PRIVACY POLICY
Dear Visitor, pursuant to Legislative Decree 196/2003 and Regulation (EU) 2016/679 (hereinafter "Regulation"), this page describes how personal data of users consulting the website, accessible electronically at the following address: https://www.cec.com/, for services offered by C&C SpA, are processed. We inform the user that following the consultation of this site, data relating to identified or identifiable persons may be processed. This information does not concern other sites, pages, or online services reachable via hypertext links that may be published on the site.
IDENTITY OF THE DATA CONTROLLER
The Data Controller is C&C S.P.A., in the person of its pro tempore legal representative, with registered office at Viale Einaudi n. 10 - Bari (BA), (e-mail: privacy@cec.com, PEC: info@pec.cecconsulting.it, Tel.: +39 080 5622398) (hereinafter also "the Controller"). C&C SpA has appointed a Data Protection Officer (DPO) who can be contacted at the following e-mail address: dpo@cec.com
Data Source and Type of Data Collected
Data Provided by the User
The Data Controller collects personal data provided by users when purchasing an offered product. The data collected by the Controller may include, but is not limited to: personal identification data, contact details, location data, financial information, creditworthiness information, payment information, and VAT number.
When creating an account/registering on the Website, the data collected by the Controller may include, but is not limited to: personal identification data and contact details.
When subscribing to the newsletter service offered on the Website, the data collected by the Controller may include, but is not limited to: personal identification data (first name and last name) and contact details (e-mail address).
When enrolling in the C&C Loyalty Program and requesting the "C&C Fidelity Card", the data collected by the Controller may include: personal identification data and contact details (e-mail address, phone number).
When using the form in the "work with us" section and/or sending a Curriculum Vitae to the dedicated address, the personal data requested may include, in addition to personal identification and contact details, all information contained within the Curriculum Vitae, should the user send it to the Controller via the provided channels.
When using the form in the "Book an appointment" section to access certified Apple Assistance, and when sending a message via the "Live Assistance" customer contact and support chat.
When sending a message using the contact channels and/or contact forms present on the website.
The optional and voluntary sending of messages to contact addresses, as well as the completion and submission of forms on the site, entails the acquisition of the sender's contact data necessary to provide a response, as well as all personal data included in the communications.
Navigation Data
The Data Controller collects data related to the user's use of the website. The IT systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes IP addresses or domain names of the computers and terminals used by users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server, and other parameters relating to the user's operating system and IT environment.
This data, necessary for the use of web services, is also processed for the purpose of obtaining statistical information on the use of the services (most visited pages, number of visitors per time slot or day, geographical areas of origin, etc.) or checking the correct functioning of the services offered.
Navigation data does not persist for more than seven days and is deleted immediately after aggregation (except for any need to ascertain crimes by the judicial authority).
Cookies and other Tracking Systems
To make its services as efficient and easy to use as possible, this Website uses cookies. Therefore, when you visit the Website, a minimal amount of information is placed on the User's device, such as small text files called "cookies," which are saved in the User's web browser directory. There are various types of cookies, but essentially the main purpose of a cookie is to make the Website function more effectively and to enable certain features.
For more information on the cookies used by this website, please refer to the cookie policy at the following link.
Purpose of Processing
Depending on the type of processing to be carried out, the Data Controller uses the data collected and/or provided by the User for the following purposes: to process and fulfill orders, manage payments, communicate with the user regarding the order, handle any returns, provide customer assistance, and allow product pickup.
Data will also be used to acquire pre-contractual data and information; exchange information aimed at the execution of the contractual relationship, including pre- and post-contractual activities; formulate requests or fulfill received requests; manage accounting and tax compliance; send informational or commercial promotional newsletters (e.g., invitations to events, communications regarding new service offerings, promotional offers).
This processing may occur automatically via email and can be carried out if the Data Subject has not revoked their consent for the use of the data; suggest functionalities, products, and services that might interest you.
