

ROME
Via Andrea Meldola n.266 - Arcobaleno Shopping Gallery
00143
The outfit for your new home
Privacy
WEBSITE PRIVACY NOTICE PURSUANT TO ARTICLE 13 OF EU REGULATION 2016/679 RELATING TO THE PROTECTION AND PROCESSING OF PERSONAL DATA (GDPR) 1. WHO IS THE DATA CONTROLLER The Data Controller is Kreaidea S.r.l.s. with registered office in Via Andrea Millevoi, 801 00178 Rome (RM) Italy, represented by its legal representative pro tempore (“Controller” or “Kreaidea”). To exercise your rights, as well as to receive any information relating to them and/or to this Notice, you may contact the Controller at the following contacts: info@kreaidea.it tel. +06 86726919. 2. PURPOSES OF PROCESSING, LEGAL BASIS AND RETENTION PERIOD - Kreaidea will process your personal data, provided directly by you or collected when browsing the website www.kreaidea.it (the “Site”), for the following purposes. 2.1. SITE BROWSING During browsing, the computer systems and software procedures used to operate the Site acquire certain personal data whose transmission is implicit in the use of Internet communication protocols, such as, by way of example, IP addresses or domain names of the computers and terminals used by users, addresses in URI/URL (Uniform Resource Identifier/Locator) notation of the requested resources, the time of the request, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and IT environment, for the purpose of: allowing you to access and use the Site obtaining statistical information on the use of the services checking the correct functioning of the services offered. The legal basis for processing your data for the purposes referred to in points 1, 2, 3 is the fulfillment of your request, pursuant to Article 6, first paragraph, letter b), of the GDPR; your refusal to provide such data would make it impossible to browse the Site. Browsing data are retained for the periods indicated in the cookie policy available on the site. 2.2. RESPONSE TO INFORMATION REQUESTS In the “Contact Us” section of the Site, there is a specific form where you can voluntarily provide some of your common personal data to request the information you need. If you decide to use this service, your personal data will be processed by the Controller solely to respond to your information request. The legal basis for processing your data for this purpose is the fulfillment of your request, pursuant to Article 6, first paragraph, letter b), of the GDPR. The provision of your personal data for the above purpose is optional. However, your possible decision not to provide your personal data will prevent you from obtaining the information you need. For this purpose, the personal data provided through the website will be retained for the time necessary to fulfill the request. 2.3. PERSONNEL SELECTION PURPOSES - “WORK WITH US” In the Contacts Section, there is a specific area called “Work with Us”. Through this area, you can upload and send your curriculum vitae directly to Kreaidea. If you decide to use this service, by sending your curriculum vitae, your personal data of a common or even special nature, if you choose to include such types of personal data in your curriculum vitae, will be processed by the Controller for the personnel selection procedure, which includes, by way of example and not exhaustively, the review of your curriculum vitae and the organization of interviews aimed at the possible establishment of an employment relationship with Kreaidea. The legal basis for processing your data is, with reference to your common personal data, the execution of pre-contractual measures at the request of the data subject, pursuant to Art. 6, first paragraph, letter b), of the GDPR; therefore, your consent is not necessary to authorize the processing. If you also provide special personal data in your curriculum vitae, the related processing may be carried out by the Controller only after obtaining your consent. The provision of your personal data for the above purposes is optional, however, failure to provide your personal data or, with reference to your possible special personal data, your consent, will make it impossible for the Controller to process your personal data and, therefore, to allow your participation in the personnel selection process and the possible establishment of a collaboration relationship. Your personal data will be retained by the Controller for the time necessary to fulfill the requirements for personnel selection and in any case no longer than one year from their collection. 2.4. PROMOTIONAL COMMUNICATION PURPOSES Following the submission of information requests in the Contacts section for informational purposes (par. 2.2), your subscription to the Newsletter (par. 2.4), or on the pages of the site where there is a form for requesting specific information, the Controller assumes your potential interest in being informed about Kreaidea's activities, initiatives, and products. Consequently, in such circumstances, the Controller intends to use your personal data (name, surname, telephone number, e-mail address) to send you promotional communications regarding Kreacasa's initiatives and products, as well as to send you invitations to events organized by the same. The transmission of such communications may take place through traditional means (such as, for example, phone calls) and/or automated contact methods (such as, for example, e-mail, fax, pre-recorded phone calls, SMS, MMS, instant messaging, etc.). The use of your personal data for promotional communication purposes will require your express consent (on the legal basis pursuant to Article 6, first paragraph, letter a), of the GDPR), by selecting the appropriate box that will be presented to you at the time of providing the data. The sending of promotional communications will not require your consent if it is carried out using personal data (e.g. e-mail address) provided by you in the context of previous activities aimed at the sale of similar products by the Controller or in the event that you act, as a representative of legal persons, within the framework of commercial relations with the Controller; in such circumstances, the processing of your personal data will be based on the Controller's overriding legitimate interest. In any case, upon receipt of each e-mail communication, you may easily object to the sending of further communications from Kreaidea, using the “Unsubscribe” link present in all electronic commercial communications, or by contacting the Controller at the addresses indicated in point 1 above. Your personal data will be processed for this promotional purpose until you decide to withdraw your consent or object to the continuation of the processing, by contacting the Controller at the references indicated in point 1 of this Notice. Participation in promotional initiatives is optional and your refusal will not have any consequences regarding the other processing purposes mentioned in this notice, but will prevent Kreaidea from keeping you updated on its further initiatives, events, and its projects and/or products. 2.7. COOKIES AND OTHER TRACKING SYSTEMS This Site uses cookies; for more information, please consult our Cookie Policy available at the following link https://www.kreacasa/cookie-policy 3. METHODS FOR PROCESSING YOUR PERSONAL DATA The processing of your personal data will take place, in compliance with the provisions of the GDPR, by means of paper, computer, and telematic tools, for the purposes indicated and, in any case, in ways suitable to guarantee an adequate level of security and confidentiality, in accordance with the provisions of Article 32 of the GDPR. Processing of personal data means their collection, recording, organization, storage, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, deletion, and destruction, or the combination of two or more of these operations, also through automated tools suitable for storing, managing, and transmitting the data themselves, using tools suitable to guarantee security and confidentiality. 3.1 USE OF SOCIAL MEDIA Kreaidea may also provide links to other social media platforms that lead to servers installed by individuals or organizations over which it has no control. Kreaidea makes no representation, nor assumes any responsibility regarding the accuracy or any other aspect of the information available at such sites. The link to a third-party site cannot be understood as an endorsement, either by Kreaidea or by such third party, of the products and services of others or such third party.
