Welcome to our website: www.crisavi.com ( the Site ).
For CRISAVI Srl s (" Company ") your privacy and the security of your personal data are very important, so we collect and manage your personal data with the utmost care and take specific measures to keep them safe.
Following are the main information on the treatment by our company, your personal data in relation to your browsing of the site and the use of services offered. For detailed information on how the company handles your personal data, please read our Privacy Notice.
Who is the owner?
Below are the main information on the processing of your personal data made by CRISAVI Srls (hereinafter, "Company"), with registered office in 41012 Carpi (Mo) Via Aldo Moro Esterna, 58 P.iva 03736120365, as owner of the treatment .
For any clarification, question or requirement related to your privacy and to the processing of your personal data you can contact us at any time by sending a request to our Customer Service listed on the site and on the contact form or by writing to the address of our company.
What data do we process and why?
The personal data we process are those that you provide to us when you conclude an order and purchase goods, and those we collect as you browse or use the services offered on our site. We may therefore collect data about you such as personal details such as first and last name, shipping address and billing address, browsing data and your purchase habits.
Your personal data are processed for the following purposes:
- conclude and execute the purchase contract for goods offered on the website;
- provide services such as subscription to the newsletter;
- allow registration to the Site and use of services reserved for registered users;
- manage your requests forwarded to our Customer Service.
In the aforementioned cases, the processing of your personal data is legitimate as it is necessary to execute a contract with you or to provide you with the service that you have specifically requested.
We also conduct statistical surveys and analyzes with data in aggregate form to understand how users interact and use the site, to improve our offer and our services.
Only with your express consent, however, we process your personal data for:
- carry out commercial and promotional communication activities;
- customize the Site and the commercial offers according to your interests.
Who will treat your data?
Your personal data are processed by personnel duly instructed by our company, as Data Controller. For organizational and functional needs related to the provision of services on the website, moreover, your data could be processed by our suppliers. The latter have been evaluated and chosen for their proven reliability and competence. Some of these subjects may also be based in non-EU countries and, in these cases, the transfer of your personal data in these countries is carried out in compliance with the guarantees provided by law.
How long do we keep your data?
We keep your personal data for a limited period of time depending on the purpose for which they were collected, at the end of which your personal data will be deleted or otherwise rendered anonymous in an irreversible way. The retention period is different depending on the purpose of the processing: for example, the data collected during the purchase of goods on the site are processed until the conclusion of all administrative and accounting formalities are therefore stored in accordance with local tax legislation (ten years), those used to send you our newsletter until you ask us to stop sending.
What are your rights?
At any time, depending on the specific treatment, you can: withdraw consent to the processing, know what are your personal data in our possession, their origin and how they are used, request the update, correction or integration as well, in the cases provided for by the current provisions, the cancellation, the limitation of treatment or oppose their treatment. If you wish, you can request to receive personal data in our possession that concern you in a format readable by electronic devices and where technically possible, we can transfer your data directly to a third party indicated by you.
If you believe that the processing of your personal data has been carried out illegitimately, you can file a complaint with one of the supervisory authorities responsible for compliance with the rules on personal data protection. In Italy, the complaint can be presented to the Guarantor for the Protection of Personal Data ( http://www.garanteprivacy.it/ ).
This information may undergo changes and additions over time, so we invite you to periodically check the contents. Where possible, we will try to inform you promptly of any changes made.
1. Who is the data controller?
CRISAVI Srls (hereinafter, "Company"), with registered office in 41012 Carpi (Mo) Via Aldo Moro Esterna, 58 P.iva 03736120365 is the Data Controller, ie the subject who decides how and why to process your personal data.
You can always contact us by sending a request to our Customer Service listed on the site and on the contact form or by writing to the address of our company headquarters
2. What personal data do we collect?
The categories of personal data that we collect and process when you browse or shop on the site are as follows:
a) we collect the personal data necessary to conclude and execute your purchase on the site such as name and surname, e-mail address, shipping address, billing address, telephone and payment details;
b) we collect your e-mail address when you sign up for our newsletter service;
c) we process the personal data you provide us when you contact our Customer Service to provide the assistance requested;
d) upon your consent, we collect and use your personal data for marketing purposes;
e) for the registration of your account, we collect your name and surname, your e-mail address, password and your date of birth. If you are a registered user, we collect information about your access to the reserved area of the Site. With your consent, through the analysis of your personal data we can process information regarding your interests and preferences with respect to our products and services, order to present you proposals and offers in line with your tastes. In case of authentication to the account through external social networks, we collect from these third parties the data necessary for registration / authentication through Facebook and through Google. We collect information about you also from third parties and, in particular, from Facebook and Google+. This information includes the following data categories: e-mail address.
f) we collect information about your browsing on the site, such as the pages you visit and how you interact with the single page and save this information on our servers.
