Privacy Policy

Updated 22/09/2023

WEBSITE NOTIFICATION IN COMPLIANCE WITH ARTICLES 13 AND 14 OF EUROPEAN REGULATION 2016/679 (GDPR)

This communication is made available by Stone Italiana S.p.A., in its capacity as Data Controller of your personal data pursuant to articles 13 and 14 of the European Regulation 2016/679. We would like to inform you that the aforementioned legislation provides for the protection of data subjects with respect to the processing of personal data and that such processing will be based on the principles of fairness, lawfulness and transparency and the protection of your privacy and rights. The information and personal data provided by you or otherwise acquired during your use of the website will be processed in accordance with the legislative provisions contained in the aforementioned regulations and with the confidentiality obligations provided therein.

INTERESTED PARTIES AND RETENTION TIME

A) users (browsers) of the website www.cosmolite.com and of the App for iOs and Android

Specific summary information is progressively reported or displayed on the pages of the site prepared for specific services on request that require forms for data collection. We also inform you that, to provide a complete service, our website may contain links to other web sites which are not managed by Stone Italiana S.p.A. Stone Italiana S.p.A. is not responsible for errors, content, cookies, the publication of morally unlawful content, advertising, banners or files that do not comply with current legislation, neither for compliance with Privacy policy for other websites that are not operated by the Data Controller.

Type of data processed

• Navigation data: IP addresses or domain names of the computers and other devices utilized by users accessing the website; addresses in URI (Uniform Resource Identifier) notation of the requested resources and any time stamps of the same; parameters related to the user’s operating system and computer environment; starting and ending pages; Navigation index and identifying behavior while viewing the site’s pages.
• Personal data provided voluntarily by the user: the optional, explicit and voluntary dispatch of e-mail messages to the addresses shown on this website, and the compilation of forms present on said website, entail the subsequent collection of the sender’s personal data (solely by way of example, name, surname, e-mail address). Specific summary information is shown on pages where web forms are present.

Purposes of processing: your data collected during browsing will be processed for the following purposes.

1. performing operations closely connected to, and essential for, handling relations with the users or visitors of the website or Apps;
2. collecting, storing and processing your data for statistical analysis, also in anonymous and/or aggregate form; statistical analyses performed to assess the quality of services offered by the website;
3. sharing the interactions made, and the usage data for the pages on which cookies are installed for the integration of software products or functions, with social network managers
4. improving the browsing experience in order to present services and advertising messages that correspond to the preferences expressed during navigation

The processing of data for the fulfillment of the purpose specified in point 1 is necessary to perform your request, and in the case of your refusal, this could limit and/or prevent comprehensive use of the functions and services present on the site. The legal basis for the processing of your data for the purposes specified in point 1 is the fulfillment of your request, in accordance with Article 6.1.b.) of the GDPR; if you refuse to provide said data, it would make it impossible for you to visit the website.
Providing the data indicated in purposes 2, 3 and 4 is optional in terms of the legal basis of consent, and your refusal to the processing of your data would not compromise the functionality and services present on the website. The legal basis for the processing of your data for the purposes specified in points 2, 3 and 4 is optional, in accordance with Article 6.1.a). Consent is provided by means of the short policy notification by clicking on the words “ACCEPT COOKIES” included in the short policy notification . With regard to the optional consent, further information about the cookies present on the website is provided in the cookie policy document, which can also be accessed from the short policy notification .

Browsing data is stored for the duration specified in the cookie policy that can be consulted on the website.

B) users section, contact us
By compiling the forms accessible in the “Contact Us” section, your data (name, surname, e-mail address, city) will be used to respond to your request for information. The provision of data for these purposes enables the fulfillment of your request. The legal basis for processing is article 6.1.b) of the GDPR.
Your data, subject to your consent provided by selecting the respective marketing box, will be used for sending commercial and advertising information concerning informative messages and commercial and promotional communications, regarding Stone Italiana S.p.A.’s activities and products by means of traditional methods (e.g. telephone communications, individual e-mail messages, etc.) or automated contact methods (e.g. automated e-mail campaigns, social networks, etc.), software systems managed by third parties, including the insertion of said systems in the Controller’s corporate CRM in complete compliance with the principles of legality and fairness, and with the provisions of law. Providing your data for this purpose is optional and does not compromise the response to your request for information. The legal basis for processing is art. 6.1.a.) of the GDPR. At any time you can object to processing using the link at the bottom of the e-mail or by sending a request to the Data Controller at the addresses indicated in this policy document.
Your data will be stored for the time necessary for the provision of the service that you have requested and for marketing purposes, until you decide to cancel your registration or object to processing.
C) users’ Request for Warranty Certificate.
By compiling the forms accessible in the “Warranty Certificate” section, your data (name, surname, e-mail address, city) will be used to respond to your request for information. The provision of data for these purposes enables the fulfillment of your request. The legal basis for processing is article 6.1.b) of the GDPR.
Your data, subject to your consent provided by selecting the respective marketing box, will be used for sending commercial and advertising information concerning informative messages and commercial and promotional communications, regarding Stone Italiana S.p.A.’s activities and products by means of traditional methods (e.g. telephone communications, individual e-mail messages, etc.) or automated contact methods (e.g. automated e-mail campaigns, social networks, etc.), software systems managed by third parties, including the insertion of said systems in the Controller’s corporate CRM in complete compliance with the principles of legality and fairness, and with the provisions of law. Providing your data for this purpose is optional and does not compromise the response to your request for information. The legal basis for processing is art. 6.1.a.) of the GDPR. At any time you can object to processing using the link at the bottom of the e-mail or by sending a request to the Data Controller at the addresses indicated in this policy document.
Your data will be stored for the time necessary for the provision of the service that you have requested and for marketing purposes, until you decide to cancel your registration or object to processing.

