INFORMATION PURSUANT TO ARTICLE 13 OF EU REGULATION NO. 2016/679
– WEBSITE –

CROMACAP S.r.l. (Tax Code and VAT No 11380420965) in the person of its legal representative, with registered office at Via Paolo Veronese 2 – 20145 – Milan (MI), in its capacity as “Data Controller” pursuant to art. 4 paragraph 1 n. 7) of the GDPR, informs you that, pursuant to art. 13 of the GDPR, your personal data, as described in art. 1 below, will be processed for the processing purpose described in Article 2 below.

 

1. Category of personal data subject to processing.

1.1. CROMACAP S.R.L. collects and processes, in order to pursue the processing purpose described in art. 2, your personal data pursuant to art. 4 n. 1) of the GDPR so-called. identifiers (e.g. name; surname; e-mail address; telephone number; address of residence/domicile/residence; VAT number) required within one or more specific forms on the website of CROMACAP S.R.L. https://cromacap.it (hereinafter referred to as the ” Website “).

 

2. Purpose of the processing and related legal basis.

2.1. Your personal data are processed by CROMACAP S.R.L., for the execution of the following processing purposes:

a. Execution of your contact request and/or more information, formulated by filling in the form on the Site.

In compliance with art. 13 paragraph 2) letter e) of the GDPR, CROMACAP S.R.L. specifies that any failure to communicate (even partial) your personal data, unequivocally requested as mandatory within one or more specific forms on the Site, may make it impossible for CROMACAP S.R.L. to correctly and fully carry out the processing purposes referred to in art. 2.1. letter a).
In this regard, CROMACAP S.R.L. specifies that the legal basis of the processing purpose described in art. 2.1. letter a) is found in the following regulatory provision: art. 6 paragraph 1) letter b) of the GDPR.

2.2. Your personal data are processed by CROMACAP S.R.L., for the execution of the following processing purposes:

b. Execution of the registration request, formulated by filling in the form on the Site, in order to have and manage the personal area.

In compliance with art. 13 paragraph 2) letter e) of the GDPR, CROMACAP S.R.L. specifies that any failure to communicate (even partial) your personal data, unequivocally requested as mandatory within one or more specific forms on the Site, may make it impossible for CROMACAP S.R.L. to correctly and fully carry out the processing purposes referred to in art. 2.2. letter b).
In this regard, CROMACAP S.R.L. specifies that the legal basis of the processing purpose described in art. 2.2. letter b) is found in the following regulatory provision: Art. 6 paragraph 1) letter b) of the GDPR.

 

3. Retention period.

3.1. In compliance with Article 13 paragraph 2) letter a) of the GDPR, CROMACAP S.R.L. informs you of the following retention period, at the end of which your personal data will be subject to cancellation, destruction or anonymization: (i) for the execution of the processing purposes referred to in art. 2.1. letter a): 10 years, starting following the complete execution of your request for contact and/or more information, a term that may be extended in order to comply with regulatory obligations (including those that have arisen) or to assert or defend a right, including in court; (ii) for the execution of the processing purposes referred to in Article 2.2 letter b): until you decide to irreversibly delete the account created on the Website (a term that may be extended in order to comply with regulatory and/or judicial obligations).

 

4. Recipients.

4.1. In compliance with Article 13 paragraph 1) letter e) of the GDPR, CROMACAP S.R.L. specifies that your personal data may be communicated, where appropriate and necessary, to one or more recipients pursuant to Article 4 no. 9) of the GDPR, identified as follows, in general, by category: (i) for the execution of the processing purposes referred to in art. 2.1. letter a) and 2.2. letter b): subjects authorized to process by CROMACAP S.R.L.; companies controlled or otherwise connected, even indirectly, to CROMACAP S.R.L.; consultants or companies of various kinds that provide, in any case, services and/or benefits (including professional ones) connected, even indirectly, to the fulfilment of the purpose in question (e.g. IT companies).