We inform you that our company does not process personal data relating to minors. If you access our site and use the services offered by us, you declare that you have reached the age of majority.
3. How do we use personal data collected?
Our company collects and processes your personal data for the following purposes:
a) conclude and execute the purchase contract for the products offered on the site. When you complete your purchase, we ask you for the personal data necessary for the execution of the contract, such as payment, anti-fraud checks if you choose to pay by credit or debit card, billing, shipping of the product and possible management of the made.
b) registration on the Site and use of the services offered to registered users. Registration on the Site is possible through the inclusion of some personal information, necessary to ensure your identification and the performance of services offered to registered users.
c) provision of services offered on the site. To this end, we need to collect, in relation to each service and its characteristics, the personal data necessary to perform the service requested by you.
d) management of requests to our Customer Service, which uses the personal data you provide to meet your requests for information and requests for assistance.
e) sending CVs. If you send us your CV to be considered for a job position, we will use the information in your CV for this purpose only. Your CV will be kept for a maximum period of six months, after which it will be deleted: if you want, you can of course send us a new updated version.
f) statistical analysis and surveys. We use some information about your use of the Site to perform statistical analysis and surveys in order to improve our offer and our services;
g) sending commercial and promotional communications following the purchase of one of our products, so-called soft spam. Following the purchase of one of our products on the Site, we will send you to the e-mail address that you provided us with communications containing our commercial proposals on products and related services.
h) subject to your express consent, we may use the contact details you have provided for commercial communications on our products and services, in order to update you on news, new arrivals, exclusive products, our offers and promotions.In addition, always with your consent, we will be able to use your contacts as part of market research and surveys for the detection of satisfaction in order to improve our services and the relationship with our users. These communications will only take place in the manner chosen by you (via e-mail or other means explicitly indicated by you).
i) only with your consent, we will be able to customize your experience as a registered user on the site, proposing anticipations and offers in line with your tastes and sending you commercial communications tailored to your interests, these communications will only take place in the manner chosen by you (via e-mail, SMS, telephone, paper mail, Whatsapp). The personalization will be done by analyzing your previous purchases and other information described in the previous paragraph "What personal data do we collect?". For more information on this data and on the activity that allows you to process it, please consult the section "Your profile".
If you wish to authorize the activities referred to in points h) and i) and subsequently do not wish to receive further communications or to limit the manner in which to be contacted, you may interrupt these communications at any time by simply clicking on the appropriate "unsubscribe" link at the bottom of the page. to each communication, by accessing your account, by contacting us by phone or by contacting our Customer Service and selecting "privacy" or by writing to the above address.
We inform you that you may receive further communications from us even after submitting your unsubscription request, as some submissions may have already been planned, our systems may take some time to process your request.
In relation to all the activities mentioned above, we will process your personal data mainly through IT and electronic tools; the tools we use guarantee high safety standards, in full compliance with current legislation.
4. Your profile
When creating your account we offer you the opportunity to use the following services:
• My orders: follow the shipment of your orders, change or return items that are not for you and see the history of your orders.
• Wish List: save the items you want most and keep an eye on their availability.
• My data: manage your registration data.
• My addresses: save or modify your addresses to have them always at hand and complete your purchases faster.
With your express consent, we will be able to tailor your experience and the contents of commercial communications and offers that you will see when you browse on the site as a registered user, based on your interests. This activity allows you to facilitate the search for products and services that are more for you and interest for you and at the same time allows you to improve our offer for you. Personalization is made possible by the analysis of your personal data in our possession, described in the previous paragraph "What personal data do we collect?". In particular, information on purchases you have made in the past and those relating to the sections of the site you visit most often or the services you use most often help us to understand what products and services you are most interested in.
