WEBSITE PRIVACY POLICY

PURSUANT TO ARTICLE 13 OF EU REGULATION 2016/679 RELATING TO THE PROTECTION AND PROCESSING OF PERSONAL DATA (GDPR)

1. WHO IS THE DATA CONTROLLER

The data controller is Kreacasa S.r.l.s. with registered office at Via Andrea Millevoi, 801 00178 Rome (RM) Italy, represented by its legal representative pro tempore (“Controller” or “Kreaidea”),
To exercise your rights, as well as to receive any information relating to them and/or to this Privacy Notice, you may contact the Controller at the following contacts: info@kreaidea.it tel. +39 3392488827.

2. PURPOSE OF PROCESSING, LEGAL BASIS AND RETENTION PERIOD

Kreaidea will process your personal data, either directly provided by you or collected during your visit to the www.kreaidea.it website (the “Site”), for the following purposes.

2.1. SITE NAVIGATION

During navigation, the computer systems and software procedures responsible for the operation of the Site acquire certain personal data whose transmission is implicit in the use of Internet communication protocols, such as, by way of example, the IP addresses or domain names of the computers and terminals used by users, the addresses in URI/URL (Uniform Resource Identifier/Locator) notation of the requested resources, the time of the request, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the user's operating system and IT environment, for the purpose of:

allow you to access and use the Site
obtain statistical information on the use of the services
check the correct functioning of the services offered

The legal basis for processing your data for the purposes referred to in points 1, 2, 3 is the fulfillment of your request, pursuant to Article 6, paragraph 1, letter b), of the GDPR; your possible refusal to provide such data would make it impossible to consult the Site.
Browsing data are retained for the periods indicated in the cookie policy available on the site.

2.2. RESPONSE TO THE REQUEST FOR INFORMATION

Within the "Contact Us" section of the Site, there is a specific form where you can voluntarily provide some of your common personal data in order to request the information you need. If you decide to use this service, your personal data will be processed by the Data Controller solely for the purpose of responding to your information request.
The legal basis for processing your data for this purpose is the fulfillment of your request, pursuant to Article 6, paragraph 1, letter b), of the GDPR.
The provision of your personal data for the above purpose is optional. However, if you choose not to provide your personal data, you will not be able to obtain the information you need.
For this purpose, the personal data provided through the website will be retained for the time necessary to fulfill the request.

2.3. PURPOSE OF PERSONNEL SELECTION - “WORK WITH US”

Within the Contacts Section, there is a specific area called “Work with Us.” Through this area, you can upload and send your curriculum vitae directly to Kreaidea.
Should you decide to use this service by submitting your curriculum vitae, your personal data of a general or even special nature, should you choose to include such types of personal data in your curriculum vitae, will be processed by the Data Controller for the personnel selection procedure, which includes, by way of example and not limitation, the review of your curriculum vitae and the organization of interviews aimed at the possible establishment of an employment relationship with Kreaidea.
The legal basis for processing your data is, with reference to your general personal data, the execution of pre-contractual measures at the request of the data subject, pursuant to Art. 6, first paragraph, letter b), of the GDPR; therefore, your consent is not necessary to authorize the processing. If you provide special categories of personal data in your curriculum vitae, the related processing may be carried out by the Data Controller only after obtaining your consent.
The provision of your personal data for the above purposes is optional; however, failure to provide your personal data or, with reference to any special categories of personal data, your consent, will make it impossible for the Data Controller to process your personal data and, therefore, to allow your participation in the personnel selection process and the possible establishment of a working relationship.
Your personal data will be retained by the Data Controller for the time necessary to fulfill the requirements for personnel selection and, in any case, no longer than one year from their collection.

