Let's take it sul Serious about data security

The use You can visit our website without providing any personal data. The use of the individual services on our website may lead to different provisions, which in this case will be explained separately below. Your personal data (e.g. name, address, email address, phone number, etc.) will only be processed by us in accordance with the provisions of the German data protection law. The data Sono personal see they can be clearly attributed to a specific natural person. Le basi legal Data protection regulations are available in the Federal Data Protection Act (BDSG) and the Telemedia Act (TMG). The following provisions informano the user regarding the nature, scope and purpose of the collection, use and processing of personal data by the Data Controller. La This Data Protection Declaration clarifies the nature, scope and purpose of the processing of Personal Data (hereinafter referred to as „data“) in the context of the provision of our services as well as within our online offering and the websites, functions and content linked to it, as well as external online presences, such as our social media profile (hereinafter collectively referred to as „online offering“). Regarding the terms used, such as „Processing“ or „Controller of the processing“, we refer to the definitions set out in Article 2 of the GDPR. 4 Part of the General Data Protection Regulation (GDPR).

Responsible

Stephan Schliebusch

Concrete Art S. n. c.  Via Alcide De Gasperi 94 06073 Corciano PG Italy

Email: info@concretearte.com

Data processed by Tipi

– Inventory data (e.g., personal data of people, names or addresses).
– Contact details (e.g., email address, phone numbers).
– Date of content (e.g., text input, photos, videos).
– Usage data (e.g., visited sites, interest in content, access times).
– Dati Meta / communication data (e.g., device information, IP addresses).

Category of interested persons

Visitors and users of the online offer (hereinafter referred to collectively as the persons concerned, also referred to as „users“).

Purposes of the processing

– Messa is available online through its offer, features and content.
– Respond to all contact requests and communicate with users.
– Security measures.
– Flow Measurement / Marketing

Used Termini

“Personal data“ means any information relating to an identified or identifiable natural person (hereinafter „data subject“); an identifiable natural person is one who, directly or indirectly, in particular by means of an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or one or more special characteristics expressing the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.

By „processing“ is meant any operation or series of operations related to personal data performed with or without the assistance of automated procedures. The term goes a long way and covers practically any data management.

„Pseudonymization“: the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and subject to technical and organizational measures aimed at ensuring that the personal data are not attributed to an identified or identifiable natural person.

„Profiling“: any type of automated processing of personal data consisting in using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects related to the employment performance, the economic situation, health, personal preferences, interests, reliability, behavior, location or transfer of that natural person.

“Data Controller“ means the natural or legal person, public authority, agency or other body which alone or jointly with others decides on the purposes and means of processing personal data.

„Responsible for the processing“: a natural or legal person, a public authority, an institution or another body that processes personal data on behalf of the Data Controller.

Relevant Legal Bases

Pursuant to Article 13 of the GDPR, we inform you of the legal bases for our data processing. For users falling within the scope of the General Data Protection Regulation (GDPR), i.e. the EU and the EEA, if the legal basis is not mentioned in the Data Protection Declaration, the following applies: the legal basis for obtaining consent is Article 6, paragraph 1, letter a, and Article 7 of the GDPR; the legal basis for processing for the performance of our services and the execution of contractual measures and the response to requests is Article 6, paragraph 1, letter B of the GDPR;
The legal basis for the processing for the fulfillment of our legal obligations is Article 6, Paragraph 1, letter C of the GDPR; in cases where the vital interests of the Data Subject or another natural person make the processing of personal data necessary, Article 6, Paragraph 1, letter d of the GDPR serves as the legal basis.
The legal basis for the processing necessary for the performance of a task in the public interest or in the exercise of public powers conferred on the Data Controller is Article 6, No. 1 lit. e GDPR.
The legal basis for the processing of our legitimate interests is Article 6, Paragraph 1, letter f GDPR.
The processing of data for purposes other than those for which it was collected is governed by the provisions of Article 6, No. 4 of the GDPR.
The processing of particular categories of data (pursuant to Art. 9, No. 1 GDPR) is determined in accordance with the provisions of Art. 9, No. 2 GDPR.