To ensure that the information in our possession is correct and allow us to carry out the activities described above, we invite you to access the "My profile" section of your account on the site if you deem it necessary, to update them.
5. Legal basis of the processing
We treat your personal data only in the presence of one of the conditions provided for by current legislation, and specifically:
a) for the conclusion and execution of a contract of which you are a part.
When we process your data for the conclusion of the purchase contract of which you are a part we take care to use only the minimum information necessary for the execution of the same. This basis legitimizes the processing of personal data that takes place in the following activities:
- conclusion and execution of a purchase contract for the products offered on the site;
- registration on the Website and use of services reserved for registered users;
- provision of services offered on the site;
- management of your requests by our Customer Service.
The provision of your personal data for these activities is a contractual obligation. You are free to communicate your data or not, but in the absence of the requested data it will not be possible to conclude or execute the contract and your requests. This means that you will not be able to purchase the products and you will not be able to use our services and we will not be able to handle your requests;
b) to comply with a legal obligation.
In case of conclusion of a contract for the purchase of goods on the site, the processing of User data will take place to give effect to the legal obligations to which we are held in accordance with the tax provisions and other regulations to which we are subject. You are free to decide whether to conclude a contract and whether or not to disclose your data, but if you conclude your data will be necessary and will be processed to give effect to the aforementioned legal obligations to which we are required.
The processing of CVs spontaneously sent, carried out to evaluate candidates with respect to a possible job position at our company, is legitimate because it is expressly authorized by a law, which specifies that in this case the consent of the person to whom report personal data. You are free to tell us your CV or not, but failing that we will not be able to evaluate your candidacy for a job position;
c) for our legitimate interest.
Some of your personal data in case of purchase of products on the site by credit or debit card, may be processed to carry out anti-fraud activities: we have a legitimate interest in carrying out this activity to prevent and prosecute any fraudulent activity. For internal administrative purposes, data may be processed by companies belonging to the payment circuit.
d) based on your consent.
We will carry out the following treatments only if you have given us your express consent:
• carrying out marketing activities and opinion polls and market research;
• analysis of your browsing and consumption habits in the use of your profile, in order to personalize your experience on our site.
Providing your personal data for these activities is absolutely optional. You are free to provide us with your data for these purposes, but without it we will not be able to carry out marketing activities, opinion polls and market research, and analysis of your habits.
6. Who will treat your data?
Your personal data will be processed by the internal staff of our company, specifically trained and authorized to process.
Your personal data will also be transmitted to third parties that we use to provide our services; these subjects have been adequately selected and offer a guarantee of compliance with the rules on the processing of personal data. These subjects have been designated as responsible for the treatment and carry out their activities according to the instructions given by us and under our control.
The third parties in question belong to the following categories: banking operators, internet providers, companies specialized in IT and telematic services; couriers; companies that carry out marketing activities; companies specialized in market research and data processing.
Your data may be transmitted to the police and judicial and administrative authorities, in accordance with the law, for the detection and prosecution of crimes, the prevention and protection from threats to public security, to enable us to ascertain, exercise or defend a right in court, as well as for other reasons related to the protection of the rights and freedoms of others.
7. Extra-EU data transfer
Some of the third parties listed in the previous paragraph "Who will process your data?" May be located in countries outside the European Union that however offer an adequate level of data protection, as established by specific decisions of the European Commission ( http: / /www.garanteprivacy.it/home/provvedimenti-normativa/normativa/normativa-comunitaria-e-intenazionale/trasferimento-dei-dati-verso-paesi-terzi#1 ).
8. How long do we keep the data?
We keep your personal data for a limited period of time, different depending on the type of activity that involves the processing of your personal data.
After this period, your data will be permanently erased or otherwise rendered anonymous in an irreversible way.
