PRIVACY POLICY 

This privacy policy, intended for all individuals (hereinafter, the "User") browsing the website www.coloriamoci.com, in all its sections and parts (hereinafter, the "Website"), is issued pursuant to Articles 13-14 of Regulation (EU) No. 2016/679 (hereinafter, "GDPR" or the "Regulation") and, regarding cookies, in compliance with the provisions of Art. 122 of Legislative Decree 196/2003 (hereinafter, the "Privacy Code"), as well as the provision of the Privacy Guarantor dated 08/05/2014, as integrated by the provision dated 10/06/2021 (hereinafter, the "Provision").

1. PRIVACY POLICY 

1.1 In accordance with the GDPR, the Data Controller is the entity responsible for the processing of the User's personal data, determining, among other things, the purposes and methods of data processing. The Data Controller is Coloriamoci S.r.l., in the person of its legal representative, with registered office at viale Gramsci n.18, 76123 Andria (BT), Italy, Tax Code and VAT No. 07610550720 (hereinafter, "Coloriamoci").

Coloriamoci attaches the utmost importance to the protection of the User's personal data, who should feel comfortable accessing and using the Website and the services offered by and through it; therefore, Coloriamoci wishes to inform the User about which data are collected during use of the Website and how they are processed. 

The Website may contain links leading to third-party sites; should the User choose to access these sites, they are invited to read the respective Privacy Policy, as this information applies only to this Website. 

By expressing acceptance of this Privacy Policy, the User accepts the following conditions for the collection, processing, use, and general handling of their data by Coloriamoci according to principles of correctness, lawfulness, and transparency, in compliance with the rules of the Regulation.

1.2 The GDPR establishes a series of rights in favor of the Data Subject – namely the individual whose data is processed by Coloriamoci and, in this case, the User – who therefore has the right to obtain erasure (right to be forgotten), restriction, updating, rectification, portability, opposition to the processing of their personal data and, in general, can exercise all the rights provided by Articles 15, 16, 17, 18, 19, 20, 21, 22 of the GDPR. Specifically, the Data Subject has the right: 

a) to obtain: confirmation of whether or not personal data concerning them exists, even if not yet recorded, and its communication in an intelligible form; 

b) to lodge a complaint with the Supervisory Authority (Garante Privacy);

c) to obtain information on: the origin of their personal data processed by the Data Controller; the purposes and methods of processing; the logic applied in case of processing carried out with the aid of electronic instruments; the identification details of the Data Controller, the Data Processors, and the representative designated pursuant to Art. 5, par. 2 of the GDPR; the entities or categories of entities to whom the personal data may be communicated or who may become aware of it as designated representatives in the territory of the State, Data Processors, or persons in charge of processing;

d) to obtain: updating, rectification or, when interested, integration of their data; erasure, transformation into anonymous form or blocking of data processed in violation of the Law, including those for which storage is not necessary in relation to the purposes for which the data were collected or subsequently processed; certification that the activities mentioned in this article have been brought to the attention, also regarding their content, of those to whom the data were communicated or disseminated, except where this fulfillment proves impossible or involves a use of means clearly disproportionate to the protected right; the portability of their data;

e) to object, in whole or in part, to the processing of their data: for legitimate reasons, to the processing of personal data concerning them even if pertinent to the purpose of collection; in any case, to the processing of personal data for the purpose of sending advertising material, direct sales, market research, or commercial communications. 

Coloriamoci informs the Data Subject that opposition to the collection, processing, or use of data could make it impossible to use, in whole or in part, the content of the Website.

1.3 Coloriamoci processes the personal data of the Data Subject to offer a series of services, including the use of Website content and the purchase of Products in the e-commerce section. Below is an indication of which data are collected, for what purposes, and in what circumstances they are potentially shared with other entities or transferred.

The personal data that Coloriamoci collects via the Website is information by which it is possible, directly or indirectly, to identify the Data Subject, including first and last name, date of birth, gender, residential or domicile address, telephone number, and email address.

