Privacy policy
Information provided by DECOART S.R.L., pursuant to and for the purposes of Article 13 of EU Regulation 679/2016
INTRODUCTION
In compliance with EU Regulation 679/2016, this notice provides the required information concerning the purposes and methods of processing personal data relating to individuals who browse, and may voluntarily provide their personal data through the various contact forms available on, the websites owned by DECOART S.R.L. with registered office in Via Gino Maggi no. 2 -21030 Cuvio (VA-Italy), Tax Code – VAT no. 03911400962, as Data Controller.
This information is to be considered valid only for websites owned by the data controller, such as www.modecoritaliana.it/en/ , www.ambras.it/en/ , and not to any other websites that may be accessed through links published on these websites. The Data Controller shall not be considered liable in any way for such third-party websites. Users are informed that the hosting service for the above websites is provided by Hosting Solutions, with registered office at Via de Cattani no. 224/18, Florence (FI), Italian Tax Code/VAT no. 02002750483, and that the servers hosting the websites are located in Italy.
TYPES OF DATA PROCESSED
With regard solely to technical aspects and protocols, please note that:
• The IT systems and software procedures used to operate this website may acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.
• This information is not collected in order to be associated with identified data subjects; however, by its very nature, it could make it possible to identify Users through processing and association with data held by third parties.
• This category of data includes the IP addresses or domain names of the computers used by Users connecting to the website, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server response (successful, error, etc.), and other parameters relating to the User’s operating system and IT environment.
• This data may be used to establish liability in the event of alleged cybercrime against the website. This data also includes personal data collected through cookies used by the website.
For further information, please refer to the Cookie Policy: http://www.modecoritaliana.it/en/cookie-policy
DATA VOLUNTARILY PROVIDED BY THE USER
Following consultation and browsing of the websites owned by the Data Controller, including this website, data relating to identified or identifiable persons may be processed. In particular, such processing may concern personal data freely provided by Users who send their information to the Data Controller through the contact details and contact forms available on the Data Controller’s websites (www.modecoritaliana.it/en/ , www.ambras.it/en/), including: first name, surname, email address, company name, Italian Tax Code and VAT number, business location, and business sector.
The data will be processed by DECOART S.R.L..as Data Controller (hereinafter the “Controller”), using IT and telematic tools and/or paper records, according to organisational and data-processing methods related to the purposes set out below and, in all cases, in a manner designed to ensure data security and confidentiality.
The data is the data provided by you and will be used for the purposes set out below.
Under no circumstances is the provision of “special categories of personal data” and/or “personal data relating to criminal convictions and offences”, as defined in Articles 9 and 10 of EU Regulation 679/2016, requested. Should the User voluntarily send the Data Controller information of this kind, the Data Controller will process it in compliance with applicable personal-data protection legislation (EU Regulation 679/2016 and Italian Data Protection Authority Decision no. 146/2019) and only to the extent strictly necessary in relation to the requests made by the User/data subject.
Taking into account the state of the art, implementation costs, and the nature, scope, context and purposes of the processing, both when determining the means of processing and at the time of processing itself (risk analysis and accountability), the Controller has implemented appropriate technical and organisational measures designed to effectively apply data-protection principles and integrate the necessary safeguards into the processing, in order to meet the requirements of EU Regulation 679/2016 and protect the rights of the data subject.
Data will be processed using methods and tools suitable for ensuring security (Articles 24, 25 and 32 of EU Regulation 679/2016), through both automated and non-automated processes (paper archives). All technical and organisational measures required to ensure a level of security appropriate to the risk will be applied, so as to guarantee on an ongoing basis the confidentiality, integrity, availability and resilience of processing systems and services. Such measures include, by way of example and without limitation, controls over the assignment of duties to persons authorised to process data and over data classification; pseudonymisation and encryption procedures, where sustainable; and disaster-recovery mechanisms.