2.4. PURPOSES OF PROMOTIONAL COMMUNICATION

Following the submission of information requests in the Contacts section for informational purposes (par. 2.2), your subscription to the Newsletter (par. 2.4), or on the pages of the site where there is a form for requesting specific information, the Data Controller assumes your potential interest in being informed about activities, initiatives, and products of Kreaidea.
Consequently, in such circumstances, the Data Controller intends to use your personal data (name, surname, telephone number, e-mail address) to send you promotional communications regarding initiatives and products of Kreaidea, as well as to send you invitations to events organized by the same. The transmission of such communications may take place through traditional methods (such as, for example, phone calls) and/or automated contact methods (such as, for example, e-mail, fax, prerecorded phone calls, SMS, MMS, instant messaging, etc.).
The use of your personal data for promotional communication purposes will require your explicit consent (on the legal basis pursuant to Article 6, first paragraph, letter a, of the GDPR), by selecting the appropriate box that will be presented to you at the time of providing the data. The sending of promotional communications will not require your consent if it is carried out using personal data (e.g. e-mail address) provided by you in the context of previous activities aimed at the sale of similar products of the Data Controller or in the event that you act, as a representative of legal entities, within the scope of commercial relations with the Data Controller; in such circumstances, the processing of your personal data will be based on the overriding legitimate interest of the Data Controller.
In any case, upon receiving each e-mail communication, you may easily object to receiving further communications from Kreaidea by using the "Unsubscribe" link present in all electronic commercial communications, or by contacting the Data Controller at the addresses indicated in point 1 above.
Your personal data will be processed for this promotional purpose until you decide to withdraw your consent or object to the continuation of the processing, by contacting the Data Controller at the references indicated in point 1 of this Privacy Policy.
Participation in promotional initiatives remains optional and your refusal will not have any consequences regarding the other processing purposes mentioned in this policy, but it will prevent Kreaidea from keeping you updated on its further initiatives, events, and its projects and/or products.

2.7. COOKIES AND OTHER TRACKING SYSTEMS

This site uses cookies; for more information, please consult our Cookie Policy available at the following link https://www.kreaidea/cookie-policy

3. METHODS FOR THE PROCESSING OF YOUR PERSONAL DATA

The processing of your personal data will take place, in compliance with the provisions of the GDPR, by means of paper, computer, and telematic tools, for the purposes indicated and, in any case, in ways suitable to guarantee an adequate level of security and confidentiality, in accordance with the provisions of Article 32 of the GDPR.
By processing of personal data is meant their collection, registration, organization, storage, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, deletion, and destruction, or the combination of two or more of these operations, also through automated tools designed to store, manage, and transmit the data themselves, using tools suitable to guarantee security and confidentiality.

3.1 USE OF SOCIAL MEDIA

Kreaidea may also provide links to other social media platforms that lead to servers installed by individuals or organizations over which it has no control. Kreaidea makes no representations, nor assumes any responsibility regarding the accuracy or any other aspect of the information available on such sites. Linking to a third-party site cannot be construed as an endorsement, either by Kreaidea or by that third party, of the products and services of others or of that third party. Kreaidea makes no representations or warranties regarding the use or storage of user data on third-party sites. Users are encouraged to carefully review the privacy policy governing third-party sites linked to our website to have a complete understanding of the possible use of your personal data.

4. RECIPIENTS OF YOUR PERSONAL DATA AND WHO MAY BECOME AWARE OF IT

For the pursuit of the purposes described in the previous paragraph 2, the personal data processed will be known by employees, equivalent personnel, and collaborators of Kreaidea, who will act as persons authorized to process personal data.
Furthermore, for the pursuit of the purposes described in the previous paragraph 2, your personal data may be processed by third parties belonging, by way of example, to the following categories:

subjects that provide services for the management of the IT system, including server hosting and backup services;
technical support service providers;
other service providers;
authorities and supervisory and control bodies and, in general, subjects, public or private, with public functions;

The subjects belonging to the categories listed above operate, in some cases, in total autonomy as separate data controllers, in other cases, as data processors specifically appointed by the Data Controller in compliance with Article 28 of the GDPR.

