Information on the processing of personal data pursuant to art. 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 ("General Data Protection Regulation - GDPR")
Updated: January 17, 2025
Information and contact details of the data controller
Data Controller:
CHIOMAKER srl , VAT number 02841580042, with registered office in Piazza Cottolengo n° 1, 12040 Corneliano d'Alba (CN)
Contact details of the Data Controller:
Email: info@chiomaker.it
PEC: chiomaker@pec.it
Telephone: 0173-1820815
CHIOMAKER srl , as Data Controller of your personal data (hereinafter also " CHIOMAKER " or " Data Controller "), informs you, pursuant to articles 12 and 13 of Regulation (EU) 2016/679 / General Data Protection Regulation, hereinafter referred to for brevity as " GDPR "), that your personal data will be processed by specifically authorised persons and limited to the purposes and in the manner specified below.
CHIOMAKER is the owner and operator of this website www.chiomaker.it, to which the information contained in this policy applies (hereinafter also "Site").
CHIOMAKER believes in the importance of privacy for all its users and uses the data collected only to improve the user experience of the site, respecting the standards set by European (GDPR) and national (Privacy Code) regulations, constantly updating the information when necessary and making it easier to read and understand.
The GDPR is a regulation aimed at strengthening and unifying data protection for all individuals within the European Union. It requires a high level of transparency regarding how personal data is collected, stored, used, and more generally processed, and imposes strict limits on its use.
SUBJECT AND PURPOSE OF THE PROCESSING
CHIOMAKER informs you that it will process, specifically, your identification data (name, surname), contact data (residential/domicile address, telephone number, email address), login credentials (username and password), postal and payment data, any other data necessary to complete user registration (insurance and company data), IP address and data automatically collected through this website and/or CHIOMAKER social networks during navigation as a user of this website and/or CHIOMAKER social networks , according to the purposes and methods defined and specified below.
The Data Controller specifies that it does not intentionally collect personal data belonging to special categories pursuant to Art. 9 of the GDPR, nor data relating to criminal convictions and offenses pursuant to Art. 10 of the GDPR. The Data Controller invites you not to provide such data and/or information from which such data could be inferred (for example, in comments you post on the Sites), nor, in general, to provide personal data that is not strictly necessary.
In particular, the personal data you provide to CHIOMAKER to allow you to interact with all the features of the Site will be processed for the following purposes :
- For the use and purchase of the services and/or products offered by CHIOMAKER on the Site, and in particular with reference to all the functions made possible by interaction with the Site through the specific buttons.
- To ensure the proper functioning of the Site and all related technical features, in order to provide the user with the best possible browsing and purchasing experience of the services/products offered on the Site; to this end, the Data Controller reserves the right to verify the correct functioning of its services, measure the level of satisfaction of its users, in order to improve the quality of customer care processes, both by carrying out statistical surveys on aggregate and anonymous data, and possibly by subjecting users and subscribers of paid services to free questionnaires and customer satisfaction surveys, making them available on the Site and/or through other methods, participation in which is always optional and voluntary.
The requested data, only following your free and optional consent , may also be used:
- For the sending of commercial communications by the Data Controller using automated tools (e.g., email, SMS, MMS, posts on social media accounts), including possible subscription to the "Newsletter" and participation in surveys and/or market analyses.
This information is effective only with reference to the Site, but not with reference to other and different IT portals or websites, for which CHIOMAKER is in no way responsible.
The data provided by the user will be processed, including through automatic collection during navigation, for the purposes of verifying and/or controlling access to the Site and/or for the sole purpose of improving its functionality, in order to ensure a better browsing experience.
Regarding the processing of IP addresses, as well as all user browsing data, carried out by CHIOMAKER for the purposes referred to in points 2 and 3 above, please refer to the Cookie Policy.
LEGAL BASIS FOR THE PROCESSING
Your communication to CHIOMAKER of the personal data specified above is based on the following legal bases , in relation to each purpose indicated above:
- Art. 6, par. 1, letters b), c) and f) of the GDPR (performance of a contract ; fulfillment of a legal obligation ; legitimate interest) for the purposes referred to in points 1 and 2 above.
- Art. 6, paragraph 1, letter a) of the GDPR (consent) for the purpose referred to in point 3 above.
The provision of your personal data is therefore necessary for the full fulfillment of the purposes set out in points 1 and 2 above. Consequently, your refusal to provide personal data may result in the failure to provide the aforementioned services and functions of this site, preventing all or part of its functionality.
