Data provided to CR&C SRL Benefit Company through the website at aloereginaflorae.it (hereafter referred to as the "Website") are processed in compliance with personal data protection legislation (GDPR EU Regulation 2016/679). CR&C SRL informs users of the following:
1.Data Controller
1.1. The Data Controller is CR&C SRL, headquartered at Viale delle regioni 2/A, 30020 Quarto D'Altino (VE), Italy.
2.Types of Data Processed and Purpose of Processing
2.1. Processed personal data exclusively pertain to adult users. Personal data means any information relating to an identified or identifiable natural person, directly or indirectly. The processed data include information provided by users to the Data Controller upon registration for the newsletter service, request for services, or when sending communications to CR&C SRL via email or through specific forms, such as name, surname, date of birth, email address, postal address, telephone number, as well as data collected during site navigation, such as IP addresses and cookie-related information.
2.2. Data will be used for the following purposes: A) To deliver requested services, fulfill legal, regulatory, or EU requirements, and protect legal rights; B) With explicit consent, to send promotional offers via email or phone related to CR&C SRL services, send advertising materials exclusively related to CR&C SRL products/services, and conduct market research or provide free samples and modest promotional gifts; C) To analyze consumer habits and preferences, creating user profiles based on website navigation and requested services, for sending personalized promotional communications via email, SMS, MMS, postal mail, or phone calls.
Profiling activities (2.2C) will not have legal effects or significantly affect users personally, except for customized offers and promotions.
3. Mandatory/Optional Nature of Data Provision
3.1. Data provision for services under point 2.2A is mandatory for service delivery and legal compliance. Refusal prevents CR&C SRL from providing requested services or fulfilling legal obligations. 3.2. Data provision for purposes under 2.2B and 2.2C is optional. Refusal to consent for 2.2B and 2.2C does not affect service provision. Users may oppose processing for these purposes immediately upon service activation or later by emailing info@aloereginaflorae.it. Users consent by checking specific boxes during service activation; unchecked boxes indicate non-consent.
4. Processing Methods
4.1. User data are collected online during service activation, information comparison, or email services. 4.2. Data are processed through electronic and manual registration, consultation, communication, storage, and deletion, with adequate security and confidentiality measures. 4.3. Electronically stored data are secured on dedicated servers; paper data are archived securely. CR&C SRL protects data against unauthorized access and ensures integrity and availability. The hosting company complies with Privacy Shield standards. 4.4. Data will be processed by CR&C SRL employees and collaborators as authorized data processors following CR&C SRL's instructions.
5. Data Communication
5.1. Personal data may be shared with entities authorized by CR&C SRL for requested services and legal obligations, including: a) Professionals providing accounting, administrative, legal, tax, and financial assistance to CR&C SRL; b) Delegates/agents performing service-related tasks; c) Public authorities as required by law. User data will not be publicly disclosed. An updated list of data processors is available upon request at info@aloereginaflorae.it.
6. User Rights
6.1. Users ("data subjects") have the right to confirmation of their data processing, request updates, corrections, deletions, blocking, or object to processing partially or entirely.
6.2. Users specifically have rights to:
- Confirm and access personal data;
- Obtain details about data processing, responsible entities, and transfer protocols;
- Information on data retention periods, correction, deletion, processing restrictions, objection, and data portability rights;
- Withdraw consent without affecting lawful processing based on consent before withdrawal;
- Lodge complaints with supervisory authorities;
- Object to automated decision-making, including profiling.
6.3. Rights can be exercised by contacting CR&C SRL using provided details. Responses will be provided within one month, extendable by two additional months if necessary.
7. Processing Duration
7.1. Data under purpose 2.2A is stored only as long as necessary for requested services and legal compliance, up to 10 years post-obligation. 7.2. Data for marketing purposes (2.2B) is stored for 24 months from consent. 7.3. Data for profiling purposes (2.2C) is stored for 12 months from consent. 7.4. Data are deleted or permanently anonymized after processing periods end.
8. Legal Basis for Processing
8.1. Processing is based on user consent, contractual necessity, and legal obligations.
9. Privacy Policy Updates
9.1. CR&C SRL may periodically revise this policy, notifying users of changes on the website and allowing users to consent to new data processing methods if required.
10. Non-EU Data Transfers
10.1. Personal data may be transferred outside the EU due to server infrastructure. 10.2. Transfers to the USA are safeguarded by the Privacy Shield agreement or standard EU-approved data protection clauses. Further information is available at www.privacyshield.gov or www.garanteprivacy.it.