Privacy Policy of Cardinalno S.r.l.
The purpose of this Privacy Policy (the “Policy“) is to describe how Cardinalno S.r.l., an Italian company with registered office Via Disciplini 5, 20123, Milan, Italy processes personal information about its clients and prospects in order to provide you with the best possible service.
Cardinalno S.r.l. as described in this Policy (hereinafter: “We”, “Our”, or “Us”) collects, stores, processes, uses and discloses personal information about you in connection with your use of cardinalmilano.com web site, your use of our connected products, or when you visit our social media pages, in your jurisdiction, in compliance with current regulations (Article 13 of Legislative Decree 196/2003).
Owner and Data Controller
Cardinalno S.r.l.
Via Edoardo Jenner 31 , 20159, Milano, Italia
P. IVA: IT 08742650966
Camera di Commercio di Milano
Capitale Sociale Versato: €10.000,00
Owner contact email: info@cardinalmilano.com
Types of Data collected
For the purposes described in this Policy, Cardinalno S.r.l. may collect the following categories of personal information:
- Identification and Contact information (such as name, address, phone number or e-mail address), when you are willing to provide them for instance to sign up for an online account or, to make a purchase, or ID information necessary for various countries delivery (ex. China).
- Payment information: for instance credit card details, bank account numbers, paypal account details or other payment details which you must provide to receive products or services you have ordered from us
- Demographic information like your gender and birthday.
- Information you submit or post in a public space, on our social media pages or our websites, for example for a product review.
- Information about your purchases online. This could include the products you purchased and their prices.
- If you use our web site, we may collect information about the browser you are using, and your browsing behaviour.
- We may also collect information posted on third party websites or social media platforms about Cardinalno S.r.l. products and services, when necessary for the purposes defined hereunder.
Your personal information is collected either directly from you (for instance, if you create an account on cardinalmilano.com or make a purchase or otherwise interact with our Customer Service), or from you passively (for example, when using tracking tools like browser cookies), or from third parties (for instance, through social media platforms).
If you choose not to submit any personal information when requested to perform a contract or when required by law, you will not be able to receive the product or service you ordered or otherwise register on our web site.
Cardinalno S.r.l. guarantees clinets that personal data collected will be reserved for use strictly connected to rendering of services, facilitation of site management and processing of orders.
Personal data will be processed by automated tools only for the time strictly necessary to complete the tasks for which it has been collected, or subsequently processed, in accordance with the provisions of article 11, letter e) of the Privacy Code. Cardinalno S.r.l. takes all appropriate preventive security measures set out by the Privacy Code in order to avoid the risk of destruction or loss of data, unauthorized access or use that is illicit or non-compliant with the purpose of its collection.
However, Cardinalno S.r.l. cannot guarantee that the measures taken for the safety of the website, data transmission and information on the website, limit or exclude any risk of unauthorized access or dispersion of data by devices pertaining to the User. For this reason, Users are advised to make sure their computer is equipped with appropriate software to protect the network transmission of data (such as updated antivirus) and that their Internet service provider has taken appropriate measures in securing network data transmission.
Users may, at any time, exercise the rights stated by article 7 of the Privacy Code in order to obtain confirmation of the existence or not of their personal data and to ascertain their content and origin, check accuracy or ask for the data to be integrated, updated or corrected. Under the same Privacy Code, Users may also request that their data be deleted, converted into an anonymous form or blocked from any data processing in violation of the law, as well as refuse processing, in any case, for legitimate reasons. Requests should be sent to the Data Controller, Cardinalno S.r.l. at the following email: info@cardinalmilano.com . Through this email the User may request an updated list of all the Data Processors appointed by the Data Controller.
The request for the above information can be resubmitted every 90 days, except in cases where there is good cause: cancellation or modification of data in case of violation of the law; cancellation of data that are not used for the aims for which they were collected.
Mode and place of processing the Data
We use the Data described above for the purposes specified at the time of collection or hereafter in this Policy:
- to improve our understanding of your interests and concerns, and to improve our understanding of your use of our products: we may use your Data to make our website, products and service better. We may use your Data to customize your experience with Us and to tailor our marketing activities to fit your needs and interests as we believe that it is also in our legitimate interest to better serve you and respond to your needs.
- to provide you with our connected services, to process your order, respond to your requests or questions, and manage your complaints: for instance, we use your Data to process your order and deliver your products. Or, we may use your Data to send you information you requested, or to communicate with you about your account or our relationship: we may contact you about changes to the Site or about service updates. We may also contact you about feedback or about this Policy or website terms. In such case, your Data is processed to perform the contract we have with you.
- for security purposes: we may use Data to protect Our company, Our customers, and Our website against fraud, theft or any wrongdoing which may affect our activity as it is our legitimate interest to ensure the security of our activity online and offline.
- for marketing purposes: we may use your Data to contact you, subject to your consent when applicable, about new products and special offers we think you will find valuable.
- for analytics purposes, we may use your Data to analyse Our products and to measure the effectiveness of our online or offline campaigns to omptimize marketing campaigns.
- other purposes: we use Data to maintain transaction and other business records for legal, administrative and audit purposes. We also use Data to meet legal, insurance and processing requirements.
The data processing is carried out using computers and/or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated above. In addition to Cardinalno S.r.l., in some cases, the data may be accessible to certain types of persons in charge, involved with the operation of cardinalmilano.com (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by Cardinalno S.r.l. The updated list of these parties may be requested from Cardinalno S.r.l. at any time.