3. PURPOSES OF PROCESSING
The personal data provided will be processed by the Data Controller in accordance with privacy legislation and the related confidentiality obligations, exclusively for the following purposes:
a) providing the service requested by the User, including the purchase of goods and/or customised products, management of the resulting commercial relationship with the Controller, and enrolment in school courses and tutorial courses;
b) sending personalised informative, commercial and promotional communications through “traditional” methods (including, by way of example and without limitation, postal mail and telephone calls with an operator) and/or automated methods (including, by way of example and without limitation, fax, email, SMS, MMS and social advertising) to the contact details provided by the data subject when consent is given;
c) subscription to the periodic newsletter. The newsletter will be sent monthly by email to the contact details provided. Consent to receive the periodic newsletter may be changed at any later time, in whole or in part, by sending a specific communication to the Controller using the contact details set out below.
Communications sent as part of the periodic newsletter service, as well as certain personalised informative, commercial and promotional communications sent by email, may contain tracking technologies such as pixels or web beacons and tracked hyperlinks. A tracking pixel is a small, normally invisible image retrieved from a remote server when the recipient’s email program loads the images contained in the message. These technologies may enable the Controller to determine whether and when a communication was opened, the number of openings, the links selected and, to the extent permitted by the technical configuration used, information such as the date and time of the interaction, IP address, device type, operating system and email program used. The Controller uses this information to measure the effectiveness of its communications, compile campaign statistics and, where applicable, improve or personalise the content, frequency and method of sending on the basis of the individual recipient’s interactions.
The data provided may also be lawfully used by the Data Controller to comply with legal obligations to which the Controller is subject or where processing is necessary to protect the rights of the Company and/or its principals or successors in title.
PROVISION OF DATA – LEGAL BASIS FOR PROCESSING
The provision of personal data is mandatory for the purposes set out in section 3(a). Failure to provide such data may make it impossible to provide the service (for example, see the “mandatory fields” marked with <> in the data-collection forms). The legal basis for processing for the purposes set out in section 3(a) is the performance of the requests made by the data subject and the fulfilment of obligations arising from the contractual relationship established.
The provision of personal data is optional for the purposes set out in section 3(b) and (c), and the legal basis for such processing is the data subject’s consent. The data subject retains the right to object, including at a later stage, to receiving newsletters and informative, commercial and promotional communications and to withdraw consent at any time by using the “Unsubscribe” link at the bottom of each message. In this case, the data will no longer be processed for those purposes, without adverse consequences for the data subject or for the services requested. With specific reference to tracking technologies active in newsletters and informative, commercial and promotional communications, the data subject may disable tracking only, while continuing to receive the newsletter, at any time by using the “Preference Centre” link at the bottom of each message.
RECIPIENTS / CATEGORIES OF RECIPIENTS OF PERSONAL DATA
Personal data will be processed by persons specifically appointed by the Data Controller as data processors and/or by anyone acting under the Controller’s authority who has access to personal data. Such persons will process your data only where necessary in relation to the purposes for which it was provided and solely within the scope of the tasks assigned to them by the Data Controller. They undertake to process only the data necessary to perform those tasks and to carry out only the operations required for that purpose.
Furthermore, for the purposes set out above, your personal data may be disclosed to:
• external companies or professionals carrying out specific assignments on behalf of the Data Controller (including, by way of example and without limitation, suppliers of machinery and maintenance services, and providers of services for the management, maintenance and implementation of corporate information systems), only where disclosure of your personal data is necessary or otherwise functional to pursuing the purposes referred to in section 3;
• agents, consultants, business introducers and collaborators/partners of the Data Controller, only where disclosure of your personal data is necessary or otherwise functional to pursuing the purposes referred to in section 3;
• the Data Controller’s parent, subsidiary or affiliated companies.
In compliance with the Decision “Measures and safeguards prescribed to data controllers for processing carried out using electronic tools in relation to the assignment of system-administrator functions” of 27 November 2008 (Official Gazette no. 300 of 24 December 2008), as subsequently supplemented and amended, the Data Controller has appointed specific “System Administrators” who, in performing their duties, may access, including indirectly, services or systems that process or enable the processing of personal information.
The data will not be disclosed to any other third party without first obtaining your express consent.
Your personal data will not be made publicly available.
