---

Ownership of the data collected on the Site

With reference to the data collected and processed through the Site, we hereby inform you that Corneliani S.p.a. with registered office at Via Durini 24, 20122 Milan (MI), VAT no. 11762610969, share capital and reserves € 13,500,000.00, registered in the Milan Monza Brianza Lodi business registry, REA MI - 2623294 (hereinafter, “Corneliani”), is the autonomous controller of the personal data of users browsing the Site, which includes browsing data.

Corneliani has appointed Drop S.r.l., with registered office in Montegranaro (FM), 63812, Via Sandro Pertini n. 1, P.I. n. 01383870431, share capital € 100,000.00 fully paid up, registered in the Fermo companies register, REA FM-201713, as processor, IT service provider and operational manager of the Site.

For any information about the owner and for a full list of the processors, please contact Corneliani by writing to: privacy@corneliani.it or by fax to +39 0376 304 308 or by post to the above address.

Corneliani’s Data Protection Officer (DPO) can be contacted at the company’s headquarters and by email at privacy@corneliani.it.

Categories of data collected and purposes of the processing carried out on the Site whose Corneliani is the autonomous controller

Through the Site, different types of personal data are collected and processed for different purposes and in different ways. Specifically:

(a) personal data relating to navigation, processed for the sole purpose of enabling the Site to function properly. In this regard, we invite you to read the specific Cookie Policy below;
(b) dpersonal data provided voluntarily by the user (e.g. e-mail address, personal data, password).

How Corneliani processes personal data

Personal data collected through the Site are processed using mainly computerised and telematic methods and tools, adopting security measures in order to minimise the risks of destruction or loss, even accidental, of the data themselves, of unauthorised access or processing that is not permitted or does not conform to the purposes of collection as indicated in this Privacy Policy. However, such measures, due to the nature of the online transmission medium, cannot absolutely limit or exclude any risk of unauthorised access or dispersion of data. For this purpose, it is advisable to periodically check that the computer is equipped with appropriate softwares for the protection of network data transmission, both incoming and outgoing (such as up-to-date antivirus systems) and that the Internet service provider has taken appropriate measures for the security of network data transmission (such as firewalls and spam filters).

Mandatory or optional provision of data

For navigation data, the Cookie Policy governs the provision and collection of data. Any personal data requested when purchasing and re-ordering products are not compulsory, but failure to provide them may adversely affect the outcome of the purchase or re-order.
This data is processed for contractual purposes.

Categories of recipients of personal data

Corneliani discloses the personal data of users of the Site only to the extent permitted by law and in accordance with what is set out below.
Personal data will be processed and made known not only by Corneliani’s employees and consultants, who will act as authorised processors, but also by the companies of the Group, as well as by companies that provide the Company with specific technical and organisational services related to the Site and to the management of activities supporting Corneliani’s business. Furthermore, the data may be disclosed to the police or to judicial authorities, in accordance with the law and subject to a formal request by such entities, or if there are reasonable grounds to believe that the disclosure of such data is reasonably necessary to (1) investigate, prevent or take action regarding suspected unlawful activities or to assist governmental control and supervisory authorities (2) defend against any claims or allegations from third parties, or protect the security of its website and business; or (3) exercise or protect the rights, property or safety of Corneliani, its affiliates, customers, employees or any other person.
Personal data will not be disclosed and will be transferred abroad, only by ensuring adequate levels of protection and safeguards in accordance with legal regulations, such as the Standard Contractual Clauses approved by the European Commission.

Data source and retention period

The personal data collected by Corneliani are provided directly by the user (through registration to the Site or use of related services).
Personal data provided by the user in the course of navigation and tracked by cookies will be stored for the time periods indicated in the cookie policy. Data processed to provide a service will be stored for as long as necessary to provide the user with the requested service.

COOKIE POLICY

Here below the extended information concerning the cookies installed on this site is provided..

What cookies are

A cookie is a small amount of data that, in the form of an anonymous unique code, is sent to your browser from a web server and then stored on the hard drive of your computer, smartphone and/or tablet. Cookies can be used either to allow the correct use of a website (so-called technical cookies), or to check the preferences expressed by the user during his or her web surfing in order to propose advertising messages to the same user in line with them (so-called profiling cookies).
Cookies can be stored on the device permanently and have a variable duration (so-called permanent cookies) or disappear when the browser is closed or have a limited duration (so-called session cookies).

What cookies are used on this site and for what purposes

Our site uses the following types of cookies:

Technical cookies

They are useful to ensure the functioning of our services and allow us to improve the quality and experience of navigation.
These technologies allow the Site to store important information in the User’s browser or device (such as, for example, the language and market of the country from which the User has chosen to connect) and then use it later to identify the User on our servers or internal systems.
If the user is registered, they permit access to the services offered and recognise the visitor on subsequent accesses.
Other technical cookies may be used to monitor data traffic in order to detect fraudulent transactions.
Where applicable, we protect cookies and other similar technologies to ensure that only we and/or our authorised service providers can interpret them by assigning them a unique code. In some contexts, disabling these cookies may not be technically possible as they are necessary to ensure the functioning of the Site or when used by the Controller for fraud prevention purposes. All Personal Data collected and stored through the use of these technologies are obtained only after a specific information notice has been provided to the User.
The uses of these technologies fall into the following general categories.
Operationally necessary use. The use of cookies may be necessary for the correct functioning of sites, services, apps and tools. This includes technologies that allow the User to access sites, services, apps and tools required to prevent fraudulent activities and improve security or to use other functions such as shopping carts, saved searches or similar functions.
Performance-related use. We may use cookies to evaluate the performance of our websites, apps, tools and services, including as part of analytics to understand how visitors use our websites, to determine if they have interacted with our messaging system or viewed an item or link, or to improve the content, apps, services or tools on the Site.
Functionality-related use. We may use cookies to provide you with enhanced functionality when you access or use our sites, services, apps or tools.

Scope of data disclosure, transfer and dissemination - legal basis

Data acquired via cookies are processed by
- employees and collaborators of the Controller, in their capacity as data processors and persons in charge of processing,
- providers of technical and organisational services, in their capacity as data controllers.
Data acquired using cookies may be transferred abroad, including outside the EU, while ensuring adequate protection and safeguards. The data will not be disseminated in any way.
The cookies are used to enable you to make better use of the Site and are functional for the execution of the agreement relating to replenishment orders.

Processing methods

Personal data are processed by automated means for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures are in particular observed to prevent the loss of Data, unlawful or incorrect use and unauthorised access.

Users’ rights - Rights under Articles 15,16,17,18,20 and 21 of the Regulation

The User shall always have the right to obtain from Corneliani confirmation of the existence or non-existence of personal data concerning him/her, even if not yet registered, and its disclosure in intelligible form. The User also has the right to obtain information on the origin of the personal data; the purpose and method of processing; the ratio applied in the event of processing carried out with the aid of electronic instruments; the identification details of the data controller and data processors; the names of the persons or categories of persons to whom the personal data may be communicated or who may become aware of them in their capacity, for example, as data processors, data supervisors or persons authorised to process the data. The user also has the right to request the updating, rectification or, where interested therein, integration of personal data, the cancellation, transformation into anonymous form or blocking of personal data processed in breach of the law, including data whose storage is not necessary for the purposes for which the data were collected or subsequently processed; certification to the effect that the above operations have been notified, as also related to their contents, to the entities to whom or which the data were communicated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected. The user also has the right to data portability.
The user also has the right to lodge a complaint with the competent supervisory authority.
The above rights may be exercised by contacting Corneliani by writing to privacy@corneliani.it.