We ask for your consent to identify your preferences and personalize commercial offers and promotions based on your interests (known as profiling); to carry out preliminary and consequent activities to the registration request/creation of the User Account, as well as for the fulfillment of any other deriving obligation; to provide a response to any communications, requests for information, and/or services from users by sending a message using the addresses and/or contact forms on the site; to register your appointment at one of our authorized Apple service centers; to provide a response to any applications from Users, submitted through the appropriate form in the "work with us" section or using the contact addresses on the site; to manage and control risks, prevent possible fraud, insolvencies or defaults; to prevent and manage possible disputes, take legal action if necessary.
Legal Basis for Processing
In reference to the purposes indicated in the previous paragraph, the legal basis for them is, with regard to the point: the necessity to perform a contract to which the data subject is party or to take pre-contractual measures at the data subject's request; the express consent given by the data subject; the express consent given by the data subject; the necessity to perform a contract to which the data subject is party or to take pre-contractual measures at the data subject's request; the necessity to perform a contract to which the data subject is party or to take pre-contractual measures at the data subject's request; the necessity to perform a contract to which the data subject is party or to take pre-contractual measures at the data subject's request; the necessity to perform a contract to which the data subject is party or to take pre-contractual measures at the data subject's request.
The processing of special categories of personal data, if present within the Data Subject's Curriculum Vitae, is carried out if necessary to comply with specific legal obligations, particularly for the establishment of an employment relationship (Art. 88 of EU Regulation 2016/679), as well as to ensure equal opportunities in employment (cf. General Authorization no. 1/2016), and the necessity to pursue the legitimate interest of the data controller (in particular with regard to the prevention of fraud and insolvencies).
Recipients of Data
The personal data processed by the Controller are not disseminated, meaning they are not disclosed to unspecified individuals in any possible form, including their availability or simple consultation.
However, they may be communicated to employees who work under the Controller's authority, as they operate under the data controller's supervision. Based on their roles and duties, these employees have been authorized to process personal data, taking into account their respective competencies and in accordance with the instructions given to them by the Controller.
The Controller has appointed third-party service providers in relation to the operation of the Website, such as hosting providers, IT maintenance service providers, and service providers that allow the integration of other functions into the Website that the user can use at their discretion. These service providers, designated as Data Processors, are provided only with the personal data necessary to provide their respective services and are not permitted to use or disclose the personal data of the data subjects for other purposes without the data subject's prior authorization.
Data may also be communicated, only as strictly necessary, to parties who, for the purpose of fulfilling orders or other requests or providing services related to the transaction or contractual relationship with the Controller, must supply goods and/or perform services on behalf of the Controller.
Finally, data may be communicated to parties authorized to access it by virtue of legal provisions, regulations, or EU norms.
Data Transfer
Any transfers of personal data to third countries or international organizations are carried out in accordance with Chapter V of the GDPR to ensure that the level of protection for individuals guaranteed by the Regulation is not prejudiced in any way.
Data Retention
The Data Controller retains and processes personal data for the time necessary to fulfill the stated purposes. Subsequently, personal data will be stored and not further processed, for the period established by current civil and tax provisions.
Data provided for commercial promotion purposes for services other than those already acquired by the Data Subject, for which they initially gave consent, will be retained for 24 months, unless consent is revoked.
Data provided to the Controller for profiling purposes will be retained for 12 months, unless consent is revoked.
Data collected during account creation will be retained for the entire duration of your registration and, in any case, for a maximum period of 12 (twelve) months of inactivity, or if, within this period, no Services are associated and/or products are purchased through the registration itself.
Data collected when using the "Book an appointment" form will be retained for the time necessary to fulfill the stated purposes and, in any case, for a period not exceeding 12 months from the receipt of the data.
Data collected when using the "work with us" form and/or sending a Curriculum Vitae to the indicated address will be retained for the time necessary to fulfill the stated purposes and, in any case, for a period not exceeding 12 months from the receipt of the data.
In the event of any litigation, the collected data will be retained for the entire duration of the dispute, until the expiration of the terms for exercising appeal actions.
It should also be added that, in the event a user provides the Controller with personal data that is unsolicited or unnecessary for the performance of the requested service or the provision of a service strictly connected to it, C&C SpA cannot be considered the controller of this data, and will proceed with its deletion as soon as possible.
