La please read carefully the present Privacy Policy (by followed, “Privacy Policy“), intended to be rendered to the utents of the website: www.cobogroup.net (byfollowed, the “Website“), prepared in accordance with deThe’art. 13 of the Regulations General on the Protection of Dati n. 2016/679 (in seguito, also “GDPR“), in which we we indicate all the details regarding the processing of the Sith your personal data (hereinafter also, “Data“) and on their use.
Please note that the Privacy Policy is intended to apply only to the processing of Data carried out on the Site and not also a treatments carried out on different and additional websites, although accessible by means of links present within the Site itself.
The data controller is. C.O.B.O. S.p.A., via Titus Speri n. 10, ZIP CODE 25024 Leno (BS) C.F.08976960156 and VAT number IT01931530982 (hereinafter referred to as “Holder” o “Society“).
E-mail address: [gdpr@cobogroup.net]
We collect i following Dati through the services usedyou by the user.
In this category of Dati includes IP addresses or domain names of computers used by users connecting to the Site, addresses in URI notation (UniformResource Identifier) of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the user’s operating system and computer environment. These Dati are used only for statistical information (so they are anonymous), to check the proper functioning of the Site, and are deleted immediately after processing. I Dati could be used to ascertain liability in the event of hypothetical computer crimes against the Site. Save for this eventuality, the Dati on web contacts do not persist for more than 5 years.
The Site collects Dati using cookies or similar technologies. For more information, please visit the ” Cookie Policy” of the Site.
The Site offers users the opportunity to voluntarily provide personal information through, for example, filling out dei forms “Contact“ presenti in the Site.
In the following, an illustration of the services offered by the Site is provided. For each of the services offered, the following are indicated: the purposes for which Data are processed, the legal basis for such processing, and the retention periods for the processed Data.
Within the Site there is the section “Contact“. The latter allows the the user to submit to the Company their requests for information, reports and complaints. For the purpose of providing this service, the user is necessarily required to provide the following personal data municipalities: e-mail address and other personal data necessary to provide better service.
Purpose of processing: To provide feedback to requests for information made by the user as well as open special tickets for customer care activities in the face of reports or complaints.
Legal basis of processing: Art. 6(1)(b) of the GDPR, “performance of a contract to which the data subject is party or performance of pre-contractual measures taken at the request of the data subject.”
Retention times: Personal data will be kept for a period not exceeding 24 months from the time of their provision.
As part of the processing of personal data carried out by means of the Site, the Data Controller pursues the following additional specific purposes:
The Data Controller, where necessary, processes the personal data of data subjects, collected through the Site, in order to Ensure compliance with legal obligations, regulations and community standards to which it is subject.
Legal basis of processing: Article 6(1)(c) of the GDPR., “processing is necessary for compliance with a legal obligation to which the data controller is subject.”
Retention times: personal data will be kept for the period strictly necessary to enable the Controller to fulfill the legal obligations to which the Controller is subject.
The Data Controller, where necessary, processes the personal data of data subjects, collected through the Site, in order to establish, exercise or defend its own right in court or whenever judicial authorities exercise their jurisdictional functions.
Legal basis of processing: Art. 6(1)(f) of the GDPR, “processing is necessary for the pursuit of the legitimate interest of the data controller”.
Retention Times: Personal data will be retained for the period strictly limited to the duration of the litigation, until the time limits for appeal actions are exhausted.
I His personal data, subject to Suo free and specific consent, will be processed by the Holdersto update thea On promotional, commercial and advertising initiatives, events, initiatives in accordance with the provisions of the order of the Data Protection Authority “Guidelines on Promotional Activity and Countering Spam – July 4, 2013 [2542348]”. We inform you that these activities may be carried out by means of paper mail, telephone contact by operator (c.d. “traditional modes”), e-mail, texting, notifications push and use of social networks (c.d. “automated modes”). In addition, we will process your Dati to carry out analysis and reporting activities related to promotional communication systems. In the absence of your specific consent for this purpose, we will not be able to process your personal data for direct marketing purposes, and thus will not be able to inform you of new products and/or current promotions.
Legal basis for processing: Consent of the data subject ex Art. 6(1)(a) of the GDPR, “the data subject has given consent to the processing of his or her personal data for one or more specific purposes.”
Retention times: Personal data will be retained until consent is revoked by the user. Data for marketing purposes will be kept for 24 months. This is without prejudice in any case to the possibility for Holders to retain the personal data of thethe user in order to demonstrate compliance with the principle of accountability ex art. 5 GDPR.
Subject to your free, optional and specific consent, we will process your personal data for profiling purposes. In particular, through monitoring Of the products and services you purchase through the Site as well as your behaviors and interactions, we will assess your behavior in more detail and analyze your preferences, your interests and your consumption habits. In the absence of your specific consent for this purpose, we will not be able to process your personal data for profiling purposes.
Legal basis for processing: Consent of the data subject ex Art. 6(1)(a) of the GDPR, “the data subject has given consent to the processing of his/her personal data for one or more specific purposes“.
Retention times: Personal data will be retained until consent is revoked by the user. Data from purchases for profiling purposes will be kept for 12 months. This is without prejudice, in any case, to the possibility for Data Controllers to retain the user’s personal data in order to demonstrate compliance with the principle of accountability ex art. 5 GDPR.
The Data may be processed by subjects operating as autonomous data controllers, such as, by way of example: authorities and supervisory and control bodies and, in general, subjects, public or private, entitled to request the Data.
Data may also be processed on behalf of the Company by external parties designated as Responsible for processing (pursuant to Article 28 of the GDPR), to whom appropriate operational instructions are given. These individuals are essentially included in the following categories:
Personal data are not transferred outside the European Union. In any case, it is understood that, should it become necessary, the Data Controller may also transfer personal data to countries outside the EU, guaranteeing as of now that the transfer will take place will in compliance with the applicable legal provisions and therefore by entering into specific agreements, if and to the extent necessary, to ensure an adequate level of protection of personal data, or otherwise adopting the standard contractual clauses provided by the European Commission for the transfer of personal data extra–EU.
The data may be processed by the employees and/or collaborators of the Owner and/or the Manager deputed to the pursuit of the above purposes, who have been expressly authorized for the processing and have received appropriate operational instructions.
Interested parties may contact, il Titolare of processing:
Data subjects may request from the controller access to the data concerning them, their deletion, the rectification of inaccurate data, the integration of incomplete data, the restriction of processing in the cases provided for in Article 18 GDPR, as well as the opposition to processing, for reasons related to their particular situation, in cases of legitimate interest of the controller.
If you exercise your right to erasure, the Data Controllers will remove the data referring to you not only from the Site, but also from all databases of the company: this could then include possible deletion from other Data Controllers’ platforms on which you have registered. In view, therefore, of the impact that such deletion could have on you, Data Controllers may provide toadopt procedures better aimed at ascertaining your identity.
In addition, data subjects, where processing is based on consent or contract and is carried out by automated means, have the right to receive in a structured, commonly used and machine-readable format the data, as well as, if technically feasible, to transmit them to another data controller without hindrance.
Data subjects have the right to revoke the consent given at any time for marketing and/or profiling and/or data transfer/communication purposes. This is without prejudice to the possibility for a data subject who prefers to be contacted exclusively through traditional means to object to processing for marketing purposes only in relation to receiving communications through automated means.
Data subjects have the right to lodge a complaint with the competent supervisory authority in the member state where they usually reside or work or the state where the alleged violation occurred.
Version 1 of 3/06/2025