Personal data privacy policy

Updated on January 18, 2024

Data Controller: Carredas SRL, whose contact details are provided in the website’s contact section (hereinafter the Site), hereinafter referred to as “We”

We are committed to respecting the privacy of individuals encountered in the course of our activities.

This Personal Data Respect Policy (hereinafter the Policy) describes how we manage the Personal Data that we collect both from forms, website registration, telephone calls, emails, and other communications with you. We process your personal data in compliance with all applicable regulations concerning the protection of personal data.

By accepting this Policy, using our services, registering for one of our events, or otherwise providing us with your personal data, you acknowledge and agree to the terms of the Policy and to the processing and transferring of Personal Data that will be carried out in accordance with the Policy.

The Personal Data we collect in the course of our relationships include:

• Personal information: name, address, email, phone numbers, GSM number, gender, marital status, employer, job title, and professional experience
• Financial information: bank account number
• Professional information: occupation, social status, employer’s name and address, professional title
• Educational background information: completed studies, degrees obtained, year of graduation
• Marketing preferences: subscription to a newsletter, a contest, acceptance to receive direct marketing,

The data we collect come from:

• Your registration with us
• Data you have knowingly communicated to us
• Data provided by your employer
• Data provided by our business partners

We use this Personal Data to:

• Respond to your requests and communicate with you and others in our activities.
• Allow you to access information we post online for users of our services.
• Interact with you through our site.
• Send you a newsletter if you subscribe to it.
• Provide you with support and assistance in our services
• Improve the quality of our services
• Send you important information regarding changes to our products and services, our terms and conditions, and other administrative, technical, or commercial information.
• Make decisions regarding providing services to you.
• Conduct surveys, market research, satisfaction surveys.
• Provide you with information about our products or those offered by our partners
• Enable you to actively participate in our online and offline activities, including forums, discussions, seminars, appointments, and other events, and manage the organization of these activities.
• Resolve complaints
• Manage rights of access, rectification, erasure, etc., as provided by legislation
• Comply with applicable laws and regulatory obligations

The legal bases for processing are as follows:

• Your consent (we remind you that you have the right to withdraw your consent at any time;
• Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
• Processing is necessary for compliance with a legal obligation to which the controller is subject;
• Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party;
• Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. If we were to process Personal Data for purposes other than those stated above, we would only do so based on the legal bases specified above.

We do not use automated decision-making techniques that produce legal effects concerning the data subject or significantly affect them.

Your Personal Data may be accessible to the following organizations:

• Governmental or public authorities as required by applicable laws
• Our subcontractors, including our IT suppliers, within the contractual framework provided by data protection regulations
• Our partners, vendors, marketing agencies in the course of our commercial activities
• Third parties in the context of internal reorganization, business transfer, merger, or acquisition

We do not transfer data outside the European Union.

We take appropriate technical and organizational measures that are in compliance with applicable privacy and data protection regulations. We have signed contracts with our subcontractors whereby they guarantee to have taken appropriate technical and organizational security measures.

By connecting to the Site, it automatically collects the following information:

• Your internet browser
• Information collected by the site’s cookies (we will offer to accept these cookies on the Site by explaining their use and the data collected)

Your data is erased after the following durations:

• For clients, 10 years after the last purchase under accounting regulations
• For prospects and occasional contacts, one year after the last message from us that remained unanswered
• For those subscribed to our newsletter, 6 months after their request to unsubscribe, with the unsubscription being immediate

If you provide us with personal data regarding other people, you commit to: (a) inform them of the content of this Personal Data Respect Policy, and (b) obtain their consent in accordance with the terms of this Policy.

You have the right to access your data, rectify it if necessary, object to its use, request its erasure, limitation, or portability. If you wish to use one of these rights, please contact us at our contact address, proving your identity with a copy of your identity card.

You also have the right to file a complaint with the data protection authority

We regularly review the rules contained in this Policy and reserve the right to make changes at any time to reflect changes in our activities and legal requirements. We invite you to regularly consult our website. In the event of a significant change, we will contact you to notify you of these changes.