Privacy Policy

Legislative Decree 30.06.2003 No. 196, Art. 13 & GDPR of 25 May 2018

This extended notice is provided pursuant to Art. 10 of Law no. 675 of December 31, 1996 and aligned with the new rules introduced by the GDPR (General Data Protection Regulation) in force since May 25, 2018.
It is addressed to anyone who, to varying degrees, provides their data while browsing and/or interacting with the web services of en.gruppocaro.com.
Our aim with this page is to clearly inform you how we process, use, and protect your personal data, where it is stored, and who the controller is, as well as any third-party platforms that may use it depending on the services you choose.

Data Collection and Consent to Use

By interacting with the Gruppo Caro s.r.l. website you will provide data (also anonymously) that will be collected by us or by third-party systems for different purposes, such as statistical analysis or subsequent promotional messages via newsletter or retargeting on social networks and search engines.
Some of this data is collected anonymously (we do not hold personal data) simply by consenting to browse the site itself; the collection of your personal information, however, requires your explicit consent for each service that uses it.
Below we list, in a simple and clear way for each service, which tools we use to collect your data, the purpose, the duration of use, as well as the location and controller responsible for storing this data.

Please note that AT ANY TIME YOU MAY EXERCISE YOUR RIGHTS OVER YOUR DATA IN ACCORDANCE WITH CURRENT LAW, as follows:

1. Right of Access

   The data subject has the right to obtain confirmation of the existence of personal data concerning them, even if not yet recorded, and to receive such data in an intelligible form.

2. Right to Information and a Copy of Your Data

   The data subject has the right to obtain information and/or a copy of their data held by us by submitting a written request (also via email) through our contacts page; these will be provided accurately and promptly.

3. Right to Rectification and Modification

   The data subject has the right, upon explicit request, to obtain for their data:

   • a) updating
   • b) rectification
   • c) completion
   • d) deletion

4. Right to Object to Processing

   The data subject has the right, upon explicit request, to object to the processing of their personal data for purposes related to sending advertising material (including by email), direct sales, market research, or commercial communications of various kinds.

Data Controller

The “Controller” of the personal data eventually collected following registration or interaction with the aforementioned site, and of any other data exchanged for the provision of our services, is Gruppo Caro owned by Vincenzo Caro, located at Contrada Erbe Bianche, 26/B - 91021 Campobello di Mazara (TP).

When You Place an Order — How Do We Process Your Data?

On en.gruppocaro.com you can purchase products; to ship them and communicate effectively with you we need to collect some of your personal data. This can happen in two ways, with similar processing; here they are:

• 1 - Guest Checkout

  You can place an order without going through any registration process, i.e., without logging in to our website.
  In guest checkout we request the data needed to ship purchased products, namely: first name, last name, tax code or VAT number, email (required to receive order notifications), shipping and billing address. This data (your email) may, at our discretion, be used for targeted advertising campaigns related to your interests on Facebook or Google.

• 2 - Registered User Order

  You can also place an order after registering and logging in. In this case, in addition to the basic guest data, a unique email (used as user) and a password (properly encrypted and protected) will be stored for login purposes.
  By registering, you will be able to view, update, and complete your data on your own, as well as check your order history or unsubscribe from services such as the Newsletter (for which you have given explicit consent).
  Unlike a guest, a registered user profile stores additional information regarding purchasing, shipping, and payment preferences.
  This data (your email) may, at our discretion, be used for market analysis and/or targeted advertising campaigns on social networks such as Facebook or on Google.

Note. The data you provide during an order, whether as a guest or a registered user, is stored in our database, a data storage service provided by Aruba S.p.A., properly protected with backups for recovery if needed; it will be retained until you explicitly request deletion or if we cease our online sales service.

When You Register — What Data Do You Provide and How Is It Processed?

As described above, you can register on the site, place orders as a known and verified user, view your order history, and update or add to your data at any time. During registration (with verification) you enter personal and sensitive data such as: First Name, Last Name, Email, Login Password (properly encrypted), address, tax code or VAT number, address, phone and fax, as well as preferences for shipping methods and payment methods we use; finally, you can choose whether to subscribe to our newsletter and give explicit consent to the processing of this data by us.

The data you provide is stored in our database maintained by our Provider Aruba S.p.A., a third-party company specialized in web and hosting services, duly compliant with GDPR. For more details you can read here.

Newsletter subscription also adds your first name, last name, and email to our autoresponder MailChimp, a well-known newsletter and email management service used worldwide, also duly GDPR-compliant. For details read here.

Note. The data you provide during registration is stored in our database, a data storage service provided by Aruba S.p.A. and properly protected with backups; it will be retained until you explicitly request deletion or in the event of future discontinuation of our web sales service.

If I Only Subscribe to the Newsletter — What Happens to My Data?

Whether you subscribe directly to the Newsletter or give consent during registration (see above), your first name, last name, and email are added to our database and to our autoresponder MailChimp, a widely used newsletter/email service, also GDPR-compliant. For details read here.

You can unsubscribe from our Newsletter at any time, simply by clicking the dedicated link found in the notification emails you receive as a subscriber.

Note. Upon request, your data can be exported at any time and is backed up for possible recovery; it will be retained until you explicitly request deletion or in the event of future discontinuation of our web sales service.

