In accordance with Article 13 of the EU Data Protection Regulation 2016/679 (“GDPR”)
Dear User, Karita Interactive welcomes you to its website (the “Website”) and invites you to carefully read the following Information (“the Information”), issued in accordance with Article 13 of the Regulation (EU) 2016/679 on the protection of natural persons, with particular attention to the processing and free movement of personal data (“RGPD”).
This document describes all processing carried out by the Responsible Party, as defined below, through our website.
It is also made clear that this Information relates exclusively to our website, to the exclusion of any other website to which you may be redirected by our website.
Furthermore, if you should purchase products or services provided by Karita Interactive other than through our website, you will be provided with the specific Information, referred to in art. 13 of the GDPR, on your personal data processed in this context.
Who is the person in charge of the processing?
The data controller is Karita Interactive – 14 rue des Vergers – 34130 MUDAISON (the “Controller”).
The Manager has also appointed a Data Protection Officer (“DPO”), whom you can contact directly to exercise your rights and to access any information on the processing of your personal data and/or on this Information, by contacting the
Data Protection Officer (“DPO”)
14 rue des Vergers
e-mail : firstname.lastname@example.org
Tel: 04 67 42 66 28
What personal data is processed?
2.1 Navigation data
In the course of their normal operation, the computer systems and software procedures dedicated to the functioning of the website acquire certain personal data, the transmission of which to the person in charge is implicit in the Internet communication protocols.
This is information that is not collected to be associated with identified subjects, but which by its very nature could, through elaboration and association with data held by third parties, allow users to be identified.
This category of data includes the addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method of submitting the request to the server, the size of the response file, the numerical code indicating the status of the server response (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment.
This data is used only to obtain anonymous statistical information on the use of the site and to monitor its operation; it is deleted immediately after processing. This data can also be used to identify responsibility in the event of alleged computer fraud against the website.
2.2 Data provided voluntarily by the user
The Manager processes the following personal data provided by you after entering the website’s input masks:
– personal data e.g. first name, last name, address, telephone number, e-mail address, occupation and other contact details, images, vehicle owned, renewal project, etc.
– data on the contract concluded,
– bank details (e.g. your bank details).
What is the purpose and lawfulness of the processing of your personal data?
The Manager processes the personal data that you provide after having entered the input forms provided on the website for the purposes indicated below.
3.1 Provision of services and sale of products
The person in charge intends to process your personal data to allow you to access our website, for purposes strictly related to the provision of online services, offered in turn by the website, and in particular to respond to your requests to send information material on the products and services offered by the person in charge, to manage requests for “test drives”, to allow access to promotions and offers present on the website, to accommodate your request to participate in our community, as well as to provide you with assistance that you may request from our customer service.
Nature of data provision: Optional.
Consequences of refusal to provide data: Refusal to provide one’s data would make it impossible for the Responsible Party to respond to the requests cited in the previous paragraph.
Lawfulness of processing: article 6, paragraph 1, letter b) of the RGPD. Your prior consent to the processing is therefore not required.
Duration of storage of personal data: For these purposes, your personal data will be processed for the time strictly necessary to satisfy your request; it will then be stored for the period of time provided for by the relevant regulations, after the conclusion of the said request.
3.2 Marketing activity on products and services similar to those already requested by the user
The person in charge intends to process your personal data in order to send you commercial communications of products and services similar to those requested and offered by the person in charge also through the responsible subjects designated for this purpose in accordance with art. 28 of the RGPD.
Purpose of the processing: Sending of advertising and promotional material and sale of products as well as market research and/or commercial communications.
Nature of the data supply: Optional.
Consequences of a refusal to provide data: Failure to provide the data will entail the impossibility for the responsible party to send you promotional and marketing communications
Lawfulness of processing: Legitimate interest.
Duration of storage of personal data: For this purpose, your personal data will be processed until you decide to object to their processing and/or obtain the cessation of said processing at any time.
3.3 Marketing activity
The controller intends to process your personal data in order to send you commercial communications relating to any products and services offered by the controller itself also through the responsible subjects appointed for this purpose in accordance with art. 28 of the RGPD.
Purpose of the processing: Sending of advertising and promotional material and sale of products as well as market research and/or commercial communications.
Nature of data provision: Optional.
Consequences of refusal to provide data: Failure to provide the data will mean that the responsible party will not be able to send you promotional and marketing communications.
Lawfulness of the treatment: Consent
Duration of storage of personal data: For this purpose, your personal data will be processed until you decide to object to their processing and/or to obtain the cessation of said processing at any time.
