NOTICE ON THE PROCESSING OF PERSONAL DATA - www.cassina.com
pursuant to art. 13 EU Regulation 2016/679 (“GDPR”)
version of April 27th, 2020

 

Cassina S.p.A. with sole shareholder has prepared this document (the “Notice”) to describe how it protects your personal data, which is collected automatically or provided through the navigation or use of the website www.cassina.com (the “Website”).
Therefore, this Privacy Notice relates exclusively to the Website and does not relate to other sites, pages, social media sites or online services that can be accessed via hyperlinks that may be published on the Website.


 

1. DATA CONTROLLER


The Data Controller is Cassina S.p.A. with sole shareholder, with registered office located at Via Busnelli, no. 1, 20821 Meda (MB), VAT no. 00976180968, a company subject to management and coordination activities by Haworth Italy Holding S.r.l. (“Cassina” or the “Controller”), privacy@poltronafraugroup.com
The Controller has appointed a Data Protection Officer (“DPO), who can be contacted at the following address: dpo.poltronafrau@dpoprofessionalservice.it

 

2.  TYPE OF DATA PROCESSED AND WHEN


The Controller will collect and process your personal data (the “Data”) on the following occasions:

- Your registration/access to one of the “Architect/Designer” and “Dealer” reserved areas of the Website and use of the related services: first name, surname, email, password, country and region;

- Any other requests sent through the “Contacts” page of the Website: first name, surname, email, category (individual/professional), company/publication, address, country and personal data that may be communicated in the appropriate fields;

- Receipt of marketing information or information about collections, exhibitions and events and your potential participation in customer satisfaction surveys and market research for product improvement purposes from both the Controller and other companies belonging to the same Group: first name, surname, email, category (individual/professional). These communications will be sent by email or telephone, including by automated means (SMS, social media);


Navigation data
These data, required in order to use the Website, are processed solely to obtain statistical information on the use of the Website services (most visited pages, number of visitors per hour or per day, geographical areas of origin, etc.) and to check the proper functioning of the Website itself and of the services offered through it.
This category of data includes: log files, IP addresses, user terminal domain names, uniform resource identifier (uri) notation addresses, server request times and methods, server responses, other operating system parameters, and the IT environment used by each Website user.
Navigation data are not stored for more than 7 days and are deleted immediately after their aggregation, without prejudice to the potential need for the Judicial Authority to investigate crimes.
During navigation, the Controller also collects cookies (small text files containing a certain amount of information exchanged between the Website and the browser).
To find out how the Controller manages cookies, visit the cookie policy.

 

3. PURPOSE AND LEGAL BASIS OF THE PROCESSING – MANDATORY OR OPTIONAL DATA


A) To allow you to register and access one of the “Architect/Designer” and “Dealer” reserved areas of the Website and use the related services.
The legal basis of the processing is the performance of pre-contractual and contractual obligations that you are a part of, as well as compliance with legal obligations.
The provision of Data for this purpose is optional. If you do not wish to provide your Data, you will not be able to use the related services in the reserved areas of the Website.

B) Management of contact requests through the appropriate page of the Website.
The legal basis of the processing is the performance of pre-contractual and contractual obligations that you are a part of, as well as compliance with legal obligations.
The provision of your Data for this purpose is optional. However, if you do not provide these Data, it will not be possible for the Controller to process your contact requests.

C) To send you marketing information about collections, exhibitions and events, including through our newsletter, or allow you to participate in any customer satisfaction surveys and market research for the improvement of the Controller’s products.
The legal basis is your explicit consent to the processing of Data for this purpose. If you have given your consent, you can withdraw it at any time by clicking the unsubscribe button contained in the emails or newsletters you will receive or by writing to: privacy@poltronafraugroup.com
The provision of Data for this purpose is optional. If you do not wish to provide your Data, the Controller will be unable to keep you updated on the special offers and promotions for its customers, or use the Data for market research, and statistical and customer satisfaction analysis.
In any case, you can also choose to be contacted exclusively via traditional methods, expressing your opposition to receiving communications through automated methods, by writing to privacy@poltronafraugroup.com

D) To communicate your Data to other companies of the Group that the Controller belongs to, so that they can send you marketing information about collections, exhibitions and events, including through newsletters in relation to its products and services, and to participate in any customer satisfaction surveys and market research for the improvement of its products.
The legal basis is your explicit consent to the processing of Data for this purpose. If you have given your consent, you can withdraw it at any time by clicking the unsubscribe button contained in the emails or newsletters you will receive or by writing to privacy@poltronafraugroup.com
The provision of Data for this purpose is optional. If you do not wish to provide your Data, the Controller will not be able to communicate the Data to the other Group companies for such purposes.
In any case, you can also choose to be contacted exclusively via traditional methods, expressing your opposition to receiving communications through automated methods, by writing to privacy@poltronafraugroup.com

 

4. DATA STORAGE PERIOD


- The Controller undertakes to delete your Data from its systems provided in relation to the requests submitted through the Website, 1 year after the date of provision of the Data;

- The Controller undertakes to delete your Data from its systems provided for your registration and access to the “Architect/Designer” and “Dealer” reserved areas of the Website and for use of the related services, 10 years after the date of cancellation of the relevant registration on the Website;

- The Controller will delete the Data processed in order to send you marketing information about collections, exhibitions and events, as well as for the participation in customer satisfaction surveys and market research, 24 months after the date of the last interaction with the Controller;

In any case, the Controller undertakes to base the Data processing on the principles of adequacy and minimization, checking annually the need for storage for a period of time not exceeding what is necessary for the achievement of the purposes for which the Data were collected.