Coloriamoci, in different parts and sections of the Website, collects and processes various types of personal data of the Data Subject who, for easier understanding, is also identified as follows: 

User: The User, for these purposes, is the visitor to the Website who accesses the homepage, the e-commerce section, and various sections of the Website without registering. Coloriamoci collects information on the User's device and connection data such as: device User-ID; other device identification data; time, date, and duration of the connection to the Website.

Registered User: The Registered User, for these purposes, is the visitor to the Website who registers in the appropriate section, creating a personal Profile. Coloriamoci, in addition to the personal data mentioned above, collects the following personal data of the Registered User: username and password; first and last name; date of birth; residential or domicile address; email address; other information that the Registered User optionally chooses to communicate in the appropriate form such as, for example, data relating to family status, interests, educational background, and profession. 

The data thus collected are processed by Coloriamoci: 

a) For purposes of creation and management of the personal profile: for creation and access via personal credentials (username and password), to identify and assist the Data Subject in case of difficulty accessing the personal profile, and to set the Data Subject's choices regarding privacy consents. 

Retention period: Personal data collected for the aforementioned purposes are kept for the entire duration of the Data Subject's registration on the Website, subject to their request for deletion.

The legal basis for processing for the aforementioned purposes pursuant to Art. 6.1, letter b) of the GDPR, is the necessity to perform a contract to which the Data Subject is a party.

b) For administrative, accounting, and legal purposes related to the execution of Product sales contracts.

The legal basis for processing for the aforementioned purposes is the necessity to fulfill obligations provided by national and supranational legislation pursuant to Art. 6.1 letter c) of the GDPR.

Retention period: Personal data collected for the aforementioned purposes are kept for the period provided by applicable legislation.

For all the aforementioned purposes, the provision of data is mandatory. Refusal to provide data does not allow Coloriamoci to execute Product sales contracts.

c) For marketing purposes: With prior consent, Coloriamoci uses the Data Subject's data to send commercial communications via telephone, paper mail, and/or automated contact methods, such as email, SMS, app notifications, and instant messaging. Commercial communications may include offers, promotions, or discounts on products or services.

The legal basis for processing lies in the consent of the Data Subject, explicitly given for such purposes, which is optional and revocable at any time pursuant to Art. 6.1 letter a) of the GDPR. 

Retention period: Data collected for the aforementioned purposes will be kept for 24 months from registration on the Website. 

d) For profiling purposes: With prior consent, Coloriamoci uses the Data Subject's data to create a customer profile and examine their preferences, habits, and products purchased, in order to send personalized commercial communications based on their interests. 

The legal basis for processing lies in the consent of the Data Subject, explicitly given for such purposes, which is optional and revocable at any time pursuant to Art. 6.1 letter a) of the GDPR. 

Retention period: Data collected for the aforementioned purposes will be kept for 24 months from registration on the Website. 

e) For prevention and suppression purposes: Coloriamoci, if necessary, uses the Data Subject's data for the prevention and suppression of fraud, abuse, and fraudulent activities, also carried out through the website www.coloriamoci.com. 

The legal basis for processing lies in the legitimate interest pursuant to Art. 6.1 letter f) of the GDPR.

Retention period: Data collected through traditional channels are kept for a maximum period of 5 years; data processed for purposes of prevention and suppression of fraud, abuse, and fraudulent activities carried out through the website www.coloriamoci.com are kept for a maximum period of 180 days. 

f) For purposes of establishing, exercising, or defending rights: Coloriamoci, if necessary, uses the Data Subject's data to establish, exercise, or defend the rights of the Data Controller in the event of a complaint, judicial and/or extrajudicial resolution action.

The legal basis for processing lies in the legitimate interest, pursuant to Art. 6.1 letter f) of the GDPR. 

Retention period: Data processed for the aforementioned purposes are kept for the entire duration of the complaint, action, or judicial and/or extrajudicial resolution, until the expiry of the terms for pursuing judicial protection actions and/or means of appeal.

[Last revision on 27/02/2024]