Data Subject rights
In relation to the data subject to processing as described in this privacy policy, the data subject is granted the right at any time to request from the Controller:
Access to your personal data and information relating thereto (Art. 15 of the GDPR);
Rectification of inaccurate data or the integration of incomplete data (Art. 16 of the GDPR);
Erasure of your personal data (upon the occurrence of one of the conditions indicated in Art. 17, para. 1 of the GDPR and in compliance with the exceptions provided in paragraph 3 of the same article);
Restriction of the processing of your personal data (upon the occurrence of one of the cases indicated in Art. 18, para. 1 of the GDPR);
Request and obtain from the Controller — in cases where the legal basis for processing is the contract or consent, and the processing is carried out by automated means — your personal data in a structured, commonly used, and machine-readable format, also for the purpose of transmitting such data to another data controller (known as the right to data portability - Art. 20 of the GDPR);
Object at any time to the processing of your personal data in specific situations concerning you (Art. 21 of the GDPR);
Withdraw consent at any time, limited to cases where processing is based on your consent for one or more specific purposes. Processing based on consent and carried out prior to its withdrawal remains lawful (Art. 7, para. 3, of the GDPR).
To facilitate the exercise of the data subjects' rights provided by EU Regulation 2016/679, the Controller has adopted appropriate forms which, once duly completed, should be addressed to the Data Controller.
The specific request can be submitted by contacting the Controller via certified email (PEC) at info@pec.cecconsulting.it, via email at privacy@cec.com, or by registered letter with return receipt to Viale Einaudi n. 10 - Bari (BA), Italy.
The form for exercising your rights is available by clicking HERE.
If the data subject believes that the processing of their data violates the provisions of the Regulation, they may lodge a complaint with a supervisory authority (Italian Data Protection Authority – www.garanteprivacy.it), as provided for in Art. 77 of the GDPR, or seek judicial remedies (Art. 79 of the GDPR).
Refusal to Provide Data
If the Data Subject does not provide their data identified as necessary for the performance of the requested service, the Controller will be unable to proceed with the processing related to the management of said service, nor with the obligations dependent on it.
If the Data Subject does not consent to the processing of personal data for activities that require it, such processing will not occur for those specific purposes, without affecting the provision of other requested services or those for which consent has already been given.
If the Data Subject has given consent and subsequently revokes it or objects to the processing, their data will no longer be processed for those activities, without incurring any consequences or prejudicial effects for the Data Subject and for any other requested services.
Automated Decision-Making Processes
The Controller does not carry out processing that involves automated decision-making processes concerning individuals' data.
This document was updated on 06/04/2023
PRIVACY POLICY
Dear Visitor, pursuant to Legislative Decree 196/2003 and Regulation (EU) 2016/679 (hereinafter "Regulation"), this page describes how personal data of users consulting the website, accessible electronically at the following address: https://www.cec.com/, for services offered by C&C SpA, are processed. We inform the user that following the consultation of this site, data relating to identified or identifiable persons may be processed. This information does not concern other sites, pages, or online services reachable via hypertext links that may be published on the site.
IDENTITY OF THE DATA CONTROLLER
The Data Controller is C&C S.P.A., in the person of its pro tempore legal representative, with registered office at Viale Einaudi n. 10 - Bari (BA), (e-mail: privacy@cec.com, PEC: info@pec.cecconsulting.it, Tel.: +39 080 5622398) (hereinafter also "the Controller"). C&C SpA has appointed a Data Protection Officer (DPO) who can be contacted at the following e-mail address: dpo@cec.com
Data Source and Type of Data Collected
Data Provided by the User
The Data Controller collects personal data provided by users when purchasing an offered product. The data collected by the Controller may include, but is not limited to: personal identification data, contact details, location data, financial information, creditworthiness information, payment information, and VAT number.
When creating an account/registering on the Website, the data collected by the Controller may include, but is not limited to: personal identification data and contact details.
When subscribing to the newsletter service offered on the Website, the data collected by the Controller may include, but is not limited to: personal identification data (first name and last name) and contact details (e-mail address).
When enrolling in the C&C Loyalty Program and requesting the "C&C Fidelity Card", the data collected by the Controller may include: personal identification data and contact details (e-mail address, phone number).