Safety measures

We adopt appropriate technical and organizational measures, in accordance with legal requirements, taking into account the state of the art, the costs of implementation, and the nature, the scope, the circumstances, and the purposes of the processing, as well as the different likelihood and severity of the risk to the rights and freedoms of natural persons, in order to ensure a level of protection appropriate to the risk.

The measures include, in particular, the guarantee of the confidentiality, integrity and availability of the data through the control of physical access to the data, as well as the access to them, the inclusion, disclosure, the guarantee of availability and their separation. Furthermore, we have put in place procedures to ensure the exercise of the rights of the Data Subjects, the deletion of data and the risk response to data. Furthermore, we take into account the protection of personal data already during the development or development phase. Selection of tools, programs and procedures, in accordance with the principle of data protection through technical design and default settings for data protection.

Collaboration with Data Processors, Joint Controllers and Third Parties

In the event that, as part of our processing, we disclose the data to other persons and companies (processors, co-processors or third parties), we transmit them to them or otherwise grant them access to the data, this only takes place on the basis of a legal authorization (for example, if the transmission of the data to third parties, such as payment service providers, is necessary for the execution of the contract), the users have consented, a legal obligation so provides, or on the basis of our legitimate interests (for example, when using agents, hosts, etc.).

When we disclose, transmit or otherwise grant access to data to other companies within our Group, this is done in particular for administrative purposes such as legitimate interest and, in addition, on a basis compliant with legal provisions.

Transfers to third countries

In the event that we process data in a third country (i.e., outside the European Union (EU), the European Economic Area (see), or the Swiss Confederation), or in the context of the use of third-party services or disclosure, or the transfer of data to other persons or companies, this only takes place if it is to fulfill our (pre)contractual obligations, based on your consent, a legal obligation, or on our legitimate interests. With prior explicit consent or transfer required by the Contract, we process or have data processed only in third countries with a recognized level of data protection, which includes US processors certified under the „personal shield“ or based on special guarantees, such as the contractual obligation through the so-called standard protection clauses of the European Commission, the existence of internal certifications or binding internal data protection standards (articles 44 to 49 GDPR, information page of the European Commission).

Rights of the affected persons

You have the right to request confirmation of whether the data in question is being processed and to obtain information about this data, as well as further information and a copy of the data in accordance with legal requirements.

You are entitled, in accordance with the legal requirements, to request the completion of the data concerning you or the correction of the inaccurate data concerning you.

You have the right, in accordance with the legal requirements, to demand that the relevant data be deleted immediately, or alternatively, in accordance with the legal requirements, to request a restriction on the processing of the data.

You have the right to request that the data concerning you that you have provided to us be obtained in accordance with legal requirements and that its transmission to other responsible parties be requested.

Furthermore, in accordance with the legal requirements, you have the right to file a complaint with the competent supervisory authority.

Right of withdrawal

You have the right to revoke the consents granted with effect for the future.

Right of objection

You may object at any time to the future processing of data concerning you in accordance with the legal provisions. The objection may be made in particular against processing for direct marketing purposes.

Cookies and the right to object to direct advertising

By „cookie“ we mean the small files stored on the computers of users. Within cookies, various information can be stored. A cookie is primarily used to store information about a user (or the device on which the cookie is stored) during or after their visit to an online offer. „Session cookies“ or „transient cookies“ are cookies that are deleted after a user leaves an online offer and closes their browser. In this type of cookie, for example, the contents of a shopping cart can be stored in an online store or a login state. “Permanent„ or “persistent“ cookies are cookies that remain stored even after the browser is closed. For example, the login state can be saved if users visit it after several days. In the same way, in this Cookie may be stored the interests of the users, which are used for measuring the reach or for marketing purposes. “Third-party cookies„ are cookies offered by providers other than the Data Controller that manages the online offer (otherwise, if it is only third-party cookies, we are talking about “first-party cookies“).

We may use temporary and permanent cookies and clear them within the scope of our data protection declaration.

In the event that users do not wish cookies to be stored on their computer, they will be asked to disable the corresponding option in their browser’s system preferences. Cookies stored can be deleted in the browser’s system settings. Opting out of cookies may lead to functional limitations of this online offering.

