Information document pursuant to and for the purposes of Article 13, Legislative Decree no. 196 of 30th June 2003.
This privacy statement should not be considered applicable to other websites which shall eventually become accessible through links on websites under the Controller’s domain, who is not to be considered in any way responsible for third party websites. This is a privacy statement conveyed in accordance with Article 13 of Legislative Decree no. 196/2003 - Personal Data Protection Code. The privacy statement is also based on Recommendation no. 2/2001, adopted by the European authorities for the protection of personal data forming part of the Working Party set up under Article 29 of Directive 95/46/EC, on 17th May 2001, to identify certain minimal requirements for the collection of personal data online, and, in particular, the methods, timing and nature of the information which the processing controllers should supply to users when they connect to the web pages, independently of the purposes for such connection. Finally, this information is supplied in accordance with Directive 2002/58/EC, as further amended by Directive 2009/136/EC about cookies and according to the Simplified Arrangements to Provide Information and Obtain Consent Regarding Cookies - 8 may 2014, issued by the Italian Data Protection Authority (published in no. 123 of the Official Journal “Gazzetta Ufficiale” on June 3, 2014).
1. Data controller
The DATA “CONTROLLER”, pursuant to Article 28 of the Personal Data Protection Code is Candy Hoover Group S.r.l. with sole shareholder, company to management and coordination activity of Candy S.p.A., registered office: Via Comolli, 16 - 20861 Brugherio (MB) - Italy, corporate capital € 30,000,000.00 fully paid up, Italian tax code and registration number with Monza e Brianza Companies Register 04666310158, VAT IT00786860965 -mail: email@example.com. Data processor is inter alia Gias s.r.l. with its registered office in Monza (MB), at Via Cernuschi 6.
Place of Data Processing
Data Controller processes the website data (hosted by third-parties based in EU and Extra-EU countries) at its registered office by employees, designed as persons-in-charge of the processing data or by Data Controller’s outsourcing service providers of website maintenance.
2. Types of data processed
Personal and identification data.
Personal data, including any information related to a natural person, identified or identifiable, even indirectly, with reference to any other information, including a personal identification number; Identification data, the personal data which allows the direct identification of the person concerned (for example name, surname, address, e-mail address, telephone number, etc...)
IT systems and software procedures used for the operation of this website acquire certain personal data in the course of their normal operation, whose transmission is involved in the use of Internet communication protocols. This involves information which is not collected in order to be linked to identified persons concerned, but which by its own nature may allow the identification of users by means of processing and association with data held by third parties. IP addresses or the computer domain names used by the users who access the site fall under this data category, as well as the URI (Uniform Resource Identifier) of the requested resources, the time of the request, the method used to send the request to the server, the size of the file obtained as a reply, the numerical code indicating the status of the reply given by the server (success, error, etc.), and other parameters related to the operating system and to the user’s IT environment. The data may be used to ascertain responsibility in hypothetical cases of computer crimes against the site.
Data provided by the user on a voluntary basis
The elective, explicit an voluntary sending of e-mails to the addresses shown on this site and/or the filling of data collection forms, includes the subsequent acquisition of the sender’s address, which is necessary to reply to any requests, as well as of any other personal data supplied.
Personal data of children
Children may not give their personal data. Data Controller may not be held liable in case of any false statements made by children. Anyway, Data Controller will immediately erase such statements, if proven to be false, and consequently the relevant personal data together with any material acquired in accordance with L. Decree 196/2003, Sections 7, 8, 9 e 10.
Specific information may be presented on the pages of the Website in relation to particular services or processing of the Data supplied by the User or by the Person Concerned.
Please refer to the cookies policy on the following link.
3. Purposes of the data processing for which consent is granted where requested (Article 23 of Legislative Degree 196/03)
The data provided on a voluntary basis while filling data collection forms and/or by sending e-mails, will be subject to processing for the following purposes:
A) browsing activity on this website;
- fill the data collection form in order to contact us, send us a request for technical support, request any information about our products, instruction manuals, catalogues, any warranties;
fill the data collection form in order to participate in contests, competitions, games, prize-giving operations and the relevant administrative and accounting services;
carrying-out administrative and accounting services: your personal data will be processed for those purposes related to the carrying out of organizational, administrative, financial and accounting services regardless of the category to which they belong.
B) processing of data (unless you object to such processing):
subject to prior consent, for direct marketing, newsletters, market surveys and researches in order to receive by Candy Hoover Group S.r.l. a sole shareholder company and/or by subsidiaries appointed data processor- through electronic means, such as e-mail, telefax, sms (Short Message Service) and mms messages (Multimedia Messaging Service), pop-up notification and the like, as well as through manual means such as phone calls with operator and mails – any commercial information, customer satisfaction surveys, advertising materials and/or event and initiatives promotion.
