This Privacy Notice is to inform Data Subjects that Citterio-Viel & Partners Srl, Citterio-Viel & Partners Interiors Srl and Antonio Citterio Architetto, all conducting business from 4 via Cerva, Milan, are Joint Data Controllers with respect to the processing of personal data in relation to the website www.citterio-viel.com; it describes, in the sections below , how they collect and process the Data Subjects’ personal data in accordance with Article 13 of EU Regulation 679/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data within the European Union (“the GDPR”).
I. Types of data processed
The Joint Data Controllers will process your personal data of the following kinds:
(a) Data gathered automatically: In the normal course of operation the IT systems and software on which this website runs detect certain details which may be associated with identifiable users (the transmission of such details is implicit in the use of Internet communication protocols). The data gathered in this way include IP addresses and domain names of the computers used by persons connecting to the website, the URIs (Uniform Resource Identifiers) of the resources requested, the time of the request, the mode of putting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server’s response (error, timeout, successful, etc.) and other parameters of the user’s operating system, browser and IT environment. These data are processed, for no longer than strictly necessary, for the sole purpose of gathering statistical information on use of the website, to monitor its proper functioning, and for traffic and security analysis to prevent attacks and/or malfunctions. The provision of such data is unavoidable since it is directly linked to the web browsing experience.
(b) Data provided voluntarily by the user: No further notice or request for consent is needed when you voluntarily send e-mails to our e-mail addresses.
(c) Cookies: The website does not use third-party technical/profiling cookies which could gather users’ browsing data; the provision of such data is optional, and subject to free and informed consent. The purpose of cookies is to analyse the website’s effectiveness and improve its ease of use and intuitive nature over time. The data gathered by means of cookies are used to make the browsing experience more pleasant and more efficient in future, by trying to understand users’ behaviour and adapt the content offered accordingly. Further details are available in our Cookies Policy.
II. Source of the personal data
The personal data held by the Joint Data Controllers have been collected directly from the Data Subject.
III. Joint Data Controllers; the agreement between them; the point of contact
The Joint Data Controllers of the personal data, as defined in Art. 26 of the GDPR, are the following:
(a) Citterio-Viel & Partners Srl, VAT Registration No. IT13065150156, secure certified e-mail (PEC) firstname.lastname@example.org, registered office 4 Via Cerva, 20122 Milan, Italy
(b) Citterio-Viel & Partners Interiors Srl, VAT Registration No. IT07834530961, PEC email@example.com , registered office 4 Via Cerva, 20122 Milan, Italy
(c) Antonio Citterio Architetto, VAT Registration No. IT06010260153, Registration No. CTT NTN 50H16F078A, place of business 4 Via Cerva, 20122 Milan, Italy.
Personal data connected with the website www.citterio-viel.com are processed jointly by the above persons as Joint Data Controllers under explicit arrangements contractually agreed between them; in essence, that agreement governs the synergistic operations of sharing staff and other resources: the work is distributed and the costs and benefits shared among them for the optimization of the website’s operation and functionalities, and accordingly with the purpose of improving the experience of Internet users as they move around the web. The Joint Data Controllers are agreed that the point of contact between Data Subjects and the Joint Data Controllers shall be Citterio-Viel & Partners Srl: Citterio-Viel & Partners Srl, 4 Via Cerva, 20122 Milan, Italy, which can be contacted at firstname.lastname@example.org or by telephone on +39 02 7638 801.
IV. Purposes and legal basis of the processing of the data
The legal basis on which your data are processed is your consent. The purpose is to improve the web browsing experience.
V. Recipients of the data
VI. Transfer of data abroad
The data we gather are not transferred abroad.
VII. Period of retention
The data gathered will be kept for no longer than needed for the purposes for which they are processed (the principle of “storage limitation”, GDPR Art.5), or such other periods as required by law. Regular checks are made to ensure that retained data are not out of date in terms of the purposes for which they were gathered.
VIII. Rights of the Data Subject
As Data Subject you have the right to request the following from the Data Controllers at any time: access to your data, their rectification or erasure, restriction of their processing or an opportunity to object to such processing, and their portability. You also have the right to withdraw your consent to the processing of them. You can exercise these and other rights under the GDPR by simply contacting the Data Controllers. You may also, as Data Subject, make a complaint to a supervisory authority.
IX. Do I have to give my consent?
The provision of your data is unavoidable while you browse our website.
X. How are my data processed?
The personal data you provide will be processed in accordance with the laws and regulations referred to above and the obligations of confidentiality which the Data Controllers has undertaken to respect throughout its business. The data will be processed electronically and on paper or any other suitable medium under adequate security measures as required by Art. 5(1)(f) of the GDPR.
What are cookies?