The Controller may store the Data to fulfil regulatory obligations, or to ascertain, exercise or defend its right in the court.

Upon achievement of the purposes for which the Data were collected and processed, the Controller will take the appropriate measures to make the Data anonymous, so as to prevent your identification, notwithstanding the possibility of continuing to use the Data anonymously for statistical purposes.

 

5. METHOD OF PROCESSING


The Data will be collected and processed in compliance with the principles of fairness, lawfulness and transparency, through manual or automated methods, always within the limits of the processing purposes described above and, in any case, in order to ensure the security and confidentiality of the Data.

 

6. PERSONS AUTHORIZED TO PERFORM DATA PROCESSING


The Data may be processed by persons appointed by the Controller who have been expressly authorized and have received adequate operating instructions in relation to the purposes of the processing set out above.

 

7. CATEGORIES OF DATA RECIPIENTS


The Data will not be disseminated.
The following subjects may become aware of the Data in relation to the purposes of the processing outlined above and may process them, independently, as separate Data Controllers or as Data Processors duly appointed by the Controller (the list of such subjects can be requested from the Controller by writing to privacy@poltronafraugroup.com):

- Companies within the same Group as the Controller for the sending of marketing information about collections, exhibitions and events by the above companies in relation to their products and services;

- Companies within the same Group as the Controller for administrative and accounting purposes;

- Subjects who may access the Data by virtue of EU law or the law of the Member State to which the Controller is subject;

- Companies that carry out and provide additional services related to the purposes of the processing, companies that carry out newsletter mailing or market research activities, companies that offer data analysis services, companies that offer IT infrastructures and IT support and consulting services, legal or accountancy firms, and auditors;

- Purchasers or successors of the Controller in the event of a merger, sale, restructuring, reorganisation, winding-up or other sale or transfer of all or some of the Controller’s assets in the context of which the Data are transferred.

 

8. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES


All Data processing is carried out in Italy and in the countries of the European Union.
Should it be necessary to transfer the Data to Third Countries, the Controller undertakes to:

- Ensure that the country to which the Data will be sent guarantees an adequate level of protection, as provided under Article 45 of the GDPR; or

- Comply with the standard contractual clauses for Data protection approved by the European Commission as to the transfer of personal information outside the EEA in accordance with Article 46.2 of the GDPR; or

- Ensure that, should the Data be required to be transferred to the United States, the relevant third party is registered with the Privacy Shield.

 

9. DATA SUBJECT RIGHTS – COMPLAINTS TO THE SUPERVISORY AUTHORITY


In relation to the above Data processing, it is possible to exercise at any time, by sending an email to privacy@poltronafraugroup.com, the following rights under the conditions and within the limits provided for under Articles 12 and 13 of the GDPR:

Right of access (Article 15 GDPR); Right to rectification of inaccurate data and to have incomplete personal data completed (Article 16 GDPR); Right to erasure of data (Article 17 GDPR); Right to restriction of processing (Article 18 GDPR); Right to object to processing under Article 6(1), point (e) or (f) of the GDPR.

The User also has the right to make a complaint to the Supervisory Authority, i.e. to the Italian Data Protection Authority (“Garante Privacy”) and/or other competent supervisory authorities (Article 77 GDPR).

Moreover, if the processing is based on consent or a contract and is carried out by automated means, you have the right to receive your Data in a structured, commonly used and machine-readable format and, if technically feasible, to transmit those Data to another Data Controller without hindrance under Article 20 of the GDPR.

You have the right to withdraw the consent provided for commercial and marketing purposes at any time.

You can also choose to be contacted for marketing purposes exclusively via traditional methods, expressing your opposition to receiving communications through automated methods.

 

10. MINORS

The Website and the products shown therein by the Controller are in no way intended for minors under the age of 18; therefore the Controller does not carry out any collection and/or processing of personal data relating to such individuals. In the event that personal data relating to minors are entered on the Website, the Controller will delete them.


***


If you would like to submit your application for a job with the Controller, your Data will be processed in accordance with the relevant privacy notice, available at the following link: https://careers.Titolare.com/


***


This Notice is effective from the date of publication. The Controller may make changes and/or additions to this Notice, including as a result of any subsequent regulatory changes and/or addendums.