Privacy and Data Processing
Porcellane Capodimonte Sbordone Società a Responsabilità Limitata Semplificata, with registered office at Via Piano Alvanella, snc,
83024, Monteforte Irpino (AV), VAT no. 02881970640 (hereinafter, the “Data Controller”), in its capacity as Data Controller, hereby informs you pursuant to Art. 13 of Legislative Decree 30.6.2003 no. 196 (hereinafter, the “Privacy Code”), as amended by Legislative Decree 101/2018, and Art. 13 of EU Regulation no. 2016/679 (hereinafter, “GDPR”), that your data will be processed according to the procedures and for the purposes specified below, in compliance with the aforementioned regulations based on the principles of fairness, lawfulness, transparency, and the protection of confidentiality and your rights:
1. Object of Processing
The Data Controller processes personal, identifying data (e.g., name, surname, company name, address, telephone number, email, hereinafter, “personal data” or “data”) provided by you when requesting information regarding the Data Controller’s services, browsing the Website, or making a purchase through the online Shop.
2. Purposes of Processing – Use of Data
Personal data collected (personal details, email addresses) on the Data Controller’s Website will be used to provide the services requested or authorized by the user, for purposes strictly connected to the use of the websites and their information services, and more generally to enhance customer service, thereby improving the Website alongside products and services and simplifying their use by eliminating the need to enter the same information repeatedly.
Personal information is used to provide the user with updates regarding products and services in use.
It may also be used, in terms compatible with the purposes specified above, for the following purposes:
– to receive our newsletters and/or emails containing technical and commercial information, subject to your specific and express consent;
– to process your requests aimed at obtaining information and receiving informational material (catalogues, brochures, price lists, etc.);
– for statistical and marketing purposes through the use of cookies and similar technologies, as described in detail in ourCookie Policy, subject to your express consent given via the cookie banner on the Website;
Your personal data is processed in both electronic and paper formats. Your personal data will, in any case, be retained in a form that allows your identification for the time strictly necessary to achieve the purposes for which the data was collected and subsequently processed, and in any case within statutory limits.
To ensure that your personal data is always accurate, up-to-date, relevant, and complete, please notify us of any changes via thecontact form.
Your personal data will not be disclosed to third parties for purposes not permitted by law or inconsistent with this privacy policy.
In the event of a reorganization, merger, or sale, Porcellane Capodimonte Sbordone S.r.l.s. may transfer to third parties involved in such transactions all personal data collected for the specific purposes for which consent was granted. In all such cases, your consent is not required.
3. Data Collection
The processing of your personal data is carried out by means of the operations specified in Art. 4 of the Privacy Code and Art. 4 no. 2) of the GDPR, namely: collection, recording, organization, structuring, storage, consultation, processing, alteration, selection, retrieval, comparison, use, interconnection, restriction, disclosure, erasure, and destruction of data.
Within the websites, personal information will be requested where such information is necessary to identify or contact the user when providing the requested services. This information is requested to allow the user to use a service, such as receiving information on products or services, subscribing to newsletters, making a purchase, or requesting support. Certain information regarding visited pages may be automatically collected on the Website, subject to consent where required, such as the Internet service provider name and the IP (Internet Protocol) address used to access the Internet; the date and time of access to the Website; pages visited by users within the Website; and the Internet address of the website from which the user directly accessed the Website. This information is gathered for statistical purposes, to analyze market trends, as well as to improve the products/services offered. Your personal data is subject to both paper and electronic and/or automated processing. The Data Controller will process personal data for the time necessary to fulfill the above purposes and in any case for no more than 10 years after termination of the relationship for Service Purposes.
4. Access to Data
Your data may be made accessible for the purposes set out in Art. 2:
– to employees and collaborators of the Data Controller, in their capacity as authorized persons and/or internal data processors and/or system administrators;
– to third-party providers who deliver services on behalf of the Data Controller (e.g., hosting, payment processing, newsletter distribution, statistical and marketing analysis tools such as Google Analytics, Google Ads, and Meta), appointed as Data Processors pursuant to Art. 28 GDPR where applicable;
5. Disclosure of Data
Without the need for express consent (pursuant to Art. 24 letters a), b), d) of the Privacy Code and Art. 6 letters b) and c) of the GDPR), the Data Controller may disclose your data for the purposes set out in Art. 2 to Supervisory Bodies, Judicial Authorities, insurance companies for the provision of insurance services, as well as to entities to whom disclosure is mandatory by law for the fulfillment of the said purposes. These entities will process the data in their capacity as independent data controllers.
Your data will not be disseminated.
6. Security
Data is stored and monitored through the adoption of appropriate preventive security measures, aimed at minimizing the risks of loss, destruction, unauthorized access, or unauthorized processing that does not comply with the purposes for which the processing is carried out.
7. Data Transfer
The management and storage of personal data takes place primarily within the territory of the European Union. However, some data may be transferred to non-EU countries, particularly the United States, as part of using third-party services such as Google Analytics, Google Ads, and Meta (Facebook/Instagram) for statistical and marketing purposes, enabled upon your consent. Such transfers are carried out in compliance with the safeguards provided by Chapter V of the GDPR, through the adoption of Standard Contractual Clauses approved by the European Commission and/or provider adherence to recognized adequacy frameworks (e.g., EU-U.S. Data Privacy Framework).
8. Rights of the Data Subject
In your capacity as a data subject, you have the right, pursuant to Arts. 15-22 GDPR, to:
i. obtain confirmation as to whether or not personal data concerning you exists, and access to such data in an intelligible form, including the purposes of processing, the categories of personal data concerned, recipients or categories of recipients, and the envisaged storage period (Art. 15 GDPR);
ii. obtain the rectification of inaccurate personal data concerning you and the completion of incomplete personal data (Art. 16 GDPR);
iii. obtain the erasure of personal data concerning you (“right to be forgotten”), in the cases provided for by Art. 17 GDPR;
iv. obtain restriction of processing in the cases provided for by Art. 18 GDPR;
v. receive the personal data concerning you provided to the Data Controller in a structured, commonly used, and machine-readable format, and have it transmitted to another data controller, where technically feasible (right to data portability, Art. 20 GDPR);
vi. object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you, including profiling, as well as object in any case to the processing of your data for direct marketing purposes (Art. 21 GDPR);
vii. withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;
viii. lodge a complaint with a supervisory authority, in particular the Italian Data Protection Authority (Garante per la protezione dei dati personali – www.garanteprivacy.it), if you consider that the processing of your data infringes applicable regulations.
9. How to Exercise Your Rights
You may exercise your rights at any time by sending a notice:
1. via email, using thecontact form
2. or by registered mail with return receipt to: Porcellane Capodimonte Sbordone S.r.l.s., Registered office: Via Piano Alvanella, snc, 83024, Monteforte Irpino (AV), Italy, which will be promptly processed. The Data Controller may refuse to act on requests that are manifestly unfounded or excessive, in particular because of their repetitive character.
10. Data Controller, Processors, and Persons Authorized
The Data Controller is Porcellane Capodimonte Sbordone Società a Responsabilità Limitata Semplificata, with registered office at Via Piano Alvanella, snc, 83024, Monteforte Irpino (AV), VAT no. 02881970640.
The updated list of data processors and authorized processing persons is kept and available for consultation at the registered office of the Data Controller.
