The data supplied to Cleaf S.p.a. via the website at www.shapingsurfaces.design (hereafter the “Website”) when participating to the competition “Shaping Surface” on the Website and/or when sending materials, pictures, data to Cleaf S.p.a. related to the competition “Shaping Surface” (hereafter the “Competition”),shall be processed in compliance with personal data protection legislation. Cleaf S.p.a. informs users of the following.
1. Data Controller
1.1 The Data Controller of personal data is Cleaf S.p.a. (hereafter “Cleaf” or “Data Controller”), with its registered office in Macherio (MB), via S. Ambrogio 18, 20846, Italy.
2. Nature of the data processed and purposes of the processing
2.1. The personal data processed, where personal data is defined as any information on a physical person who is identified or may be identified, either directly or indirectly through reference to any other information. The data processed are:
a) the data provided by the user to the Data Controller when submitting his/her/its projects and data referred to the Competition on the relevant form of the Website, such as biographical data (name, surname, nationality, address, company name, telephone number, e-mail address, name of the client);
b) the data provided by the user to the Data Controller in the course of further contacts with the Data Controller;
c) the data collected by Cleaf when browsing the Website, such as IP address, information obtained through cookies.
2.2 The data will be used for the following purposes:
a) identification of the submitted projects, of the owners and the related designer/architect for contact purpose exclusively related to the Competition;
b) publication on the Website and on a specific monthly newsletter in relation to the Competition.
3. Obligatory/optional nature of providing data
3.1 Providing the data requested when submitting projects and data referred to the Competition on the relevant form of the Website for the purposes identified in the section 2.2 above is mandatory, as it is strictly functional for the performance and for providing the services related to the Competition and meeting legal obligations. Refusal to supply data will make it impossible for Cleaf to fulfill its contractual commitments, to complete the process of submit on the Website.
4. Processing methods
4.1 Users’ data will be collected online or through the use of physical storage when submitting on the Website and through the use of the e-mail service.
4.2 Users’ data will be processed through registration, consultation, communication, storage and deletion operations conducted primarily using electronic tools and manually, ensuring that appropriate measures are taken to protect the security and guarantee the confidentiality of the data processed.
4.3 Users’ data, stored in electronic/magnetic/digital form, are stored and filed on a server located in Italy; personal data stored in paper form shall be filed in specific registers and/or records whose conservation shall be guaranteed by placing the latter in specific containers, stored in suitable premises. Cleaf declares that data registered on its server and/or in suitable premises are protected against the risk of intrusion and unauthorized access, and that it has taken appropriate security measures to ensure the integrity and availability of data and protect areas and places for data storage and accessibility.
4.4 Personal data will be processed by Cleaf employees and/or collaborators acting as data processors, in the context of their respective functions and in accordance with the instructions given by Cleaf. The list of the data processors may be available on request of the data subject.
4.1 Users’ data will be collected online or through the use of physical storage when submitting on the Website and through the use of the e-mail service.
4.2 Users’ data will be processed through registration, consultation, communication, storage and deletion operations conducted primarily using electronic tools and manually, ensuring that appropriate measures are taken to protect the security and guarantee the confidentiality of the data processed.
4.3 Users’ data, stored in electronic/magnetic/digital form, are stored and filed on a server located in Italy; personal data stored in paper form shall be filed in specific registers and/or records whose conservation shall be guaranteed by placing the latter in specific containers, stored in suitable premises. Cleaf declares that data registered on its server and/or in suitable premises are protected against the risk of intrusion and unauthorized access, and that it has taken appropriate security measures to ensure the integrity and availability of data and protect areas and places for data storage and accessibility.
4.4 Personal data will be processed by Cleaf employees and/or collaborators acting as data processors, in the context of their respective functions and in accordance with the instructions given by Cleaf. The list of the data processors may be available on request of the data subject.
5. Data disclosure
5.1 Users’ personal data may be disclosed to certain parties appointed by Cleaf to perform the contractual commitments and to meet legal obligations. Users’ data will not be disseminated.
6. Users’ rights
6.1 Data subject are entitled to obtain confirmation of the presence of their personal data and the purposes for which the data are processed at any time. Users are also entitled to request updating, correction, deletion or blocking of data and to refuse its use, entirely or in part.
6.2 Users’ rights are listed below. Specifically:
6.2.1 A data subject shall have the right to obtain confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information.
6.2.2 A data subject shall have the right to be informed of:
a) the source of the personal data;
b) the purposes and the modalities of the processing;
c) the logic involved in any personal data processing by electronic means;
d) the contact details of the controller and, where applicable, of the processor and of the controller’s representative;
e) the subject or categories of subjects to whom the personal data may be disclosed or that may access to the data as controller or processor’s representative within the territory of the State.
6.2.3 In addition to the previous information, the data subject is entitled to receive from the Controller the following further information upon request:
a) obtain from the controller without undue delay the update, integration or rectification of inaccurate personal data concerning him or her;
b) the rectification or deletion of personal data or restriction of processing concerning the data subject or to refuse the processing as well as the right to data portability, and the anonymization of the data;
c) the attestation that the operations mentioned in sections a) and b) above have been notified to the subject to whom the data were disclosed, unless the fulfilment of this requirement is impossible or involves disproportionate effort.
6.2.4 The data subject shall have the right to object, at any time, to processing of personal data concerning him or her:
a) for legitimate on grounds relating to his or her particular situation, including profiling;
b) where personal data are processed for direct marketing purposes, which includes profiling to the extent that it is related to such direct marketing.
6.2.5 The data subject shall have the right to:
a) lodge a complaint with a supervisory authority (data protection Authority);
b) receive the personal data concerning him or her, which he or she has provided to Cleaf, in a commonly used electronic form and in an easily legible manner, and have the right to transmit those data to another controller without interferences;
c) obtain from the controller restriction of processing. 6.3 To exercise the above mentioned rights and receive information on parties to whom the data are disclosed, or parties who may become aware of data while acting as data processors or persons in charge of the processing, the users may contact Cleaf, by sending a request using the contact details provided above.
7. Duration of processing
7.1 Personal data will be processed, with regard to the purposes mentioned in section 2.2, for the time necessary to achieve the described purposes.
7.2 At the end of the data processing period, the data will be deleted or permanently rendered anonymous.
8. Legal basis for the processing
8.1 The legal basis for processing is for the “performance of a contract” and the “legitimate interests of the data controller”.
9. Updating of Privacy Policy
8.1 The legal basis for processing is for the “perfo9.1 This Privacy Policy is subject to occasional revision. Cleaf will notify users when changes are made to data processing conditions by publishing the amendments on the Website. If required under current legislation, users will have the option to consent to any new data processing. If the user refuses, his or her data will not be processed according to the changes of the new privacy policy.
10. Transfer to non-EU countries
10.1 Personal data shall not be transferred to non-EU countries.