PRIVACY POLICY

(Ex art. 13 – 14 EU reg. 2016/679, D.lgs 196/2003, D.lgs. 101/2018)

Dear Data Subject, we provide you some information hereunder that it is necessary to bring to your attention, in order to comply with the Regulation (EU) 2016/679, and because the transparency and the fairness towards our customers are fundamental parts of our activity.

The Controller of your personal data is Kristal S.r.l responsible for the legitimate and proper use of your personal data, that you may contact for any information or request at the following addresses:

Data Controller: Kristal S.r.l

-Via Thomas Edison 14 – 20090 Trezzano sul Naviglio (MI), Italia

Data Protection Officer

Leonardo Micoli

l.micoli@kristalsrl.net

Tel. +39 02 4453401

The Data Controller guarantees the security, confidentiality and protection of processed personal data, at any stage of the data processing . The collected data are processed in compliance with the current legislation on data protection (GDPR 679/2016). Personal data may be brought to the attention of those authorized to process personal data and may be communicated to collaborators and / or other subjects with respect to which the communication is necessary for the provision of services, for technical support of computer / telematics services and server storage. The data provided by the user may be communicated to subjects for whom there is an obligation to notify accordance with the law or a need to communicate to enforce a right of the Data Controller.

PURPOSE AND LEGAL BASIS OF DATA PROCESSING

The computer systems and software procedures that regulate the operation of this website acquire navigation data.

A.These data will be used by the Data Controller in order to improve the browsing experience and, with the prior consent of the Data Subject, for marketing activities based on user behavior; such information includes

B.This information is collected by the Data Controller to allow subsequent identification of the user, but it’s used only to obtain anonymous statistical information on the use of the website and / or to verify the proper functioning. This category of data includes

– IP addresses or domain names of computers used by users who connect to the website;

– time of the request

– method utilized in submitting the request to the server.

– numeric code indicating the status of the response given by the server (successful, error, etc.);

– other parameters relating to the operating system and browser used by the user.

The data that users voluntarily provide through this site by means of calls, email, name, surname and any other personal data communicated in the form, site navigation, are processed in order to allow access to products, services and content, and to perform the service or provision as requested.

The legal basis is the execution of pre-contractual measures taken at the request of the user.

In relation to some specific services, with prior consent of the Data Subject, the Data Controller may also use such data for information and updates on the offered services (for example, by sending newsletters), for the implementation of sales activities or placements of products and services, and for carrying out studies and market research. The legal basis is the consent of the Data Subject.

In any case, the data acquired could be used to ascertain responsibility in case of hypothetical crimes, including computer crimes against the website. The legal basis is the legitimate interest of the Data Controller.

PERSONAL INFORMATION WE COLLECT

In every occasion of contact or interaction with the visitor some personal information could be collected such as:

– Name;

– Surname;

– Phone;

– Email;

– ID

– Any other data voluntarily provided by the user.

Apart from what is specified below concerning the browsing data, the user is free to provide his or her personal data, but failure to do so may only make impossible to obtain what has been requested.

INFORMATION WE COLLECT FROM THIRD PARTIES

During browsing, we collect standard login information and details about user’s behavior patterns. This data is used, for example, to obtain information about the number of visitors of the different sections of the website and, with the prior consent of Data Subject, for marketing and profiling activities.

This information is collected using procedures that reduce the identifying power of cookies. We don’t intend to discover the identity of our website visitors and none of the collected data through the website is associated with any information, derived from any source, that can identify an individual (except, in any case, information voluntarily provided by the user).

DATA RETENTION

In accordance with the principles listed in article 5 of GDPR, no data will be retained for longer periods than those necessary to achieve the above purposes and, therefore, the service offered or specific legal requirements.

The data collected through cookies, as per the specific information below, will be retained according to their nature: session cookies will expire when the user closes the browser, persistent cookies have typical expiration dates.

The user, however, may at any time oppose the processing or request that this be limited, or deletions of personal data.

RECIPIENTS OF PERSONAL DATA

Personal data will be processed exclusively by personnel formally authorized to process personal data and may be disclosed to other external parties as indicated below:

– When disclosure of data is required by applicable laws and regulations with respect to third party legitimate recipients of communications such as authorities and public bodies for their respective institutional purposes;

-When communication is necessary for the performance of a contract or other pre contractual activities at Data Subject’s request, (e.g., request information for services provided by the Data Controller)

Disclosure of data to third parties in the event of extraordinary operations (e.g. mergers, acquisitions, transfer of business, etc.).