D) Dispatch of communications to the company

The Company processes the user’s personal data in connection with the optional, explicit and voluntary sending of e-mail, certified and/or ordinary e-mail sent to the Company’s contact details that may also be shown on the website. More specifically, personal and contact information will be processed, as well as content sent by the user, via voicemail, multimedia tools, social networks, WhatsApp and other comparable applications.

The purpose is to enable interested parties to communicate with the Company.
The legal basis for processing is the fulfillment of a contract.
Depending on the subject matter and type of messages, the time taken to respond to the user’s requests may vary. In any case, the storage duration may not exceed 10 years.
Provision is mandatory in order to initiate a relationship

E) Employment opportunities

The Company collects data from individuals interested in applying for positions within the Company. The Company processes the resume, identification and contact information necessary to assess the application and recontact the candidate if the profile is of interest.
Data may be collected either as a result of sending unsolicited applications by letter or e-mail, or through online application functions.
The purpose of the processing is to manage the application and perform staff search and selection activities, on the basis of the possible establishment of a collaborative relationship.
The legal basis for processing is the fulfillment of a contract.
Data is retained for up to 24 months after it has been provided.
Provision is mandatory for the assessment of the application.

F) Customer and supplier data processing

The company processes personal data of customers and suppliers for:

• executing contractual/professional relationships;
• fulfilling pre-contractual, contractual and tax obligations arising from existing relationships, as well as handling the necessary communications related to them;
• fulfilling obligations under the law, a regulation, EU legislation or an order from the Authorities;

The purpose is the execution of the contract with the customer/supplier and the management of administrative and accounting obligations.
The legal basis for processing is the contract concluded between the Company and the customer/supplier.
Data is retained for the duration of the contract and for up to 10 years after the conclusion of said contract, for obligations linked to ascertainment purposes.
Provision is mandatory for the execution of the contract

F) Newsletter Service

The newsletter periodically offers a selection of information about our products, news about our company or other themes. The newsletter may present advertisements from the Group’s business partners.

The purposes are to provide the editorial newsletter service and to inform you about the services, products promotions and events offered by the Owner and its business partners; tools for anonymous and aggregate analysis of the performance of each marketing campaign may be used.
The legal basis for processing may be, depending on the case, the agreement between the data controller and the subscriber to the service, or consent of the user, provided for example when registering on the site, or when signing up for events or activities.

Retention period: data is retained for the duration of the service, until terminated.

Provision: mandatory, but only in order to receive the newsletter.

METHODS OF PROCESSING PERSONAL DATA
Your personal data will be processed manually, electronically and/or telematically, through the use of cookies (as described in the cookie policy available on the website) by means of electronic calculators with the use of third-party software and automated contact methods (for example, automated e-mail campaigns, SMS, automated telephone contact, instant messaging, social networks, etc., in accordance with the methods described in Articles 6, 32 of the GDPR and through the adoption of the appropriate security measures provided.
In order to assess and if necessary to improve the results attained by communications, the Controller utilizes systems for sending newsletters and promotional communications with reports. The Report gives the Controller information such as: the number of readers, the number of communications opened, the unique “clickers” and clicks; the devices (iPhone, Blackberry, Nokia…) and operating systems (Windows, Apple, Linux, Android…) used to read the communication; details of the activities of individual users; detail of e-mails sent per date/hour/minute; details of e-mails that are delivered and those undelivered; the list of recipients who have unsubscribed from the newsletter; those who have opened an e-mail or clicked on a single link; users encountering problems in viewing the message; link tracking (i.e. the number of clicks made on the links in the message); click tracking (which links were clicked and by whom). All this data is used for the purpose of assessing, and possibly improving, the results attained by the communications.