Legal basis of processing
We may process your personal Data relating to Users if one of the following applies:
- processing is necessary for compliance with a legal obligation to which Cardinalno S.r.l. is subject;
- processing is related to a task that is carried out in the public interest or in the exercise of official authority vested in Cardinalno S.r.l.;
- processing is necessary for the purposes of the legitimate interests pursued by Cardinalno S.r.l. or by a third party.
In any case, We will help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.
Place
Your persona data is processed at our operating offices and in any other places where the parties involved in the processing are located.
Depending on your location, data transfers may involve transferring the your Data to a country other than their own. To find out more about the place of processing of such transferred Data, you can check the section containing details about the processing of Personal Data.
You are also entitled to learn about the legal basis of Data transfers to a country outside the European Union or to any international organization governed by public international law or set up by two or more countries, such as the UN, and about the security measures taken by Cardinalno S.r.l. to safeguard our Data.
If any such transfer takes place, you can find out more by checking the relevant sections of this document or inquire with Cardinalno S.r.l. using the information provided in the contact section.
Retention time
Your personal data will not be kept in a form that allows you to be identified for any longer than is reasonably considered necessary by Cardinalno S.r.l. for achieving the purposes for which it was collected or processed or as it is established in the applicable laws related to data retention periods. The data retention term of Your personal data collected by Us is determined per purpose of data processing according to the following criteria:
- Personal data collected for purposes related to the performance of a contract between the Us and You shall be retained until such contract has been fully performed.
- Your personal data will then be archived to be used: in the event of a litigation or dispute for the statute of limitation term applicable to the related purpose;
- If a judicial action is initiated, the personal data may be stored until the end of such action, including any potential periods for appeal, and will then be deleted or archived as permitted by applicable law;
Once the retention period expires, Personal Data shall be deleted. Therefore, the right to access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after expiration of the retention period.
Facebook permissions asked by Cardinalno S.r.l.
Cardinalno S.r.l. may ask for some Facebook permissions allowing it to perform actions with the User’s Facebook account and to retrieve information, including Personal Data, from it. This service allows Cardinalno S.r.l. to connect with the User’s account on the Facebook social network, provided by Facebook Inc.
For more information about the following permissions, refer to the Facebook permissions documentation and to the Facebook privacy policy.
The permissions asked are the following:
Basic information
By default, this includes certain User’s Data such as id, name, picture, gender, and their location. Certain connections of the User, such as the Friends, are also available. If the User has made more of their Data public, more information will be available.
Contact email
Access the user’s contact email address.
Detailed information on the processing of Personal Data
Personal Data is collected for the following purposes and using the following services:
Further information about Personal Data
The rights of Users
You may request access to the personal information we maintain about you. If you request such access, we will provide you with all the information as required by law on the purposes of the processing, categories of data processed, categories of recipients, data retention term, etc.).
You may also obtain a copy of any personal information that We hold about you in our records in a format compatible and structure to allow you to exercise your right to data portability when the processing is based on your consent or on the performance of an Agreement between you and Us.
You can also provide general or specific instructions on how your personal data should be processed and may be used, after your death.
You may also request that We correct, amend, erase, any information which is incomplete, out of date or inaccurate.
You can request the deletion of your Personal information (i) if your personal information is no longer necessary for the purpose of the data processing, (ii) you have withdrawn your consent on the data processing based exclusively on such consent, (iii) you objected to the data processing, (iv) the personal information processing is unlawful, (v) the personal information must be erased to comply with a legal obligation applicable to Cardinalno S.r.l.
You can request the restriction of the processing (i) in the event the accuracy of your personal information is contested to allow Cardinalno S.r.l. to check such accuracy, (ii) if you wish to restrict your personal information rather than deleting it despite the fact that the processing is unlawful, (iii) if you wish Cardianlno S.r.l. to keep your personal information because you need it for your defence in the context of legal claims (iv) if you have objected to the processing but Cardinalno S.r.l. conducts verification to check whether it has legitimate grounds for such processing which may override your own rights.
You also have the right to lodge a complaint with the competent supervisory authority.
When your information processing is based on your consent (for instance when you accept to receive communication materials), You may withdraw any consent you previously provided to Us at any moment, without affecting the lawfulness of processing based on your consent before withdrawal.
When your information is processed to pursue our legitimate interests, you may object to such processing, if Our legitimate interest may be overridden by your interests and freedom.
To exercise these rights, please contact us at: info@cardinalmilano.com and we will respond.
Cookie Policy
Cardinalno uses Cookies. To learn more and for a detailed cookie notice, the User may consult the Cookie Policy.
How “Do Not Track” requests are handled
Cardinalno S.r.l. does not support “Do Not Track” requests.
To determine whether any of the third-party services it uses honor the “Do Not Track” requests, please read their privacy policies.
Changes to this privacy policy
The Owner reserves the right to make changes to this privacy policy at any time by giving notice to its Users on this page and possibly within Cardinalno S.r.l. and/or – as far as technically and legally feasible – sending a notice to Users via any contact information available to the Owner. It is strongly recommended to check this page often, referring to the date of the last modification listed at the bottom.
Should the changes affect processing activities performed on the basis of the User’s consent, the Owner shall collect new consent from the User, where required.
Latest update: September 27, 2018