Providing your data is optional for the full fulfillment of the purposes set out in point 3 above. Therefore, your refusal to provide personal data will not prevent the provision of the aforementioned services and features of this site, nor will it impede all or part of its functionality. The data subject has the right to withdraw his or her consent at any time. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal. Consent is withdrawn as easily as it is given.
Soft Spam. We also remind you that, pursuant to applicable law, the Data Controller may use the email address you provide when purchasing one of our services and/or editorial products to offer you products, services, and/or services similar to those you have already purchased. However, if you do not wish to receive such communications, you may object to receiving them at any time by notifying the Data Controller at the address indicated below or directly using the link in the email communications you receive (so-called opt-out). In this case, the Data Controller will immediately discontinue such activity. The legal basis for sending promotional communications is the data controller's legitimate interest pursuant to Art. 6, paragraph 1, letter f) of the GDPR. For more information or to object to the service, you can write to: privacy@chiomaker.it
TREATMENT METHODS
The processing of the personal data you provide is carried out using the operations indicated in art. 4, no. 2) of the GDPR, namely: " collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, communication, erasure, and destruction of data ."
The personal data you provide will be processed automatically by CHIOMAKER for the time strictly necessary to achieve the purposes for which they were collected, using technical and organizational methods designed to prevent data loss, unlawful and/or improper use, and unauthorized access. These methods, therefore, ensure a level of security appropriate to the risk pursuant to Art. 32 of the GDPR. This processing is carried out by specifically authorized persons, in compliance with the provisions of Art. 29 of the GDPR, or by CHIOMAKER employees and/or collaborators in their capacity as authorized persons and/or system administrators. These persons may consult, use, process, compare, and perform any other appropriate operations in compliance with the legal provisions necessary to guarantee, among other things, the confidentiality and security of the data, as well as the accuracy, updating, and relevance of the data in accordance with the stated purposes and methods.
In particular, please note that the personal data you provide will be processed only at CHIOMAKER's headquarters. Except as specified below , it will not be disclosed. Pursuant to Art. 13, paragraph 1, letter (e), the data may be processed only by authorized persons and/or any external data processors pursuant to Art. 28 of the GDPR (individual professionals and/or complex professional associations), and/or by persons acting as independent data controllers, including, explicitly, hosting companies and/or technical personnel responsible for managing and/or maintaining the website, but only and exclusively for the purposes expressly and specifically indicated above.
SCOPE OF DATA COMMUNICATION
In relation to the purposes indicated above, the data may be communicated to the following subjects and/or to the categories of subjects indicated below, or may be communicated to companies and/or individuals who provide services, including external ones, on behalf of CHIOMAKER.
For greater clarity, these include, but are not limited to: professionals and consultants, including associates; entities providing IT and telecommunications network management services (including email, web portal and website management, cloud storage, and hosting services); with your specific consent, commercial partners who process your data as independent data controllers for marketing purposes; banks; factoring companies, debt collection companies, and credit insurance companies; legal, administrative, and tax consulting firms; competent authorities for the fulfillment of legal obligations; entities performing control, auditing, and certification activities for CHIOMAKER, who act as external data processors pursuant to Article 28 of the GDPR, or independently as entities separate from CHIOMAKER.
With exclusive reference to browsing data and IP addresses, the Site may share some of the data collected with services located outside of Italy and the European Union. Should this become necessary for any reason, CHIOMAKER hereby ensures that the data transfer will be carried out in accordance with applicable laws and, in particular, in accordance with Articles 44, 45, 46, 47, 48, and 49 of the GDPR and other applicable laws.
A plugin with advanced user privacy protection features is installed on the Site. These plugins do not send cookies or access the cookies present on the User's browser when the page is opened, but only after the plugin is clicked.
The collection and use of information by these third parties are governed by their respective privacy policies, to which we ask you to refer.
- Facebook https://www.facebook.com/
- Whatsapp https://www.whatsapp.com/
- Instagram https://www.instagram.com/
The Site was generated in all its sections and features through the services made available by Shopify, including the virtual assistant module, payment modules, and possible installation of third-party profiling cookies. Please refer to the website https://www.shopify.com for a review of the terms and conditions and the personal data protection policy.
DATA RETENTION PERIOD
In compliance with the principles of lawfulness, purpose limitation, retention, and data minimization, pursuant to Article 5 of the GDPR, your personal data will be retained for a period of time no longer than is necessary to achieve the purposes for which they were collected and processed, or for the entire duration of the aforementioned purposes. Therefore, once the purposes of the processing have been fulfilled, your data will be deleted from all physical and electronic media.