When using the form in the "work with us" section and/or sending a Curriculum Vitae to the dedicated address, the personal data requested may include, in addition to personal identification and contact details, all information contained within the Curriculum Vitae, should the user send it to the Controller via the provided channels.
When using the form in the "Book an appointment" section to access certified Apple Assistance, and when sending a message via the "Live Assistance" customer contact and support chat.
When sending a message using the contact channels and/or contact forms present on the website.
The optional and voluntary sending of messages to contact addresses, as well as the completion and submission of forms on the site, entails the acquisition of the sender's contact data necessary to provide a response, as well as all personal data included in the communications.
Navigation Data
The Data Controller collects data related to the user's use of the website. The IT systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes IP addresses or domain names of the computers and terminals used by users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server, and other parameters relating to the user's operating system and IT environment.
This data, necessary for the use of web services, is also processed for the purpose of obtaining statistical information on the use of the services (most visited pages, number of visitors per time slot or day, geographical areas of origin, etc.) or checking the correct functioning of the services offered.
Navigation data does not persist for more than seven days and is deleted immediately after aggregation (except for any need to ascertain crimes by the judicial authority).
Cookies and other Tracking Systems
To make its services as efficient and easy to use as possible, this Website uses cookies. Therefore, when you visit the Website, a minimal amount of information is placed on the User's device, such as small text files called "cookies," which are saved in the User's web browser directory. There are various types of cookies, but essentially the main purpose of a cookie is to make the Website function more effectively and to enable certain features.
For more information on the cookies used by this website, please refer to the cookie policy at the following link.
Purpose of Processing
Depending on the type of processing to be carried out, the Data Controller uses the data collected and/or provided by the User for the following purposes: to process and fulfill orders, manage payments, communicate with the user regarding the order, handle any returns, provide customer assistance, and allow product pickup.
Data will also be used to acquire pre-contractual data and information; exchange information aimed at the execution of the contractual relationship, including pre- and post-contractual activities; formulate requests or fulfill received requests; manage accounting and tax compliance; send informational or commercial promotional newsletters (e.g., invitations to events, communications regarding new service offerings, promotional offers).
This processing may occur automatically via email and can be carried out if the Data Subject has not revoked their consent for the use of the data; suggest functionalities, products, and services that might interest you.
We ask for your consent to identify your preferences and personalize commercial offers and promotions based on your interests (known as profiling); to carry out preliminary and consequent activities to the registration request/creation of the User Account, as well as for the fulfillment of any other deriving obligation; to provide a response to any communications, requests for information, and/or services from users by sending a message using the addresses and/or contact forms on the site; to register your appointment at one of our authorized Apple service centers; to provide a response to any applications from Users, submitted through the appropriate form in the "work with us" section or using the contact addresses on the site; to manage and control risks, prevent possible fraud, insolvencies or defaults; to prevent and manage possible disputes, take legal action if necessary.
Legal Basis for Processing
In reference to the purposes indicated in the previous paragraph, the legal basis for them is, with regard to the point: the necessity to perform a contract to which the data subject is party or to take pre-contractual measures at the data subject's request; the express consent given by the data subject; the express consent given by the data subject; the necessity to perform a contract to which the data subject is party or to take pre-contractual measures at the data subject's request; the necessity to perform a contract to which the data subject is party or to take pre-contractual measures at the data subject's request; the necessity to perform a contract to which the data subject is party or to take pre-contractual measures at the data subject's request; the necessity to perform a contract to which the data subject is party or to take pre-contractual measures at the data subject's request.
The processing of special categories of personal data, if present within the Data Subject's Curriculum Vitae, is carried out if necessary to comply with specific legal obligations, particularly for the establishment of an employment relationship (Art. 88 of EU Regulation 2016/679), as well as to ensure equal opportunities in employment (cf. General Authorization no. 1/2016), and the necessity to pursue the legitimate interest of the data controller (in particular with regard to the prevention of fraud and insolvencies).
Recipients of Data
The personal data processed by the Controller are not disseminated, meaning they are not disclosed to unspecified individuals in any possible form, including their availability or simple consultation.
