WEBSITE POLICY PURSUANT TO ARTICLE 13 OF THE REGULATION (EU) 2016/679
The protection of your personal data and the security of your personal data are of great importance to Cromology Italia S.p.A.. For this reason, we collect and process your personal data with the utmost care and attention, adopting at the same time specific and adequate technical and organizational measures to guarantee the full security of the processing.
With this notice, Cromology Italia S.p.A., in its capacity as Data Controller, in compliance with the provisions of Regulation (EU) 2016/679 (hereinafter, “GDPR” or “Regulation”) and Legislative Decree n. 196/2003, as last amended by Legislative Decree n. 101/2018 (hereinafter, “Privacy Code”), wishes to inform you about the purposes and methods of the processing of personal data that will be acquired during your interaction with the websites listed below (hereinafter, also “Websites”) through the simple consultation of them and/or through the use of specific services made available to the user/visitor through the websites themselves.
This policy is provided for the following websites:
«personal Data»: any information relating to an identified or identifiable natural person («data subject»); an identifiable person is a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity;
«processing»: any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
«profiling»: any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements;
«controller»: the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
«processor»: a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
«consent of the data subject»: any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;
The processing of your personal data is carried out, using manual and automated systems, by Cromology Italia S.p.A. (hereinafter also referred to as “Cromology” or “Controller“), with registered office in Porcari (LU), Via 4 Novembre, 4, 55016, as Controller pursuant to and for the purposes of the GDPR.
For any question or request related to the processing of your personal data you may contact the Company at any time by sending a request to the following references:
Business Name: Cromology Italia S.p.a.
Registered office adress: Porcari (LU), Via IV Novembre n. 4, 55016
Data protection officer: firstname.lastname@example.org
The personal data subject to processing will be:
The data highlighted above (hereinafter also only “Data“) are collected:
As a general rule, special categories of data under article 9 GDPR or data relating to criminal convictions and offences under article 10 GDPR will not be processed; should it be necessary to process your special data under article 9 GDPR they will only be processed on the basis of your specific consent.
In the table below you will find indications of (i) the purposes and (ii) the legal basis of the processing activities carried out by the Controller, associated with (iii) the specific website by mean of which the personal data is collected.
|A||Measure your experience in using our web services, the services we offer, and to ensure the correct functioning of our web pages and their contents.||The processing activity performed for these purposes is based on a legitimate interest of the Controller, and does not require specific consent from the data subject.||www.cromology.itwww.vierodecoratives.com www.viero-coatings.it www.baldinivernici.it www.duco.it www.cro-mix.it www.tollens.it www.rmddecorazione.it www.maxmeyer.itwww.settef.it www.decorativiatypic.it www.cromocampus.it www.lospecialistadimc.it/www.maxmeyer.eu www.casamaxmeyer.it|
|B||Carrying out direct marketing activities, such as the promotion of products or events carried out through letters, telephone, automated communication systems, e-mail, etc. market and user satisfaction surveys.||The processing activity performed for these purposes are carried out with the specific and free consent provided by the user. Except for commercial communications relating to products and/or services similar to those already purchased and/or subscribed to by the user for which the processing is based on a legitimate interest of the Controller (so-called “Soft Spam”).||www.cromology.itwww.viero-coatings.it www.baldinivernici.it www.duco.it www.tollens.it www.maxmeyer.itwww.settef.it www.decorativiatypic.it www.cromocampus.it www.lospecialistadimc.it/|
|C||Profiling activities, also by means of automated activities aimed at the analysis of user preferences and choices.||The processing activity performed for these purposes are carried out with the specific and free consent provided by the user.||www.cromology.itwww.viero-coatings.it www.baldinivernici.it www.duco.it www.maxmeyer.itwww.settef.it www.cromocampus.it|
|D||Management of the pre-contractual and contractual relationship, including therefore the registration on the Site through the “contact us” form for requests or questions presented by the data subject. Profile creation for access to dedicated contents.||The processing performed for these purposes are based on the contractual and pre-contractual relationships established with the user and does not require specific consent from the person concerned.||www.cromology.itwww.vierodecoratives.com www.viero-coatings.it www.baldinivernici.it www.duco.it www.cro-mix.it www.tollens.it www.rmddecorazione.it www.maxmeyer.itwww.settef.it www.decorativiatypic.it www.cromocampus.it www.lospecialistadimc.it/www.maxmeyer.eu www.casamaxmeyer.it|
|E||Selection of candidates who send their CVs by filling in the appropriate form on the “work with us” page of the Site.||Legitimate Interest||www.cromology.it|
Without prejudice to the freedom of the data subject to provide his/her personal data, please note that:
Your personal data are processed exclusively by personnel of the Company specifically authorized and designated pursuant to art. 4, paragraph 10 of the Regulation and art. 2-quaterdecies of the Privacy Code, who have been adequately trained in relation to the regulatory requirements regarding privacy and process data following precise indications from the Controller.
