INFORMATION REGARDING THE PROCESSING OF PERSONAL DATA OF USERS AND IN THE CONTEXT OF CONTRACTS WITH CUSTOMERS IN ACCORDANCE WITH ART. 13 OF REGULATION (EU) 2016/679 (“GDPR”)

1) HOLDER OF THE TREATMENT

Caffitaly System S.p.A.
Via Panigali 38, Gaggio Montano (BO);
Telephone number: 053438911.
E-mail: privacy@caffitalyka.com
ZIP code: 40041

Hereinafter referred to as: “Company”.

2) PERSONAL DATA PROCESSED and DATA SOURCE

“Data” means common data relating to natural persons (including, by way of example, name, surname, date of birth, gender, social security number, address, contact details and bank details.) Which are processed by the Company for the stipulation and execution of the contractual relationship with its customers (“Customers”) and for the other purposes indicated in this information. In addition to Customer data, data of other natural persons indicated by the Customers themselves as third parties unrelated to the contractual relationship but recipients of the delivery and shipping service may also be collected.

These data are in any case collected directly from the Customer.

3) TREATMENT

4) PROVISION OF DATA

The provision of data highlighted with an asterisk (*) in the registration form is necessary for the conclusion of the contract and / or for its execution. The refusal to provide the Data may therefore not allow the contractual relationship to be correctly established and / or to fulfill the consequent obligations.

5) RECIPIENTS OF THE DATA

The Data may be disclosed to external parties operating as data controllers including, by way of example:
– administrative authorities and supervisory and control institutions;
– certification institutions;
– banks and credit institutions;
– auditing and analysis company;
– Payback;
– Paypal;
– legal studies;
– auditing firm;
– in general, subjects, public or private, entitled to request the Data.

The Data may be processed, on behalf of the owner, by external subjects designated as data processors, who carry out specific activities on behalf of the owner, including, by way of example:

– companies that offer e-mail marketing services;
– assistance and customer service centers;
– companies that offer management and maintenance services for the information systems and software used;
– companies or professional firms that offer legal, tax, commercial, insurance and technical assistance consultancy services;
– logistics and transport company;
– events organization company

5) SUBJECTS AUTHORIZED FOR PROCESSING AND PROCESSING METHODS

Your data will be processed in an automated manner and may be processed by employees of the corporate functions responsible for pursuing the aforementioned purposes, who have been expressly authorized to process them and who have received adequate operating instructions.

6) TRANSFER OF PERSONAL DATA TO COUNTRIES NOT BELONGING TO THE EUROPEAN UNION

It is not the Company’s intention to transfer Personal Data abroad, however, in order to execute the specific requests made by the interested parties themselves, in execution of the stipulated contractual relationship, the data could be transferred to countries outside the EU, and in particular:

– In Canada and Australia, whose data protection level was deemed adequate by the European Commission pursuant to art. 45 of the GDPR “

-In Indonesia and Brazil, in the presence of the derogation pursuant to art. 49 par. 1 letter B) of the GDPR., As the transfer is necessary for the execution of a contract concluded between the interested party and the data controller or for the execution of pre-contractual measures adopted at the request of the interested party;

7) RIGHTS OF THE INTERESTED PARTY – COMPLAINT TO THE SUPERVISORY AUTHORITY

By contacting the office at the e-mail address privacy@caffitalyka.com, the interested party can ask the Company to access the data concerning him, their cancellation, the correction of inaccurate data, the integration of incomplete data, the cancellation of the Data, the limitation of processing in the cases provided for by art. 18 GDPR, as well as to oppose, for reasons connected to one’s particular situation, to the processing carried out for the legitimate interest of the owner.

Furthermore, in the event that the processing is based on consent or on the contract and is carried out with automated tools, the interested party has the right to receive the Data in a structured format, commonly used and readable by automatic device, as well as, if technically feasible, to transmit them to another holder without impediments.

The interested party has the right to lodge a complaint with the competent supervisory authority in the Member State in which he habitually resides or works or in the State in which the alleged violation has occurred.

The interested party has the right to revoke the consent given at any time for marketing purposes and to oppose the processing of the data processed for the same purposes. The possibility remains for the interested party who prefers to be contacted for the aforementioned purpose exclusively through traditional methods to express their opposition only to the receipt of communications through automated methods.