USE OF SOCIAL MEDIA PLATFORMS
Stone Italiana S.p.A. may also provide connections (links) to other social media platforms leading to servers installed by individuals or organizations over which it has no control. Stone Italiana S.p.A does not provide any indication of, nor can it accept any responsibility for, the accuracy, or any other aspects, of the information available on these websites. The link to a third-party website can in no way be considered as a validation, neither by Stone Italiana S.p.A. nor by any such third party, of the products and services provided by other websites or third parties. Stone Italiana S.p.A. does not issue declarations or guarantees regarding the use or storage of user data on third-party websites. Users are advised to perform a detailed examination of the privacy policy that governs third-party websites linked to our website in order to have a complete view of the ways in which your personal data may be used.

RECIPIENTS OF PERSONAL DATA AND DISCLOSURE OF DATA
Your data will be processed by appropriately-appointed personnel and will be communicated externally, to companies acting as independent Data Controllers or Data Processors:

• external parties who are service providers;
• technical support service providers;

The complete list can be requested by writing to the Data Controller’s contact details.

TRANSFER OF PERSONAL DATA
Your data is transferred to countries outside the European Union as described in the Cookie Policy of the companies that provide services related to third-party cookies. For further information, write to stone@stoneitaliana.com

For the dispatch of company communications, your data is transferred to countries belonging to the European Union: this transfer is in any case legitimate as it is guaranteed by the existence of adequacy decisions issued by the European Commission. You may ask the Data Controller for a copy of the safeguards adopted for the EU transfer of your personal data, and also for information on the locations where said measures have been made accessible, by means of a specific request sent to the Data Controller at the e-mail address stone@stoneitaliana.com

MINORS
The website is not intended for use by minors aged under 14 and no data regarding minors aged under 14 is collected by the Data Controller.
In the event that the Data Controller should become aware of the collection of said data (for example, through the contact form), it will delete it immediately. The company will reply to requests for information in compliance with the respective laws.
Please note that in the case of a request for information, the person holding parental responsibility is required to provide us with consent for the collection of the minor’s personal data.

DATA CONTROLLER
The Data Controller is Stone Italiana S.p.A., with registered office in Via Lavagno 213, 37040 Zimella – (Verona) – 0442 715715 stone@stoneitaliana.com in the person of its pro-tempore legal representative.
You have the right to obtain, from the Controller, the erasure (right to be forgotten), restriction, updating, correction, portability, and opposition to the processing, of the personal data that regards you, and more in general you can exercise all the rights provided by articles 15 and following of the European Regulation 2016/679 by writing to stone@stoneitaliana.com. The data subject has the right to lodge a complaint with the Supervisory Authority

APPLICATION OF THIS POLICY
If you have any questions about this Policy, please, in first place, contact Stone Italiana S.p.A by sending an e-mail to stone@stoneitaliana.com or by contacting the Data Controller at the company contact details provided in this document.

CHANGES TO THIS POLICY
Stone Italiana S.p.A. reserves the right to update this information in accordance with any changes in legislation that may arise, and in due consideration of suggestions made by employees, customers, collaborators and users. In case of changes made by Stone Italiana S.p.A., the Privacy Policy on the main privacy page and on the Homepage of the website https://stoneitaliana.com/ will be promptly updated

RIGHTS OF DATA SUBJECTS

EU Regulation 2016/679: Articles. 15, 16, 17, 18, 19, 20, 21, 22 – Rights of data subjects

1. Data subjects have the right to obtain confirmation of the existence or not of personal data concerning them, even if not yet recorded, and their communication in an intelligible form, and the possibility of lodging a complaint with the Supervisory Authority.

2. Data subjects have the right to obtain information on:

• the origin of personal data;
• the purposes and methods of processing;
• the logic applied in the case of processing performed using electronic instruments;
• the identification details of the Data Controller, the Data Processors and the designated representative in compliance with Article 5, Paragraph 2;
• the subjects or categories of subjects to whom personal data may be communicated or who may acquire knowledge of it in their status as a designated representative in the territory of the State, as managers or as personnel authorized to process personal data.

3. Data subjects have the right to obtain information on:

• updating, rectification or, when they deem it necessary, the completion of data;
• the erasure, transformation into anonymous format or the blocking of data processed in violation of the law, including data whose retention is not necessary with regard to the purposes for which the data was collected or subsequently processed;
• notification that the operations specified in points a) and b) have been communicated, along with the respective content, to those to whom the data was notified or disclosed, unless this fulfillment proves impossible or involves a manifestly disproportionate use of resources when compared to the right upheld;
• data portability.

4. Data subjects have the right to object, in whole or in part:

• to the processing of personal data concerning them, even if relevant to the purpose of collection, for legitimate reasons;
• to the processing of personal data concerning them for the purpose of sending advertising or direct sales material or for performing market research or commercial communications