Specifically, personal data will be retained until the contractual relationship ends and for the retention periods required by mandatory laws for administrative and accounting purposes, and in any case no longer than 10 years from the end of the contractual relationship for the purposes referred to in point 1 and the time required to fulfill the technical and management purposes referred to in point 2 above; until consent is revoked, and in any case no longer than 24 years for the purposes referred to in point 3.
AUTOMATED DECISION-MAKING PROCESSES AND PROFILING
CHIOMAKER informs that, for the purposes of processing your personal data, it does not use automated decision-making processes , i.e. those aimed at making decisions based solely on technological means according to predetermined criteria (i.e. without human involvement).
CHIOMAKER uses technical cookies and carries out profiling activities with the aid of third-party profiling cookies ( Shopify ) within the limits and in the manner better indicated in the Cookie Policy , to which express and full reference is made, to allow the User adequate and complete information on the matter and the consequent better management of the relevant consents.
USER RIGHTS (Interested Party)
Right of Access pursuant to Art. 15 of the GDPR and Right of Rectification pursuant to Art. 16 of the GDPR
As a data subject, pursuant to art. 15 of the GDPR, you have the right to obtain from CHIOMAKER confirmation as to whether or not personal data concerning you are being processed , to obtain access to the data and to all the information referred to in the same art. 15, paragraph 1, letters (a) to (h), by providing a copy of the data undergoing processing in a structured, commonly used, machine-readable, and interoperable format.
Pursuant to art. 16 of the GDPR, you also have the right to obtain from CHIOMAKER the rectification and/or integration of the data being processed if they are out of date and/or inaccurate and/or incomplete.
Right to erasure pursuant to Art. 17 of the GDPR and Right to restriction of processing pursuant to Art. 18 of the GDPR
As a data subject, you have the right to obtain the erasure of your personal data, exclusively in the cases set out in Article 17, paragraph 1, letters (a) to (f), of the GDPR—with the exception of the cases specifically provided for in Article 17, paragraph 3.
As a data subject, pursuant to Art. 18, paragraph 1, letters (a) to (d), of the GDPR, you have the right to request and obtain from CHIOMAKER the restriction of the processing of your personal data, meaning that such data will not be subjected to further processing and will no longer be subject to modification. CHIOMAKER ensures that the restriction of processing is implemented using appropriate technical devices that guarantee its inaccessibility and unalterability.
Right to data portability pursuant to art. 20 of the GDPR
As a data subject, pursuant to Art. 20 of the GDPR, you have the right to receive from CHIOMAKER your personal data, processed by automated means, in a structured, commonly used, and machine-readable format. You also have the right to transmit such data to another data controller or, where technically feasible, to obtain from CHIOMAKER the direct transmission of such data to another specifically identified data controller.
Right to object to processing pursuant to art. 21 of the GDPR
You have the right to object at any time, for reasons relating to your particular situation , to the processing of your personal data pursuant to Article 6, paragraph 1, letters e) and f), including profiling based on those provisions. The Data Controller will no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or for the establishment, exercise, or defense of legal claims.
Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing.
If the data subject objects to processing for direct marketing purposes, the personal data will no longer be processed for such purposes.
HOW TO EXERCISE YOUR RIGHTS
You may exercise the rights listed above by sending a request by email to: privacy@chiomaker.it .
CHIOMAKER will confirm receipt of your request and provide you with information regarding the action taken, with reference to the exercise of your rights under Articles 15 to 22 of the GDPR, within 1 (one) month of receiving the request. If necessary, and taking into account the complexity and number of requests, CHIOMAKER may extend this period by 2 (two) months, upon reasoned communication to be sent within 1 (one) month of receiving the request.
CHIOMAKER will communicate any rectification, erasure, restriction, or objection to all recipients, as identified in Article 4, paragraph 1, no. 9 of the GDPR, to whom such data has been transmitted, unless this proves impossible and/or involves a disproportionate effort. Following the submission of your request for rectification, erasure, restriction, or objection, if CHIOMAKER has reasonable doubts about your identity, it will request further information to confirm it. These communications will be sent via email from the aforementioned address and will be processed by the person specifically authorized for this purpose.
Finally, please remember that you have the right to lodge a complaint with the Supervisory Authority (Italian Data Protection Authority), as specified in Article 13, paragraph 2, letter (d) and governed by Articles 77 et seq. of the GDPR and 141 et seq. of Legislative Decree 196/2003, as amended by Legislative Decree 101/2018.
Version 1.0 of January 17, 2025
