PRIVACY POLICY

1. DATA CONTROLLER

The data controller is “Carretta Tessitura srl”, with registered office in Carrè (VI), Via Timonchio, 9, tax code and VAT number 01777120245 with the following contact details: https://carrettatessitura.com/contatti/

2. CATEGORIES OF DATA PROCESSED AND COLLECTION METHODS

Your browsing on the site and/or entering data in certain areas may result in the collection and subsequent processing of your Personal Data by us. Indeed, the computer systems and software procedures used to operate them automatically and indirectly administer and/or acquire certain information (such as, but not limited to, "cookies"—as specified below—or data expressly specified in the collection formats, such as name, surname, email address, nationality, address, telephone number, email address, information on the market sector in which you operate, and information on products used or in which you are interested).

3. PURPOSE OF DATA PROCESSING AND LEGAL BASIS FOR THE PROCESSING

Your Personal Data will be processed for the following purposes only with your consent, which you may withdraw at any time using the link at the bottom of each promotional email (for marketing activities and the newsletter) or by sending us an email, which you can find in the contact information above. a) Management of and response to your specific requests by contacting us directly b) Marketing activities You may decide to consent to the processing of your Personal Data for marketing purposes, i.e., for commercial communications, including via email, text messages, and push notifications, concerning the sending of promotional and advertising material relating to any of our offers or for market research purposes. In relation to this purpose, your consent is required when registering on the Site. In your personal profile section on the Site, you can choose the channels through which you prefer to receive commercial communications (for example, all or some of email, text messages, regular mail, push notifications). c) Receipt of the newsletter You may decide to subscribe, by giving your consent, to the newsletter service. For this purpose, your consent is required when you sign up for the newsletter. Furthermore, even without your consent, Carrertta Tessitura srl ​​may process your Personal Data for the following purposes: d) Management and execution of legal obligations (accounting, administrative, tax, etc.); e) Management of complaints and any litigation (as a legitimate interest of the Data Controller).

4. HOW WE PROCESS YOUR DATA

The processing of your Personal Data may include any type of operation, including collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction. These operations may be performed with or without the aid of electronic or automated tools. Processing is carried out by the Data Controller and/or by data processors operating under the direct authority of the Data Controller, in accordance with the instructions provided, or by third parties appointed as external data processors.

5. WHERE WE PROCESS YOUR DATA

Your Personal Data is processed primarily at the Data Controller's offices and in the locations where the data processors are located. If you consent to processing for marketing and promotional purposes, some of your Data (name, surname, email address) will be transferred to our newsletter software partners located around the world, including outside the European Union. We inform you that we transfer your Personal Data only to entities located in countries for which a specific EU Commission decision has been issued guaranteeing their adequacy and processing in accordance with Regulation 679/16 (GDPR) or only after verifying the registration of the external data processor under the "Privacy Shield" framework.

6. HOW LONG DO WE KEEP YOUR DATA?

The Data Controller will not retain your Personal Data for longer than is necessary to fulfill the purpose for which it was processed. The data will be retained for the time permitted or required by law. To ensure compliance with the principles of necessity and proportionality of processing, the Data Controller has identified different retention periods for Personal Data depending on the individual purposes pursued: a) for the purposes of managing and responding to your requests regarding our products and initiatives, your Personal Data will be retained for the time strictly necessary to process your request; b) for marketing purposes, i.e., for commercial communications, including via email, concerning the sending of promotional and advertising materials, your Personal Data will be retained until you no longer wish to receive our communications and you may unsubscribe by following the instructions provided in each of our communications; c) for the purposes of managing and fulfilling legal obligations (accounting, administrative, tax, etc.), your Personal Data will be retained for 10 years.

7. WHO ARE THE RECIPIENTS OF YOUR PERSONAL DATA?

Your Personal Data may be communicated to and processed by:

legal or natural persons acting as external data processors, carrying out outsourced activities, appointed by the Data Controller or by the Data Controller's external data processors (including parties entrusted with assistance, communication, marketing, advertising, promotions and sales of products and/or services as well as advertisers, advertising agencies, IT service providers, Website/APP managers, electronic platform managers, partners, credit institutions, professional firms);

employees and/or collaborators of the Data Controller (including system administrators) who, operating under the direct authority of the latter, will be authorised to process your Personal Data; and

employees and/or collaborators of external data controllers (including system administrators) who, operating under the direct authority of the external data controllers, will be authorized to process your Personal Data.

Your Personal Data will not be disclosed to third parties, except where the Data Controller must disclose your Personal Data to consultants in order to protect its rights, nor will it be disseminated.

8. OBLIGATION TO PROVIDE DATA

Providing data is mandatory for the processing the organization must perform to fulfill its obligations towards the data subject under the existing relationship (or contract), as well as legal, regulatory, and regulatory obligations. Consent is not required for all other purposes and, even if given, may be revoked by the data subject at any time.

9. REFUSAL TO PROVIDE DATA

Failure to provide the data that the interested party is required to provide may make it impossible to fulfill your requests or to execute any business relationships or contracts you may wish to establish with the Data Controller. Failure to provide non-mandatory data will determine the consequences on a case-by-case basis, taking into account the specific case and will presumably result in the failure to perform the service related to such data.

10. RIGHTS OF THE INTERESTED PARTY:

The Privacy Policy recognizes numerous rights for you as a data subject. Specifically, you have the right to:

Right Description

Right to withdraw consent (Article 13, paragraph II, letter A, and Article 9, paragraph II, letter A, GDPR) You have the right to withdraw your consent at any time for all processing operations based on your consent, as indicated in the purposes table above. Withdrawing your consent does not affect the lawfulness of the previous processing.