A general opposition to the use of cookies used for online marketing purposes can be made on a wide range of services, particularly in the case of tracking, through the US website. http://www.aboutads.info/choices / o on the EU side http://www.youronlinechoices.com / be explained. Furthermore, cookie storage can be obtained by disabling them in the browser settings. Please note that you may not be able to use all the functions of this online offer.

Deletion of data

The data processed by us is deleted or restricted in its processing in accordance with legal provisions. Unless explicitly stated in this Data Protection Declaration, the data we store is deleted as soon as it is no longer necessary for its purpose and there are no legal retention obligations that prevent deletion.

Unless the data is deleted because it is necessary for other purposes permitted by law, its processing will be limited. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax reasons.

Changes and updates to the Data Protection Declaration

We ask you to keep yourself regularly informed about the content of our data protection declaration. We modify the Data Protection Declaration as soon as changes to the data processing carried out by us make this necessary. We will inform you as soon as the changes require your cooperation (e.g. consent) or another individual notification.

Business Processing

In addition, we process

– Contractual details (e.g., subject of the contract, duration, category of the customer).

– Payment details (e.g., bank details, payment history)

from our customers, potential customers and business partners to provide contractual services, support and customer service, marketing, advertising and market research.

Order processing in the online store and customer account

We elaborate our customers’ data In the context of the ordering procedures in our online store to allow you to select and order the selected products and services, as well as their payment and delivery, respectively, the execution.

The processed data includes inventory data, communication data, contractual data, payment data, and the persons concerned by the processing include our customers, potential customers, and other business partners. The processing is carried out for the purpose of providing contractual services. In the context of managing an online store, billing, delivery, and customer service. We use session cookies to store the contents of the shopping cart and persistent cookies to store the access status.

The processing is carried out for the performance of our services and for the execution of contractual measures (e.g., execution of order transactions) and to the extent required by law (e.g., storage of commercial transactions for commercial and tax purposes required by law). The information marked as necessary is required for the formation and execution of the contract. We disclose the data to third parties only in the context of delivery, payment, or under authorizations and legal obligations, as well as if this occurs based on our legitimate interests, of which we inform you within the scope of this Data Protection Declaration (e.g., to legal and tax advisors, financial institutions, freight carriers, and authorities).

Users may optionally create a user account, in particular by viewing their orders. As part of the registration process, the mandatory data requested will be communicated to the users. User accounts are not public and cannot be indexed by search engines. If users have cancelled their account, their account data will be deleted, provided that their retention is necessary for commercial or fiscal reasons. The information contained in the customer account remains until its deletion with subsequent archiving in the event of a legal obligation or our legitimate interests (for example, in the event of litigation). It is up to users to protect their data in the event of cancellation before the contract expires.

In connection with registration and new registrations and the use of our online services, we store the IP address and the time of the user’s action. The storage takes place on the basis of our legitimate interests, as well as the user’s protection against misuse and other unauthorized uses. In principle, this data is not transmitted to third parties, unless it is necessary to pursue our legal rights as a legitimate interest or there is a legal obligation to do so.

Deletion takes place after the expiration of the Legal Guarantee and other contractual rights or obligations (e.g., rights to assistance or obligations to provide services arising from contracts with my clients); the need to retain the data is verified every three years; in the event of retention due to legal archiving obligations, deletion takes place after their expiration.

Agency services

We process our customers’ data Within the framework of our contractual services, which include conceptual and strategic consulting, campaign planning, development/consulting or maintenance of programs and design, campaign implementation and process/management, server administration, data analysis/consulting services, and training services.

In this case, we process inventory data (e.g., customer demographic data such as names or addresses), contact data (e.g., email addresses, telephone numbers), content data (e.g., text inputs, photos, videos), contractual data (e.g., subject of the contract, duration), payment data (e.g., bank details, payment history), usage and usage metadata (e.g., within the scope of the evaluation and measurement of the success of marketing measures). In principle, we do not process special categories of personal data unless such categories are an integral part of an assigned processing. The data subjects include our customers, potential customers, as well as their customers, users, site visitors, or employees, as well as third parties. The purpose of the processing is to provide contractual services, billing, and our Customer Service. The legal bases for the processing derive from Article 6, No. 1, letter b GDPR (contractual performance), Article 6, paragraph 1, letter f GDPR (analysis, statistics, optimization, security measures). We process the data necessary for the performance of the contractual services and we indicate the necessity of their provision. Disclosure to third parties only takes place when required as part of an order. In the processing of the data entrusted to us within the framework of an order, we act in accordance with the instructions of the contracting parties and the legal provisions of an order processing pursuant to Article 28 GDPR and do not process the data for purposes other than those provided for in the order.