Cookies are small text files sent by the website to the programme running on a user’s device (most often a browser), where they are stored and sent back to the website the next time the same user visits that site. A cookie cannot retrieve any other data from the user’s hard disk, nor can it carry computer viruses or harvest e-mail addresses. Each cookie is unique to the user’s web browser. Some of the functions of “cookies” can in fact involve other technical devices; so when we refer to “cookies” here we mean both cookies in the strict sense and all similar devices.
Cookies make it possible to record information about your preferences, such as the pages you visit or the files you download from our website, or other similar things you do in the course of browsing the site.
First and third party cookies
Cookies can be “first party” or “third party” ones. “First party” cookies are those set by the Data Controllers’ website itself, while “third party” cookies are set by parties other than the Data Controllers.
Types of cookies
Cookies come in a variety of types:
I. Technical cookies
Technical cookies are those used solely for the purpose of transmitting a communication over an electronic communication network; that means they function only to the extent strictly necessary for the provider of an Information Society service explicitly requested by the subscriber or user in order to provide that service.
They are not used for any other purpose, and are normally set directly by the Data Controllers or the website’s manager. There are four types:
(a) browsing or session cookies, which ensure trouble-free browsing and enable use of the website’s functions (for instance by rendering it possible to make a purchase or use authentication to access restricted areas); these cookies are really needed for the website to work properly;
(b) analytics cookies, which are like technical cookies when used directly by the website’s manager to gather information in aggregate form on the number of users and how they move around the website so as to improve its performance;
(c) functionality cookies, which enable the user to browse the site according to various selected criteria (eg language, products selected for purchase) in order to provide a more suitable service. The users’ consent is not needed before these cookies are set (further details in the section on “Managing cookies” below).
II. Profiling cookies
Profiling cookies are designed to create profiles of users and are used to send advertisements that match the preferences those users reveal when browsing the Internet.
The Data Subject’s consent is needed before profiling cookies may be set. Under Order No. 229 of 8 May 2014 the user must be given an opportunity to give or refuse his or her consent to the setting of any profiling cookies.
In the case of third party cookies the website has no direct control over individual cookies: it cannot itself set or delete them. You can however manage such cookies through your browser settings (follow the instructions below), or by using the websites listed in the “Managing cookies” section.
Users are accordingly advised to check out the website of the third party indicated below.
Cookies installed on this website: www.citterio-viel.com
The cookies present on the website are listed below. The third party cookies offer a link to the Privacy Notice of their external service provider, where you can find a detailed description of the individual cookies and the way they are processed.
Google Analytics cookies
If you would like to prevent these cookies being set on your device you can download the special add-on which can be found at https://tools.google.com/dlpage/gaoptout
Duration of cookies
Cookies last until the expiry date determined when the cookie is set (or until some particular action, such as closing the browser). Cookies may be temporary or permanent:
(a) temporary or “session cookies”: these are used to store temporary information that links up the user’s various actions all during one particular session; they are deleted from the computer when the browser is closed;
(b) permanent or “persistent cookies”: these are used to store information such as user name and access password so as to avoid the user having to type them in again every time he or she visits a particular website. They remain stored on the computer even after the browser has been closed.
Session cookies are not kept once the connection to this website is terminated. The IT systems used for this website use both temporary and permanent cookies.
To disable all cookies you can set your browser to “anonymous browsing” mode, a function which allows you to browse without leaving any trace of browsing data in the browser. This function only allows you to avoid keeping your browsing data in the browser.
Alternatively, you can disable or delete cookies by going to your browser’s configuration panel. Further details will be found in your browser’s Help, or on the user support page or online help of your particular browser.
Internet Explorer link: http://windows.microsoft.com/it-it/windows-vista/block-or-allow-cookies
Microsoft Edge link: http://windows.microsoft.com/it-it/windows-10/edge-privacy-faq
Safari 6 link: https://support.apple.com/kb/PH17191?local=it_IT
Safari iOS (mobile device) link: https://support.apple.com/in-us/HT201265
Accepting and rejecting cookies
By continuing to browse this website, closing the pop-up window, clicking anywhere on the page or scrolling down to display more content, you will be accepting the Cookies Policy: cookies will be set and retrieved. If you choose not to accept cookies and stop browsing, any cookies already stored locally in your browser will remain there but will no longer be read by us nor used by us, unless and until you later accept that Policy. You will always be able to remove these cookies at any time as described above.