TRANSFER OF DATA TO THIRD COUNTRIES
The Controller may transfer personal data to a third country or an international organisation. In such cases, the Controller undertakes to carry out the processing only where appropriate safeguards are in place.
RETENTION PERIOD FOR PERSONAL DATA
The data will be retained for the time necessary to achieve the purposes set out above, in a form that permits identification of the data subject for no longer than is necessary for the purposes for which the data was collected or subsequently processed. Once that period has elapsed, if the data subject has not expressly reconfirmed the data, it will be destroyed, unless it is converted into anonymous form. The data will be retained until the data subject unsubscribes from the service, which can easily be done by clicking the dedicated link in each Newsletter and in each box used to send commercial communications.
The personal data provided will not be processed to carry out automated decision-making (so-called profiling). If the personal data provided is to be processed for purposes different from and additional to those indicated under “Purposes of Processing”, the Controller will provide information about that different purpose and any further relevant information.
DATA CONTROLLER, DATA PROTECTION OFFICER AND AUTHORISED PERSONS
The data controller is: Decoart S.r.l , with registered office in Via G. Maggi n.2 in Cuvio (VA-ITALY), Tax Code – VAT no. 03911400962, Telephone. +39 0541 859411, Fax Italia +39 0541 859412, Fax export +39 0541 859412, Website www.modecoritaliana.it/en/ , e-mail: privacy@decoartitalia.it , Certificate email: Decoart-srl@pec.it (defined above and below “Data Controller”).
To ensure compliance with the GDPR and the laws applicable to the processing of the data subject’s personal data, the Controller has appointed an independent third party as Data Protection Officer (DPO pursuant to Article 37 of EU Regulation 679/2016 and the Article 29 Working Party Guidelines of 13 December 2016), namely GRCteam S.r.l., with registered office at Via Sigismondi no. 40, 24018 Villa D’Almè (BG), Italian Tax Code and VAT no. 04141040164, Tel. 035 636029, certified email (PEC): grcteam@legalmail.it, email: dpo@casaoptima.com. The DPO may be contacted for any information, request or complaint through the communication channels indicated above.
Pursuant to Article 28 of EU Regulation 679/2016, the Data Controller may engage third parties that process data on its behalf and are formally appointed as data processors. A complete and up-to-date list of the appointed data processors will be provided by the Data Controller upon request sent to the contact details indicated above.
Pursuant to Article 29 of EU Regulation 679/2016, the Data Controller may use persons acting under its authority and/or under the authority of an appointed processor. Such persons will receive appropriate instructions.
RIGHTS OF THE DATA SUBJECT
The data subject is entitled to the rights under Article 15 of the GDPR. Where applicable, the data subject also has the rights under Articles 16–22 of the GDPR (right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object, and the right not to be subject to a decision based solely on automated processing), as well as the right to lodge a complaint with the competent Data Protection Authority.
The full text of Articles 15 to 23 inclusive of EU Regulation 679/2016 concerning your rights may be consulted at any time on the website of the Italian Data Protection Authority: https://www.garanteprivacy.it/regolamentoue. Alternatively, it will be provided by the Controller upon request sent to the contact details indicated above.
AMENDMENTS TO THE “PRIVACY POLICY” AND “COOKIE POLICY”
The Data Controller reserves the right to amend this Privacy Policy and the Cookie Policy at any time by notifying Users on this page. Users are therefore requested to consult this page frequently, referring to the date of the latest amendment shown at the bottom.
If the User does not accept amendments made to this Privacy Policy and/or the Cookie Policy, the User must cease using the website and request that the Data Controller delete their personal data by sending a specific communication to the Data Controller using the contact details indicated above. Unless otherwise specified, this Privacy Policy and the Cookie Policy will continue to apply to personal data collected up to that time.
For any questions, comments and requests relating to this privacy statement and/or the cookie policy, Users can contact us at the following addresses: Fax: +39 0332 658379 - e-mail privacy@decoartitalia.it - Certified E-mail Address Decoart-srl@pec.it . In any event, we invite Users to report any difficulties encountered in viewing this Privacy Policy and/or Cookie Policy in order to be able, if necessary, to provide alternative methods of information.
Date of latest amendment: 13 October 2026