Your personal data are also shared with our service providers, e.g., for technical and organizational services that are functional to the above-mentioned purposes such as independent contractors, also in associated form, shipping companies, marketing, management of payments. We provide only necessary data in order to perform the agreed services to the those third parties that act as Data Processors, based on the Data Controller’s instructions.

DATA TRANSFER

The processing of personal data (e.g. storage, archiving and retention of data on its own servers or in the cloud) will be restricted in the areas of circulation and processing of personal data of the EU member states, with express prohibition to transfer data to non-EU countries that do not guarantee (or in the absence of) an adequate level of protection, or, in the absence of protective measures provided by the EU Regulation 2016/679 (third country judged adequate by the European Commission, Binding Corporate Rules, Standard contractual clauses for data transfers between EU and non-EU countries, Data Subject’s consent, etc.).

DATA SUBJECT RIGHTS

The GDPR 679/2016 recognizes the following rights to the Data Subject:

– art. 7 – right to withdraw the consent at any time, without affecting the lawfulness of the processing based ased on consent before its withdrawal.

– art. 15 – right of access.

– art. 16 – right to rectification.

– art. 17 – right to erasure (right to be forgotten);

– art. 18 – right to restriction of processing;

– art. 19 – obligation to notify recipients.

– art. 20 – right to data portability.

– art. 21 – right to object.

– art. 22- right to not be subject to automated decision-making (to profiling).

You can exercise your rights by sending a request by e-mail to the contacts of the owner.

Additional information regarding the processing of Personal Data may be requested at any time using the contact information of Data Controller.

UPDATES TO OUR POLICY

We may amend or update our Privacy Policy. We will provide you notice of amendments to this Privacy Policy, as appropriate, and update the “Last modified” date at the top of this Privacy Policy. Please review our Privacy Policy from time to time.

MINORS UNDER 14 YEARS OF AGE

Our website is intended for a general audience and does not offer any services to children. If we become aware of any Personal Data of a child under the age of 14 that he or she has provided without the permission of the parents or the legal guardian, we will delete such information immediately.

LEGAL DEFENSE

The User’s Personal Data maybe used for legal defense by the Data Controller or in the preparatory stages of its possible establishment, from abuse in the use of the same or related services by the user. Following a subpoena, court order or other legal initiative; in order to establish or exercise the rights recognized by law to the Owner; to protect in the event of legal action against the Owner or for other purposes dictated by law.

The User declares to be aware that the Data Controller may be required to disclose Personal Data by public authorities.

last update 01/02/2022

COOKIE POLICY

Web cookies can be defined as small text strings that sites visited by the user send to his terminal (typically the browser), where they are stored and then transmitted to the same sites the next time the same user visits. The owner of the processing of personal data of this site states that it uses cookies and / or other similar tools in order to allow and optimize the display of web pages and elements contained therein or for profiling and marketing purposes / to develop anonymous statistics on visitors.

The information collected with these tools may concern, by way of example

(a) the type of browser used (e.g., Internet Explorer, Google Chrome; Firefox, etc.);

b) the name of the website from which the user accesses the internet;

c) the website from which the user reached the site;

d) the date, time and area of access;

e) the pages that have been visited.

This website does use cookies for profiling, advertising or geo-localization purposes or other similar computer tools aimed at acquiring user data for mere advertising purposes.

In any case, the user can define different options relating to cookies, modifying the browsing options, respecting the methods and limits granted by the same.

Changing the browser parameters can be done normally by selecting the item:

“Internet Options” or “Preferences” from the “Tools” or “View” or “Edit” menu and, subsequently, selecting the wording: “Privacy” or “Security” or “Download Files”, and, subsequently, choosing the preferred settings. Considering the multiplicity of browsers currently in use, it is certainly advisable to refer to the characteristic instructions and specific manuals of each program for surfing the web.

In order to offer the user a better surfing experience, further computer tools may be installed on the user’s computer (exclusively by third parties) also for profiling, advertising or geo-localization purposes, traceable to the following third parties:

With reference to the specific function, information and consent relating to cookies installed by the above third parties, we invite the user to connect to the links above, as well as visit the site: http://www.youronlinechoices.com

Please note that changing the parameters related to privacy and /or the display of cookies may limit the display or functions offered by this site!

[cookies_revoke]