Legal Notice

PRIVACY POLICY FOR CUSTOMERS

CRIBAR SRL
VAT Number: 01436400111
VIA AURELIA 91,
CASTELNUOVO MAGRA, SP, 19033, Italy

Pursuant to EU Regulation 2016/679 (GDPR), CRIBAR SRL provides this information notice to describe how customers' personal data are processed.

1. DATA CONTROLLER

The data controller for personal data is:

2. TYPES OF DATA COLLECTED

CRIBAR SRL collects and processes the following personal data:

  • Identification data: First and last name
  • Contact data: Email address
  • Purchase data: Products purchased through the loyalty program
  • Billing data (for reseller customers): Company name, VAT number, business address, mobile number, shipping and billing information, ADM data

CRIBAR SRL does not collect sensitive data (e.g., health data, biometric data, etc.).

3. PURPOSES AND LEGAL BASIS FOR PROCESSING

Purpose Legal Basis
Management of the loyalty program and customer cards Consent (Art. 6.1.a GDPR)
Sending communications related to purchases and available products Legitimate interest (Art. 6.1.f GDPR)
Billing and management of reseller customers Contractual obligation (Art. 6.1.b GDPR)
Compliance with tax and accounting obligations Legal obligation (Art. 6.1.c GDPR)

4. METHODS OF DATA COLLECTION

Data is collected directly from the customer in the following ways:

  • Through registration to the loyalty program in stores
  • Through registration on the APP
  • Through orders and registrations made online by resellers

5. DATA RETENTION

Personal data will be retained for the time necessary to fulfill the purposes for which it was collected:

Type of Data Retention Period
Loyalty card data 2 years from the last interaction
Billing data 10 years (tax obligations)
Purchase data 5 years for statistical purposes and service improvement

6. DATA RECIPIENTS

Personal data may be disclosed to:

  • Technology service providers (e.g., management of IKYBER APP and databases)
  • Accountants and tax consultants for billing obligations
  • Data management platforms (Utopia for GDPR, FattureInCloud for reseller customer management)
  • Public authorities in case of legal obligations

CRIBAR SRL does not sell or transfer personal data to third parties for commercial purposes.

7. RIGHTS OF THE DATA SUBJECT

Pursuant to articles 15-22 of the GDPR, the customer has the right to:

  • Access their personal data
  • Request correction or deletion
  • Object to processing for marketing purposes
  • Request data portability
  • File a complaint with the Data Protection Authority

To exercise these rights, send a request to:

8. DATA SECURITY

CRIBAR SRL adopts security measures to protect personal data, including:

  • Limited access to data
  • Protection with firewalls and antivirus
  • Regular data backups

Last updated: 01/01/2024

For further information, contact the company at: privacy@44flavour.it