Methods of processing your personal data
The processing of your personal data will be carried out in accordance with the provisions of the RGPD, through paper, computer and telematic media with logic closely related to the purposes indicated, and, in any case, through suitable methods to guarantee the security and confidentiality provided for in Article 32 of the RGPD.
Recipients of your personal data and subjects that may come into contact with it
For the purposes described in paragraph 3, your personal data will be known to the employees, related personnel and collaborators of the Manager, who operate as subjects authorized to process personal data.
Your personal data may also be transmitted to and processed by third parties in the following categories
a) subjects managing the website of the Responsible for the data;
b) companies that manage the IT system of the Responsible Party;
c) companies and legal and/or tax consultants;
d) authorities and supervisory bodies and, in general, public or private subjects with public functions;
e) suppliers of the Responsible Party;
f) to other companies of the Karita Interactive Group, for marketing purposes, direct sales, market research, statistics evaluating the degree of customer satisfaction with the services, products and brands distributed by Karita Interactive and/or other companies of the Karita Interactive Group, as well as transmission to external subjects (e.g. suppliers), if this is necessary to enable you to benefit from our services
You may at any time exercise the right to revoke your consent. The person in charge will not be able to continue to use your personal data for purposes for which you have refused your consent.
In some cases, the subjects belonging to the above-mentioned categories operate as separate Data Processors, in other cases as Data Processors specially appointed by the Responsible Party in accordance with Article 28 of the GDPR.
The complete and updated list of subjects that may receive your personal data is available from the Head Office of the Responsible Party or by contacting the DPO.
Your personal data will not be transmitted to third parties located outside the EU and will not be subject to dissemination.
Data of minors
The Manager does not process personal data of individuals under the age of 16 for the purposes referred to in paragraphs 3.1. and 3.2.
If the user declares to be under 16 years of age, the fields related to the collection of consent will already be entered in a negative way.
The site may collect and process geolocation data for the provision of services requested by the user, but only with the prior consent of the person concerned, which can always be revoked. In this case, your consent will be requested through a pop-up window.
Rights of the data subject
With regard to the processing operations described in this Information, as a “data subject” you may exercise, under the conditions provided for by the GDPR, the rights provided for in articles ranging from 15 to 21 of the GDPR and in particular:
the right of access – Article 15 of the GDPR the right to obtain confirmation as to whether or not your personal data is being processed and to obtain access to your personal data – as well as a copy – and communication of, in particular, the following information:
purpose of the processing
categories of personal data processed
current and future recipients of your personal data
duration of data retention or the criteria used
rights of the data subject (rectification, erasure of personal data, restriction of processing and right to object to processing ;
the right to lodge a complaint;
the right to receive information on the origin of his or her personal data if they have not been provided by the data subject;
the existence of an automated decision-making process, including profiling;
the right of rectification – Article 16 of the GDPR: the right to obtain, without undue delay, the rectification of inaccurate personal data and/or the insertion of incomplete personal data;
the right to erasure (the right to be forgotten) – Article 17 of the GDPR: the right to obtain, without undue delay, the erasure of personal data when
a) the data are no longer necessary for the purposes for which they were collected or otherwise processed ;
b) you have revoked your consent and there is no longer any legal basis for their processing;
c) you have successfully objected to the processing of your personal data;
d) the data has been processed unlawfully;
e) the data must be deleted to comply with a legal obligation;
f) the personal data has been collected for the purpose of offering services of the company of the Responsible person referred to in Article 8, paragraph 1 of the GDPR.
The right to erasure does not apply if the processing is necessary to comply with a legal obligation or the performance of a task carried out in the public interest or in the exercise of official authority or for the establishment, exercise or defense of legal claims.
the right to restrict processing – Article 18 of the GDPR: the right to obtain the restriction of processing, when
a) the data subject disputes the accuracy of the personal data ;
b) the processing is unlawful and the data subject objects to the erasure of the personal data, requesting to limit their use;
c) the data controller no longer needs the personal data for the purposes of the processing, but the data are still necessary for the data subject to establish, exercise or defend his or her legal rights
(d) the data subject has objected to the processing, as mentioned above, pending verification of the predominance of the legitimate grounds of the controller over those of the data subject;
the right to data portability – Article 20 of the GDPR: the right to receive, in a structured, commonly used and machine-readable format, the personal data concerning him/her provided to the Controller and the right to transmit such data to another controller without the controller to whom the personal data have been communicated hindering this, if the processing is based on consent and is carried out using automated processes. The data subject also has the right to have his or her personal data transmitted directly from one controller to another, where technically possible;
the right to object – Article 21 of the GDPR the right to object, at any time, to the processing of your personal data based on the lawfulness of the legitimate interest, including profiling, unless the Responsible Party demonstrates compelling legitimate grounds for the processing which override the interests and rights and freedoms of the data subject, or for the establishment, exercise or defense of legal claims ;
the right to file a complaint with the French Data Protection Authority, CNIL, 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07
The above-mentioned rights may be exercised vis-à-vis the Manager by contacting the supervisory authority mentioned in the previous paragraph. The person in charge will take charge of your request and will provide you, without undue delay and, in any case, at the latest within one month of its receipt, with the information relating to the action taken concerning your request.