However, they may be communicated to employees who work under the Controller's authority, as they operate under the data controller's supervision. Based on their roles and duties, these employees have been authorized to process personal data, taking into account their respective competencies and in accordance with the instructions given to them by the Controller.
The Controller has appointed third-party service providers in relation to the operation of the Website, such as hosting providers, IT maintenance service providers, and service providers that allow the integration of other functions into the Website that the user can use at their discretion. These service providers, designated as Data Processors, are provided only with the personal data necessary to provide their respective services and are not permitted to use or disclose the personal data of the data subjects for other purposes without the data subject's prior authorization.
Data may also be communicated, only as strictly necessary, to parties who, for the purpose of fulfilling orders or other requests or providing services related to the transaction or contractual relationship with the Controller, must supply goods and/or perform services on behalf of the Controller.
Finally, data may be communicated to parties authorized to access it by virtue of legal provisions, regulations, or EU norms.
Data Transfer
Any transfers of personal data to third countries or international organizations are carried out in accordance with Chapter V of the GDPR to ensure that the level of protection for individuals guaranteed by the Regulation is not prejudiced in any way.
Data Retention
The Data Controller retains and processes personal data for the time necessary to fulfill the stated purposes. Subsequently, personal data will be stored and not further processed, for the period established by current civil and tax provisions.
Data provided for commercial promotion purposes for services other than those already acquired by the Data Subject, for which they initially gave consent, will be retained for 24 months, unless consent is revoked.
Data provided to the Controller for profiling purposes will be retained for 12 months, unless consent is revoked.
Data collected during account creation will be retained for the entire duration of your registration and, in any case, for a maximum period of 12 (twelve) months of inactivity, or if, within this period, no Services are associated and/or products are purchased through the registration itself.
Data collected when using the "Book an appointment" form will be retained for the time necessary to fulfill the stated purposes and, in any case, for a period not exceeding 12 months from the receipt of the data.
Data collected when using the "work with us" form and/or sending a Curriculum Vitae to the indicated address will be retained for the time necessary to fulfill the stated purposes and, in any case, for a period not exceeding 12 months from the receipt of the data.
In the event of any litigation, the collected data will be retained for the entire duration of the dispute, until the expiration of the terms for exercising appeal actions.
It should also be added that, in the event a user provides the Controller with personal data that is unsolicited or unnecessary for the performance of the requested service or the provision of a service strictly connected to it, C&C SpA cannot be considered the controller of this data, and will proceed with its deletion as soon as possible.
Data Subject rights
In relation to the data subject to processing as described in this privacy policy, the data subject is granted the right at any time to request from the Controller:
Access to your personal data and information relating thereto (Art. 15 of the GDPR);
Rectification of inaccurate data or the integration of incomplete data (Art. 16 of the GDPR);
Erasure of your personal data (upon the occurrence of one of the conditions indicated in Art. 17, para. 1 of the GDPR and in compliance with the exceptions provided in paragraph 3 of the same article);
Restriction of the processing of your personal data (upon the occurrence of one of the cases indicated in Art. 18, para. 1 of the GDPR);
Request and obtain from the Controller — in cases where the legal basis for processing is the contract or consent, and the processing is carried out by automated means — your personal data in a structured, commonly used, and machine-readable format, also for the purpose of transmitting such data to another data controller (known as the right to data portability - Art. 20 of the GDPR);
Object at any time to the processing of your personal data in specific situations concerning you (Art. 21 of the GDPR);
Withdraw consent at any time, limited to cases where processing is based on your consent for one or more specific purposes. Processing based on consent and carried out prior to its withdrawal remains lawful (Art. 7, para. 3, of the GDPR).
To facilitate the exercise of the data subjects' rights provided by EU Regulation 2016/679, the Controller has adopted appropriate forms which, once duly completed, should be addressed to the Data Controller.
The specific request can be submitted by contacting the Controller via certified email (PEC) at info@pec.cecconsulting.it, via email at privacy@cec.com, or by registered letter with return receipt to Viale Einaudi n. 10 - Bari (BA), Italy.
