INFORMATION TO DATA SUBJECT
This information is provided in accordance with article 13 of the Legislative Decree n° 196 of June 2003, the “Italian Personal Data Protection Code” (hereinafter “Privacy Code”) for the website available at the address: www.cimbali.com (hereinafter “the Website”) owned by Gruppo Cimbali S.p.A. – VAT ID/tax ID no. and registration no. in the Milan Companies Register 0905210015, with offices in Binasco (MI), Via Alessandro Manzoni, n° 17, 20082, tax ID no. and VAT ID no. 09052100154 (hereinafter “Cimbali”).
1. Controllers, Processors and Data Subject
The data controller is Cimbali.
The data processor is Roberto Chiodini.
You can obtain an updated list of the data processors by sending a request to the email address firstname.lastname@example.org.
The data subject is any user who accesses the Website.
2. Purposes of Processing
The user’s personal data shall be processed for the following purposes:
a) so that the user can properly use the Website;
b) so that sales and advertising communications can be sent to the user, both as hard copies and in digital or automated form;
c) for profiling purposes.
3. Procedure and tools for processing
User data processing is an automated procedure performed with IT and online tools, in accordance with the data processing and organizational parameters needed to carry out the above-mentioned purposes, and in any case, so as to guarantee the security and the confidentiality of both personal data and of the content of the communications. The data may also be processed with paper tools.
The IT systems set up for the running of the Website may acquire some data during the running itself, whose processing is a characterizing element of the Internet communication protocols. When gathered, these data may be used for the sole purpose of checking the Website operation parameters and of gathering statistical information.
Data that fall under this category are, for example: IP addresses of devices used by the users, the number of times a website was accessed, the number of pages viewed and the relative viewing data, the URL address that the browser was in before viewing the page, the type of navigation browser, and the operating system used.
Navigation data and environmental variables
The IT systems and procedures set up to run the Website automatically acquire some personal data in relation to the user’s navigation, including environmental variables, as part of their normal operations.
Cookie and pixel tracking
Cookies are small text files that a given website puts into the user’s device via the browser, in order to process certain information regarding the user’s Internet navigation activities. Pixel tracking offers an analogous function: small code parts are issued by some systems with the purpose of tracing some data relative to the user’s navigation session. For easy consultation, we will refer in this document to this and other hidden markers simply as “cookies”.
The Website uses technical cookies for the sole purpose of transmitting data to the Website itself, often to provide a function or a service explicitly requested by the user. These cookies may expire up to 365 days after deployment.
The Website uses statistical cookies created by Cimbali itself or provided by third parties. In the latter case, proper tools have been adopted in order to lower user identifiability, partly by masking significant parts of the IP addresses processed in this way. The use of such third-party statistical cookies is also subject to contractual restraints that bind the third party to use them exclusively for the provision of the service, to keep them separately, and not to “enrich them” or “cross them” with other information that the third parties may have.
Regarding Google Analytics cookies, the information that may be obtained from the cookies about the use of the Website by the users shall be sent by the user’s browser to Google Inc., with offices in 1600 Amphitheater Parkway, Mountain View, CA 94043, United States, and stored in the servers of the company itself.
Please read Google’s privacy rules, available at the following address: http://www.google.com/intl/it/privacy/privacy-policy.html.
The privacy information on Google Analytics’ Services is available at the following address: http://www.google.com/intl/en/analytics/privacyoverview.html.
The Website uses profiling cookies provided by third parties. These cookies allow the user to receive personalized services. In this way, localization data can be gathered from the users’ terminals and Wi-Fi access points, IP addresses and MAC addresses, as well as speed connection data.
Deleting and deactivating cookies
Since cookies are normal text files you can access them by using word processing programs.
