Privacy Policy

This privacy policy explains how Cartiera del Garda ("we", "us", or "our") collects, uses, and protects personal data when you use our online platform, visit our site, or utilize our services. We are committed to protecting your privacy and handling your data in a transparent and secure manner, in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and Italian privacy laws.

Data We Collect

We may collect various types of information depending on your interaction with our service:

- Information you provide directly to us: This includes information you provide when contacting us, submitting inquiries, placing orders, or registering on our site, such as your name, contact details (like postal address), and any other information you choose to share.

- Information collected automatically: When you visit our site, we may automatically collect certain information about your device and usage, such as IP address, browser type, operating system, referring URLs, pages viewed, and dates/times of access. This is typically collected through cookies and similar tracking technologies.

- Information from other sources: We may receive information from third parties, such as business partners or service providers, to support our services or for marketing purposes, where permitted by law.

How We Use Your Data

We use your personal data for the following purposes based on different legal bases:

- To provide and maintain our services: Processing is necessary for the performance of a contract or to take steps at your request before entering into a contract (e.g., processing orders, responding to inquiries).

- To communicate with you: We may use your contact information to respond to your questions, send important notices, and provide updates about our services. This is based on our legitimate interests or your consent, where applicable.

- To improve our site and services: We analyze usage data to understand how our service is used, identify areas for improvement, and develop new features. This is based on our legitimate interests in optimizing our business and user experience.

- For marketing and promotional purposes: With your consent, or based on our legitimate interests where permitted by law, we may send you information about our products, services, or events.

- For security and fraud prevention: We process data to protect our site, prevent fraudulent activity, and ensure the security of our systems. This is based on our legitimate interests in protecting our business and complying with legal obligations.

- To comply with legal obligations: We may process your data when required by law, regulation, or legal process.

Lawful Basis for Processing

We process your personal data based on one or more of the following legal bases:

- Performance of a contract: When processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.

- Legal obligation: When processing is necessary for compliance with a legal obligation that applies to us.

- Legitimate interests: When processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your fundamental rights and freedoms.

- Consent: Where you have given explicit consent to the processing of your personal data for one or more specific purposes.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, and destruction. While we strive to protect your personal data, we cannot guarantee its absolute security.

Sharing Your Data

We do not sell your personal data. We may share your data with trusted third parties in certain circumstances:

- Service Providers: We may share data with third-party vendors, consultants, and service providers who perform services on our behalf (e.g., IT services, payment processing, delivery services). These parties are contractually obligated to protect your data and use it only for the purposes for which it was disclosed.

- Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your data may be transferred as part of that transaction, provided the receiving party agrees to adhere to this privacy policy.

- Legal Requirements: We may disclose your data if required to do so by law, court order, or governmental request, or if we believe such action is necessary to comply with a legal obligation, protect our rights or property, or ensure the safety of our users or the public.

International Data Transfers

Your personal data may be stored and processed in countries outside of your own. When transferring data outside of the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission, to provide a similar level of protection for your data.

Your Data Protection Rights

Under the GDPR, you have certain rights regarding your personal data, including:

- The right to access: You have the right to request copies of your personal data.

- The right to rectification: You have the right to request that we correct any information you believe is inaccurate or incomplete.

- The right to erasure: You have the right to request that we erase your personal data, under certain conditions.

- The right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.

- The right to object to processing: You have the right to object to our processing of your personal data, under certain conditions.

- The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

- The right to withdraw consent: If we are processing your data based on your consent, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us via postal mail using the address provided below.

Cookies and Similar Technologies

Our site uses cookies and similar tracking technologies to enhance your experience, analyze site usage, and for marketing purposes. You can manage your cookie preferences through your browser settings or through any cookie management tool provided on our site.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our site.

If you have any questions or concerns about this privacy policy or our data practices, please contact us by postal mail at the address below:

Cartiera del Garda
15 Via dell'Artigianato
Third Floor
Verona, Veneto 37135
Italy