The form for exercising your rights is available by clicking HERE.
If the data subject believes that the processing of their data violates the provisions of the Regulation, they may lodge a complaint with a supervisory authority (Italian Data Protection Authority – www.garanteprivacy.it), as provided for in Art. 77 of the GDPR, or seek judicial remedies (Art. 79 of the GDPR).
Refusal to Provide Data
If the Data Subject does not provide their data identified as necessary for the performance of the requested service, the Controller will be unable to proceed with the processing related to the management of said service, nor with the obligations dependent on it.
If the Data Subject does not consent to the processing of personal data for activities that require it, such processing will not occur for those specific purposes, without affecting the provision of other requested services or those for which consent has already been given.
If the Data Subject has given consent and subsequently revokes it or objects to the processing, their data will no longer be processed for those activities, without incurring any consequences or prejudicial effects for the Data Subject and for any other requested services.
Automated Decision-Making Processes
The Controller does not carry out processing that involves automated decision-making processes concerning individuals' data.
This document was updated on 06/04/2023
PRIVACY POLICY
Dear Visitor, pursuant to Legislative Decree 196/2003 and Regulation (EU) 2016/679 (hereinafter "Regulation"), this page describes how personal data of users consulting the website, accessible electronically at the following address: https://www.cec.com/, for services offered by C&C SpA, are processed. We inform the user that following the consultation of this site, data relating to identified or identifiable persons may be processed. This information does not concern other sites, pages, or online services reachable via hypertext links that may be published on the site.
IDENTITY OF THE DATA CONTROLLER
The Data Controller is C&C S.P.A., in the person of its pro tempore legal representative, with registered office at Viale Einaudi n. 10 - Bari (BA), (e-mail: privacy@cec.com, PEC: info@pec.cecconsulting.it, Tel.: +39 080 5622398) (hereinafter also "the Controller"). C&C SpA has appointed a Data Protection Officer (DPO) who can be contacted at the following e-mail address: dpo@cec.com
Data Source and Type of Data Collected
Data Provided by the User
The Data Controller collects personal data provided by users when purchasing an offered product. The data collected by the Controller may include, but is not limited to: personal identification data, contact details, location data, financial information, creditworthiness information, payment information, and VAT number.
When creating an account/registering on the Website, the data collected by the Controller may include, but is not limited to: personal identification data and contact details.
When subscribing to the newsletter service offered on the Website, the data collected by the Controller may include, but is not limited to: personal identification data (first name and last name) and contact details (e-mail address).
When enrolling in the C&C Loyalty Program and requesting the "C&C Fidelity Card", the data collected by the Controller may include: personal identification data and contact details (e-mail address, phone number).
When using the form in the "work with us" section and/or sending a Curriculum Vitae to the dedicated address, the personal data requested may include, in addition to personal identification and contact details, all information contained within the Curriculum Vitae, should the user send it to the Controller via the provided channels.
When using the form in the "Book an appointment" section to access certified Apple Assistance, and when sending a message via the "Live Assistance" customer contact and support chat.
When sending a message using the contact channels and/or contact forms present on the website.
The optional and voluntary sending of messages to contact addresses, as well as the completion and submission of forms on the site, entails the acquisition of the sender's contact data necessary to provide a response, as well as all personal data included in the communications.
Navigation Data
The Data Controller collects data related to the user's use of the website. The IT systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes IP addresses or domain names of the computers and terminals used by users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server, and other parameters relating to the user's operating system and IT environment.
This data, necessary for the use of web services, is also processed for the purpose of obtaining statistical information on the use of the services (most visited pages, number of visitors per time slot or day, geographical areas of origin, etc.) or checking the correct functioning of the services offered.
Navigation data does not persist for more than seven days and is deleted immediately after aggregation (except for any need to ascertain crimes by the judicial authority).
Cookies and other Tracking Systems
To make its services as efficient and easy to use as possible, this Website uses cookies. Therefore, when you visit the Website, a minimal amount of information is placed on the User's device, such as small text files called "cookies," which are saved in the User's web browser directory. There are various types of cookies, but essentially the main purpose of a cookie is to make the Website function more effectively and to enable certain features.
