Data Controller

Types of data collected

Among the personal data collected by Capri My Day, either directly or through third-party services, are: name, surname, email address, phone number, and other data voluntarily entered in contact forms, quote requests, or newsletter sign-ups. Additional data may be collected automatically while browsing (usage data, such as IP address, browser type, and pages visited).

Failure to provide certain data may prevent us from delivering the requested services.

Purposes and legal basis of processing

Data is processed for the following purposes:

• responding to information or contact requests submitted through the site's forms;
• managing newsletter subscriptions, where requested by the user;
• fulfilling contractual, accounting, and tax obligations;
• with specific consent, sending commercial and promotional communications, and carrying out statistical analysis or profiling activities.

Depending on the case, the legal basis for processing is: performance of a contract or pre-contractual measures requested by the user, compliance with a legal obligation, or the user's explicit consent, which can be withdrawn at any time.

How and where data is processed

Processing is carried out using IT and/or paper-based tools, following logic strictly related to the purposes indicated, with security measures suitable to prevent unauthorized access, disclosure, alteration, or destruction of data. Data is processed at the Data Controller's operating premises and at any third-party service providers (e.g. hosting, email delivery, analytics tools), appointed as data processors where necessary.

Retention period

Data is retained for as long as necessary to provide the requested service and to comply with applicable legal obligations (e.g. tax and accounting), or until the user withdraws consent for consent-based processing. At the end of the retention period, data is deleted or anonymized.

Categories of recipients

For the purposes indicated above, data may be shared with authorized internal staff, consultants and freelance professionals, and technical service providers (e.g. hosting, email management), always to the extent strictly necessary to carry out their respective tasks.

Transfers outside the EU

Some third-party service providers listed in our Cookie Policy may be based outside the European Economic Area. In such cases, data transfers are carried out on the basis of adequate safeguards provided by applicable law (e.g. European Commission adequacy decisions or standard contractual clauses).

Cookies

For information about cookies and other tracking tools used by this site, please see our Cookie Policy.

Automated decision-making

We do not use processes based solely on automated decision-making, including profiling, that produce legal effects concerning you or similarly significantly affect you.

CCPA/CPRA (California)

If you are a California resident, you also have specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to request its deletion, and the right to opt out of the sale or sharing of your personal information. We automatically honor your browser's Global Privacy Control (GPC) signal, if enabled.

Non vendere o condividere le mie informazioni personali

Data subject rights

Within the limits set by applicable law, you have the right at any time to: obtain confirmation of whether your personal data exists and learn about its content and origin; verify its accuracy or request its completion, update, or correction; request its deletion, restriction of processing, or anonymization of data processed in violation of the law; object, on grounds relating to your particular situation, to processing based on legitimate interest; object at any time, without any condition, to the processing of your data for direct marketing purposes; withdraw consent at any time, without affecting the lawfulness of processing based on consent given before its withdrawal; receive the data you provided to us in a structured, commonly used, and machine-readable format (right to data portability); lodge a complaint with the competent data protection authority (in Italy, the Garante per la protezione dei dati personali — garanteprivacy.it).

To exercise these rights, you can contact the Data Controller using the contact details shown above.

Changes to this Privacy Policy

The Data Controller reserves the right to make changes to this notice at any time, notifying users on this page. We recommend checking this page periodically for any updates.