PRIVACY POLICY

Disclosure regarding processing of personal data - information document pursuant to and for the purposes of Article 13 of Legislative Decree No. 196 of 30 June 2003
In compliance with Legislative Decree No. 196 of 30 June 2003 (Privacy Policy) and subsequent changes, we hereby provide you with the required information regarding the processing of personal data supplied by you. This disclosure should not be considered valid for other websites accessible through links on the websites on the domain of the Controller, who is not to be considered in any way responsible for the websites of third parties. This disclosure is rendered pursuant to Art. 13 of Legislative Decree No. 196/2003 - Personal Data Protection Code. This disclosure is based also on Recommendation No. 2/2001, which the European personal data protection authorities, gathered under the Group established by Art. 29 of Directive No. 95/46 / EC, adopted on 17 May 2001 to establish minimum requirements for the collection of personal data on-line and, in particular, the methods, timing and nature of the information that data controllers must give users when they connect to web pages, regardless of the purpose of the link.

1. THE DATA PROCESSING "CONTROLLER", pursuant to Article 28 of the Personal Data Protection Code is Candy Hoover Group Srl - with single shareholder, in the person of its legal representative pro tempore Aldo Fumagalli, via Privata Eden Fumagalli 20047 Brugherio (MB), Italy. Tax Code / Companies Register of Monza and Brianza 04666310158 - VAT No. 00786860965 - Fax 39 039 2086237 - e-mail: privacy@candy.it

PLACE OF DATA PROCESSING
The processing related to the web services of this site, (hosted by Salesforce.com, inc. The Landmark @ One Market, Suite 300, San Francisco, CA, 94105, United States) is also carried out at the premises of the processing Controller and is handled only by staff responsible for processing, or by any third parties entrusted with the maintenance or updating of the website pages.

2. TYPES OF DATA PROCESSED
Personal and identification data. Personal data, any information concerning a natural person, identified or identifiable, even indirectly, by reference to any other information including a personal identification number; identification data, personal data that allows direct identification of the interested party (such as but not limited to name, surname, address, email address, phone number, etc...).
Navigation data The computer systems and software procedures used in the running of this website acquire, during normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified persons, but by its nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by users connecting to the site, URI (Uniform Resource Identifier) addresses of the requested resources, the time of request, method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the reply given by the server (successful, error, etc..) and other parameters regarding the operating system and computer environment. The data could be used to verify responsibility in the hypothetical event of computer crimes harmful to the Site.
Data provided voluntarily by the user
The optional, explicit and voluntary sending of electronic mail to the addresses shown on this site and/or in completed data collection forms involves the subsequent acquisition of the sender's address, essential for responding to requests, and of any other personal data included.
Specific information
Specific information may be presented in the pages of the Site, relating to particular services or processing of data provided by the User or the Interested Party.

Cookies
See the cookies policy at this link

3. The aims of the processing for which consent is granted where required (Article 23 of Legislative Decree 196/03)
Data voluntarily provided in the completion of data collection forms, and/or by sending e-mails will be processed for the following purposes:
A) data processing concerning:
- navigation on this site;
- any contact request, with the sending of information requested from you, including through form completion;
- completion of data collection forms for participation in competitions, prize games and contests;
- administrative and accounting activities in general. For the purposes of application of provisions regarding personal data protection, the processing carried out for administrative and accounting purposes is that related to organisational, administrative, financial and accounting activities, regardless of the nature of the data processed.

B) data processing concerning, until your opposition:
- prior written consent, for direct marketing, market research or other sample surveys and direct sales for the receipt – via automated means, e-mail, fax, MMS (Multimedia Messaging Service) or SMS (Short Message Service) messages and other types, as well as through operator-assisted calls and postal service – of informative material for satisfaction surveys, promotional, advertising and commercial material or regarding events and initiatives, from Candy Hoover Group Srl – with single shareholder

C)data processing concerning, until your opposition:
- prior written consent, for direct marketing, market research or other sample surveys and direct sales for the receipt – via automated means, e-mail, fax, MMS (Multimedia Messaging Service) or SMS (Short Message Service) messages and other types, as well as through operator-assisted calls and postal service – of informative material for satisfaction surveys, promotional, advertising and commercial material or regarding events and initiatives, from companies belonging to the Candy Hoover Group Srl – with single shareholder . The complete list of companies belonging to the group will be provided upon request to privacy@candy.it.