For more information on the cookies used by this website, please refer to the cookie policy at the following link.
Purpose of Processing
Depending on the type of processing to be carried out, the Data Controller uses the data collected and/or provided by the User for the following purposes: to process and fulfill orders, manage payments, communicate with the user regarding the order, handle any returns, provide customer assistance, and allow product pickup.
Data will also be used to acquire pre-contractual data and information; exchange information aimed at the execution of the contractual relationship, including pre- and post-contractual activities; formulate requests or fulfill received requests; manage accounting and tax compliance; send informational or commercial promotional newsletters (e.g., invitations to events, communications regarding new service offerings, promotional offers).
This processing may occur automatically via email and can be carried out if the Data Subject has not revoked their consent for the use of the data; suggest functionalities, products, and services that might interest you.
We ask for your consent to identify your preferences and personalize commercial offers and promotions based on your interests (known as profiling); to carry out preliminary and consequent activities to the registration request/creation of the User Account, as well as for the fulfillment of any other deriving obligation; to provide a response to any communications, requests for information, and/or services from users by sending a message using the addresses and/or contact forms on the site; to register your appointment at one of our authorized Apple service centers; to provide a response to any applications from Users, submitted through the appropriate form in the "work with us" section or using the contact addresses on the site; to manage and control risks, prevent possible fraud, insolvencies or defaults; to prevent and manage possible disputes, take legal action if necessary.
Legal Basis for Processing
In reference to the purposes indicated in the previous paragraph, the legal basis for them is, with regard to the point: the necessity to perform a contract to which the data subject is party or to take pre-contractual measures at the data subject's request; the express consent given by the data subject; the express consent given by the data subject; the necessity to perform a contract to which the data subject is party or to take pre-contractual measures at the data subject's request; the necessity to perform a contract to which the data subject is party or to take pre-contractual measures at the data subject's request; the necessity to perform a contract to which the data subject is party or to take pre-contractual measures at the data subject's request; the necessity to perform a contract to which the data subject is party or to take pre-contractual measures at the data subject's request.
The processing of special categories of personal data, if present within the Data Subject's Curriculum Vitae, is carried out if necessary to comply with specific legal obligations, particularly for the establishment of an employment relationship (Art. 88 of EU Regulation 2016/679), as well as to ensure equal opportunities in employment (cf. General Authorization no. 1/2016), and the necessity to pursue the legitimate interest of the data controller (in particular with regard to the prevention of fraud and insolvencies).
Recipients of Data
The personal data processed by the Controller are not disseminated, meaning they are not disclosed to unspecified individuals in any possible form, including their availability or simple consultation.
However, they may be communicated to employees who work under the Controller's authority, as they operate under the data controller's supervision. Based on their roles and duties, these employees have been authorized to process personal data, taking into account their respective competencies and in accordance with the instructions given to them by the Controller.
The Controller has appointed third-party service providers in relation to the operation of the Website, such as hosting providers, IT maintenance service providers, and service providers that allow the integration of other functions into the Website that the user can use at their discretion. These service providers, designated as Data Processors, are provided only with the personal data necessary to provide their respective services and are not permitted to use or disclose the personal data of the data subjects for other purposes without the data subject's prior authorization.
Data may also be communicated, only as strictly necessary, to parties who, for the purpose of fulfilling orders or other requests or providing services related to the transaction or contractual relationship with the Controller, must supply goods and/or perform services on behalf of the Controller.
Finally, data may be communicated to parties authorized to access it by virtue of legal provisions, regulations, or EU norms.
Data Transfer
Any transfers of personal data to third countries or international organizations are carried out in accordance with Chapter V of the GDPR to ensure that the level of protection for individuals guaranteed by the Regulation is not prejudiced in any way.
Data Retention
The Data Controller retains and processes personal data for the time necessary to fulfill the stated purposes. Subsequently, personal data will be stored and not further processed, for the period established by current civil and tax provisions.
Data provided for commercial promotion purposes for services other than those already acquired by the Data Subject, for which they initially gave consent, will be retained for 24 months, unless consent is revoked.
Data provided to the Controller for profiling purposes will be retained for 12 months, unless consent is revoked.