C) processing of data (unless you object to such processing):
- subject to prior consent, for direct marketing, newsletters, market surveys and researches in order to receive by Candy Hoover Group S.r.l.’s business partners in the financial field and/or in the related field of domestic appliances- through electronic means, such as e-mail, telefax, sms (Short Message Service) and mms messages (Multimedia Messaging Service), pop-up notification and the like, as well as through manual means such as phone calls with operator and mails – any commercial information, customer satisfaction surveys, advertising materials and/or event and initiatives promotion.
The full list of the companies belonging to the group shall be provided upon request to firstname.lastname@example.org.
4. Processing methods – Retention
The processing shall be carried out automatically and manually, with means and tools aimed at guaranteeing maximum security and privacy, by persons specifically appointed for this purpose in compliance with Article 31 et. seq. of Legislative Degree 196/03. The data shall be retained for a period not exceeding that of the purposes for which the data has been collected and subsequently processed.
5. Scope of communication and dissemination
Your processed data will be kept confidential and will not be communicated or disclosed to any other person or legal entity except those companies contractually bound to Candy Hoover Group Srl – a sole shareholder company, abroad and within the European Union, pursuant to and within the limits of Article 42 of Legislative Decree no. 196/2003. Personal data may be sent abroad to non-EU countries within the scope and extent provided for in Articles 43 and 44(b) of Legislative Decree no. 196/2003, in order to comply with contractual obligations or for related purposes. Data may be sent to third parties belonging to the following categories:
- entities providing services for managing the IT system used by Candy Hoover Group Srl (with sole shareholder) and for managing the telecommunication networks (including e-mail);
- companies belonging to the Candy Hoover Group Srl – a sole shareholder company - and subsidiaries (i.e. GIAS Srl), appointed as data processor; - subject to prior consent, business partners in the financial field and/or in the related field of domestic appliances. The full list of the companies belonging to the group shall be provided upon request to
- any third-party consultants;
- any competent authorities as prescribed by the applicable law, as recognized/enforced by any decisions or upon request. Such third parties are appointed Data Processor themselves otherwise they may operate as independent Data Controller. Appointed Data Processors are enlisted in a document that is constantly updated and available upon request at Candy Hoover Group Srl‘s registered office at via Privata Eden Fumagalli 20047 Brugherio (MB) or by sending an email to email@example.com.
6. The nature of data provision and refusal
Except as specified in relation to the browsing data, the user is free to provide personal data. The provision of data for the purposes mentioned in point A) is optional but necessary. Any refusal to provide the necessary data with regards to point A) entails the impossibility of carrying out activities that are strictly connected and required, for example to obtain what has been requested or to make use of the Data Controller's services and participate in the prize-giving activity. The provision of data and the consent for its processing for the purposes mentioned in points B) and C) is optional. Any refusal of consent for the purposes indicated in points B) and C) above does not entail any negative consequences with regards to the purposes mentioned in point A).
7. Rights of the persons concerned
You may assert your rights as specified by Articles 7, 8, 9 and 10 of Legislative Decree no. 196 of 30th June 2003, by contacting the Controller, Candy Hoover Group Srl by e-mail on firstname.lastname@example.org. You have the right to obtain confirmation of the existence or not of the data at any moment, and to know the content and origin, to verify its accuracy or ask for its integration or updating, or correction of the same (Article 7 of the Personal Data Protection Code).
Pursuant to the same article, you have the right to request cancellation, transformation into anonymous form or the blockage of data processed in breach of law, as well as to oppose its treatment in any case for legitimate reasons.
When you contact the Controller, you should provide your e-mail address, the name, address and/or telephone numbers, in order to allow the correct handling of your request.
So as not to receive any more direct marketing communications (e-mail, SMS, MMS, fax), it shall suffice to send an e-mail to email@example.com at any time, with the subject line “cancellation of automated communication” or to use our automatic cancellation systems provided only for e-mails, and you shall no longer be bothered.
So as not to receive any more traditional direct marketing communications (operator calls, paper-based mail), it shall suffice to send an e-mail to firstname.lastname@example.org at any time, with the subject line “cancellation of traditional communication”, and you shall no longer be bothered.
So as not to receive any more direct marketing communications of any kind, it shall suffice to send an e-mail to email@example.com at any time, with the subject line “cancellation of marketing”, and you shall no longer be bothered.
8. Amendments to the privacy statement
The Controller reserves the right to amend, update, supplement or delete parts of this privacy statement at his own discretion and at any time. The person concerned is required to verify any amendments from time to time. In order to facilitate such verification, the privacy statement shall indicate the date of its update.
Date of update: 21.09.2016