EN UK Privacy Policy

INFORMATION ON THE PROCESSING OF PERSONAL DATA

This information is provided pursuant to art. 13 of EU Regulation 679/2016 – General Data Protection Regulation (GDPR) and explain the management of the data collected from data subjects interacting with the web services provided by the Data controller and accessible via internet from this website and who can subsequently request the supply of products and services from the Data controller. This information applies only to this website and not to other websites accessed by users via a link.

The Data controller is Centrottica UK Ltd, located in Ground Floor 140 Old Street London EC1V 9BJ UK, in the person of its pro-tempore legal representative.

TYPE OF DATA PROCESSED

Navigation data

During normal operation, the IT systems and software procedures behind the functioning of this website acquire personal data (so-called log files) whose transmission is implicit in the use of Internet communication protocols. Information is not collected to be associated to identified data subjects but could, due to their same nature, enable their identification if processed and associated with data held by third parties. This data category includes IP addresses, domain names of computers used to connect to the website, URI addresses (Uniform Resource Identifiers) of the requested resources, request time, method used to submit the request to the server, size of the file obtained in response, numerical code indicating the status of the response provided by the server (successful, error, etc.) and other parameters concerning the operating system and IT environment of the user. The data are used with the only purpose of gathering anonymous statistical information on the use of the website and to control its effective functioning. The data may be used to ascertain responsibility in case of hypothetical computer crimes against the website and might be produced to the Judiciary should an explicit request be made.

Data provided voluntarily by users

The optional, explicit and voluntary sending of messages or requests to the addresses indicated on this website, or filling in the contact form, entails the acquisition of the address of the sender, as it is necessary to respond to requests, as well as of any other personal data included in the message body. Specific synthetic information will be gradually reported or shown in the web pages for particular services upon request.

After a first contact, we may ask the data subject for additional personal information; we will limit ourselves to the data necessary to respond to user requests and to establish and carry out contract agreements and fulfilments.

 Minors

This Website and Data Controller Services are not destined to those under the age of 18 and the Data Controller does not intentionally collect information referring to minors. Should any information concerning minors be unintentionally registered, the Data Controller will promptly delete them.

Nature of the data processed: Data processed are collected directly from you and can include: personal data, addresses and phone numbers (including cell phone numbers), e-mail addresses, certified e-mail addresses, CVs or work information should you send a job application, registration and access data to the area reserved to investors, profiling cookies whose detailed information is provided in the website cookie policy.

Purposes and legal bases: Centrottica UK will process the personal data you provide via the form on the company website (hereinafter referred to as “Website”) and subsequently acquired for the following purposes and according to the following legal bases:

Processing methods: Personal data will be processed according to rules of legality, fairness, relevance and not excess, using paper and electronic tools and guaranteeing their confidentiality and integrity.

Possible recipients/recipient categories of personal data: The data may be known by the people authorised to process them and by the data processors appointed by Centrottica UK, who perform activities necessary to supply the services required as well as services of complementary nature (administrative, legal, tax, IT), including companies part of the Group for applications abroad and, following inspections and checks (if required), to all inspection bodies in charge of performing checks to verify the regularity of legal obligations.

Your personal data will not be disseminated.

Obligation to provide data: Apart from what is specified for navigation data, users are free to provide or not provide their personal data. Providing data is compulsory to enable us to process your requests.

Refusing to do so, or providing compulsory information that is wrong/incomplete, may make it impossible for the Data Controller to guarantee consistent processing.

Providing personal data for marketing purposes is optional.

Data transfer to third countries: Data processing will be carried out within the European Union. Personal data will be managed and stored in Europe, on servers located in Italy owned by the Data Controller and/or companies part of the Group and/or third companies appointed as Data processors.

Should the data be transferred outside of the European Economic Area, it will occur only to subjects bound by standard European contractual clauses admitted under art. 26 (2) of Directive 95/46/EC or if the territory where the data is processed is considered adequate pursuant to art. 25(6) of Directive 95/46/EC or if the data is transferred in presence of the conditions set out in art. 46 of the GDPR.

Retention period of personal data: Personal data will be processed for the time necessary to comply with the purposes provided and will be retained:

1. In case of requests for information: for the time necessary to comply with the data subject’s request;
2. In case of data supplied for the sending of marketing information or to subscribe to the newsletter, until the data subject opts out;
3. In case of registration data to access the website area reserved to investors and to the information contained for the period established by law 
4. In case CVs or applications are sent: for the time necessary to assess the application or for a maximum of 3 years after the request is received, unless the data subject agrees to a prolonged retention or to a longer term corresponding to a work contract in case the interested party is hired.
    

Rights of the data subject: pursuant to articles 15-22 of the GDPR, the data subject has the right to:

• Access, modify, cancel, limit and oppose the processing of data;
• Obtain the data without impediment from the data controller, in a structured format of common use and readable by an automatic device to transmit it to another data controller;
• Withdraw consent to the processing, without prejudice to the lawfulness of the processing based on the consent acquired before the withdrawal;
• Lodge a complaint to the Authority for the Protection of Personal Data.

Data subjects may exercise their rights at any time via:

• Registered letter with return receipt addressed to Centrottica UK Ltd, Ground Floor 140 Old Street London EC1V 9BJ UK
• E-mail to infouk@centrottica.com

latest edition: 20 january 2024