Privacy Policy

WHY THIS INFORMATION

This page describes the processing methods of users’ personal data who visit the website, as browsing the site may result in the processing of data relating to identified or identifiable natural persons. Before providing any personal data, Ci.Ga. Import/Export s.r.l. invites you to carefully read this “Privacy Policy”, as it contains important information on the protection of personal data and on the security measures adopted to ensure confidentiality in full compliance with the Applicable Law.

This Privacy Policy does not apply to other websites that may be accessed via hyperlinks published on the Site and complies with Recommendation No. 2/2001 on the minimum requirements for online data collection in the European Union, adopted on 17 May 2001 by the Article 29 Working Party.

Pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR – General Data Protection Regulation”, hereinafter the “Regulation”), the processing of your personal information, which we may obtain, will be based on the principles of fairness, lawfulness, purpose limitation, storage limitation, data minimisation, accuracy, integrity and transparency, and protection of your privacy and rights.

Therefore, we inform you of the following:

 

1. IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER / DPO (DATA PROTECTION OFFICER)

The data controller is Ci.Ga. Import/Export s.r.l – Via Domenico Cavalca, 87 - 00139 Rome (RM) - VAT No.: 12753051007 - Email: info@cigaimport.it
- Tel: +39 06 94376233

 

2. PURPOSE OF PROCESSING

The Personal Data collected by the Site are as follows:

Browsing data

The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.

This category includes IP addresses or domain names of computers and terminals used by users, URI/URL (Uniform Resource Identifier/Locator) addresses of requested resources, time of request, method used to submit the request to the server, size of the file obtained in response, numerical code indicating the server response status (success, error, etc.), and other parameters relating to the user’s operating system and IT environment.

Such data, necessary for web service usage, are also processed for:

statistical analysis on aggregated or anonymous data, without the possibility of identifying the user, aimed at measuring the proper functioning of the Site, traffic measurement and usability evaluation;

Browsing data are not stored for more than seven days (except where necessary for investigation of crimes by judicial authorities).

 

Cookies and other tracking systems

No profiling cookies are used, nor are other tracking methods employed.

Session cookies (non-persistent) are used strictly limited to what is necessary for safe and efficient navigation. The storage of session cookies on devices or browsers is under the user’s control, while server-side logs may retain information at the end of HTTP sessions, with retention periods not exceeding seven days, similarly to other browsing data.

More information on cookies and related technologies is available at https://www.garanteprivacy.it/cookie.

In addition to the above, data provided by you may be processed for the following purposes:

fulfilment of pre-contractual and contractual obligations arising from relationships with you;

administrative and accounting management required by law.

 

3. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF THE DATA

Data processed for the purposes referred to in section 2 may be disclosed to internal or external personnel, legal entities involved in the completion of services requested by the data subject, including but not limited to email service providers and website analytics operators, acting on the basis of specific instructions regarding purposes and processing methods. The list is available at the Data Controller’s office upon request.

Personal Data are not transferred outside the European Economic Area.

 

4. RETENTION PERIOD OF PERSONAL DATA

The retention period of personal data starts from the moment of their provision and ends upon the exercise of the right to erasure by the data subject via registered letter to Via Domenico Cavalca, 87 - 00139 Rome (RM)

or via PEC: cigaimportsrl@pec.it

 

5. OPTIONAL NATURE OF DATA PROVISION AND CONSEQUENCES OF REFUSAL

Providing data necessary to respond to contact requests and/or information requests is optional. However, failure to provide the requested data will prevent the data subject from receiving the requested information and support.

 

6. LEGAL BASIS OF PROCESSING

Pursuant to Article 6 of GDPR 679/2016, the processing of data for the purposes listed in section 2 is based on the explicit consent of the data subject (Art. 6(1)(a)); on the performance of a contract to which the data subject is party (Art. 6(1)(b)); and on the legitimate interest of the controller (Art. 6(1)(f)), based on the relevant relationship between data subject and controller, provided that the rights and freedoms of the data subject do not prevail.

 

7. RIGHTS OF THE DATA SUBJECT

The data subject may exercise their rights at any time under Articles 15, 16, 17, 18, 20, and 21 of GDPR 679/2016, including:

• right of access (Art. 15)
• right to rectification (Art. 16)
• right to erasure (Art. 17)
• right to restriction of processing (Art. 18)
• right to data portability (Art. 20)
• right to object (Art. 21)
• right to withdraw consent without affecting the lawfulness of processing prior to withdrawal
• right to lodge a complaint with a supervisory authority

 

8. AUTOMATED DECISION-MAKING AND PROFILING

The collection and processing of data do not involve any automated decision-making or profiling activities.

 

Newsletter section

2. PURPOSE OF PROCESSING

The processing of data provided by you is aimed solely at the proper and complete execution of the service requested. Specifically, data are collected for the following purposes:

• to respond to your request for information via email regarding activities, events, initiatives, services, and news promoted by the Data Controller.

 

3. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF THE DATA

Data may be disclosed to internal or external personnel involved in the fulfilment of the specific request, whose list is available at the Data Controller’s office upon request.

4. RETENTION PERIOD OF PERSONAL DATA

The retention period starts from data provision and ends upon deletion request by the data subject via unsubscribe link in each email or registered letter to Via Domenico Cavalca, 87 - 00139 Rome (RM)

or via PEC: cigaimportsrl@pec.it

5. OPTIONAL NATURE OF DATA PROVISION AND CONSEQUENCES OF REFUSAL

Providing data for information requests is optional. However, failure to provide the requested data will prevent the user from receiving the requested information and support.