Privacy Policy

Chiorino Technology > Privacy Policy

The document you are now reading is our privacy policy drafted in a way that complies with the rules introduced by the new European Union General Data Protection Regulation EU 2016-679 (otherwise known as GDPR) and its relevant national provisions for implementation.

This legislation was created to harmonise and strengthen people’s rights to privacy and is the guideline in our daily efforts to ensure quality, transparency and security with particular attention to how we process your personal data which, with your consent, we have acquired in order to provide you with our services.

Who are the data subjects identified in the legislation?

Chiorino Technology spa with registered office in Milan, via F.lli Gabba, 1/A VAT number and tax code 02181730025 is the Data Controller (hereinafter referred to as the Controller) of your personal data, i.e. the subject who has the power to make decisions, give instructions and perform control functions in relation to the purposes of the processing itself.

The Controller also avails itself of Data Processors (hereinafter referred to as Processors) who are individuals, legal entities, the public administration and any other body, association or organisation appointed by the Controller to achieve the purposes of its processing operations.

With this document you will allow us to process your personal data for certain purposes; the legislation will identify you as a Data Subject, giving you new and specific rights.

What personal data we collect from you and how we use it (purpose)

n order to comply with legal obligations and manage contractual relations and for any communications from the Controller, you accept that our company collects some of your shared (and not particular) personal data, such as, by way of example but not limited to:

  • Company name, surname(s) of company contacts, address, VAT and tax code, fixed and/or mobile telephone, fax, e-mail address(es), IBAN and bank/postal data (except credit card number), other data necessary for the purposes of processing described below.

Please note that if you are under 16 years of age, you may not disclose any personal data to us, and in any case we will not be liable for any misrepresentation you may make. If we become aware of the existence of false declarations, we will proceed with the immediate deletion of any personal data acquired.

Furthermore, if you provide personal data of third parties, such as your family members or friends, you must be sure that they have been adequately informed and have consented to the processing of their personal data in the manner described in this policy.

We remind you that the provision of the aforementioned data is compulsory exclusively for the processing required for purposes A, B; refusal to provide such data makes it impossible to manage the business relationship. Regarding the other purposes C, D, E, refusal to give consent has no negative consequences on the maintenance of the commercial relationship but may limit it in some parts; we therefore invite you to evaluate your choices point by point.

Purpose of processing

Quality, sustainability and innovation are the three imperatives of Chiorino Technology, which, thanks to significant investments, has become a benchmark for the major players in the world of fashion, producing leathers with unique characteristics that are increasingly focused on excellence.

Chiorino Technology’s fundamental principle is sustainable development that goes beyond compliance with standards, a challenge for the future that is already part of the present of the company that operates according to the principles of social and environmental responsibility. 

The driving force behind the Group’s success and the guarantee of its future lies in its vision and in the technology applied to the production of leathers with innovative characteristics, always in step with market demands. “Chiorino Technology’s mission is to be the practical answer, the solution, the first choice for those who strive for excellence.

1Registration and management of requests for contact and/or informative material, in particular: the processing of the data subject's personal data takes place in order to carry out the activities preliminary and consequent to the request for registration, the management of requests for information and contact and/or the sending of informative material, as well as for the fulfilment of any other obligation arising.5 years of inactivity unless consent is explicitly withdrawn.Fulfilment of the services inherent to the relationship established, compliance with legal obligations and the legitimate interests of the Controller.
2Management of the contractual relationship, in particular: the processing of the data subject's personal data is carried out in order to carry out the activities preceding and following the purchase of a service and/or a product, the management of the relative order, the provision of the service itself and/or the production and/or shipment of the product purchased, the relative invoicing and management of payment, the processing of complaints and/or reports to the assistance service and the provision of the assistance itself, the prevention of fraud and the fulfilment of any other obligation arising from the contract.10 years or more in case of legal disputes.10 years or more in case of legal disputes.
3Promotional activities on services/products similar to those purchased by the Data Subject (Recital 47 GDPR), in particular: the Data Controller, even without your explicit consent, may use the contact data communicated by the Data Subject, for the purposes of direct sales of its own services/products, limited to the case of services/products similar to those being sold, unless the Data Subject explicitly objects.5 years of inactivity unless consent is explicitly withdrawn.Legitimate interest of the Holder.
4Commercial promotion activities regarding services/products different from those purchased by the Data Subject, in particular: the personal data of the Data Subject may also be processed for commercial promotion purposes, for surveys and market research regarding services/products offered by the Controller only if the Data Subject has authorised the processing and does not object to it. In the event that the processing is carried out through contact with a telephone operator, the interested party must not be registered in the opposition register pursuant to Presidential Decree no. 178/2010;5 years of inactivity unless consent is explicitly withdrawn.Legitimate interest of the Holder.
5To the extent strictly necessary for the performance of the contractual relationship, your personal data may be requested from us by third parties (such as, for example, our sales agents, suppliers of products and/or services, etc.) located outside the European Union. The possible transfer to these non-EU subjects is regulated by specific contracts which impose on the recipient the respect of the adequate guarantees provided for by the regulations in force, which do not however disregard your consent to communicate them.5 years of inactivity unless consent is explicitly withdrawn.Legitimate interest of the Holder.

