Privacy Policy & Cookie Law for users visiting this website in accordance with Article 13 of Regulation (EU) 2016/679 and for users visiting this website in accordance with Article 19 of the Swiss Federal Data Protection Act of September 25, 2020
WHY THIS INFORMATION
The following information regarding the use of cookies and the processing of personal data on this website is provided to the user/browser in compliance with the provision of the Guarantor for the protection of personal data and in accordance with Article 13 of EU Regulation 2016/679 for the protection of personal data.
In accordance with Regulation (EU) 2016/679 (hereinafter “Regulation”), this page describes the processing of user/browser personal data while using the services of the site, and the options for contacting and acquiring user personal data, in full compliance with Article 13 of EU Regulation 2016/679 for the protection of personal data, regarding users who access the following websites via electronic means:
www.cottonpoint.it
This information does not concern other websites, pages, or online services accessible through hyperlinks that may be published on the sites but refer to resources external to the domains.
Following the consultation of the aforementioned sites, data relating to identified or identifiable individuals may be processed.
DATA CONTROLLER
The Data Controller is:
Cotton Point S.r.l.
Via Alessandro Volta, 57/59 25020 Flero (BS) – Italy
info@cottonpoint.it
VAT ID: IT-03303200988
CATEGORIES OF PERSONAL DATA AND PURPOSES OF THE PROCESSING
Data communicated by users
Sending messages, on the basis of the user’s free, voluntary, explicit choice, to the Controller’s contact addresses, or sending private messages to the Controller’s social media pages and profiles (where this option is available), and filling in and sending the forms made available on the Controller’s websites entail the acquisition of the sender’s contact information – which is necessary to provide a reply – as well as of any and all the personal data communicated in that manner.
Specific information notices will be displayed on the pages of the Controller’s websites that are used for providing certain services.
Navigation Data
The computer systems and software procedures used to operate this website acquire certain personal data during their normal operation, the transmission of which is inherent in the use of Internet communication protocols.
This category of data includes, by way of example but not exhaustively, IP addresses or domain names of computers and terminals used by users, the URI/URL addresses (Uniform Resource Identifier/Locator) of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters relating to the operating system and the user’s IT environment.
These data, necessary for the use of web services, are also processed for the purpose of:
– obtaining statistical information on the use of services (most visited pages, number of visitors per time or day, geographical areas of origin, etc.);
– checking the proper functioning of the services offered.
Navigation data does not persist for more than the time strictly necessary and is deleted immediately after its aggregation (except when necessary for the detection of crimes by the judicial authorities).
Data Provided by the User
The optional, explicit, and voluntary sending of messages to the contact addresses of the Data Controller, as well as the completion and submission of forms on the website, entail the acquisition of the sender’s contact data, necessary to respond, as well as all personal data included in the communications.
Specific information notices will be published on the Data Controller’s websites pages dedicated to the provision of specific services.
Cookies and other tracking devices
This website uses cookies to ensure the correct use of the site’s contents.
The site uses technical and session cookies (non-persistent) strictly limited to what is necessary for safe and efficient navigation of the site. The storage of session cookies on terminals or browsers is under the user’s control. On the servers, at the end of HTTP sessions, information relating to cookies remains recorded in the service logs, with retention times strictly necessary for proper functioning.
Banner operation
The privacy management banner activated on this site does not allow any profiling cookies to be activated until the user has given their consent. If the user clicks the “I agree” button, all profiling cookies will be activated. If the user decides to click the “Personalize” button, they can customize their choices and decide which profiling cookies to activate. If the user clicks on the “Reject” button or the “X” in the top right of the banner, no profiling cookies will be activated.
The user’s choices will be stored for six months through a technical cookie that will be installed on the device used by the user to access the site. It is essential to explain that if the user changes their device, for example, from a computer to a mobile phone, the choices cannot be transferred to the new device for technical reasons, and they will need to be selected again on the new device.
The user’s choices can be changed at any time by accessing the control panel from the privacy control icon. The new configuration will last for six months.
The site uses cookies for third-party profiling as specified below.
Which cookies are installed on this site?
Google Tag Manager
Google Tag Manager è un servizio di gestione dei tag fornito da Google Ireland Limited.I dati inviati vengono collezionati per gli scopi di personalizzazione dell'esperienza e il tracciamento statistico. Trovi maggiori informazioni alla pagina "Ulteriori informazioni sulla modalità di trattamento delle informazioni personali da parte di Google".
Luogo del trattamento: Irlanda - Privacy Policy
My Agile Pixel - Google Analytics
Google Analytics è un servizio di analisi web fornito da Google Ireland Limited (“Google”). Google Ireland Limited è di proprietà di Google LLC USA. Google utilizza i Dati Personali raccolti per tracciare ed esaminare l’uso di questo sito, compilare report sulle sue attività e condividerli con gli altri servizi sviluppati da Google.