The exercise of your rights as a data subject is free of charge according to Article 12 of the GDPR. However, in the case of requests that are manifestly unfounded or excessive, in particular because of their repetitiveness, the Responsible Entity may request a reasonable payment from you by way of fees, in view of the administrative costs incurred in handling your request; it may also not respond to your request.
Finally, we inform you that the Manager may request other information necessary to confirm the identity of the person concerned.
We inform the user that Karita Interactive uses cookie technology to make navigation more pleasant for all users who visit the site.
Cookies are small files that the site visited by the user sends to the browser, where they are stored and then sent back to the site after the user’s visit.
Cookies are used for a variety of purposes, including performing computer authentications; tracking sessions; storing information about specific configurations of users accessing the server.
By allowing the site to recall the user’s data for the duration of the visit or for subsequent visits, cookies allow the user to surf the pages in an efficient way, memorizing their preferences, and allowing them to interact with social networks such as Facebook, Twitter, Linkedin, Google +, Instagram while offering Google Maps services.
Cookies can also be used to store the user’s login data and make the user recognition automatic (so the user will not need to enter his username and password every time to access the site).
The data processing is carried out with electronic or, in any case, automated, computer or telematic tools, with logic strictly related to the above-mentioned purposes and, in any case, in such a way as to guarantee the security and confidentiality of the data.
technical cookies (which do not require your consent)
Among the technical cookies, which do not require express consent for their use, the Italian Guarantor for the Protection of Personal Data also includes:
– analytical cookies used directly by the site administrator to collect information, in aggregate form, on the number and manner of visiting the site of users ;
– navigation or session cookies (to authenticate, to make a purchase, etc.)
– functionality cookies, which allow the user to navigate according to a series of selected criteria (e.g. language, products selected for purchase) in order to improve the service provided
Profiling cookies (which require your consent) Our site also uses profiling cookies that we can only install with your consent.
Profiling cookies are used to create profiles of users and are used to send advertising messages based on the preferences expressed by the user when browsing the web. These cookies are used to present content more adapted to the users and their interests. They may be used to display targeted advertisements or to limit the number of times advertisements are viewed. Due to the particular invasiveness that these devices can have in the private sphere of the users, the European and French regulations provide that the user must be informed in an appropriate way about the use of these and thus express his valid consent. The profiling cookies require the prior acquisition of the informed consent of the user, which the site acquires in the forms provided for by the regulations through the banner that is displayed on the first visit and through the Information that allows the user to give or refuse his consent.
First and third party cookies
If the cookies received by the user have been directly installed by the manager of the site that the user is visiting, they are first-party cookies. While browsing the site, the user may also receive cookies from other sites or servers (third-party cookies) which may contain certain elements (such as photos, maps, sounds, specific links to pages in other domains) present on the site visited. In this case, these are cookies that are set from a different website than the one the user is visiting.
The user can select which cookies to authorize through the specific procedure provided below, as well as authorize, block or delete (completely or partially) the cookies through the specific functions of the navigation program (browser): however, if all or some of the cookies are deactivated, it is possible that the site cannot be consulted or that some of the services or functions of the site may not be available or may not function properly and/or the user may be obliged to modify or manually enter certain information or preferences each time he/she visits the site.
If you wish to change your cookie settings, the following are instructions on how to do so with the four most popular browsers:
Microsoft Internet Explorer
Click on the “Tools” icon in the upper right corner and select “Internet Options”. In the pop up window select “Privacy”. Here you can adjust your cookie settings.
Click on the wrench in the upper right corner and select “Settings”. Then select “Under the hood” and change the “Privacy” settings.
From the tabbed menu in the top left corner select “Options”. In the pop up window select “Privacy”. Here you can adjust your cookie settings.
From the tabbed menu in the top right corner select “Preferences” Select “Security” and you can adjust your cookie settings.
As in the banner that appears on the first visit to the site, consent to the use of all cookies will be provided by the user by selecting the virtual keyboard of acceptance (for example, an OK, a check mark, etc.) or continuing to browse the site (for example, ignoring the banner/pop-up and performing other operations). The user will also have free access to the link with the Information, with all the information related to cookies (description, purposes and conservation), in which the visitor of the site will have the possibility to express his consent only for certain categories of cookies.