4. Processing method - Storage
The processing will be carried out automatically and manually, with detailed modes and instruments to ensure maximum security and confidentiality, by authorised personnel in accordance with the provisions of articles. 31 et seq. of Legislative Decree 196/03. Data will be kept for a period not exceeding the purposes for which the data was collected and subsequently processed.

5. Communication and disclosure
Your data, subject to processing, will not be disseminated and may be disclosed to companies contractually bound to Candy Hoover Group Srl – with single shareholder, abroad and within the European Union, according to and within the limits referred to in Art. 42 of Legislative Decree No. 196/2003. Personal data may be transferred abroad to countries outside the EU within the framework and the limits provided by Articles. 43 and 44 letter b) of Legislative Decree No. 196/2003, in order to fulfil contracts or related purposes. The data may be disclosed to third parties in the following categories:
- individuals who provide services for the management of the information system used by Candy Hoover Group Srl – with single shareholder and the telecommunications networks (including email);
- companies of the group;
- studies and companies in the field of support and consultancy;
- authorities with responsibility for fulfilment of obligations of law and/or provisions of public bodies, on request.
Entities in the above categories have responsibility for the data processing, or act as totally independent data controllers. The list of existing supervisors is constantly updated and is available at the offices of Candy Hoover Group Srl – with single shareholder , via Private Eden Fumagalli 20047 Brugherio (MB) and on request from privacy@candy.it erhältlich.

6. Nature of the conferral and refusal
Apart from the provisions specified for navigation data, the user is free to provide personal data. The conferral of data for the purposes referred to in section A) is optional but necessary. Any refusal to provide the data necessary for section A) will make it impossible to execute closely related and instrumental activities, for example, to obtain information requested or to use the services of the Data Controller. Conferral and consent to processing for the purposes referred to in sections B) and C) is optional. The refusal of consent for the purposes set out in sections B) and C) above will have no negative consequences regarding the purposes referred to in section A).

7. Rights of the interested parties
You will be able to assert your rights in accordance with articles 7, 8, 9 and 10 of Legislative Decree No. 196 of 30 June 2003 by contacting the Controller, Candy Hoover Group Srl and sending an email to privacy@candy.it You have the right, at any time, to obtain confirmation of the existence or otherwise of the data and to know its content and origin, verify its accuracy or request its extension, updating, or correction (Article 7 of the Personal Data Protection Code). Pursuant to the same article, the interested parties have the right to request the deletion, transformation into anonymous form or the blocking of data processed in breach of the law, and in any case to object to the processing for legitimate reasons. When contacting the Controller, the user is asked to provide e-mail address, name, address and/or telephone numbers, to enable the correct handling of the request.

n order to halt automated direct marketing communications (e-mail, SMS, MMS or fax) simply send an email at any time to privacy@candy.it with the subject “cancellazione da automatizzato” (“unsubscribe automated”) or use our auto unsubscribe system for e-mail only, and you will no longer be disturbed.
In order to halt traditional direct marketing communications (operator calls, printed matter by post) simply send an email at any time to privacy@candy.it with the subject “cancellazione da tradizionale” (“unsubscribe traditional”) and you will no longer be disturbed.
In order to halt any type of direct marketing communications simply send an email at any time to privacy@candy.it with the subject “cancellazione marketing” (“unsubscribe marketing”) and you will no longer be disturbed.

8. Changes to the Privacy Policy
The Controller reserves the right to change, update, add, or remove parts of this privacy policy at its discretion and at any time. The interested party has the responsibility to check periodically for any changes. In order to facilitate checking, the disclosure will highlight updated information. Use of the site following the posting of changes will constitute your acceptance thereof.


Date updated: 07.10.2014