Privacy Policy

 

PRIVACY POLICY

Your privacy is fundamental to us. That's why we strive daily to implement what the GDPR and the Privacy Code require. This policy, therefore, responds to both a legal obligation that we fulfill and our desire for transparency regarding what we do with the data you provide us: this is so you can entrust it to us with peace of mind. Below, you will find the privacy policy for our website www.clai.it.

 

Who is the Data Controller for your data?

The Data Controller for data collected through this site is C.L.A.I. Soc. Coop., with registered office at Via Gambellara 62/A, Sasso Morelli, 40026 Imola (BO), P.IVA 00502551203 (hereinafter also the "Controller"). To contact us, you can send an email to privacy@clai.it.

 

Why do we process your data and when do we collect it?

When you visit our site, some of your personal data is processed by us for various purposes. The data we process includes:

 

TYPE OF PROCESSING

WHAT DATA WE PROCESS

WHY WE PROCESS IT AND WHAT THE LAW ALLOWS US TO DO

DATA RETENTION PERIOD

 

 

 

Navigation data

While browsing our website, we collect some of your personal data, such as your computer's IP address, or the domain names of the computers and terminals used by users, the URI/URL addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment.

We need this for statistical purposes, to improve our site, and to protect the security of users' navigation. We process this data based on our and your legitimate interest (Art. 6 lit. f, GDPR).

7 days

 

 

 

 

 

 

Cookies

Cookies are "small text files" – composed of letters and numbers – "that websites visited by the user send to their terminal (usually the browser), where they are stored to be retransmitted to the same sites the next time the same user visits them". Cookies use some personal data of users (e.g., the IP address) to perform their function. When you browse our site, these small text files will be sent to your terminal, which you can disable at any time. To learn more about the cookies on this site, read our cookie policy.

Cookies have the function of streamlining web traffic analysis or signaling when a specific site or part of it is visited, distinguishing visitors to provide personalized content, and helping administrators improve the site and users' browsing experience. Through cookies, we cannot access other information stored on your device, even if this is where cookies are downloaded. Some cookies (technical) are installed without your consent. Others are installed only with your prior consent (Art. 6, lit. a, GDPR). For more information, read our cookie policy.

See cookie policy.

You can consult the cookie policy by clicking on the blue widget at the bottom of each page of our site.

 

 

 

 

 

 

 

Data collected through forms

CONTACT US FORM, in this case we will process your personal and contact data (name, surname, email address, phone number, etc.)

We process this data to fulfill your contact request. This data is processed without your consent, in accordance with what the GDPR allows us (Art. 6, lit. b).

The time strictly necessary to fulfill the request. However, no more than 12 months.

WORK WITH US FORM, in this case we will collect data related to your work experience, your personal and contact data, some data related to your health status (if you belong to protected categories).

We process this data to evaluate your application. We process:

  • Your common data in accordance with Art. 111-bis of Legislative Decree 196/2003, within the limits of the purposes referred to in Article 6, paragraph 1, letter b), of the GDPR;
  • Your special data (e.g., belonging to protected categories) in light of the Provision of the Garante Authority n. 146 of June 5, 2019.

12 months from the date of collection.

SUBSCRIBE TO THE CASA CLAI COMMUNITY OR SUBSCRIBE TO THE NEWSLETTER FORM, in this case we will process your email address to send you communications about the latest offers, campaigns, and promotions that CLAI makes available to you.

We process this data without your express consent as you are requesting to subscribe to our newsletter and we will only process your email address to send you promotional communications and not for other purposes (Art. 6, lit. b), even if free of charge.

36 months from the last interaction with our communications.

E-commerce

You can also purchase our products on our website. In this case, we will process your contact details to arrange shipping and your payment details to complete the purchase. Payment data is managed by our provider Shopify, which guarantees secure transactions.

Following your purchase of our products, we will add you to our mailing list to send you discount codes and offers reserved for you or initiatives that we think might interest you (e.g., opening of new stores, etc.). 