Per garantire una maggiore aderenza al GDPR in merito al trasferimento dei dati al di fuori dell'UE, è opportuno effettuare tale trasferimento esclusivamente in forma anonima. È importante sottolineare che la semplice anonimizzazione non offre un livello di protezione sufficiente per i dati personali esportati al di fuori dell'UE. Per questo motivo, i dati inviati a Google Analytics, e quindi potenzialmente visibili anche al di fuori dell'UE, potranno essere resi anonimizzati attraverso un sistema di proxy denominato My Agile Pixel. Questo sistema potrà sostituire i tuoi dati personali, come l'indirizzo IP, con informazioni anonime che non sono riconducibili alla tua persona. Di conseguenza, nel caso in cui avvenga un trasferimento di dati verso Paesi extra UE o negli Stati Uniti, non si tratterà dei tuoi dati personali, ma di dati resi anonimi.
I dati inviati vengono collezionati per gli scopi di personalizzazione dell'esperienza e il tracciamento statistico. Trovi maggiori informazioni alla pagina "Ulteriori informazioni sulla modalità di trattamento delle informazioni personali da parte di Google".
How many types of cookies are there?
There are two fundamental macro-categories, with different characteristics:
technical cookies and profiling cookies.
Technical cookies are generally necessary for the website to function properly and to allow navigation;
without them the browser may not be able to view the pages correctly or to use some services. For example, a technical cookie is essential to keep the user connected throughout the visit to a website, or to memorize the settings of the language, display, and so on.
Technical cookies can be further divided into navigation cookies, which guarantee normal navigation and use of the website (allowing, for example, to make a purchase or authenticate to access restricted areas); analytics cookies, similar to technical cookies only when used to collect information, in aggregate form, regarding the number of users and their site-visiting behavior; functionality cookies, which allow the user to browse according to a series of selected criteria (for example, the language, the products selected for purchase) in order to improve the service provided.
Profiling cookies are designed to create profiles relating to the user and are usually used in order to send advertising messages in line with the preferences expressed by the user while surfing the net.
Cookies can also be classified as:
session cookies, which are deleted immediately when the browser is closed (for example, Internet Explorer, Safari, Google Chrome, etc.) persistent cookies, which – unlike session cookies – remain within the browser for a certain period of time. They are used, for example, to recognize the device that connects to the site, facilitating user authentication operations
first-party cookies, i.e. cookies generated and managed directly by the manager of the website on which the user is browsing
third-party cookies, which are generated and managed by parties other than the manager of the website on which the user is browsing (as a rule, by virtue of a contract between the website owner and the third party)
Information related to the management of personal data through social media platforms used by the Data Controller.
Regarding the processing of personal data carried out by the operators of the social media platforms used by the Data Controller, reference is made to the provisions found in their respective privacy policies. The Data Controller manages the personal data provided by users through dedicated pages on social media platforms, in order to manage interactions with users/customers (such as comments, public posts, etc.), always in accordance with current legislation.
LEGAL BASIS FOR THE PROCESSING
The personal data mentioned on this page are processed by the Data Controller in the execution of the services provided by the site and subsequently, if provided for by the site itself, by contractual or legal obligations and defense in court.
In cases where there are specific sections for newsletter subscriptions or marketing services, they will be managed by specific notices and the legal basis will be consent.
OPTIONALITY OF DATA SUPPLY
As provided by the decree of June 10, 2021, “Guidelines on cookies and other tracking tools,” the website user is free to authorize or not authorize profiling cookies according to their free choice and will. In some cases, such as the Google reCaptcha cookie, blocking such profiling cookies prevents the submission of requests through data acquisition forms equipped with this tool.
If a problem arises with a non-functioning form due to cookie blocking, it can be resolved by reactivating cookies from the privacy settings. Alternatively, if one prefers to maintain the cookie block, the request can be sent via email.
In addition to information related to navigation data, users can freely decide whether to provide their personal data through request forms available on the sites or as indicated during contacts with the organization to request newsletters, informational material, or other communications.
Without such data, it will be impossible to fulfill the request.
LEGITIMATE INTEREST
The Controller does not make use of legitimate interest for the processing of personal data except for the protection of their own rights, namely, to establish, exercise, or defend a right before the courts.
PROCESSING METHODS
Personal data is processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected.
Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
DATA RECIPIENTS
The processing of personal data is carried out by authorized personnel or duly appointed data processors. The updated list of data processors or any autonomous data controllers can be requested from the Data Controller or the DPO.
DATA TRANSFER
The data will be transferred only within the EU. Some applications, such as, but not limited to, Google Analytics, ReCaptcha, and Facebook Pixel, may be transferred to the USA to companies that have obtained certification under the Data Privacy Framework.
Under the Swiss Federal Data Protection Act of September 25, 2020, data will be transferred only to those states approved by the Swiss Federal Council, which can be found on the website https://www.bj.admin.ch/bj/it/home/staat/datenschutz/internationales/anerkennung-staaten.html The inclusion of the third country in the mentioned list allows the free transfer of personal data to that state by both private entities and federal bodies.