For any further information or explanations, please e-mail us at email@example.com
PRIVACY NOTICE FOR NEWSLETTERS
This Privacy disclosure advises Data Subjects that CITTERIO-VIEL & PARTNERS S.R.L., CITTERIO-VIEL & PARTNERS INTERIORS S.R.L. and Antonio Citterio Architetto, with headquarters at Via Cerva 4, Milan, are Joint Controllers for processing personal data related to the newsletter on the website www.citterio-viel.com which is distributed via email automatically and at no charge to those who request it by completing the form on this page and to all customers and journalists on our distribution lists. The following sections describe how the Joint Controllers collect and process the personal data of Data Subjects pursuant to Article 13 of EU Regulation 679/2016 on protecting the data of natural persons and how those data are processed, as well as the free movement of data within the European Union.
The data will be utilized through computerized and electronic instruments solely for purposes of providing the email information service, and for this reason will be stored exclusively for the period during which it is in operation.
I. Categories of data
The Joint Controllers will process your personal data such as: first and last name, email.
II. Source of personal data
The personal data that the Joint Controllers possess are collected directly from the data subject by completing this form, or are provided directly by the customer when the contractual relationship is established, or provided by journalists at the time of first contact.
III. Joint controllers, agreement between the parties, and contact point
The joint controllers of personal data pursuant to Art. 26 of Regulation (EU) 2016/679, are:
CITTERIO-VIEL & PARTNERS S.R.L., VAT no. IT13065150156, certified email firstname.lastname@example.org headquarters at Via Cerva 4 - 20122 Milan – Italy.
CITTERIO-VIEL & PARTNERS INTERIORS S.R.L., VAT no. IT07834530961, certified email email@example.com headquarters at Via Cerva 4 - 20122 Milan – Italy.
Antonio Citterio Architetto, VAT no. IT06010260153, tax number CTT NTN 50H16F078A headquarters at Via Cerva 4 - 20122 Milan – Italy.
The processing of personal data connected to newsletter email communications for the website www.citterio-viel.com is jointly managed by the aforementioned Joint Controllers in the manners expressed in the agreements signed by the Parties. In brief, this agreement governs synergetic sharing of structures and resources by distributing activities among the parties, and sharing costs and benefits of managing an email digital communication platform with customers, journalists and internet users who are interested in receiving this information and subscribe through a special form available on the website.
The Joint Controllers agree that the contact point for the Data Subjects and the Joint Controllers is CITTERIO-VIEL & PARTNERS S.R.L.:
CITTERIO-VIEL & PARTNERS S.R.L. Via Cerva 4 - 20122 Milan – Italy can be contacted by email at firstname.lastname@example.org or by telephone at + 39 02 76 38 801
IV. Purposes of data processing and legal basis
Your consent provides the legal basis for processing your data collected and filed after you complete the form. The controller’s pursuit of its legitimate interests is the basis for processing Data Subjects who are customers and journalists - Article 6 (1), (f).
The purposes are: email communication with customers, journalists, and internet users who are interested in receiving commercial and other information and subscribe through a special form available on the website.
V. Data recipients
Within the indicated purposes of the processing, your data may be communicated to partners, consulting companies, and private firms which the controller has appointed as data processors. Your data will not be disseminated in any way. The data processors and persons in charge of processing are clearly identified in the document on privacy, which is periodically updated.
VI. Transfer of data abroad
The data collected are not transferred abroad.
VII. Storage period
The data collected will be stored only as long as necessary to achieve the purposes for which they are processed (“storage limitation,” Art. 5, EU Regulation 679/2016) or based on the expiration dates provided by law. The newsletter platform periodically controls the data, periodically eliminating those which are not active in terms of email accessibility.
The subscription and relative processing are considered valid until the user unsubscribes, which is accomplished by clicking the link shown in each email, or else 12 months after the last communication indicating a direct interaction (click, opening, response).
VIII. Data subject’s rights
The data subject always has the right to ask the Controller to provide access to their data, to rectify or delete it, to limit processing or to oppose processing, to request data portability, or to revoke consent to processing, and may assert these and other rights provided by EU Regulation 679/2016 through a simple communication to the controller. The data subject may also file a complaint with a supervisory authority.
IX. Mandatory or optional nature of providing data
Providing data is optional in some areas and in others (marked with an asterisk) is mandatory. Failure to provide mandatory data will result in NON-subscription to the newsletter.
The newsletter provides a simple double opt-in subscription system, and it is just as simple to opt out and unsubscribe at any time through the link at the bottom of each message.
X. Obligation to provide consent
For internet users who decide to subscribe to the newsletter through the web form, consent to processing data by checking off a special box is optional, but indispensable in order to proceed with the subscription. For customers and journalists, consent is not mandatory, but they may unsubscribe from the newsletter at any time through the link at the bottom of each message.
XI. Method of processing data
The personal data you provide will be processed in accordance with the aforementioned law and the obligations of confidentiality on which the Joint Controllers’ activity is based. The data will be processed electronically in accordance with the adequate security measures provided by EU Regulation 679/2016.