If I Review a Product or Leave a Comment — What Data Is Stored?

On www.gruppocaro.com you can review products or leave comments on blog posts (when implemented). In that case you must provide your name and email; the site can also detect and store your IP address.
As before, such data is stored in our database via services provided by Aruba S.p.A..

This data and your email will not be made public nor shared with third parties, and will remain in our archives as long as the site is active.
Collecting the IP address is necessary because Gruppo Caro s.r.l. might be contacted by law enforcement or relevant authorities regarding “unlawful” or “defamatory” online activity; likewise, we may report to authorities any comments involving serious insults, incitement to hatred, terrorism, and similar.

Note. Upon request, your data can be exported at any time and is backed up for possible recovery; it will be retained until you explicitly request deletion or in the event of future discontinuation of our web sales service.

Contact Page — What Happens to My Email When I Write to You?

If a visitor voluntarily writes to us via the contacts page, they must provide the following data to properly handle the request: Name, Email, and Subject.
Such data is handled and archived by our mail server, a service provided by Aruba S.p.A..

Note. The retention period for your emails (mail messages) varies based on the nature and importance of the request; on average they are kept no longer than two years. In any case, this data is neither made public nor shared with third parties.

When I Simply Browse the Site — What Data Is Collected?

While browsing www.gruppocaro.com certain third-party services are active. Through scripts installed on the site, they track and collect data on the pages visited and certain actions performed. Here they are:

• 1 — Google Analytics (anonymous mode)

  This is Google’s well-known service for collecting information about site visits, providing detailed reports on: search keywords, daily visitors, pages viewed, exit pages, demographics (geographical origin), browser/device type, and similar information.

  This entirely impersonal data is used only for statistical purposes; by analyzing it we try to understand our site’s performance and improve it—for example, identifying our strongest pages by views.

  The data collected is in anonymous form, as we have disabled IP address detection (anonymous mode) in Analytics; therefore, cookies released by our Analytics code are considered “Technical” and not “Profiling”.

  This data is stored on Google’s servers and governed by Google’s own policies regarding usage and retention. For more information read our Cookie Policy (Google Analytics section), and to learn how Google processes the data it collects read here.

• 2 — Facebook Pixel

  The Facebook Pixel is installed on www.gruppocaro.com, a script that can track and provide information on user browsing habits, particularly pages viewed and actions such as: add to cart, checkout start, order completion, and order amount.

  This information, using Facebook’s platform services, is then used by us to create lookalike audiences and targeted promotional campaigns (retargeting) on the social network.

  Data collected is stored and managed directly by Facebook. For more details on how Facebook processes data and complies with GDPR read here.

Note. Data collected during browsing on www.gruppocaro.com is stored by the third-party companies whose services Gruppo Caro uses; it is therefore protected, managed, and maintained by them.

Location and Purpose of Processing

Processing related to the web services offered by this site is carried out at the controller’s premises and handled only by collaborators of Gruppo Caro in charge of processing, or by persons in charge of occasional maintenance operations. No data deriving from the web services is communicated or disseminated. Personal data provided by users who request services is used solely to perform the requested service and is not communicated to third parties, unless communication is required by law or strictly necessary to fulfill the request. Specific purposes, related to individual processing activities, will be identified in detail when offering any new and different services provided by the site.

Types of Data Processed and Browsing Data

The IT systems and software procedures used to operate this website automatically acquire certain data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could allow user identification in the event of legal violations and reporting to the judicial authorities, through processing and association with data held by third parties (the user’s service providers). Such data could, therefore, be used to ascertain responsibility in the event of computer crimes against our site. Normally, this data is used solely to obtain anonymous statistical information on site usage and to check its correct functioning and is not associated with specific, identified, or identifiable users. This category includes IP addresses or domain names of the computers used by users who connect to the site, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server’s response (success, error, etc.), and other parameters relating to the user’s operating system and IT environment.

Data Voluntarily Provided by the User

The optional, explicit, and voluntary sending of email to the addresses indicated on this site, or filling in information forms, by its very nature entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data voluntarily provided.

Cookies

No personal data of users is intentionally acquired by the site. The site en.gruppocaro.com does not use web technologies for the sole purpose of collecting and/or transmitting users’ personal data. The site en.gruppocaro.com uses tracking technologies exclusively to obtain statistical information on the use of the site itself (e.g., total number of visitors, number of visitors per web page, domain name of the visitors’ internet service provider). In particular, the use of session cookies (which are removed from the user’s computer when the browser is closed) is strictly limited to transmitting session information that is essential for secure and efficient navigation of the site. The use of such session cookies also strictly excludes the use of other IT techniques potentially harmful to the confidentiality of users’ browsing and does not allow the acquisition of personal identifying data. The site en.gruppocaro.com does not use persistent cookies.

Note. For more information on how this site uses cookies, read our extended notice: Cookie Policy

Processing Methods

Personal data is processed using automated tools for the time necessary to achieve the purposes for which it was collected. Specific security measures are observed to prevent data loss, unlawful or improper use, and unauthorized access.

Changes Required by Law

This notice may be updated and/or modified in order to implement and/or comply with national, EU, or international regulations, or to adapt to technological innovations. Updates and/or changes will be reported on this web page.