Information about personal data processing

Data controller

Personal data controller is Chantecler S.p.A., sited in via Francesco Caracciolo 11, 80122 Napoli.

Purposes and legal grounds

Chantecler S.p.a. processes your personal data for the following purposes:

• sending a newsletter if requested on the web form; the legal ground is the performance of a contract (i.e. a request) to which the data subject is party;
• managing orders received on our website; in detail for:
  • managing orders, payments and deliveries; the legal grounds are the performance of a contract to which the data subject is party and the compliance with a legal obligation to which the controller is subject (i.e. bookkeeping laws and regulations);
  • recording the VAT for the verification of the receiver of the goods; the legal ground is the performance of a contract to which the data subject is party;
  • drafting statistics on non-mandatory data inserted by the users; the legal ground is the consent of the data subject;
  • verifying there are not duplicated records on the databases, using VAT code and email; the legal ground are the legitimate interests pursued by the controller (i.e. not having inconsistent data);
• recording and analysing the preferences on the legal ground of the consent of the data subject;
• performing customer satisfaction surveys on the legal ground of the consent of the data subject;
• marketing and telephone direct marketing; the legal ground is the consent of the data subject;
• in case of CVs, evaluating the possibility of a collaboration; ; the legal ground is the taking steps at the request of the data subject prior to entering into a contract;
• for cookies, for the purposes in the cookie policy, on the legal ground of the legitimate interest (i.e. correct functioning of the site) of the data controller for the technical cookies and of the consent for the others.

Communication and transfers to third parties

Data can be transferred to other parties only if requested by the applicable laws and regulations of for the above purposes. Transfers will not be outside the European Union.

For the delivery, data will be transferred to the shipper that acts as data controller. For purchases above 15.000€ and for returning customers, the shipper will require to fill an identification form (request, to natural persons, to give name, date and place of birth, residence and shipping address). This is for the compliance with a legal obligation to which the controller is subject (i.e. D. Lgs. 231/2017 on counterfeiting).

For cookies, see cookies policy.

Retention time

Data will be retained:

• until a request of the data subject for data for the newsletters and direct marketing;
• for 10 years after the last order (and an additional year because of the backup cycle) for data processed for the management of orders;
• for 2 years for CV data.

For cookies, see cookies policy.

Rights belonging to the data subjects

Laws and regulations on personal data protection offer data subjects a chance to exercise specific rights. In particular:

• as long as not required by the law or other regulations, you may obtain the access to your personal data and its correction or processing limitation;
• for data used on the legal ground of the consent, you may obtain the deletation and the blocking of the processing;
• you may send a claim to the data controller or to the National Authority (in Italy it is Garante per la protezione dei dati personali), following instructions on its website.