• EN

Version of October 15th, 2019

 

Cap Design S.p.A. sole shareholder in its quality of data controller, wishes to inform the users of the website www.cappellini.com (hereinafter, the "Website"), on the processing of their personal data, pursuant to the European General Regulation on the Processing of Personal Data 679/2016/UE (hereinafter, the "European Regulation"). This Privacy Notice aims to provide You with the information necessary to enable You to express, if you deem it appropriate, an explicit and informed consent to the processing of your personal data, as detailed below.

 

  1. Data Controller and Data Protection Officer

 

Cap Design S.p.A. sole shareholder with registered office at via Busnelli, n. 5, 20821 Meda (MB), P.IVA n. 04311900965, company subject to management and coordination activities by Haworth Italy Holding S.r.l. (hereinafter, the "Controller"), which can be contacted at the following email address privacy@poltronafraugroup.com, acts as data controller in relation to the processing of Your personal data.

 

The Controller has appointed a data protection officer, who can be contacted at the following email address: dpo.poltronafrau@dpoprofessionalservice.it.

 

  1. Data processed

 

Your personal data, collected by the Controller when browsing the Website, are the following:

 

i.           name and surname;

ii.          State/Region, Country and, only if voluntarily provided, the City of residence;

iii.         e-mail address;

iv.         information related to Your job, should You contact us for reasons related to Your work activity;

v.          Your telephone number, only if voluntarily provided;

vi.         within the limits and in the cases provided for in this Privacy Notice, information on Your preferences, interests, characteristics and consumption habits; and

vii.        any further personal data relating to You that You may communicate by contacting us via the Website.

 

i.           the IP address and the domain name of Your device;

ii.          the Uniform Resource Identifiers of the requested resources;

iii.         the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (e.g. successful, error, etc.); and

iv.         other parameters relating to the device, the operating system and the IT environment You are using;

 

(hereinafter, jointly referred to as the "Data").

 

We further inform You that if You wish to send the Controller Your application for a job at the Controller’s premises, Your Personal Data will be processed by the Controller pursuant to the specific privacy notice, available at the following link https://careers.cappellini.com/privacy.

 

  1. Purposes of the processing

Your Navigation Data will be processed by the Controller for the following purposes:

 

  1. to guarantee the security of the Website, to check its correct functioning and to obtain statistics in relation to its use ("Purposes of Legitimate Interest for Website Security");
  2. to allow You to benefit of the services offered on the Website ("Contractual Purposes").

 

Your Identification Data will be processed by the Controller for the following purposes:

 

  1. to respond to any of Your requests for information regarding the Controller's products and/or services or to perform a contract to which You are a party ("Contractual Purposes");
  2. to comply with any legal and regulatory obligations ("Law Purposes");
  3. with Your prior consent, to carry out market surveys and send newsletters, commercial communications and invitations to events, for the promotion and/or sale of products and/or services of the Controller, by traditional and remote means of communication including email, SMS, social networks, instant messages, mobile applications, banners, mail and telephone, ("Marketing Purposes");
  4. with Your prior consent, to communicate Your Identification Data to the other companies of its group operating in the furniture sector as well as to its agents and authorized dealers (hereinafter, jointly referred to as "Third Parties") - whose list is available upon request which may be submitted to the e-mail address referred to in paragraph 7 below – for them to send You newsletters, commercial communications and invitations to events or to carry out market surveys, regarding their products and services, by any of the means of communication referred to in letter c) above ("Third Parties Marketing Purposes");
  5. if You have given your consent to the processing of Your Identification Data for Marketing Purposes referred to in letter c) above, to send You newsletters, commercial communications and invitations to events relating the Controller's products and services, by e-mail and SMS, taking into account non-invasive categories of belonging, such as the Country of residence, the last opening of a newsletter on the Controller's products and/or services, the channel through which You make a purchase of the Controller's products and services ("Purposes of Marketing Legitimate Interest");
  6. with Your prior consent and without prejudice to letter e) above, to send commercial communications and invitations to events, by any of the means of communication referred to in letter c) above, taking into account Your preferences, interests, characteristics and consumption habits or to perform analyses based on the above-mentioned characteristics, also combining Your Identification Data with other personal data relating to You which may already be legitimately in the possession of the Controller ("Profiling Purposes"); and
  7. to carry out activities relating to the sale of companies and business branches, acquisitions, mergers, spin-offs or other transformations and to carry out such operations, as well as to exercise and defend the Controller's rights vis-à-vis You and third parties in the event of a dispute ("Purposes of Legitimate Interest of Business").

 

  1. Legal basis of the processing

 

The processing of Your Navigation Data for Contractual Purposes is mandatory since the collection of such data takes place automatically during the navigation on the Website. Therefore, if You do not want Your Navigation Data to be processed for these purposes, You will not be able to benefit of the services offered by the Controller on the Website.

The processing of Your Identification Data for Contractual Purposes is also mandatory because, if You do not want such Data to be processed for these purposes, the Controller will not be able to reply to the requests for information that You may submit nor perform the contract to which You are a party.

The processing of Your Identification Data for Law Purposes is mandatory, in so far as required by applicable laws.

