INFORMATION pursuant to art. 13 of Legislative Decree 30.6.2003 n. 196, and subsequent amendments, as well as in accordance with the provisions of EU Regulation 2016/679 ("GDPR") which will come into force on 25 May 2018, naturally made without prejudice to any additions and modifications that may be necessary as a result of national legislative measures and and the issuing of measures and guidelines by the
Guarantor for the Protection of Personal Data and other national and European privacy authorities.

Who is the Data Controller and Data Protection Officer (DPO)

The Data Controller is the company Capestore S.r.l. Via Pietro Alfani 21 00052 Cerveteri, RM. The Data Controller has not identified the person in charge of data protection (RPD or DPO), as it is not subject to the obligation of designation provided for by art. 37 of the Rules. The data processing carried out by Capestore s.r.l./www.capestoreonline.com will be based on principles of correctness, lawfulness, transparency, accuracy, integrity, confidentiality, purpose limitation and data retention and minimization.

The Holder, also through the designated facilities, will take care of his request for cancellation / removal of his data and provide, without undue delay and in any case, no later than one month after receipt of the same, the information relating to action taken on your request.
We inform you that if the Owner has doubts about the identity of the individual submitting the request, he / she may request further information necessary to confirm the identity of the person in question at the following address info@capestoreonline.com

WHAT PERSONAL DATA WE TREAT, WITH WHAT PURPOSE

1) Capestore s.r.l. / www.capestoreonline.com will collect the following data relating to customers / users: Name - Surname - Company name (in case of a person other than private) - Tax code - VAT number (in case of a person other than private) - Address - City - Cap - Province - Telephone Numbers - Email Addresses. These data will be kept for the purposes of providing the services, as well as for promotional activities.

One of the principles applicable to the processing of your Personal Data concerns the limitation of the retention period, governed by Article 5, paragraph 1, point e) of the Regulation that states "Personal Data are stored in a form that allows the identification of data subjects for a period of time not exceeding the achievement of the purposes for which they are processed; Personal Data may be stored for longer periods provided they are processed exclusively for archival purposes in the public interest, for scientific or historical research or for statistical purposes, in accordance with Article 89, paragraph 1, without prejudice to the implementation of technical measures and appropriate organizational requirements required by this regulation to protect the rights and freedoms of the interested party "

Personal data are required for the following purposes:

- In order to carry out sales activities chosen on this site and in particular: Capestore s.r.l. / www.capestoreonline.com will be able to send you via email, phone and social network of other parties, marketing communications relating to its services, products, promotions or events only if you have consented to receive such information. What time do you want to revoke your consent? you can do it at any time by clicking on the link in each promotion or by writing to info@capestoreonline.com
- Obligations required by law such as invoicing, mandatory accounting records and entries and tax returns.
- Possible contractual obligations, such as supply, sale, or related changes or additions.
- Other purposes such as internal reporting, management control, surveys and market research.

2) The provision of data, with reference to the purposes referred to in paragraph 1), is mandatory and a possible refusal to answer implies the impossibility for Capestore s.r.l. to provide the related service.
The same transfer of personal data (and so by way of example of your identification data, of the Tax Code and of the VAT Number) is mandatory according to current regulations on tax matters, therefore the request for supply involves the demonstration of consent to the processing of above data.

3) For the purposes referred to in paragraph 2) the data, strictly necessary for each type of treatment, will be communicated by Capestore S.r.l. at its registered and administrative office.

4) The data, strictly necessary for processing, may be disclosed:
- to our tax advisors
- to the subjects that can access your data in accordance with the law
- to banks and credit institutions responsible for following or receiving payments connected to commercial relationships

4) The data, strictly necessary for processing, may be disclosed:
- to our tax advisors
- to the subjects that can access your data in accordance with the law
- to banks and credit institutions responsible for following or receiving payments connected to commercial or contractual relationships

5) Data processing is carried out using manual, paper, IT and telematic tools, by all Capestore S.r.l.
In any case, the processing is done with logic strictly related to the purposes indicated above and, however, in order to ensure the security and confidentiality of the data, which will also be managed and protected in environments whose access is under constant control.

WHICH RIGHTS CAN EXERCISE

As an interested party you can exercise the rights referred to in Articles from 16 to 22 of EU Regulation 679/16:

Art. 16 - Right of rectification
You have the right to obtain from the data controller the correction of inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to obtain the integration of incomplete personal data, also by providing an additional declaration.

