Privacy Policy

INFORMATION ON THE PROCESSING OF PERSONAL DATA
This information notice is prepared pursuant to Article 13 of the Italian Privacy Code and Article 13 of EU Regulation No. 2016/679 by Clara srl ​​(hereinafter simply "Clara"), in relation to the personal data provided by users when accessing and/or registering for and/or making a purchase on the website www.clara-intimo.it (hereinafter simply "Site").

1. Data controller

The data controller is Clara srl, with registered office at Consorzio Impre.Co. – Lotto 29 – Zona ASI di Aversa Nord – 81032 Carinaro (CE), registered with the Caserta Chamber of Commerce under No. 256457 of the Company Register, VAT No. 03601890613, email info@clara-intimo.it

2. Purpose of the processing

Clara will process the personal data provided by users for the following purposes:
a. to allow registration on the Site and to use the services reserved for registered users, including the possibility of making an online purchase and, therefore, to allow the conclusion of the purchase contract and the correct execution of the related transactions. Furthermore, users, even if not registered, may send requests for information or clarifications on the products for sale on the Site. To process such requests, Clara will require the provision of certain personal data (e.g., name, surname, and email address);
b. for administrative and accounting purposes related to registration on the Site and making an online purchase, as well as to fulfill legal obligations;
c. with the user's prior express consent, for the sending of informative and promotional communications (including the "newsletter"), discount coupons and special offers, by Clara, in relation to Clara's products and services, as well as for the conduct of market research also aimed at evaluating the level of user satisfaction (customer satisfaction), via email and postal service (so-called "marketing" purposes carried out by Clara).
d. limited to the email address provided by the user when purchasing a product or service offered on the Site, to enable the direct sale of similar products or services without the user's express prior consent (as provided for by Article 130, paragraph 4 of the Privacy Code) and provided that the user does not exercise the right to object in the ways described in Article 3 below (so-called "soft spamming").
It should also be noted that:
Credit card data
To make a payment on the Site by credit card, the user must enter their confidential credit card information (card number, cardholder name, expiration date, security codes). This information will be collected by the payment service provider, which will act as an independent data controller, without passing through Clara's server. Clara, therefore, will not process this information in any way. The data will be collected in encrypted format and in accordance with PCI-certified security requirements. The payment service uses the SSL (Secure Sockets Layer) protocol. The user may request that this information be saved, but it will be saved directly by the payment service provider and will not be collected by Clara. Clara will only keep track of the last four digits of the credit card number solely to prevent online payment fraud.

3. Provision of data and consequences in case of failure to consent to processing

Providing data for the purposes referred to in points (a) and (b) of Article 2 above is purely optional. However, since such processing is necessary to allow registration on the Site and the provision of reserved services, including online purchasing, any refusal by the user to provide such data will make it impossible to register on the Site and complete an online purchase.
With reference to the purposes of the processing referred to in point (c) ("marketing" carried out by Claral) above, consent to the processing of personal data is purely optional and may be expressed by selecting a specific box, for each distinct purpose, at the bottom of the Site registration form. Failure to provide consent will not have any consequences on the ability to register on the Site and/or make purchases on the same and will entail exclusively the consequences described below:
– Failure to consent to the processing of personal data for the purposes referred to in Article 2, letter (c) ("marketing" carried out by Clara) above will make it impossible to receive informational and promotional communications (including the "newsletter"), discount coupons, and special offers from Clara regarding Clara's products and services, as well as for market research purposes, including those aimed at assessing user satisfaction, via email and postal services;
In any case, the user may revoke any consent given for the purpose described in point (c) ("marketing" carried out by Clara) of Article 2, or object to the processing for the purpose referred to in letter (e) ("soft spamming") of Article 2 by contacting Clara at the contact details in Article 1 above.

4. Data processing methods

Data processing will be primarily carried out using electronic or automated tools, in ways and with methods suitable for ensuring the security and confidentiality of the data, in compliance with the Privacy Code and EU Regulation No. 2016/679. Specifically, all technical, IT, organizational, logistical, and procedural security measures will be adopted to ensure the minimum level of data protection required by law, allowing access only to those authorized to process data by the Data Controller or the data processors designated by the Data Controller.