The processing of Your Identification Data for Marketing, Third Parties Marketing and Profiling Purposes is optional and subject to Your prior consent. Failure to give consent will make it impossibile for the Controller and/or the companies of its group, its agents and authorized dealers to keep You updated on new products or services, promotions, customized offers, as well as to carry out market surveys, invite You to events and to send You communications or other information which may be in line with Your interests.

The processing of Your Navigation Data for the Purposes of Legitimate Interest for Website Security and the processing of Your Identification Data for the Purposes of Marketing Legitimate Interest and of Legitimate Interest of Business are functional to the pursuit of a legitimate interest of the Controller, adequately balanced with Your interests according to the limits imposed on this processing and are not mandatory. You will have the right to object to the processing for these purposes, in the ways indicated in paragraph 7 below, unless the Controller has an overriding interest to continue processing such Data and except in case the processing is necessary to exercise or defend a right of the Controller in court.

 

  1. Processing methods

 

In relation to the aforementioned purposes, the Data will be processed both by IT means and on paper and, in any case, by suitable means to ensure security and confidentiality of the Data through the adoption of the security measures prescribed by the European Regulation.

The Controller shall delete and/or remove the Data if there is no need to process the Data in an identifiable form for the purposes of the processing and at the end of the retention period indicated in paragraph 8 below.

 

  1. Scope of communication and disclosure of the Data

 

The Controller may communicate the Data for the purposes referred to in paragraph 3 to the following categories of recipients: (i) collaborators and employees of the Controller and of the subjects indicated below in this paragraph 6, within the scope of their duties, as persons authorized to the processing; (ii) third-party suppliers of assistance and consultancy services with reference to the activities in sectors such as marketing, technology, accounting, administrative, legal, insurance, as autonomous data controllers or data processors; (iii) subjects and authorities whose right of access to Your Data is expressly recognized by law, regulations or provisions issued by the competent authorities, in their quality of autonomous data controllers. Moreover, Your Identification Data may be communicated by the Controller also to the following categories of recipients: (i) companies or business branches’ assignee, companies resulting from possible mergers, spin-offs or other transformations of the Controller, in their quality of autonomous data controllers; (ii) companies of its group, as well as its agents and authorized dealers, as data processors, without prejudice to the communication referred to in paragraph 3, letter d) above, which will be subject to Your prior consent.

Your Data will not be disclosed.

Your Data may be transferred abroad, in compliance with the applicable laws, even to some Countries which do not belong to the European Economic Area and, in particular, to the Countries where the companies of the group to which the Controller belongs have their registered office, as well as to the Countries in which the showrooms and authorized dealers of the Company’s products and services are located; a complete list of the latters is available on the Website, while a complete list of the companies of the group may be requested to the Controller, by sending an email to the email address indicated in paragraph 7 below. Any transfer of Your Data to the Countries outside the European Economic Area will be in any case carried out in compliance with appropriate safeguards for the transfer, pursuant to Articles 44 and subsequent of the European Regulation.

In any case, You will be made aware of any potential Data transfer outside the European Economic Area, by updating this Privacy Notice, in the manner indicated in the following paragraphs.

 

  1. Data Subject's rights

 

You will have the right, in any moment and for free:

a)      to obtain from the Company the confirmation of the existence or not of Your Data and to be made aware of its content and origin, verify its accuracy or request its integration or updating, or rectification;

b)     to ask for the deletion, transformation into anonymous form or blocking of the Data processed in violation of the law;

c)      to object in any case, for legitimate reasons, to the Data processing;

d)     to ask the Company for the limitation of the Data processing in the event that (i) You challenge the accuracy of the Data, for the period necessary for the Company to verify the accuracy of such Data; (ii) the processing is unlawful and You object to the deletion of the Data, but ask instead its use to be limited; (iii) the Data are necessary to ascertain, exercise or defend a right of the Controller in court, although the Company no longer needs them for the purposes of the processing; (iv) You have objected to the processing pursuant to Article 21, paragraph 1, of the European Regulation, pending verification as to whether the legitimate interests of the data controller take precedence over those of the data subject;

e)      to object to the processing of the Data, at any time;

f)      to ask for the deletion of the Data without undue delay;

g)     to obtain the portability of Your Data;

h)     to revoke, at any time, the consent to the processing of the Data, without prejudice to the lawfulness of the processing based on the consent given prior to revocation.

 

The above-mentioned requests can be addressed directly to the Controller, by sending an email to the following email address: privacy@poltronafraugroup.com.

 

You also have the right to file a complaint before the Italian Data Protection Authority, in case the relevant conditions do exist.

 

  1. Data retention period

 

The Controller will retain the Data for the period necessary to pursue the purposes for which the Data has been collected, pursuant to paragraph 3 above.

In any case,

 

Once the above-mentioned terms have expired, the Data may be deleted, made anonymous and/or aggregated.

 

  1. Changes and updates

 

This Privacy Notice is valid from the effective date. The Controller may make amendments and/or additions to this Privacy Notice, also as a consequence of any subsequent regulatory amendments and/or additions. Any changes or updates will be notified to You in advance.