1. Data Controller
The Data Controller for personal data collected through the website www.carmide.com is DMTR ITALIA di Rizzo Demetrio, with registered office at Via Tigli, 6 – 20090 Cesano Boscone (MI), VAT No. 10169500963.
For requests concerning personal data protection, you may write to info@carmide.com.
2. Data processed
Data provided voluntarily
When a user uses the contact form, we may collect their name, email address, type of enquiry and message content, together with any personal data voluntarily included in the message.
If a newsletter subscription form is activated, we may collect the email address and any additional data expressly requested in that form, together with information needed to document the subscription and consent given.
Technical browsing data
The IT systems and software procedures that enable the website to operate may, during normal use, acquire technical data whose transmission is implicit in the use of Internet protocols, such as IP address, date and time of the request, requested resource, browser and device information, and technical data relating to the server response.
Statistical and usage data
If web analytics tools are activated, information may be processed about how the website is used, such as pages visited, source of the visit, session duration, interactions with content, technical device data and other identifiers used by the selected tool. The actual data collected will depend on the configuration of the service adopted.
3. Purposes and legal bases
Data may be processed for the following purposes:
- handling requests for contact, information, projects or collaborations: the legal basis is the performance of pre-contractual measures taken at the data subject’s request, where applicable, and/or the Controller’s legitimate interest in managing communications received;
- operation, security and prevention of abuse: the legal basis is the Controller’s legitimate interest in ensuring the security, integrity and proper operation of the website and related systems;
- statistical analysis of website use: where the tools used qualify as analytics comparable to technical tools, processing may take place without consent within the limits permitted by law; where the tool or its configuration requires consent, it will be activated only after the user has made a positive choice;
- sending the newsletter and informational or promotional communications relating to CARMIDE: processing will be based on the data subject’s specific, freely given and optional consent, unless a different legal basis is expressly provided by law in applicable cases;
- compliance with legal obligations: processing may take place where necessary to comply with legal obligations to which the Controller is subject.
Where processing is based on consent, that consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.
4. Provision of data
Providing the data marked as mandatory in the contact form is necessary in order to manage and respond to the request. Failure to provide such data may prevent the message from being sent or handled. Users are asked not to include unnecessary personal data in free-text fields.
Providing data for newsletter subscription and the related consent will be optional. Users may use the website and contact CARMIDE without subscribing to the newsletter.
5. Processing methods and security
Data is processed using IT tools and, where necessary, organisational procedures designed to protect confidentiality, integrity and availability, in accordance with the principles of lawfulness, fairness, transparency, minimisation and storage limitation.
6. Retention periods
Messages and contact data are retained for the time necessary to manage the request and any resulting relationship. If the communication leads to a contractual relationship or legal obligations apply, the data may be retained for the additional periods required by applicable law.
Data used for the newsletter will be retained until consent is withdrawn or deletion is requested, without prejudice to retaining information strictly necessary to document consent and any subsequent withdrawal.
Data collected through analytics tools will be retained for the period configured in the service used and in any case in accordance with the principles of minimisation and storage limitation. Technical logs are retained for the time necessary for security, diagnostics and service management purposes, according to the policies of the technical providers used.
7. Recipients and providers
Data may be processed by parties providing technical services necessary for the operation of the website and communications, such as hosting, email, maintenance and IT support providers. If analytics or newsletter services are activated, providers of statistical analysis, preference management, mailing lists and communication delivery may also be involved.
Depending on the circumstances, these parties act as processors on behalf of the Controller or as independent controllers under their respective terms of service. This notice will be updated with more specific information when the relevant services are selected and activated.
The website currently loads typefaces through Google Fonts. Connecting to the provider’s servers may involve transmission of technical data, including the IP address, necessary to provide the requested resource.
8. Transfers outside the EEA
If any technical provider used involves processing personal data outside the European Economic Area, processing will take place in accordance with the GDPR through an adequacy decision or other safeguards provided by applicable law.
9. Data subject rights
Where provided by the GDPR, data subjects may exercise their rights of access, rectification, erasure, restriction of processing, objection and data portability, together with any other rights recognised by applicable law.
Where processing is based on consent, the data subject may withdraw it at any time. For the newsletter, users may also use the unsubscribe link included in communications, when available, or write to info@carmide.com.
Requests relating to privacy rights may be sent to info@carmide.com. Data subjects also have the right to lodge a complaint with the Italian Data Protection Authority.
10. Cookies, analytics and tracking tools
For information about cookies, analytics tools and other tracking tools used by the website, please refer to the Cookie Policy. If tools requiring consent are introduced, they will remain blocked until the user makes a choice through a preference-management system compliant with applicable law.
11. Changes to this notice
This notice may be updated to reflect changes to the website, services used or applicable law. The date of the latest update is shown at the beginning of the page.