Privacy Policy

A) INFORMATION RELATING TO THE SITE’S PRIVACY POLICY

This document provides you with the following essential information pursuant to art. 13 of Legislative Decree no. 196 of June 30, 2003 (hereinafter, the “Privacy Code”) and art. 13 of EU Regulation no. 2016/679 (hereinafter, the “GDPR”) regarding the processing of your Personal Data by CRASE s.r.l. in relation to your browsing of our website www.crase.com and your use of the services offered.

B) DATA TREATMENT

1. Object of the treatment
The Owner processes the Personal Data, identifying and non-sensitive (for example but not limited to, name, surname, company name, address, telephone number, email address – hereinafter, “Personal Data” or also “Data”) communicated by you when requesting information by telephone/email, accessing the Owner’s website www.crase.com (hereinafter, “Site”), making online requests for clarification or support, and sending newsletters.

2. Owner, manager and persons in charge
The Owner is CRASE s.r.l. with registered office and operational headquarters at Via Primo Villa 15/F, 20875 Burago di Molgora (MB), VAT number 06555520961 Email crasesrl@crase.com The updated list of data managers and persons in charge of processing is kept at the Owner’s headquarters.

3. Purpose of the treatment
Your Personal Data is treated:
without your express consent (Article 24, letters a), b), and c) of the Privacy Code and Article 6, letters b), and e) of the GDPR), for the following Service Purposes:
• manage and maintain the Site;
• allow you to use any Services you request;
• participate in initiatives organized by the Data Controller (e.g., events) through the Site;
• process a contact request;
• fulfill obligations established by law, regulation, EU legislation, or an order from the Authority;
• prevent or detect fraudulent activity or abuse harmful to the Site;
• exercise the Data Controller’s rights, such as the right to assert a claim in court;
• send you email newsletters and/or invitations to events in which the Data Controller participates or organizes.
In the cases indicated above, the legal basis for processing your Personal Data is to perform a contract with you, to provide the service you have specifically requested, to comply with a legal obligation, or to protect our legitimate interests.

4. Withdrawal of consent
The interested party may withdraw their consent to receiving promotional and commercial communications immediately by sending a request to marketing@crase.com or by clicking the unsubscribe link found in the header of each promotional and commercial email received.

5. Treatment methods
Your Personal Data is processed using the operations indicated in Article 4 of the Privacy Code and Article 4(2) of the GDPR, specifically: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, erasure, and destruction of the Data. Your Personal Data is subject to both paper-based and electronic and/or automated processing.

6. Retention period of treated data
The Owner will process Personal Data for the time necessary to fulfill the aforementioned purposes and, in any case, for no longer than 10 years after the termination of the Service Purposes relationship. Subscription to the newsletter and the related processing are considered valid until the user unsubscribes, as indicated in each email, or 12 months after the last communication for which there is evidence of direct interaction (click, opening, reply).

7. Security measures
The Owner has adopted a wide variety of security measures to protect your data against the risk of loss, misuse, or alteration.

8. Data access
Your data may be made accessible for the purposes set out in Article 3:
• to the Owner’s employees and collaborators, in their capacity as persons in charge and/or internal data processors;
• to third-party companies or other entities that perform outsourced activities on behalf of the Owner, in their capacity as data processors.

9. Data communication
Without your express consent (pursuant to Article 24, letters a), b), and d) of the Privacy Code and Article 6, letters b) and c) of the GDPR), the Owner may disclose your Data for the purposes set out in Article 3 to supervisory bodies, judicial authorities, and all other entities to whom disclosure is required by law for the fulfillment of the aforementioned purposes. Your Data will not be disclosed.

10. Data transfer
Personal Data will be managed and stored in Europe. In any case, the dissemination and transfer of Data outside the EU is excluded.

11. Nature of the provision of data and consequences of refusal to respond
Providing your Data for the purposes set out in Article 3 is mandatory. Without it, we will not be able to guarantee your registration on the Site or the Services set out in Article 3. Providing your Data for sending the newsletter is optional. You may therefore decide to opt out of processing Data already provided: in this case, you will not receive email invitations to events, newsletters, and opinion and satisfaction surveys. In any case, you will continue to be entitled to the Services set out in Article 3.

12. Rights of the interested party
As the data subject, you have the rights set forth in Article 7 of the Privacy Code and Article 15 of the GDPR, specifically the rights to:
• obtain confirmation of the existence or otherwise of Personal Data concerning you, even if not yet recorded, and communication of such data in an intelligible form;
• obtain information on: a) the origin of the Personal Data; b) the purposes and methods of the processing; c) the logic applied in the event of processing carried out with the aid of electronic means; d) the identification details of the data controller, data processors, and the designated representative pursuant to Article 5, paragraph 2 of the Privacy Code and Article 3, paragraph 1, of the GDPR; e) the entities or categories of entities to whom the Personal Data may be communicated or who may become aware of it in their capacity as designated representative in the territory of the State, data processors, or persons in charge of processing;
• obtain: a) the updating, rectification or, when interested, the integration of the Data; b) the cancellation, transformation into anonymous form or blocking of Data processed in violation of the law, including those whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed; c) certification that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the Data were communicated or disseminated, except in the case in which such fulfillment proves impossible or involves the use of means manifestly disproportionate to the protected right;
• object, in whole or in part: a) for legitimate reasons, to the processing of your Personal Data, even if pertinent to the purpose of collection; b) to the processing of your Personal Data for the purpose of sending advertising or direct sales materials or for conducting market research or commercial communications, through the use of automated calling systems without the intervention of an operator, by email and/or through traditional marketing methods such as telephone and/or post. Please note that the data subject’s right to object, set out in point b) above, for direct marketing purposes via automated methods extends to traditional methods and that in any case the data subject retains the right to object even partially. Therefore, the data subject may decide to receive communications only via traditional methods or only automated communications, or neither type of communication. Where applicable, you also have the rights set forth in Articles 16-21 GDPR (Right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the Guarantor Authority.

13. How to exercise your rights
You may exercise the rights referred to in point 12) above at any time by sending:
• a registered letter with acknowledgement of receipt to CRASE s.r.l., Via Primo Villa 15/F, 20875 Burago di Molgora (MB);
• an email to crasesrl@crase.com

14. Minors
This Site and the Owner’s Services are not intended for minors under 18, and the Owner does not intentionally collect personal information from minors. If information about minors is inadvertently recorded, the Data Controller will promptly delete it upon user request.

15. Changes to this Policy
This Policy may be subject to change. We therefore recommend that you check this Policy regularly and refer to the most current version. The updated version of the privacy policy is always published on this page, indicating the date of its last update.

Last updated on 19/11/2024