The aforementioned activities will entail the processing of your personal data, which may consist, in addition to their collection, in their registration, storage, modification, communication, cancellation and storage in paper and/or electronic form with manual and/or automated tools.

Your personal data will also be protected by adequate security measures as provided for by current legislation, particularly with regard regard to the security measures provided for by the GDPR (Art. 32) for their processing by means of computerised, manual and automated tools and stored for the time that is strictly necessary to fulfil the aforementioned purposes.

Purpose of processing

Your personal data may be communicated, to the extent of their particular authority, within the Controller to Authorised Persons and externally to Third Parties appointed as Data Processors on whom the Controller imposes compliance with security measures equal to those adopted in respect of the Data Subject, restricting the scope of action of the Processor to processing operations connected with the service requested.

As far as strictly necessary for the performance of the contractual relationship, your personal data may be requested from us by third parties (such as, by way of example, suppliers of products and/or services) located both within and outside the European Union. The possible transfer to non-EU subjects is regulated by specific contracts which impose on the recipient the respect of the adequate guarantees provided for by the regulations in force.

Additional information required to ensure fair and transparent treatment

  1. At any time you have the right to ask us to view your personal data collected by us, to ask us to rectify and/or erase it (in accordance with the retention period indicated in point 2), to limit their processing by revoking all or part of the consents you have given us, you may also ask for their portability (if applicable). You may exercise your rights by making a request to the Data Controller by sending an e-mail to privacy@chiorinotechnology.com or, alternatively, a letter addressed to it at our operational headquarters in Via Padre Greggio, 12 – 13900 Biella; we will take care of replying to you without delay and in a clear and comprehensible manner.
  2. You also have the right to lodge a complaint with the Italian Data Protection Authority.
  3. This information notice may be subject to change. In particular, if Chiorino Technology intends to process your personal data for a purpose other than those indicated in this informative note, we shall provide you with new information in this regard by amending this same document and having you re-sign it.
  4.  

Website

      1. Our website may collect user data, such as:
        • Browsing data: this includes data such as the user’s IP address, the time of the request for access to the website, the method used to submit the request to the server, the outcome of the request, data relating to the user’s environment (operating system, browser, language, geographical area of origin, etc.).
        • Data provided voluntarily by the user: the optional sending of data via e-mail addresses, forms or other similar services on the website involves the subsequent acquisition of all such data by the recipient.
        • Specific data: the European Regulation (Art. 9) on the protection of personal data defines special categories of personal data as those revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as processing of genetic data, biometric data intended to uniquely identify a natural person, data concerning the health or sex life or sexual orientation of the person. This website does not process this type of data. The user is requested not to provide such data, even voluntarily.

      The purposes and methods of processing for which this data is intended can be summarised as follows:

        • performance of any pre-contractual, contractual and post-contractual obligations;
        • fulfilment of legal obligations;
        • management, administrative, accounting and tax obligations;
        • processing of statistics of a non-identifying nature.

      The aforementioned data will be processed by computerised methods, mainly automated, for the time strictly necessary to achieve the purposes for which it was collected. Specific security measures are observed to prevent the loss of data, unlawful or incorrect use and unauthorised access.

      The mechanisms used to acquire such data are:

        • Forms and other user content input tools

      The purpose of these tools is to allow the user to contact the managers of the website (or even other users) or to use the contents of the website and the services it offers. Providing data is optional, but refusal to do so will make it impossible to use the functions of the website that require it.