 

5. Transfer.

5.1. CROMACAP S.R.L. specifies that your personal data are/may be stored in automated, partially automated or non-automated files belonging to or in any case attributable, even indirectly, to the latter, and located within the European Economic Area (EEA).

 

6. Rights of the data subject.

6.1. In relation to your personal data, CROMACAP S.R.L. informs you of the right to exercise the following rights, which may be subject to the limitations provided for in articles 2-undecies and 2-duodecies of the Privacy Code: right of access pursuant to article 15 of the GDPR: right to obtain confirmation as to whether or not personal data is being processed,  In addition to the information referred to in art. 15 of the GDPR (e.g. purpose of the processing; categories of data in question; retention period); right to rectification pursuant to Article 16 of the GDPR: right to correct, update or supplement personal data; right to erasure pursuant to Article 17 of the GDPR: right to obtain the erasure or destruction or anonymization of personal data, where, however, the conditions listed in the same article are met; right to restriction of processing pursuant to Article 18 of the GDPR: right of a markedly precautionary nature, aimed at obtaining the limitation of processing where the cases governed by the same Article 18 exist; right to data portability pursuant to Article 20 of the GDPR: right to obtain the personal data, provided to the Data Controller, in a structured, commonly used and machine-readable format (and, where required, to transmit them, directly, to another Data Controller). Where the specific conditions indicated in the same article exist (e.g. legal basis of consent and/or performance of a contract; personal data provided by the data subject); right to object pursuant to Article 21 of the GDPR: right to obtain the permanent cessation of a certain processing of personal data; right to lodge a complaint with the Supervisory Authority (i.e., the Italian Data Protection Authority) pursuant to Article 77 of the GDPR: right to lodge a complaint where it is believed that the processing under analysis violates national and EU legislation on the protection of personal data.

6.2. In addition to the rights described in Article 6.1 above, the Data Controller specifies that, in relation to your personal data, there is, where possible and conferring, the right to exercise, on the one hand, the (sub) right provided for in Article 19 of the GDPR (“The Data Controller shall notify each of the recipients to whom the personal data have been transmitted of any rectification or erasure or restriction of processing carried out pursuant to Article 16,  Article 17(1) and Article 18, unless this proves impossible or involves a disproportionate effort. The data controller shall notify the data subject of such recipients if the data subject so requests”), to be considered connected and connected to the exercise of one or more rights regulated by art. 16, 17 and 18 of the GDPR; on the other hand, the Data Controller specifies that, in relation to your personal data, there is, where possible and conferring, the right to exercise the right provided for by art. 22 paragraph 1) of the GDPR (“The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her”), subject to the exceptions provided for in paragraph 2 below).

6.3. In compliance with Article 12, paragraph 1) of the GDPR, CROMACAP S.R.L. undertakes to provide the communications referred to in Art. 15 to 22 and 34 of the GDPR in a concise, transparent, intelligible, easily accessible form and in plain and clear language: such information will be provided in writing or by other means, possibly electronically or, at the request of the data subject, will be provided orally provided that the identity of the data subject is proven, by other means.

6.4. In compliance with Article 12 paragraph 3) of the GDPR, CROMACAP S.R.L. informs you that it undertakes to provide information relating to the action taken regarding a request pursuant to art. 15 to 22 of the GDPR without undue delay and, in any case, no later than one month after receipt of the request; this deadline may be extended by 2 months if necessary, taking into account the complexity and number of requests (in this case, CROMACAP S.R.L. undertakes to inform you of this extension and the reasons for the delay, within one month of receipt of the request).

6.5. The rights described above (with the exception of the right pursuant to Article 77 of the GDPR) can be exercised using the contact details described in Article 7 below.

 

7. Contact details.

7.1. CROMACAP S.R.L. can be contacted at the following address: info@cromacap.it

Milan (MI), there 01 September 2025 (date of last update).

 

CROMACAP S.r.l.

(in the person of its pro tempore legal representative)