DATA CONSERVATION PERIOD
The retention time of the user’s choices relating to cookies is six months as required by the measures.
The time for retaining cookies changes depending on the type of belonging. For third-party profiling cookies, the specifics can be consulted directly on their relative sites.
DATA SUBJECT RIGHTS PURSUANT TO ART. 15 EU 2016/679 and ART. 25 Swiss Data Protection Act
Data subjects have the right, in the cases provided for, to obtain from the Controller access to their personal data and the rectification or erasure of such data or the restriction of processing concerning them or to object to the processing (Arts. 15 and following of the Regulation, ART. 25 Swiss Data Protection Act). Opposition for marketing purposes is always possible and free of charge. Requests should be addressed to the Data Controller at the contact details provided at the beginning of this information.
RIGHT TO COMPLAIN
Data subjects who believe that the processing of personal data referred to them carried out through this site occurs in violation of what is provided by the Regulation have the right to lodge a complaint with the Guarantor, as provided for by Article 77 of the same Regulation, or to take action in the appropriate judicial venues (Article 79 of the Regulation).
As stipulated by the LPD, the IFPDT initiates an official or reported investigation against a federal body or a private individual if there is sufficient evidence that a data processing operation may violate data protection regulations. Here is the link: https://www.edoeb.admin.ch/edoeb/en/home/deredoeb/contact/reporting.html
Privacy Policy Statement
This notice is provided in accordance with Article 13 of EU Regulation 2016/679 for the protection of personal data and Article 19 of the Swiss Federal Data Protection Act of September 25, 2020. The data processed will be those of web users.
The Data Controller is:
Cotton Point S.r.l.
Via Alessandro Volta, 57/59 25020 Flero (BS) – Italy
info@cottonpoint.it
VAT ID: IT-03303200988
Nature of data provision
The provision of data is optional. Refusal to provide the data will result in the impossibility of being contacted for the purposes stated below. Providing data for marketing purposes is optional and will not prevent being contacted for other purposes.
Providing us with your personal data is optional but if you don’t give us your details and your consent to use them, we will not be able to contact you or to send you any promotional offers.
Purpose of processing and legal basis
Personal data is processed for the following purposes:
-
The personal data provided by users may be used for us to contact you following a request made in the contact form;
-
fulfilment of obligations pursuant to the law, regulations or Community legislation and defence before the courts;
Regarding purposes sub a) and b), please note that the processing and communication of your personal data by the Data Controller do not require your consent as it is necessary for the execution of obligations arising from the contract itself and/or for the performance of services requested by you prior to the conclusion of the contract, as well as to comply with legal obligations.
Legitimate interest
The Controller does not make use of legitimate interest for the processing of personal data except for the protection of their own rights, namely, to establish, exercise, or defend a right before the courts.
Data processing methods
The collected data will be processed using computer tools.
Appropriate security measures are observed to prevent data loss, illicit or inappropriate use and unauthorized access.
Who processes your data
The processing of personal data is carried out by authorised personnel or by duly appointed data processors. The updated list of data processors or any autonomous data controllers can be requested from the Data Controller or the Data Protection Officer (DPO).
Data transfer
The data will only be transferred only within the EU. Some data may be transferred to the USA to those companies that are certified under the Data Privacy Framework.
Under the Swiss Federal Data Protection Act of September 25, 2020, data will be transferred only to those states approved by the Swiss Federal Council, which can be found on the website https://www.bj.admin.ch/bj/en/home/staat/datenschutz/internationales/anerkennung-staaten.html The inclusion of the third country in the mentioned list allows the free transfer of personal data to that state by both private entities and federal bodies.
Data conservation period
The retention time of the user’s choices relating to cookies is six months as required by the measures.
The time for retaining cookies changes depending on the type of belonging. For third-party profiling cookies, the specifics can be consulted directly on their relative sites.
Personal data processed for contact or economic purposes will be processed for the times mandatory under the laws of competence.
Data subject rights pursuant to art. 15 eu 2016/679 and ART. 25 Swiss data protection act
Data subjects have the right, in the cases provided for, to obtain from the Controller access to their personal data and the rectification or erasure of such data or the restriction of processing concerning them or to object to the processing (Arts. 15 and following of the Regulation, ART. 25 Swiss Data Protection Act). Requests should be addressed to the Data Controller at the contact details provided at the beginning of this information.
Right to complain
Data subjects who believe that the processing of personal data referred to them carried out through this site occurs in violation of what is provided by the Regulation have the right to lodge a complaint with the Guarantor, as provided for by Article 77 of the same Regulation, or to take action in the appropriate judicial venues (Article 79 of the Regulation).
As stipulated by the LPD, the IFPDT initiates an official or reported investigation against a federal body or a private individual if there is sufficient evidence that a data processing operation may violate data protection regulations. Here is the link: https://www.edoeb.admin.ch/edoeb/en/home/deredoeb/contact/reporting.html