Right of access to data (Article 15) You may request a) the purposes of the processing; b) the categories of personal data concerned; c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations; d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; e) the existence of your right to request from the Data Controller rectification or erasure of personal data or restriction of processing of personal data concerning you, or to object to such processing; f) the right to lodge a complaint with a supervisory authority; g) where the data is not collected from you, any available information as to its source; h) the existence of automated decision-making, including profiling, referred to in Article 22, paragraphs 1 and 4, and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for you. You have the right to request a copy of the personal data undergoing processing.

Right to rectification (Article 16) You have the right to request the rectification of inaccurate personal data concerning you and to obtain the integration of incomplete personal data.

Right to be forgotten (Article 17) You have the right to obtain from the Data Controller the erasure of your personal data if the personal data is no longer necessary for the purposes for which it was collected or otherwise processed, if you withdraw your consent, if there are no overriding legitimate grounds for profiling, if the data has been unlawfully processed, if there is a legal obligation to erase it, or if the data relates to web services provided to minors without consent. Erasure may occur unless the right to freedom of expression and information prevails, the data is retained for compliance with a legal obligation or for the performance of a task carried out in the public interest or in the exercise of official authority, for reasons of public interest in the area of ​​health, for archiving purposes in the public interest, scientific or historical research purposes, or for statistical purposes, or for the establishment, exercise, or defense of legal claims.

Right to restriction of processing (Article 18) You have the right to obtain from the Data Controller restriction of processing when you have contested the accuracy of the personal data (for a period enabling the Data Controller to verify the accuracy of the personal data), or if the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead, or if the personal data are necessary for the establishment, exercise or defense of legal claims, but the Data Controller no longer requires them.

Right to data portability (Article 20) You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and you have the right to transmit that data to another person if the processing is based on consent, a contract and if the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority and such transmission does not infringe the rights of a third party.

Right to lodge a complaint with a supervisory authority (Data Protection Authority) (Article 77) Without prejudice to any other administrative or judicial remedy, if you believe that the processing of your personal data infringes the Regulation on personal data protection, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

11. HOW TO EXERCISE YOUR RIGHTS

You may exercise these rights at any time by contacting the Data Controller at the addresses indicated above. You may lodge a complaint with the Data Protection Authority by following the instructions provided on the Authority's website, in the "Forms" section, under "Complaint" (or by clicking the following link).

12. INFORMATION NOTES ON COOKIES

12.1 What are cookies?

Cookies are small text files that websites send to users' terminals, where they are stored before being re-sent to the same websites on subsequent visits. So-called "third-party" cookies, on the other hand, are set by a website other than the one the user is visiting. This is because each website may contain elements (images, maps, sounds, specific links to web pages on other domains, etc.) that reside on servers other than the one of the visited website.

12.2 What are cookies used for?

Cookies are used for various purposes: performing computer authentication, monitoring sessions, storing information about specific configurations regarding users accessing the server, storing preferences, etc. Therefore, for easy and complete use of a website, it is advisable for users to configure their browser to accept these cookies.

12.3 Characteristics and purposes of cookies for our web pages

Our site uses the following categories of cookies, which may be from the Owner or third parties:

1) Technical cookies (first-party, i.e., the Owner's): a) Navigation and session cookies: strictly necessary for the operation of the site and for access to restricted areas; b) Analytical/statistical cookies: similar to technical cookies, i.e., developed for the Carrertta Tessitura srl ​​site, intended to collect statistical information, for example, on visitors to the site and the pages visited; c) Functionality cookies, for language selection, and similar.

2) third-party cookies a) Google Analytics cookies, which are third-party cookies, used to monitor traffic, its type, and the keywords used (link to Google's privacy policy) b) third-party cookies for integrating Facebook into the website: these are technical cookies that allow Facebook posts to be displayed on the website and vice versa (link to Facebook's privacy policy). Our website does not use profiling cookies.

12.4 How to enable or disable cookies on your browsers

You can block your browser from accepting cookies by blocking all cookies or only third-party cookies. However, this may impair the efficiency of the site or prevent access to some features or pages. Below are the methods offered by the main browsers to block cookie acceptance:

Internet Explorer: http://windows.microsoft.com/it-it/internet-explorer/delete-manage-cookies#ie=ie-11

Firefox: https://support.mozilla.org/it/kb/Gesione%20dei%20cookie

Chrome: https://support.google.com/chrome/answer/95647?hl=it

Safari: http://support.apple.com/kb/HT1677?viewlocale=it_IT

LEGAL NOTES

Access to the pages of the Carrerttatessitura.compali.com website implies acceptance of the following conditions by the user:

The entire content of the web pages, including text and images, is the exclusive property of Carrertta Tessitura srl. All rights reserved. Any reproduction, distribution, storage, or other use is prohibited without the prior written consent of Carrertta Tessitura srl.

Carrertta Tessitura srl ​​Srl allows visitors to save or print extracts from this site's web pages solely for personal use.

“Carrertta Tessitura”, the name and the logo, are registered trademarks and distinctive signs owned exclusively by Carrertta Tessitura Srl.

The web pages on this site are periodically updated. Carrertta Tessitura srl ​​assumes no responsibility for the completeness and timeliness of the information contained on the site. The company also assumes no responsibility for any manipulation of the site by third parties.

All communications sent by users via email to the email addresses on the site will be considered by Carrertta Tessitura srl ​​to be non-confidential.

All risks associated with using and browsing this site are borne by the user. Carrertta Tessitura srl ​​assumes no responsibility for any damage to the user's computer equipment resulting from accessing, using, or downloading materials from these web pages.