DATA CONTROLLER, PURPOSE/LEGAL BASIS OF THE PROCESSING AND RELATIVE CONSENT
CAFèNOIR S.p.A. Via Cascina Lari 20, 56028 San Miniato (PI) phone number +39 0571 44511 – email@example.com, as data processor, pursuant to Article 13 EU Regulation 2016/679 (hereinafter “GDPR”) informs that the personal data supplied spontaneously by the person concerned will be processed both manually and with computers and software applications in order to:
- Comply with legal obligations and contractual obligations (e.g. accounting and tax obligations, the delivery of goods, payments, and sending of pre-contractual proposals) as well as for
- The sending of CafèNoir products promotional material, direct marketing activities (the legitimate interest of CafèNoir) to the addresses indicated by the Interested party
- For the automated analysis of the data subject's buying preferences of the CafèNoir products based on the products purchased, selected and/or searched for on our website, even if not purchased. The purposes referred to in points 2) and 3) constitute a legitimate interest of the Data Processor who does not prevail on the interests or the fundamental rights and freedoms of the data subject.
Provision of data is optional, but it is necessary for the fulfilment of contractual and regulatory obligations towards the person concerned (purpose referred to in the preceding point 1) and consent is not necessary for these purposes. In addition to these purposes, the incorrect communication of the personal data required might hinder the fulfilment of contractual obligations and also results in the impossibility of the data controller to accurately process the data and possibly mismatches the processing results with the obligations imposed by the legislation in which it is addressed. The purposes referred to in points 2) and 3) are possible only with the express and specific consent of the data subject who is free to give the consent or not without any consequences in case of rejection (subject to the absence of the ability to receive proposals and communications in line with the preferences of the data subject). In any case, this is without prejudice to the possibility to oppose and revoke consent, even after the granting of the specific consent, to the sending of promotional material and the automated analysis of the preferences. This opposition or revocation can be exercised by contacting CafèNoir at the addresses given above (where the data of the data protection officer are also available). Data belonging to special categories of personal data referred to in Article 9 of the GDPR (data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometrics, data concerning health, sex life or sexual orientation) nor data relating to criminal convictions and offences referred to in Article 10 of the GDPR are not processed.
The data will be processed as long as contractual relations between CafèNoir and the data subject are in being, and for a period of two years following the end of such relationships, without prejudice, in any case, to different legal obligations.
Scope of communication
The personal data may be disclosed to the company in charge of fulfilling the contractual obligations or regulatory requirements or managing services relating to the purposes listed above (including but not limited to, promotional, marketing, mailing and call centre to provide documents or information services allowed) details of such companies will be made available to the data subject on request. The personal data will not be disclosed or transferred outside of the European Union. If the data is collected in a country other from Italy, the data will be transferred to the Italian branch of Cafènoir, as indicated above, in order to fulfil the data subject's requests.
Rights of the data subject
The data subject has the right to access the data concerning him/her at any time (Article 15 GDPR) and of which Cafènoir has in possession by writing to the addresses above, and also has the right, in the presence of legal requirements, to request the correction of inaccurate data (Article 16 GDPR) or cancellation of the same (Article 17 GDPR) or restrict processing (Article 18 GDPR), or oppose to processing (Article 20 GDPR), in addition to the right to data portability (Article 19 GDPR), subject to legal and contractual obligations, however, the data subject also has the right to address complaints to a supervisory authority (Data Protection Authority)..
The specific consent to send promotional material/direct marketing activities is provided by the customer when creating an account and can be modified independently, by unsubscribing from the Newsletter using the "unsubscribe me" link found in all of our communications, through the restricted area, or by writing to the email address firstname.lastname@example.org. The express and specific consent for the automated analysis of the data subject's buying preferences can be changed by using the "Revoke consent" found in the section dedicated to Cookies found below