In any event, you can set up your browser in order to keep it from processing cookies. Just to give an example, below is a list of the ways you can deactivate and delete the cookies from the main web browsers:
Delete/deactivate cookies with Firefox:
Delete/deactivate cookies with Explorer:
Delete/deactivate cookies with Chrome:
Alternatively, you can deactivate only the Google Analytics cookies by using the opt-out additional component provided by Google for the main browsers.
Data voluntarily provided by the user
The data freely and voluntarily provided by the user by sending an email to the addresses indicated on the Website may be acquired for the purposes indicated from time to time.
Specifically, besides the email address needed in order to answer the sender, other personal data contained in the relative communication shall be processed.
Data gathered in this way shall be kept and processed exclusively for the purposes of maintaining correspondence and shall not be used for other purposes.
Those data, freely and voluntarily provided by the user with the registration form, are acquired for the purposes under letter b) point 2.
Specifically, the following data will be processed:
I am a:
• Coffee roaster;
Data thus gathered shall be kept and processed exclusively for the purposes listed above.
4. Mandatory or facultative nature of data provision
Regarding the purposes under letter a) of point 2), with the sole exception of details specified above about the navigation data and technical cookies, the provision of all other personal data requested by the users of the Website is facultative and entirely at the user’s discretion.
If the user does not provide personal data for these purposes, it shall not entail any consequences for the user.
Regarding the processing of personal data under letter b) of point 2) the user’s consent is facultative; however, if consent is not provided, it will not be possible to send him or her sales or promotional communications.
Regarding the processing of personal data under letter c) of point 2) the user’s consent is facultative; however, if consent is not provided it will not be possible to provide personalized services.
5. Scope of communication
For the above-mentioned purposes, employees designated by Cimbali as persons in charge of processing may acquire knowledge of the users’ data.
Furthermore, in the capacity of data processor, OgilvyOne S.r.l., with offices in Viale Lancetti, 29 - 20158 – Milan, may acquire knowledge of the user’s personal data.
Data may be communicated inside and outside the European Union.
The users’ personal data shall not be divulged.
6. Relevant Party’s Rights
As set forth in art. 7, Legislative Decree 196/03, in the capacity of data subject, the user shall have the right to obtain confirmation as to whether or not personal data concerning him or her exist, whether they have been recorded or not, and to receive communication of such data in an intelligible form.
A data subject shall have the right to be informed:
• of the source of the personal data;
• of the processing purposes and methods;
• of the logic applied to the processing, if the latter is carried out with the help of electronic means;
• of the identification data concerning the data controller, data processors and the representative designated as per Section 5(2) of the Privacy Code;
• of the entities or categories of entity to whom or which the personal data may be communicated and who or which may have access to said data in their capacity as designated representative(s) in the State’s territory, data processor(s) or person(s) in charge of the processing.
A data subject shall have the following rights:
• to obtain updating, rectification or, where interested therein, integration of the data;
• to obtain erasure, anonymization or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;
• to obtain certification to the effect that the entities to whom or which the data were communicated or disseminated have been notified about the operations as per letters a) and b), also with regard to their contents, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is being protected.
A data subject shall have the right to object, in whole or in part:
• on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;
• to the processing of personal data concerning him/her, where this is carried out for the purpose of sending advertising materials or direct selling or for the performance of market or commercial communication surveys.
In this case, it is specified how the right of the relevant party to oppose processing of his or her personal data for the above-mentioned purposes may also be exercised only in part, as set forth in art. 7, paragraph 4 lett. b) of the Privacy Code; for example, by opposing just the sending of promotional communications with digital and/or automated tools or with paper tools.
Petitions in accordance with art. 7 of Legislative Decree 196/03 may be sent directly to Cimbali to the email address email@example.com. Alternatively, you can exercise your rights by sending a communication with registered mail with return receipt to Cimbali, to the address Via Manzoni 17, 20082 Binasco (MI).
This information may be changed over time; you can obtain updated information above by sending a request to firstname.lastname@example.org.
Users are therefore asked to consult this page periodically.
Milan, 23 February 2017