (GDPR). As part of our e-commerce business, some of your personal data may be transferred to:

Subcontractors and/or Partner Companies : As part of our business, we use subcontractors to whom we transmit your data to carry out the operations entrusted to them: logistics subcontractors (order preparation, transportation, etc.), subcontractors responsible for customer relations (telephone platform, chat, product reviews, surveys, etc.), after-sales subcontractors (returns management, etc.), marketing subcontractors (profiling operations, competition management, advertising agencies, etc.).

Public authorities: The Data Controller may be required to disclose your personal data to third parties upon request from a judicial authority or any other administrative authority authorized by law.

Use of data for marketing purposes: The purpose of creating a customer database and processing your personal data is to inform you about services, products, and initiatives that may be of interest to you. By implementing marketing initiatives in compliance with applicable regulations, we aim to improve your user experience on our website and provide the most relevant products and services.

Your rights

Pursuant to European Regulation 679/2016 (GDPR), the User may, in accordance with the procedures and within the limits established by current legislation, exercise the following rights:
- object, in whole or in part, for legitimate reasons, to the processing of personal data concerning him or her for the purposes of sending advertising or direct sales materials or for carrying out market research or commercial communications;
- request confirmation of the existence of personal data concerning him or her (right of access);
- know its origin;
- receive intelligible communication about it;
- have information about the logic, methods and purposes of the processing;
- request the updating, rectification, integration, deletion, transformation into anonymous form, or blocking of data processed in violation of the law, including data no longer necessary for the purposes for which it was collected;
- in cases of consent-based processing, receive, at the sole cost of any media, your data provided to the data controller, in a structured and machine-readable format and in a format commonly used by an electronic device;
- the right to lodge a complaint with the Supervisory Authority (Garante Privacy) established by the Privacy Act (Law No. 675 of 31 December 1996), implementing EU Directive 95/46/EC. It is currently governed by the Personal Data Protection Code (Legislative Decree No. 196 of 30 June 2003). Its headquarters are at Piazza di Monte Citorio No. 121 in Rome.

Having read the information and the form for obtaining the interested party's consent

The undersigned interested party, having acquired the information provided by the data controller pursuant to Articles 13-14 and the GDPR, confirms having read this privacy policy, for the purposes essential to providing the service, and to allow SANDRITA SRL to correctly manage and process the data. This privacy policy is also referred to in light of the data controller used by SANDRITA SRL to manage the website www.sandrita.com.

Consent

As evidence of your explicit and unequivocal consent, we will record the time, date, IP address, and email address. Please remember that you may exercise your rights (listed above) at any time using the link at the bottom of the communications you receive, or through the contact channels.

Legal references

This information is provided pursuant to Article 13, paragraph 1 and 14 of EU Regulation 679/2016 (GDPR – General Data Protection Regulation).

Notice to European Users: This privacy policy has been prepared in fulfillment of the obligations set forth in Art. 10 of Directive 95/46/EC, as well as the provisions of Directive 2002/58/EC, as updated by Directive 2009/136/EC, regarding Cookies. This privacy policy applies exclusively to this Application.

This information is updated as of 07/22/2022

^

EXTENDED INFORMATION ON THE USE OF COOKIES

 

This is the extended information on the use of cookies pursuant to the provision of the Privacy Guarantor n. 229/2014, updated to the Guarantor's Guidelines 10/06/2021 for those who interact with the services

The owner and data controller of the site is SANDRITA SRL

For all third-party services over which we have no direct control, please refer to their privacy and cookie policies, which you can find linked in the various sections of this cookie policy. This cookie policy also refers to our privacy policy. If you have any questions or want a complete overview, please read that as well.

Definition

Cookies are generally small text files that some services use to save and store certain browsing data. For example, cookies can be used to save the products in your cart while you shop online or to keep you logged in to a website even if you close it and return later. Cookies are stored on the browser you're using at that moment, so they relate to that specific browser, not the person using it at that time. If you'd like to learn more about cookies, you can watch this short video produced by the Italian Data Protection Authority.

Types of cookies

Based on their characteristics and use, cookies can be divided into different categories:

Strictly necessary cookies. These cookies are essential for managing logins and access to the site's restricted functions, typically for web page updates by editorial staff. The duration of these cookies is strictly limited to the duration of the session (they are deleted once the browser is closed). Disabling them compromises the use of services accessible via login. The public sections of the sites, however, remain usable as normal.

Technical cookies (analytics and performance). These cookies are used to anonymously collect and analyze site traffic and usage. These cookies, even without identifying the user, allow us, for example, to detect whether the same user returns to the site at different times. They also allow us to monitor the system and improve its performance and usability. Disabling these cookies can be done without any loss of functionality.

Profiling cookies. These are permanent cookies used to identify (anonymously or otherwise) user preferences and improve their browsing experience.

The User can provide consent in "granular" mode through the appropriate banner on the site, with the warning that closing the banner without choosing a preference will only install technical cookies.

Duration of cookies

Some cookies (session cookies) remain active only until the browser is closed or the user logs out. Other cookies "survive" the browser closure and are available during subsequent visits by the user. These cookies are called persistent cookies, and their duration is set by the server when they are created. When browsing the site's pages, you may interact with sites managed by third parties that may create or modify persistent and profiling cookies. The retention period for each individual cookie is visible in the "cookie list" table. 

Cookie management

Users can decide whether or not to accept cookies using their browser settings. Disabling cookies completely or partially may compromise the use of the site's features, but will not prevent navigation. Settings can be customized for different websites and web applications. Below are web resources that illustrate how to proceed for each of the major browsers: Chrome , Firefox , Internet Explorer , Opera , Safari , andEdge .

 

Disabling cookies via browser

The user can refuse the use of cookies and can revoke consent already given at any time. Since cookies are linked to the browser used, they can be disabled directly from the browser, thus refusing/revoking consent to the use of cookies, or via the banner at the bottom of the page (Cookie Settings).

Privacy Policy Updates

This information is updated as of 07/22/2022