Your personal data will also be transmitted to third parties that we use for the proper provision of our services and products. These subjects have been adequately selected by us and offer adequate guarantee of compliance with the rules on the processing of personal data.
In the event that these subjects process personal data with reference to which Cromology is to be qualified as the Controller pursuant to the Regulation, they have been appointed as Processors pursuant to art. 28 of the Regulation, and are required to carry out their activities according to the specific instructions given by the Company and under its control.
Such third parties may belong to the following categories:
– Cromology Group companies including subsidiaries and affiliates;
– collaborators, suppliers of the Data Controller: the Controller’s suppliers include, by way of example, banking and credit institutions, insurance companies, consultants, shipping managers, software suppliers and related assistance;
– financial administration and other national and/or international bodies for which mandatory communications are envisaged.
A specific and updated list of these subjects is available at the headquarters of the Controller, and can be consulted at the request of the interested party.
It is understood that your personal data will not be disclosed to third parties so that they can use them for their own promotional purposes and will not be disseminated in any way, except for all those subjects whose right to access such data is recognized by virtue of regulatory measures.
Personal data will be processed mainly within the European Union, but it may happen that they are transferred, for the pursuit of the purposes referred to in paragraph 4 above, to subjects located in third countries (non-EU) also for intra-group activities.
The transfer of your personal data to third parties resident or located in countries that do not belong to the European Union and that do not ensure adequate levels of protection will be performed only with your consent or after the conclusion of specific agreements between the Company and these subjects, containing appropriate safeguards and guarantees for the protection of your personal data so-called “standard contractual clauses”, also approved by the European Commission, or if the transfer is necessary for the conclusion and execution of a contract between you and the Company or for the management of your requests.
We inform you that your data will be stored for a limited period of time, which varies according to the type of processing activity and the specific purposes thereof, as indicated below:
At the end of these periods, your data will be permanently deleted or, in any case, irreversibly anonymized by the Company.
We inform you that you are entitled to exercise the following rights in relation to the personal data covered by this policy, as provided for and guaranteed by the Regulation:
With reference to any processing carried out on the basis of your consent, you may revoke this consent at any time, without affecting the lawfulness of the processing carried out before the revocation. Similarly, at any time (and therefore both at the time of providing data and subsequently) you may express your wish not to receive communications of a commercial nature sent to you pursuant to art. 130 of the Privacy Code (“Soft Spam”).
You may exercise your rights at any time with reference to the specific processing of your personal data by the Company.
Without prejudice to what has been expressed so far, we remind you that the above rights may also be exercised by anyone who has an interest of their own, or acts on your behalf, as your representative, or for family reasons deserving of protection, pursuant to art. 2-terdecies of Legislative Decree 101/2018.
These rights may be exercised by e-mail to the mailbox email@example.com or by regular mail to the address of the Controller, as highlighted in paragraph 3.
Further information on the rights of the interested party may be obtained by asking the Controller for a full extract of the above-mentioned articles.
The Company adopts adequate and preventive security measures to safeguard the confidentiality, integrity, completeness and availability of the personal data of the data subject. Technical, logistical and organizational measures are put in place to prevent damage, loss, even accidental, alteration, misuse and unauthorized use of data processed.
Moreover, the controllers cannot be held responsible for untrue information sent directly by the user (for example: correctness of the e-mail address or postal address), as well as information concerning the user that has been provided by a third party, even fraudulently.
For any question or request relating to the processing of your personal data, or to the exercise of your Rights, you may contact the Company at any time by sending a request to the following references:
Company name: Cromology Italia S.p.a.