Data collected during account creation will be retained for the entire duration of your registration and, in any case, for a maximum period of 12 (twelve) months of inactivity, or if, within this period, no Services are associated and/or products are purchased through the registration itself.
Data collected when using the "Book an appointment" form will be retained for the time necessary to fulfill the stated purposes and, in any case, for a period not exceeding 12 months from the receipt of the data.
Data collected when using the "work with us" form and/or sending a Curriculum Vitae to the indicated address will be retained for the time necessary to fulfill the stated purposes and, in any case, for a period not exceeding 12 months from the receipt of the data.
In the event of any litigation, the collected data will be retained for the entire duration of the dispute, until the expiration of the terms for exercising appeal actions.
It should also be added that, in the event a user provides the Controller with personal data that is unsolicited or unnecessary for the performance of the requested service or the provision of a service strictly connected to it, C&C SpA cannot be considered the controller of this data, and will proceed with its deletion as soon as possible.
Data Subject rights
In relation to the data subject to processing as described in this privacy policy, the data subject is granted the right at any time to request from the Controller:
Access to your personal data and information relating thereto (Art. 15 of the GDPR);
Rectification of inaccurate data or the integration of incomplete data (Art. 16 of the GDPR);
Erasure of your personal data (upon the occurrence of one of the conditions indicated in Art. 17, para. 1 of the GDPR and in compliance with the exceptions provided in paragraph 3 of the same article);
Restriction of the processing of your personal data (upon the occurrence of one of the cases indicated in Art. 18, para. 1 of the GDPR);
Request and obtain from the Controller — in cases where the legal basis for processing is the contract or consent, and the processing is carried out by automated means — your personal data in a structured, commonly used, and machine-readable format, also for the purpose of transmitting such data to another data controller (known as the right to data portability - Art. 20 of the GDPR);
Object at any time to the processing of your personal data in specific situations concerning you (Art. 21 of the GDPR);
Withdraw consent at any time, limited to cases where processing is based on your consent for one or more specific purposes. Processing based on consent and carried out prior to its withdrawal remains lawful (Art. 7, para. 3, of the GDPR).
To facilitate the exercise of the data subjects' rights provided by EU Regulation 2016/679, the Controller has adopted appropriate forms which, once duly completed, should be addressed to the Data Controller.
The specific request can be submitted by contacting the Controller via certified email (PEC) at info@pec.cecconsulting.it, via email at privacy@cec.com, or by registered letter with return receipt to Viale Einaudi n. 10 - Bari (BA), Italy.
The form for exercising your rights is available by clicking HERE.
If the data subject believes that the processing of their data violates the provisions of the Regulation, they may lodge a complaint with a supervisory authority (Italian Data Protection Authority – www.garanteprivacy.it), as provided for in Art. 77 of the GDPR, or seek judicial remedies (Art. 79 of the GDPR).
Refusal to Provide Data
If the Data Subject does not provide their data identified as necessary for the performance of the requested service, the Controller will be unable to proceed with the processing related to the management of said service, nor with the obligations dependent on it.
If the Data Subject does not consent to the processing of personal data for activities that require it, such processing will not occur for those specific purposes, without affecting the provision of other requested services or those for which consent has already been given.
If the Data Subject has given consent and subsequently revokes it or objects to the processing, their data will no longer be processed for those activities, without incurring any consequences or prejudicial effects for the Data Subject and for any other requested services.
Automated Decision-Making Processes
The Controller does not carry out processing that involves automated decision-making processes concerning individuals' data.
This document was updated on 06/04/2023
OFFICES
Copyright ©
2025
All rights reserved.
C&C S.p.A.
VAT number 05685740721.
Unique code for electronic invoice: M5UXCR1.
Leave us a feedback
OFFICES
Copyright ©
2025
All rights reserved.
C&C S.p.A.
VAT number 05685740721.
Unique code for electronic invoice: M5UXCR1.
OFFICES
Copyright ©
2025
All rights reserved.
C&C S.p.A.
VAT number 05685740721.
Unique code for electronic invoice: M5UXCR1.
Leave us a feedback
EN