Art. 17 - Right to cancellation
You have the right to obtain from the data controller the deletion of your personal data without undue delay and the data controller is obliged to cancel your personal data without undue delay if one of the following reasons exists:

personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed; 4.5.2016 EN Official Journal of the European Union L 119/43

withdraw the consent on which the processing is based in accordance with Article 6 (1) (a) or Article 9 (2) (a) and whether there is no other legal basis for the processing;

opposes the processing pursuant to Article 21 (1), and there is no legitimate overriding reason to proceed with the processing, or opposes you to the processing pursuant to Article 21 (2);

personal data have been processed unlawfully;

personal data must be deleted to fulfill a legal obligation under Union or Member State law to which the controller is subject;

the personal data have been collected in relation to the information society service offer referred to in Article 8 (1).

The data controller, if he has made public personal data and is obliged, pursuant to paragraph 1, to delete them, taking into account the available technology and implementation costs, takes reasonable steps, including technical ones, to inform the data controllers that are processing the personal data of your request to delete any link, copy or reproduction of your personal data.
Paragraphs 1 and 2 shall not apply to the extent that treatment is necessary:

for the exercise of the right to freedom of expression and information;

for the assessment, exercise or defense of a right in court.

Art. 18 - Right to limit the processing
You have the right to obtain from the data controller the limitation of processing when one of the following hypotheses occurs:

contexts the accuracy of personal data, for the period necessary for the data controller to verify the accuracy of such personal data;

the processing is illegal and you oppose the cancellation of personal data asking instead that its use is limited;

although the data controller no longer needs it for processing purposes, your personal data are necessary for the assessment, exercise or defense of a right in court;

you are opposed to the processing pursuant to Article 21 (1), pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the data subject.

If the processing is limited in accordance with paragraph 1, such personal data shall be processed, except for storage, only with your consent or for the assessment, exercise or defense of a right in court or to protect rights of another natural or legal person or for reasons of a significant public interest of the Union or of a Member State. L 119/44 EN Official Journal of the European Union 4.5.2016 3.
If you have obtained the treatment limitation pursuant to paragraph 1, you are informed by the controller before the limitation is revoked.

Art. 19 - Right to obtain notification from the data controller in cases of rectification or cancellation of personal data or cancellation of the same
The controller shall inform each of the recipients to whom the personal data have been transmitted of any correction or cancellation or limitation of the processing carried out in accordance with Article 16, Article 17 (1) and Article 18, unless proves impossible or involves a disproportionate effort. The data controller will inform you of these recipients if you request it.

Art. 20 - Right to portability
You have the right to receive, in a structured format, commonly used and readable by automatic device, the personal data concerning you provided to a data controller and you have the right to transmit this data to another data controller without impediments by the data controller to whom you have provided them if:

processing is based on consent pursuant to Article 6 (1) (a) or Article 9 (2) (a) or on a contract within the meaning of Article 6 (1) (b) ;

the treatment is carried out by automated means.

In exercising your rights to data portability pursuant to paragraph 1, you have the right to obtain direct transmission of personal data from one controller to another, if technically feasible.
The exercise of the right referred to in paragraph 1 of this Article is without prejudice to Article 17.
The right referred to in paragraph 1 must not affect the rights and freedoms of others.

Art. 21 - Opposition right
You have the right to object at any time, for reasons connected to your particular situation, to the processing of personal data concerning you pursuant to Article 6, paragraph 1, letters e) or f), including profiling on the basis of these provisions. The data controller refrains from further processing personal data unless he demonstrates the existence of binding legitimate reasons to proceed with the processing that prevail over your interests, rights and freedoms or for the assessment, exercise or defense of a right in court. If personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such purposes, including profiling in so far as it is connected to such direct marketing. If you oppose the processing for direct marketing purposes, personal data will no longer be processed for these purposes. 4.5.2016 EN Official Journal of the European Union L 119/45 4. The right referred to in paragraphs 1 and 2 shall be explicitly brought to your attention and shall be presented clearly and separately from any other information at the latest at the time of the first communication with you. In the context of using information society services and without prejudice to Directive 2002/58 / EC, you can exercise your right to object by using automated means that use technical specifications. Where personal data is processed for scientific or historical research purposes or for statistical purposes pursuant to Article 89 (1), you, for reasons connected with your particular situation, have the right to object to the processing of personal data concerning you, unless the processing is necessary for carrying out a task of public interest.

Art. 22 - Right to refuse the automated process
You have the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects that affect you or which significantly affects your person. Paragraph 1 shall not apply if the decision:

is necessary for the conclusion or execution of a contract between you and a data controller;

is authorized by the law of the Union or of the Member State to which the controller is subject, which also specifies appropriate measures to protect your rights, your freedoms and your legitimate interests;

is based on your explicit consent.

In the cases referred to in paragraph 2 (a) and (c), the controller shall implement appropriate measures to protect your rights, your freedoms and your legitimate interests, at least the right to obtain human intervention from the controller , to express their opinion and to challenge the decision.
The decisions referred to in paragraph 2 shall not be based on the particular categories of personal data referred to in Article 9 (1), unless Article 9 (2) (a) and (g) applies and not appropriate measures are in place to protect your rights, your freedoms and your legitimate interests.