Recording function

Users can create a user account. As part of the registration process, the mandatory information required is communicated to the users and, pursuant to Article 6, paragraph 1, letter B of the GDPR, for the purpose of making the user account available. The processed data includes in particular the login information (Name, Password and Email address). The data entered as part of the registration will be used for the purposes of using the user account and for its purposes.

Users can be informed by email of information relevant to their user account, such as technical changes. If users have cancelled their user account, their user account data will be deleted, subject to a legal retention obligation. Users are responsible for protecting their data in the event of cancellation before the contract expires. We are authorized to irreversibly delete all user data stored during the contract term.

As part of the use of our registration and access functions and the use of the user account, we store the IP address and the time of the action of the user concerned. The storage takes place on the basis of our legitimate interests, as well as the protection of the user against misuse and other unauthorized uses. In principle, this data is not transmitted to third parties unless it is necessary to pursue our rights or there is a legal obligation under Art. 6, N. 1 lit. C. GDPR. IP addresses are made anonymous or deleted no later than after 7 days.

Contact

When we contact you (e.g. via contact form, email, telephone or via social media), the data of the user is used to process and handle your contact request in accordance with Art. 6, Para. 1, letter B (in the context of contractual/pre-contractual relationships), Art. 6, Para. 1, letter f. (other requests) of the GDPR. The user data can be stored in a customer relationship management system („CRM system“) or in an analogous request organization.

We cancel requests if they are no longer necessary. We verify the need every two years and the legal archiving obligations also apply.

Bulletin

With the following information, we inform you about the contents of our newsletter, the registration procedure, the sending and statistical analysis, as well as your rights of objection. By subscribing to our newsletter, the user accepts the receipt and the procedures described.

Content of the Newsletter: We send newsletters, emails and other electronic notifications containing promotional information (hereinafter „Newsletter“) only with the consent of the recipients or with legal permission. In the event that, as part of a subscription to the Newsletter, its content is described in detail, this constitutes consent by the users. Furthermore, our newsletters contain information about our services and about us.

Double Opt-in E Registration: Access to our newsletter is carried out in a so-called Double Opt-in procedure. This means that after registration, you will receive an email asking you to confirm your registration. This confirmation is necessary so that no one can register with foreign email addresses. Subscriptions to the newsletter are registered in order to demonstrate the registration process in accordance with legal requirements. This includes the storage of the time of access and confirmation, as well as the IP address. Similarly, changes to the data stored with the shipping service provider are also recorded.

Login date: to register for the newsletter, it is sufficient to provide your email address. Optionally, we ask you to indicate a name in the newsletter for a personal address.

The sending of the newsletter and the related measurement of success are carried out based on the consent of the recipients pursuant to Art. 6, No. 1 lit. a, Art. 7 GDPR i. v. m. + 7 CPV. 2 n. 3 LRM or, if consent is not required, based on our legitimate interests in direct marketing pursuant to Art. 6, No. 1 lit. f. GDPR i. v. m. + 7 par. 3 LRM.

The registration of the registration procedure takes place on the basis of our legitimate interests pursuant to Art. 6, Para. 1, letter f GDPR. Our interest focuses on the use of an easy-to-use and secure newsletter system that serves both our commercial interests and the expectations of the users, and also allows us to demonstrate consent.

Disdetta – recesso-Lei may unsubscribe from our newsletter at any time, i.e. revoke its consent. At the end of each newsletter, a link is available to unsubscribe from the newsletter. We may store the email addresses submitted for a maximum of three years on the basis of our legitimate interests before deleting them in order to demonstrate a previously given consent. The processing of this data will be limited to the purpose of possible defense of rights. An individual request for cancellation is possible at any time, provided that the previous existence of consent is confirmed.

YouTube