MARKETING-NEWSLETTER

Privacy Policy - Marketing / Newsletter Section

(version 1.0 of April 24th 2018)

Dear Visitor

This website http://www.centrufficiostore.it/en is owned by the company Centrufficio Loreto spa - registered office in Viale Andrea Doria 17 - 20124 (MI, Italy) and operational headquarters in Via Doria, 19 - 20093 Cologno Monzese (MI, Italy) P.IVA 00902270966 - CF 08312370151 owner of the website www.centrufficiostore.it/. As data controller of the personal data of users of the Website, we provide you with the following privacy policy, in compliance with art. 13 of D.Lgs. 196/2003 (hereinafter referred to as the "Privacy Code") and in compliance with art. 13 of the EU Regulation 2016/679 of April 27th 2016 (hereinafter referred to as the "Regulation". The Regulation and the Privacy Code are globally defined as "Applicable Regulations").

This Website and any services offered through the Website are reserved for individuals who are eighteen years or over. The Data Controller does not collect personal data relating to persons under 18 years of age. At the request of Users, the Data Controller will promptly delete all personal data involuntarily collected and related to subjects under 18 years of age.

The Data Controller takes maximum account of the right to privacy and the protection of its Users' personal data. For any information on this privacy policy, Users can contact the Data Controller at any time, using the following methods:
 • via registered mail with return receipt  to Via Doria, 19 - 20093 Cologno Monzese (MI, Italy)
 • via email to privacy@centrufficio.it

The Data Controller has not appointed a Data Protection Officer (DPO), as it is not obliged to appoint it, pursuant to art. 37 of the Regulation.

1. Purposes of processing
Users' personal data will be processed lawfully by the Data Controller pursuant to art. 6 of the Regulation for the following purposes:

a) contractual obligations and service provision, or to fulfill the User's request to receive promotional communications and e-mail newsletters (for advertising material, direct sales, commercial communications, newsletters containing relevant news on the Data Controller's activities) or to be contacted by the Data Controller by mail, e-mail, telephone (fixed and / or mobile, through the use of automated calling systems with and / or without human intervention), to receive proposals relating to the purchase of products
and / or services, offers, promotions and commercial opportunities offered by the Data Controller and / or by third-party companies. The User's data collected by the Data Controller for this purpose include: name, surname, company, address, e-mail address, telephone number, as well as all the User's personal information provided voluntarily. Without prejudice to the other provisions contained within this Privacy Policy, the Data Controller will not make Users' personal data accessible to other Users and/or third parties under any circumstances;

b) administrative/accounting purposes, i.e. organizational, administrative, financial and accounting activities, such as internal organizational activities and functional activities related to the fulfillment of contractual and pre-contractual obligations;

c) legal obligations, i.e. to fulfill obligations according to law, to an authority, to a regulation or to the European legislation.

The personal data necessary to fulfill the purposes described in paragraph 1 are indicated with an asterisk in the dedicated registration form on the Website.

The provision of personal data for the processing purposes indicated above is optional but necessary, as failure to provide it will make it impossible for the User to receive promotional communications or e-mail newsletters, as well as to be contacted to receive proposals relating to the purchase of products and / or services, offers, promotions and commercial opportunities offered by the Data Controller and / or by third-party companies.

The User may at any time revoke his consent, making a request to the Data Controller as indicated in paragraph 4.

The User may also easily oppose the sending of further promotional material via e-mail by clicking on the link available within each promotional e-mail, enabling the user to revoke its consent. Once the consent has been revoked, the Data Controller will send an e-mail to the User to confirm the procedure has been successful. If you intend to revoke your consent to promotional communications via telephone, but you still want to receive promotional communications via e-mail, or vice versa, please send a request to the Data Controller as indicated in paragraph 4.

The Data Controller declares that, following the exercise of the right to object to receiving promotional communications and newsletters by e-mail, it is possible that, for technical and operational reasons (e.g. compilation of contact lists already completed shortly before the Data Controller's receipt of the objection) the Users continue to receive some additional promotional messages and newsletter. Should the User continue to receive promotional messages and newsletter 24 hours after exercising the right to object, please report the problem to the Data Controller, using the contacts indicated in paragraph 4.

2. Processing methods and data storage
The Data Controller will process Users' personal data automatically and manually, as strictly necessary to fulfill their purposes, always guaranteeing maximum security and confidentiality.

The personal data of the Website Users will be kept for the time strictly necessary to carry out the primary purposes described above in paragraph 1, or in any case - pursuant to Civil Law - as necessary for the protection of the interests of both the Users and the Data Controller. The data will be kept for no more than twenty-four (24) months.

3. Data communication and dissemination
The personal data of the Users may be disclosed to the employees and/or collaborators of the Data Controller in charge of managing the Website and the Users' requests. These subjects, who are formally appointed by the Data Controller as "data processors", will process the User's data exclusively for the purposes indicated in this policy and in compliance with the provisions of the Applicable Law.

The personal data of Users may also be disclosed to third parties operating as External Data Processors handling the personal data on behalf of the Data Controller, such as IT and logistic service providers necessary to run the Website, outsourcing or cloud computing service providers, professionals and consultants.

Users have the right to obtain a list of any data processors appointed by the Data Controller by request to the Data Controller as indicated in paragraph 4.

4. Rights of the Interested Users
Users may exercise the rights guaranteed by the Applicable Law by contacting the Data Controller as follows:
• via registered mail with return receipt to Via Doria, 19 - 20093 Cologno Monzese (Mi)
• via email to privacy@centrufficio.it

Pursuant to the Applicable Regulations, the Data Controller notifies that Users have the right to obtain an indication of (i) the origin of personal data; (ii) the purposes and methods of the processing; (iii) the logic applied in the event of processing carried out with the aid of electronic instruments; (iv) the identification details of the data controller and processors; (v) the subjects or categories of subjects to whom the personal data may be communicated, or who may come to know it as managers or persons in charge of the processing.

Moreover, Users have the right to obtain:
a) access, updates, corrections or - if interested - additions to the data;
b) the deletion, transformation into anonymous form or blocking of data which have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;
c) certification that the operations under a) and b) have been made known, including their content, to those to whom the data has been communicated or distributed, except in the event of such compliance proving impossible or leading to the use of manifestly disproportionate means in respect of the right protected.

Moreover, Users have:
a) the right to revoke consent at any time, if the processing is based on their consent;
b) the right to data portability (the right to receive all personal data concerning them in a structured format, commonly used and readable by an automatic device), the right to limit the processing of personal data and the right to cancellation (" right to be forgotten ");
c) the right to object:
i) in whole or in part, for legitimate reasons, to the processing of personal data concerning them, even if pertinent to the purpose of collection;
ii) in whole or in part, to the processing of personal data concerning them for the purpose of sending advertising material, performing direct sales or carrying out market research or commercial communications;
iii) if personal data is processed for direct marketing purposes, at any time, to the processing of their data for this purpose, including profiling connected to such direct marketing purposes.
d) if they consider that the terms violate the Regulation, the right to lodge a complaint with a Control Authority (in the Member State in which they live, in the one in which they work or in the one in which the alleged violation occurred ). The Italian supervisory authority is the Italian Personal Data Protection Authority with offices in Piazza di Monte Citorio no. 121, 00186 - Rome (http://www.garanteprivacy.it/).

The Controller is not responsible for updating all links that can be viewed in this Policy, therefore whenever a link is not functional and/or current, Users acknowledge and accept that they must always refer to the document and/or section of the websites referred to by the link.