In this sense, you will be able to access your data for:

- Verify its veracity
- Change them if they become inaccurate
- Integrate them also with a supplementary declaration
- Request cancellation
- Limit the treatment
- Opposition to treatment

The data controller is obliged to respond without undue reason.

CANCELLATION OF DATA

The Capestore company s.r.l. in compliance with the corresponding right of access of the interested party, has set up procedures for which you can request the cancellation without unjustified delay of your personal data or the limitation of the processing of personal data concerning you for the following reasons:

- Because the data are no longer necessary for the purposes for which they were collected
- Because you have revoked your consent
- Because you oppose the treatment
- Because the data are treated illegally.

You can exercise the aforementioned rights by writing to us at info@capestoreonline.com

Cookie Policy

Cookies consist of portions of code installed in the browser that assist the Owner in providing the Service according to the purposes described. Some of the purposes of installation of cookies may also require the consent of the User.

When the installation of Cookies is based on consent, this consent can be freely revoked at any time by following the instructions contained in this document.

Definitions and legal references
Personal Data (or Data)
It constitutes personal data any information that, directly or indirectly, also in connection with any other information, including a personal identification number, makes a physical person identified or identifiable.

Usage Data
This information is collected automatically through this Website (also from third party applications integrated into this Website), including: IP addresses or domain names of the computers used by the User that connects to this Website, the addresses in URI (Uniform Resource Identifier) notation, the time of the request, the method used in forwarding the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (good order, error, etc. .) the country of origin, the characteristics of the browser and the operating system used by the visitor, the various temporal connotations of the visit (for example the time spent on each page) and the details relating to the itinerary followed within the Application, with particular reference to the sequence of the pages consulted, to the parameters relating to the operating system and the IT environment of the User.

User
The individual who uses this Website that, unless otherwise specified, coincides with the interested party.

Interested
The natural person to whom the Personal Data refers.

Data Processor (or Manager)
The natural person, legal person, public administration and any other entity that processes personal data on behalf of the Owner, as set out in the privacy policy.

Data Controller (or Holder)
The natural or legal person, public authority, service or other body which, individually or together with others, determines the purposes and means of the processing of personal data and the tools adopted, including the security measures related to the operation and use of this Website. The Data Controller, unless otherwise specified, is the owner of this Website.

This Website (or this Application)
The hardware or software tool through which the Personal Data of Users are collected and processed.

Service
The Service provided by this Website as defined in the relevant terms (if any) on this website / application.

European Union (or EU)
Unless otherwise specified, any reference to the European Union contained in this document shall be extended to all current member states of the European Union and the European Economic Area.

Cookie
Small portion of data stored in the User's device.

Legal references
The privacy policy is drawn up on the basis of multiple legislative systems, including articles 13 and 14 of Regulation (EU) 2016/679.

Unless otherwise specified, this privacy statement applies exclusively to this Website.

Technical and statistical cookies aggregated
Activities strictly necessary for operation
This Website uses cookies to save the User's session and to perform other activities strictly necessary for the functioning of this Website, for example in relation to the distribution of traffic.

Activities for saving preferences, optimization and statistics
This Website uses cookies to save browsing preferences and optimize the User's browsing experience. These cookies include, for example, those for setting the language and currency or for the management of statistics by the owner of the site.

Other types of cookies or third-party tools that may install
Some of the services listed below collect statistics in aggregate and anonymous form and may not require the consent of the User or could be managed directly by the Data Controller - depending on the description - without the help of third parties.

If among the tools indicated below there were services managed by third parties, these could - in addition to what is specified and also without the knowledge of the owner - perform tracking activities of the User. For detailed information, it is advisable to consult the privacy policy of the services listed.

Interaction with live chat platforms
This type of service allows you to interact with live chat platforms, managed by third parties, directly from the pages of this Website. This allows the User to contact the support service of this Website or this Website to contact the User while he is browsing his pages.
If an interaction service is installed with live chat platforms, it is possible that, even if users do not use the service, the same collect usage data related to the pages in which it is installed. In addition, live chat conversations may be recorded.

Interaction with social networks and external platforms
This type of services allows interaction with social networks, or with other external platforms, directly from the pages of this Website.
The interactions and information acquired from this Website are in any case subject to the User's privacy settings relating to any social network.
If an interaction service with social networks is installed, it is possible that, even if the Users do not use the service, the same collect traffic data relating to the pages in which it is installed.

Like button and Facebook social widgets (Facebook, Inc.)
The "Like" button and Facebook social widgets are services of interaction with the social network Facebook, provided by Facebook, Inc.