        • Cookies

      A cookie is a file stored on the user’s terminal whose purpose is to store preferences, data and information relating to navigation and use of the website, and to preserve this information for subsequent visits to the website. This page allows the user to refuse the use of cookies: this refusal may result in a different level or quality of use of the website and its services. Except in the case of profiling cookies, if any, the user is informed that by continuing to browse the website (e.g. by accessing another area of the website or selecting an image or link), he or she consents to the use of cookies. The cookies adopted by this website are:

      Technical cookies

      Technical cookies are those used for the sole purpose of carrying out the transmission of a communication over an electronic communication network, or to the extent strictly necessary for the provider of an information society service explicitly requested by the user to provide this service. They are not used for any other purpose and are normally installed directly by the owner or operator of the website. They can be divided into:

          • browsing or session cookies, which ensure the normal navigation and use of the website (for example, allowing a purchase to be made or authentication to access restricted areas);
          • analytics cookies, considered as technical cookies where they are used directly by the website operator to collect information, in aggregate form, on the number of users and how they visit the website;
          • functionality cookies, which allow the user to navigate according to a number of selected criteria (e.g. language, products selected for purchase) in order to improve the service provided to the user.

      Profiling cookies

      Profiling cookies are designed to create profiles of the user and are used to send advertising messages in line with the preferences expressed by the user while browsing the web. Because of the particular invasiveness that such devices may have in the private sphere of users, European and Italian legislation provides that users must be adequately informed about the use of such devices and thus express their valid consent.

      Third-party cookies

      Certain services provided by third parties (Google, Zopim, owners of social media services…) allow third parties to install cookies on the user’s terminal. The purpose of these cookies can vary from ensuring access or better use of these services to collecting data on the user. The data collected through these cookies is not processed by the owner of this website. All the cookies used by the website are indicated below.

      Technical cookies used:

          • PHP session cookies (PHPSESSID) are stored temporarily and are deleted when the user closes the browser. If the user registers on the Website, Chiorino Technology Spa may use cookies that collect personal data in order to identify the user on subsequent visits and to facilitate access (e.g. login to the website, for example by storing the user’s username and password) and navigation on the website.
          • Cookies banner display cookies (ce-visited), facilitates the user’s navigation by recognising it and avoiding the reappearance of the banner warning about the presence of cookies on the website and is activated by clicking “I accept” on the banner or by navigating the website
          •  

      Profiling cookies used:

          • This website does not use profiling cookies.

      Third-party cookies used:

      The website uses third-party services that may lead to the installation of cookies on the user’s terminal. It is also possible that the third-party owners of these services may choose to send you advertising in line with the information collected through these cookies.  Please refer to the privacy and cookie policies of the third parties mentioned below.

          • Google Analytics

      The website uses Google Analytics to collect data on visits and the attractiveness of the pages and information provided (most/least viewed pages, most/least clicked items, number of visitors, most searched words, etc.). This service is provided free of charge by Google Inc. These cookies are used to store visitor information, such as the time when the website was visited, the previous visit, and through which domain they reached the Portal.

      This information, generated by mere access to the Portal, is then sent to Google and stored on its servers.

      At this page https://www.google.com/analytics/learn/privacy.html?hl=it you can find more information about the Google Analytics service.

      Google’s Privacy Policy, http://www.google.com/intl/it/policies/privacy/, on the other hand, governs in general the use made of the personal data of users using Google products and services.

      By means of the add-on at the following link https://tools.google.com/dlpage/gaoptout?hl=it)

      it is possible to choose the way in which data is collected by Google Analytics.

      The list of cookies used by Google Analytics can be found at https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage.

      Deactivating and deleting cookies

      In order to deactivate cookies and/or choose the level of cookie blocking, the user can use the functions of his or her browser by modifying its settings. Below are links explaining how to do this with the main web browsers:

      We also remind you that you always have the possibility to manually remove cookies already installed on your fixed or mobile device by means of browser functions such as “emptying cache”, “deleting navigation data” or similar. Information on this can be found at the following links:

      For mobile terminals, please consult the following webpage, and search for the model of your device: http://www.allaboutcookies.org/mobile/index.html.

      For more information on cookies and to manage cookie preferences (first and/or third party), users are invited to visit www.youronlinechoices.com and www.aboutcookies.org.