The communication of your data to the subjects belonging to the categories listed above and operating as independent data controllers does not require your consent, as it is based on the overriding legitimate interest of the Data Controller, since such communications are necessary for the pursuit of the purposes mentioned in the previous paragraph 2.

The complete and updated list of subjects to whom your personal data may be communicated can be requested by contacting the Data Controller at the address indicated in par. 1 of the Privacy Policy.

5. WHAT RIGHTS YOU HAVE AS A DATA SUBJECT

In relation to the processing described in this Privacy Policy, as a data subject, you may, under the conditions provided by the GDPR, exercise the rights established in Articles 15 – 21 of the GDPR, in particular:

right of access – Article 15 GDPR: right to obtain confirmation as to whether or not personal data concerning you are being processed and, if so, to obtain access to your personal data – including a copy thereof – and
the communication, among others, of the following information:
1. purposes of the processing
2. categories of personal data processed
3. recipients or categories of recipients to whom these data have been or will be disclosed
4. data retention period or the criteria used
5. data subject's rights (rectification, erasure of personal data, restriction of processing, and right to object to processing)
6. right to lodge a complaint with the supervisory authority
7. right to receive information on the origin of personal data if they were not collected from the data subject
8. the existence of automated decision-making, including profiling, as well as meaningful information about the logic used and the expected consequences of such processing for the data subject;
right to rectification – Article 16 GDPR: right to obtain, without undue delay, the rectification of inaccurate personal data concerning you and/or the completion of incomplete personal data;
right to erasure (right to be forgotten) – Article 17 GDPR: right to obtain, without undue delay, the erasure of personal data concerning you, when:
1. the data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
2. you have withdrawn your consent and there is no other legal basis for the processing;
3. you have successfully objected to the processing of personal data;
4. the data have been processed unlawfully,
5. the data must be erased to comply with a legal obligation;
6. the personal data were collected in relation to the offer of information society services referred to in Article 8, paragraph 1, GDPR.

The right to erasure does not apply to the extent that processing is necessary for compliance with a legal obligation or for the performance of a task carried out in the public interest or for the establishment, exercise or defense of a legal claim.

right to restriction of processing– Article 18 GDPR: right to obtain restriction of processing, when:
1. the data subject contests the accuracy of the personal data;
2. the processing is unlawful and the data subject opposes the erasure of the personal data and instead requests the restriction of their use
3. the personal data are required by the data subject for the establishment, exercise or defense of legal claims;
4. the data subject has objected to processing pending the verification whether the legitimate grounds of the controller override those of the data subject.
right to data portability– Article 20 GDPR: right to receive, in a structured, commonly used and machine-readable format, the personal data concerning you provided to the Controller and the right to transmit those data to another controller without hindrance, where the processing is based on consent and carried out by automated means. In addition, the right to have your personal data transmitted directly from one controller to another, where technically feasible;
right to object– Article 21 GDPR: right to object to the processing of personal data concerning you, unless there are legitimate grounds for the Controller to continue the processing;
right to lodge a complaint with the Data Protection Authority, Piazza di Montecitorio n. 121, 00186, Rome (RM).

The above rights may be exercised, with respect to the Data Controller, by contacting the references indicated in the previous par. 1. The Data Controller will take charge of your request and provide you, without undue delay and, in any case, at the latest within one month from receipt of the request, with information relating to the action taken regarding your request.

The exercise of your rights as a data subject is free of charge pursuant to Article 12 GDPR. However, in the case of manifestly unfounded or excessive requests, including due to their repetitive nature, the Data Controller may charge you a reasonable fee, in light of the administrative costs incurred to manage your request, or deny the satisfaction of your request.

Finally, we inform you that the Data Controller may request further information necessary to confirm the identity of the data subject.

Contact us

Address

Social

info@kreaidea.it

ROME

Via Andrea Meldola n.266 - Arcobaleno Shopping Gallery

00143

facebook
instagram

Tel.3392488827

The outfit for your new home

Legal noticePrivacy policyAccessibility criteria