Registered Office Address: 55016 Porcari (LU), Italy, Via IV Novembre n. 4
Contact details of the Data Protection Officer (DPO): firstname.lastname@example.org
2. What is a “cookie”?
Cookies are small pieces of data (text files) that a website – when visited by a user- asks your browser to store on your device (PC, tablet, smartphone etc.), and then transmitted to the same website the next time the user visits it.
Those Cookies can be set by the Company – (first party cookies) – or can be sent from a domain other that that of the website you are visiting (third-party cookies).
Cookies are useful because they make it possible to recognise the device accessing the site, as well as to navigate through the pages without interruption, remembering the preferences expressed and improving the Users’ browsing experience or ensuring that the advertisements displayed online are more suitable for the User and/or relevant to the User’s interests.
3. Browser Settings
By changing the settings on your internet browser, you may change your cookie settings and may choose not to install any cookie. However, your choice may affect your experience on the Site and the services we can offer.
The browser settings relating to cookies are accessible and modifiable by the User (manually or by means of specific tools) under “options”, “tools” or “preferences” in the menu of the Internet browser specifically used. It is also possible to consult the “help” section of the browser menu.
In any event, the configuration of each browser is different and is described under the “help” section in the menu of that browser. For more details on how to manage your cookie settings, please follow the links below:
4. Cookies used on our website
If the User decides to click on the “Reject All” button or on the “X” in the banner that appears when accessing the Site for the first time, the default settings will remain and the User will be able to continue browsing in the absence of cookies or other tracking tools other than technical ones.
The user can view the categories of cookies and configure or modify its preferences by clicking on “Cookie settings”. Privacy Settings
The Site uses different types of cookies for different purposes: necessary technical cookies, technical analytics cookies, performance cookies and targeting cookies. Some cookies may be provided by third parties to integrate additional functionalities to our Site as indicated below.
Necessary Technical Cookies
These cookies are necessary for the website to function and cannot be switched off in our systems.
Necessary technical cookies are, for example:
If you refuse these cookies, for example by changing the settings of your browser, it will not be possible to guarantee the timely and correct functioning and performance of the Site during your visit.
Technical Analytics Cookies
|Categories of Cookie||Cookie||Types of cookies||Retention|
|Strictly necessary||cookielawinfo-checkbox-necessary||First Party||11 months|
|Strictly necessary||cookielawinfo-checkbox-functional||First Party||11 months|
|Strictly necessary||cookielawinfo-checkbox-analytics||First Party||11 months|
|Strictly necessary||cookielawinfo-checkbox-advertisement||First Party||11 months|
|Strictly necessary||cookielawinfo-checkbox-others||First Party||11 months|
|Strictly necessary||cookielawinfo-checkbox-others||First Party||11 months|
|Strictly necessary||cookielawinfoconsent||First Party||11 months|
|Strictly necessary||Viewd_cookie_policy||First Party||11 months|
These cookies allow us to collect and analyse information about the traffic of visitors to the Site, where these visitors come from and how they access and navigate the Site. These cookies also allow us to monitor the operation of the system and improve its performance and usability.
All this information is collected through cookies in an aggregate and anonymous form.
If you do not consent to these cookies, we will not be able to improve the performance of the system and its usability.
|Categories of Cookies||Cookie||Types of Cookies||Retention|
|Google Analytics||_ga||Third Party||2 years|
|Google Analytics||_gat||Third Party||1 minute|
|Google Analytics||_gid||Third Party||1 day|
|Google Analytics||_dc_gtm||Third Party||1 minute|
These cookies allow us to count visits and traffic sources so that we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and to see how visitors navigate the site.
All information collected by cookies is aggregated and therefore anonymous.
If you do not allow these cookies, we will not know when you visited our site.
For more information on Google Analytics:
|Categories of Cookies||Cookie||Types of cookies||Retention|
|_fbp||Third Party||3 months|
|Google Ads||_gcl_au||Third Party||[Persistent]|
|Google Ads||_gat_gtag||Third Party||1 hour|
These cookies may be set through our site by our advertising partners. They may be used by these companies to build a profile of your interests and show you relevant ads on other sites. They do not store any personal information directly, but are based solely on identifying your browser and internet device. If you do not accept these cookies, you will receive less targeted advertising.
5. Amendments and updates
For further information on the protection of your privacy, please write to the following e-mail address: email@example.com
Last update: 02/02/2022