5. Scope of data communication

The personal data provided by the user, for the purposes described in Article 2 above, may be disclosed to or communicated to the following parties:
• Clara's employees and/or collaborators, for the performance of administrative, accounting and IT and logistical support activities who act as data controllers and/or processors, respectively;
• to companies or consultants responsible for the installation, maintenance, updating and, in general, management of Clara's hardware and software;
• to companies appointed by Clara to send online communications;
• to all those public and/or private entities, natural and/or legal persons (legal, administrative and tax consultancy firms), if the communication is necessary or functional to the correct fulfillment of the contractual obligations undertaken in relation to the services provided through the Site, as well as the obligations deriving from the law;
• to the persons responsible for repairing the products purchased in compliance with the legal guarantee of conformity;
• to shippers and persons responsible for the delivery and/or collection of the purchased products;
• to all those subjects (including Public Authorities) who have access to the data by virtue of regulatory or administrative provisions.
All personal data provided by users in connection with registration on the Site and/or purchases through the Site will not be disclosed. The updated list of data controllers and processors is available at the Data Controller's offices.

6. Data retention

User data will be retained only for the time necessary to ensure the correct provision of the services offered.
If you terminate your Site account at your own initiative, the data contained therein will be retained for administrative purposes for a period not exceeding one quarter, without prejudice to any specific legal obligations regarding the retention of accounting records or for public safety purposes.
In any case, it is understood that personal data will be stored and processed for the purposes referred to in letter (c) ("marketing") carried out by Clara pursuant to Article 2 above, for a period of two years. At the end of this period, Clara may ask the user to renew their consent to the processing of their data for these purposes or anonymize the data and store it solely for statistical purposes.

7. Right of access to personal data

Pursuant to Article 7 of the Privacy Code and Article 15 of EU Regulation No. 2016/679, the user has the right to:
a. obtain confirmation of the existence or otherwise of personal data concerning him or her and their communication in an intelligible form;
b. obtain, from the Data Controller:
• information on the origin of the personal data, on the purposes and methods of processing, on the logic applied in the case of processing carried out with the aid of electronic tools;
• indication of the identifying details of the Data Controller;
• information regarding the subjects or categories of subjects to whom the data may be communicated or who may become aware of them in their capacity as designated representative on the territory of the state, as managers or persons in charge;
c. obtain:
• the updating, rectification or integration of data concerning him/her;
• the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including data whose retention is necessary in relation to the purposes for which the data were collected or subsequently processed;
• certification that the operations referred to in the preceding points have been brought to the attention, including with regard to their content, of those to whom the data have been communicated or disclosed, unless such compliance proves impossible or involves the use of means that are manifestly disproportionate to the right being protected;
d. to object, in whole or in part:
• for legitimate reasons, to the processing of data concerning him/her, even if pertinent to the purpose of the collection;
• to the processing of personal data concerning him/her, provided for the purposes of commercial information or sending advertising or direct sales material or for carrying out market research or commercial communication.
The data subject's right to object to the processing of their personal data for the purposes referred to in Article 2, letter (c) ("marketing" carried out by Clara), carried out through automated contact methods (email), also extends to traditional methods (postal mail), without prejudice to the possibility for the data subject to exercise this right partially, for example by objecting only to the sending of promotional communications carried out via automated means.

8. How to exercise your rights

The above rights may be exercised by submitting a request to the Data Controller, using the contact details provided in Article 1.

9. PERSONAL DATA PROTECTION AUTHORITY

Under applicable law, you also have the right to restrict Clara's use of other information, including your personal data, and to lodge a complaint with your local data protection authority or the national data protection commission, at the following address:

TO THE GUARANTOR FOR THE PROTECTION OF PERSONAL DATA
MONTECITORIO SQUARE, 121
00186 – ROME
https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4535524

10. CONTACT CLARA

Please do not hesitate to contact the National Data Protection Commission if you have any questions about this privacy policy or Clara's personal data practices, or if you wish to exercise your rights.
In general, if you wish to communicate with Clara's data controller, you can do so at the following address: info@clara-intimo.it or at the postal address indicated below:

To the Data Protection Officer (DPO) of Clara Srl
Impreco Consortium Lot 29 – Aversa North Industrial Zone
81032 Carinaro/CE – ITALY