Kreaidea makes no statements or warranties regarding the use or storage of user data on third-party sites. Users are invited to carefully review the privacy policy governing third-party sites linked to our website to have a complete overview of the possible use of your personal data. 4. RECIPIENTS OF YOUR PERSONAL DATA AND WHO MAY BECOME AWARE OF IT For the purposes described in the previous par. 2, the personal data processed will be known by employees, equivalent personnel, and collaborators of Kreaidea, who will act as persons authorized to process personal data. Furthermore, for the purposes described in the previous par. 2, your personal data may be processed by third parties belonging, by way of example, to the following categories: subjects who provide services for the management of the IT system, including server hosting and backup services; technical support service providers; other service providers; authorities and supervisory and control bodies and, in general, public or private entities with public functions; The subjects belonging to the categories listed above operate, in some cases, in total autonomy as separate data controllers, in other cases, as data processors specifically appointed by the Controller in compliance with Article 28 GDPR. Communication of your data to the subjects belonging to the categories listed above and operating as independent data controllers does not require your consent, as it is based on the overriding legitimate interest of the Controller, since such communications are necessary for the pursuit of the purposes mentioned in the previous paragraph 2. The complete and updated list of subjects to whom your personal data may be communicated can be requested by contacting the Controller at the address indicated in par. 1 of the Information Notice. 5. WHAT RIGHTS YOU HAVE AS A DATA SUBJECT In relation to the processing described in this Information Notice, as a data subject, you may, under the conditions provided for by the GDPR, exercise the rights established in Articles 15 – 21 of the GDPR, in particular: right of access – Article 15 GDPR: right to obtain confirmation as to whether or not personal data concerning you is being processed and, if so, to obtain access to your personal data – including a copy of it – and the communication, among other things, of the following information: purposes of the processing categories of personal data processed recipients or categories of recipients to whom this data has been or will be communicated data retention period or the criteria used rights of the data subject (rectification, erasure of personal data, restriction of processing, and right to object to processing)right to lodge a complaint with the supervisory authority right to receive information on the source of the personal data if it was not collected from the data subject the existence of automated decision-making, including profiling, as well as meaningful information about the logic used and the expected consequences of such processing for the data subject; right to rectification – Article 16 GDPR: right to obtain, without undue delay, the rectification of inaccurate personal data concerning you and/or the completion of incomplete personal data; right to erasure (right to be forgotten) – Article 17 GDPR: right to obtain, without undue delay, the erasure of personal data concerning you, when: the data is no longer necessary in relation to the purposes for which it was collected or otherwise processed; you have withdrawn your consent and there is no other legal basis for the processing; you have successfully objected to the processing of personal data; the data has been processed unlawfully, the data must be erased to comply with a legal obligation; the personal data has been collected in relation to the offer of information society services referred to in Article 8, paragraph 1, GDPR. The right to erasure does not apply to the extent that processing is necessary for compliance with a legal obligation or for the performance of a task carried out in the public interest or for the establishment, exercise, or defense of legal claims. right to restriction of processing– Article 18 GDPR: right to obtain restriction of processing, when: the data subject contests the accuracy of the personal data; the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of its use instead; the personal data is required by the data subject for the establishment, exercise, or defense of legal claims; the data subject has objected to processing pending the verification of whether the legitimate grounds of the controller override those of the data subject. right to data portability– Article 20 GDPR: right to receive, in a structured, commonly used, and machine-readable format, the personal data concerning you provided to the Controller and the right to transmit it to another controller without hindrance, where the processing is based on consent and is carried out by automated means. Furthermore, the right to have your personal data transmitted directly from the Controller to another controller where technically feasible; right to object– Article 21 GDPR: right to object to the processing of personal data concerning you, unless there are legitimate grounds for the Controller to continue the processing; right to lodge a complaint with the Data Protection Authority, Piazza di Montecitorio n. 121, 00186, Rome (RM).The above rights may be exercised, against the Controller, by contacting the references indicated in the previous par. 1. The Controller will take charge of your request and provide you, without undue delay and, in any case, no later than one month from receipt of the request, with information relating to the action taken regarding your request. The exercise of your rights as a data subject is free of charge pursuant to Article 12 GDPR. However, in the case of manifestly unfounded or excessive requests, including due to their repetitive nature, the Controller may charge you a reasonable fee, in light of the administrative costs incurred to manage your request, or refuse to comply with your request. Finally, we inform you that the Controller may request further information necessary to confirm the identity of the data subject.

ROME
Via Andrea Meldola n.266 - Arcobaleno Shopping Gallery
00143
The outfit for your new home