When you fill your carts, even without finalizing the purchase, we will be able to help you complete the order. We will therefore send you communications to remind you of your abandoned cart. 

Following the purchase, we would like to send you communications via SMS to send you discounts, promotions, or invitations that we believe may be of interest to you.

We process data related to commercial transactions without needing your consent as we are fulfilling a purchase request, thus executing a contract (Art. 6, lit. b).

 

Your email and name, however, are processed based on CLAI's legitimate interest, as you are our customer and we will only send you material related to your purchase (Art. 6, lit. f). You can unsubscribe from the mailing list at any time by clicking on the link at the bottom of each email you receive.

To use your mobile number for sending promotional SMS, we need your consent (Art. 6, lit. a). You can withdraw your consent at any time by writing to privacy@clai.it

10 years from the date of collection.

 

36 months from the last interaction with us.

 

36 months from the last interaction with us.

Reserved Area

On our site, you can also create a personal account to manage orders more easily and improve the shopping experience. In this case, we collect your email address. To access the area, you will need to enter an OTP code that we will send directly to your inbox, and this OTP will be different for each login you need to make. If you wish to request the cancellation of your account, you can simply write to us using the contact details provided in this policy, requesting cancellation.

We process this data without the need for your consent as we are fulfilling an account creation request, thus executing a contract (Art. 6, lit. b), even if free of charge.

By creating a personal account, we will also process your email address to send you commercial communications containing discounts, initiatives, and benefits that we believe may interest you. You can unsubscribe from our mailing list at any time by clicking on the dedicated link at the bottom of every email we send you. We can do this without your express consent according to Art. 6, lit. f), GDPR and Art. 130, paragraph 4, Privacy Code.

Until you request account cancellation and in any case no more than 5 years from the last login.

36 months from the last interaction with us.

Social buttons

On our site you will also find social buttons: small icons that link to the various social networks we manage (Instagram, LinkedIn, Facebook and YouTube).

Whenever you click on one of these social buttons, you will be redirected to the social platform owner's site, who will act as an independent data controller. We therefore invite you to read these controllers' privacy policies to receive information on how your data will be processed.

Not stored.

 

How do we process your data and who can access it?

Your data is processed in accordance with the Regulation and using methods and tools that we deem most appropriate to preserve your confidentiality.

In addition to us, in some cases, other parties involved in the organization of this Site (administrative, commercial personnel, system administrators, etc.) or external parties (such as third-party technical service providers, hosting providers, IT companies, communication agencies) appointed by us as Data Processors, where provided for by law, may have access to the data. You can obtain a complete list of data processors by writing to our email address. We will not disseminate your data.

 

Do we perform profiling?

In order for our communications to be of interest to you, we carry out analyses of your consumption habits by analyzing what you like to buy and to reserve special discounts for you. We do not require consent to carry out profiling because it is not necessary according to Article 22, GDPR. In fact, our profiling only concerns purchasing habits to offer you personalized promotions, and no legal consequences arise for you from this activity.

Where is your data located?

Your data is processed both in Europe and the United States. We have chosen partners who guarantee data processing security levels, both by signing Standard Contractual Clauses and by verifying that the partners are enrolled in the Data Privacy Framework List.

 

What are your rights?

As a data subject, you have the right to obtain, where applicable, access to your personal data and its rectification or erasure, or restriction of processing concerning it, or to object to processing (to know all your rights, you can consult the Regulation in Articles 15 et seq.). To exercise your rights, you can write to the email address we provided at the top of the document.

 

Right to complain

Should you believe that the processing violates your rights in any way, you can lodge a complaint with the Garante per la protezione dei dati personali (Italian Data Protection Authority), as provided for by Art. 77 of the GDPR, checking the procedures on the website www.garanteprivacy.it.

 

Protection of minors' privacy

This website is directed to a general audience; however, its services are intended for individuals aged 18 or over. We do not request, collect, use, or disclose personal data provided by individuals under 18 years of age online. Should we discover that we have collected data from a minor, we will delete it immediately.