Your personal data is stored in compliance with the terms and criteria specified below:
a) data collected to conclude and execute contracts for the purchase of goods on the site: until the conclusion of the administrative and accounting formalities. The billing data will be kept for ten years from the billing date;
b) data of the registered User: the data will be stored until you request cancellation of your profile;
c) data relating to the payment: up to the certification of the payment and the conclusion of the related administrative and accounting formalities resulting from the expiration of the right of withdrawal and the terms applied for the contestation of the payment;
d) data collected in the context of the use of services offered on the site: these data are retained until the termination of service or cancellation of the subscription to the service by the User;
e) data related to user requests to our Customer Service: the data useful to assist you will be kept until your request is met;
f) CV: for six months from receipt;
g) data used for commercial communication activities to users who purchase products on the site (soft spam): these data are retained until the termination of service or the exercise of the opposition by unsubscription by the user;
h) data provided for commercial communications activities, opinion polls and market research: up to the request by the user to interrupt the activity and in any case within 2 years from the last interaction of any kind of user.
i) data used to personalize the Website and to show customized commercial offers: as long as the user does not request the cessation of the activity and in any case within two years from the last interaction of any kind of user with us;
j) data used for carrying out market research and surveys for the detection of satisfaction: as long as the User does not request the cessation of the activity.
In any case, for technical reasons, the termination of the processing and the subsequent cancellation or irreversible anonymisation of the related personal data will be final within thirty days of the terms indicated above.
9. Your rights
At any time you can exercise the rights with reference to the specific processing of your personal data on our part. Find below their general description and how to practice them.
a) Access your data and modify it: you have the right to access your personal data and to request that they be correct, modified or integrated with other information. If you wish, we will provide you with a copy of your data in our possession.
b) Revoke your consent: you can revoke at any time a consent you have given for the processing of your personal data in relation to any activity for marketing purposes. In this regard, we remind you that marketing activities are considered the sending of commercial and promotional communications, the conduct of market research and surveys for the detection of satisfaction for the customization of the website and commercial offers according to your interests. . Once we receive your request, it will be our duty to cease promptly the processing of your personal data based on this consent, while different treatments or based on other conditions will continue to be carried out in full compliance with the provisions in force.
c) Opposition to the processing of your data: you have the right to object at any time to the processing of your personal data made on the basis of our legitimate interest, explaining the reasons that justify your request; before accepting it, we will have to evaluate the reasons for your request.
d) Delete your data: in the cases provided for by current legislation you can request the cancellation of your personal data. Received and examined your request, if legitimate it will be our care to cease timely treatment and delete your personal data.
e) Request that the processing of your personal data be temporarily limited: in this case we will continue to keep your personal data but will not process them, unless they have been subject to your different request and the exceptions established by law. You can get the limitation of treatment when you dispute the accuracy of your personal data, when the processing is illegal but you oppose the cancellation of your data, when your data do not need us anymore but you need to exercise your right in court and when you oppose your treatment, in the period in which we evaluate the reasons for your request.
f) Request your data or transfer it to a person other than our company ("right to data portability"). You can ask to receive your data that we process based on your consent or on the basis of a contract with you in a standard format. If you wish, where technically possible, we can on your request transfer your data directly to a third party you indicate
In order to exercise some of your rights described above you can access your account or alternatively you can contact us by writing to our Customer Service and selecting "privacy", or by writing to the address of the data controller above.
To ensure that our users' data are not infringed or illegitimate by third parties, we will ask you for some information before your request to exercise one of the rights indicated to ensure your identity.
10. Security measures
We protect your personal data with specific technical and organizational security measures, aimed at preventing your personal data from being used illegitimately or fraudulently. In particular, we use security measures that guarantee: the pseudonymisation or the encryption of your data; the confidentiality, integrity, availability of your data as well as the resilience of the systems and services that process them; the ability to restore data in the event of a data breach. In addition we are committed to test, verify and regularly evaluate the effectiveness of technical and organizational measures in order to guarantee continuous improvement in the safety of treatments.
If you believe that the processing of your personal data has been carried out unlawfully, you can file a complaint with one of the competent control authorities for compliance with the rules on personal data protection.
In Italy, the complaint can be presented to the Guarantor for the Protection of Personal Data.
More information on the methods of presentation are available on the website of the Guarantor, at http://www.garanteprivacy.it .
12. Changes to this information
We invite you, therefore, to periodically check the contents: where possible, we will try to inform you promptly about the changes made and their consequences
The updated version of the privacy information, in any case, will be published on this page, with indication of the date of its last update.
13. Legislative references and useful links
The processing of your personal data is carried out by our company in full compliance with the regulations on the subject provided for by Regulation (EU) 2016/679 general regulation on data protection, rules on the processing of personal data and Italian measures of the Authority of Italian control ( http://www.garanteprivacy.it ).