The address of our website is: http://www.cultilite.it

What is the privacy policy?

This privacy policy explains which Personal Data is collected by Cultilite and how such Personal Data is used when the User accesses the site and web services of Cultilite, accessible at the address www.Cultilite.com (hereinafter the “Site”), and is provided pursuant to Article 13 of Legislative Decree No. 196/2003 (Personal Data Protection Code – hereinafter the “Code”) and Article 13 of EU Regulation No. 2016/279 (hereinafter “GDPR“).
This policy does not apply to Personal Data collected from other websites that may be accessed by the User through external third-party links. Cultilite is not responsible for the privacy policies and/or practices of third parties. When linking to another site or using a third-party service, it is necessary to review the privacy policy of that site or service.

The term “Personal Data” refers to any information relating to an identified or identifiable natural person, even indirectly, by reference to any other information.

Cultilite may modify, supplement, or periodically update this policy, also in light of any changes to applicable laws.

Processing of Personal Data

Access to certain sections of the Site and/or requests for information or services from Users of the Site may be subject to the entry of Personal Data; additionally, any contact with Cultilite, such as through the consumer service or the voluntary, explicit, and spontaneous sending of messages, whether via email or traditional mail to the Cultilite contact details provided on the Site, will result in the subsequent acquisition of the sender’s address, including email, or telephone number, necessary to respond to requests, as well as any other Personal Data included in the relevant communications.

The processing of the above Personal Data by Cultilite, as the Data Controller, will be carried out in accordance with the Code and GDPR.
The purpose of this policy is to enable Users to understand, even before accessing various sections of the Site and providing their Personal Data, how Cultilite processes the Personal Data of Users; Users must review this policy before providing their Personal Data by completing the appropriate forms in the various sections of the Site.

Purpose of the processing

According to the needs expressed by the User when accessing the various sections of the Site, the purposes of processing the Personal Data provided directly by Users may include the following:

– with the User’s consent and until such consent is revoked, carrying out marketing activities (such as, but not limited to, sending promotional and advertising materials, communications about marketing campaigns or promotions via email, phone calls, or regular mail; the User may opt out of receiving such communications at any time;
– with the User’s consent and until such consent is revoked, sending newsletters to provide updates on all Site news and other news about Cultilite;
– providing assistance and responding to User requests concerning Cultilite products or the Site (Contact section of the Site);
– Social Network: offering advertisements and engaging with Users on Cultilite’s Social Networks (e.g., Facebook, Twitter, Instagram, Pinterest, etc.) by using Personal Data derived from User interactions with third-party Social Network features (e.g., the “Like” feature).
– By consulting the privacy policies of the relevant third-party Social Networks, Users can learn more about how these features work, the Personal Data Cultilite obtains from profiles, and how to opt out.

Processing methods

Personal Data will be processed through operations such as collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion, and destruction of Personal Data.
The Personal Data will be processed mainly in an automated form, but also on paper, following logical procedures closely related to the aforementioned purposes.

Nature of providing Personal Data by Users
Providing Personal Data is optional, but it is partly necessary for Cultilite to fulfill the User’s requests concerning the services offered by the Site and the purposes indicated above.
Failure, partial, or incorrect provision of optional Personal Data does not result in any consequences.

Categories of Personal Data subject to processing

Please refer to the cookie policy to find out how to manage cookie settings and obtain detailed information about the cookies used and why they are used.
Categories of subjects who may become aware of the User’s Personal Data

Cultilite does not share, sell, transfer, or otherwise disclose the User’s Personal Data to third parties.

Data Controller and Data Processors

The Data Controller is Cultilite®

User rights recognized under Article 7 of the Code and Article 15 of the GDPR
The data subject has the right to obtain confirmation of the existence or otherwise of Personal Data concerning them, even if not yet registered, the communication of such data in an intelligible form, and access to its content.

The data subject has the right to obtain the following:
the source of the Personal Data;
the purposes and methods of processing;
the logic applied in the case of processing carried out using electronic means;
the identifying details of the Data Controller, the Data Processors, and the representative designated within the Italian State, where applicable;
the subjects or categories of subjects to whom the Personal Data may be disclosed or who may become aware of it as a designated representative within the Italian State, Data Processors, or persons in charge.

The data subject has the right to obtain the following:
the updating, rectification, or, where of interest, integration of Personal Data;
the deletion, transformation into anonymous form, or blocking of Personal Data processed unlawfully, including data that does not need to be retained for the purposes for which the Personal Data was collected or subsequently processed;
certification that the operations referred to in the previous points have been brought to the attention of those to whom the Personal Data was communicated or disclosed, except in cases where this proves impossible or involves a disproportionate use of means relative to the right being protected.

The data subject has the right to object in whole or in part:
for legitimate reasons, to the processing of Personal Data concerning them, even if relevant to the purpose of collection;
to the processing of Personal Data concerning them for the purpose of sending advertising materials, direct sales, or for conducting market research or commercial communication.

Where applicable, the data subject also has the rights provided for under Articles 16-21 of the GDPR (Right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the Supervisory Authority.

How to exercise your rights and learn the list of Data Processors

The User may, at any time, exercise their rights and obtain the complete list of Data Processors by sending an email to the Data Controller or by sending a letter via regular mail or registered mail, or a certified email.

The User may also, if they initially consented, later object to the processing for the purposes set out in points 2 and 3 of the Purposes of Processing section by clicking on a specific “link” present in each email or by contacting the Data Controller through the methods indicated in the previous paragraph.