Privacy Policy

Disclaimer and Consent Request for Personal Data Processing

Khater S.r.l. is a company specializing in the trade of Italian and foreign stone materials, as well as the production and supply of semi-finished and finished products for architecture and interior design.

The purpose of this disclaimer (“Disclaimer” or “Privacy Policy”) is to inform each user of the website www.khaterstone.com (“Website”) about the manner and rationale behind the processing of their personal data.

Khater S.r.l., in line with the Legislative Decree 196/2003 and as amended by the Legislative Decree 101/2018 (“Privacy Code”) and the Regulation (EU) 2016/679 (“GDPR”), intends to ensure the privacy and security of thepersonal dataof each user of the Website, in conformity to what is described in this Disclaimer.

The Disclaimer is provided to all users who by connecting and interacting with the Website address www.khaterstone.com,use its web services and share their personal data.

This Disclaimer is limited to the Website only and does not extend to other Websites that may be accessed by the user through appropriate links or hyperlinks.

Users of the Website are required to read this Privacy Policy carefully before submitting any type of personal information and/or filling out any electronic form on the Website.

Data Controller and Data Processor

The Data Controller is the company Khater S.r.l., based in Marina di Carrara, Via Argine Destro Carrione, 29, VAT Number 00672400454, Tel. +39 0585 783034, e-mail info@khater.it, which guarantees compliance with the legislation on the protection of personal data (Legislative Decree 196/2003).

The Data Processor is Mr. Toni Khater.

Updated information on the name of the Data Processor may be requested by sending an e-mail to the following address: info@khater.it.

Types of Processed Data

The Website offers informative as well as interactive content. While browsing the website, Khater S.r.l. may, therefore, acquire information about the visitor and precisely:

1. Navigation Data

The computer systems and software procedures used to operate this Website acquire, during their standard operation, various personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes: IP addresses, the type of browser used, the operating system, the domain name and addresses of websites from which access was made, information on the pages visited by users within the Website, access time, the length of time spent on an individual page, internal path analysis and other parameters related to the user’s operating system and computer environment;

Navigation data are not collected to be associated with identified data subjects, but, by their very nature, could, through processing and association with data held by third parties, allow users to be identified.

Navigation data are used for the sole purpose of obtaining anonymous statistical information on the use of the Website and to check its correct functioning, and are deleted immediately after processing. Data could be used to establish responsibility in case of hypothetical cybercrimes against the Website: except for this eventuality, data regarding contacts collected from the Websiteare not retained for more than seven days.

1. Additional Data Categories

Additional data categories include personal data provided by the visitor through the Website, for example, by registering and/or accessing a reserved area and/or a service and/or subscribing to the newsletter by filling in the appropriate form and/or participating in one of the initiatives launched by Khater S.r.l. and/or writing to a Khater S.r.l. e-mail address to request information or calling one of its numbers to have direct contact with thecustomer service.

Personal data provided by users related to site registration are not subject to dissemination.

Without prejudice to what is specified in a)Navigation Data, users are free to provide their personal data. Failure to provide them may result solely in the impossibility of obtaining what has been requested.

Purpose of Data Processing

Collected personal data will be handled for the following purposes:

• to provide the good and/or service requested by the user, to manage contracts initiated by the user, to fulfill the related administrative, accounting, tax and legal requirements, as well as to process requests forwarded by the user. The data processingexecuted for the aforementioned purposes are necessary for the fulfillment of contractual obligations and do not require specific consent from the data subject;
• to send commercial communications and newsletters, by means including automated tools, relating to promotions and/or offers for which the user may be entitled to, in the interest of the data controller or other companies related to Khater S.r.l.The data processing for this purpose isexecuted with the specific consent provided by the user, except for commercial communications relating to products and/or services similar to those already purchased and/or subscribed to by the user for which the treatment is based on a legitimate interest of Khater S.r.l. to which the user may, however, always exercise their right of opposition;
• to communicate user data for commercial and/or promotional purposes to third party companies operating in the stone and artistic sector and/or companies with which Khater S.r.l. may enter into partnership agreements. The treatments put in place for these purposes are executed with the specific consent provided by the user.

The Scope of Data Circulation

Within the scope of the above purposes, users’ data may be disclosed to Khater S.r.l. as well as:

– to other companies related to it and whom will be appointed as data processors for this purpose pursuant to Article 28 of the GDPR and/or to other third parties who perform part of the processing activities and/or related instrumental activities on behalf of the Data Controller; these parties will also be appointed as data processors pursuant to Article 28 of the GDPR;

– to individuals, employees and/or contractors of the Data Controller, who have been entrusted with specific and/or multiple personal data processing activities; these individuals will be specifically instructed on security and the proper use of personal data and will be defined as the persons authorized to process personal data under the direct authority of the Data Controller or Data Processor.

Data Processing Mode

The processing of personal data is carried out mainly using electronic procedures and media (such as, DB, CRM platforms, etc.) for the time strictly necessary to achieve the purposes for which the data were collected and, in any case, in accordance with the principles of lawfulness, correctness, non-excessiveness and relevance provided by the current privacy legislation.

Cookies

Cookies are not used to transmit personal identifiable data.

The use of so-called session cookies (which are not stored permanently on the user’s computer and disappear when the browser is closed) is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to enable the safe and efficient navigation of the Website.

The so-called session cookies used on the Website avoid the use of other computer techniques potentially harmful to the privacy of the users’ browsing activities and do not allow the acquisition of personal data that can identify the user.

Data Retention

Navigation log data, if saved, will be retained by the Data Controller for a period of 3 months. Data provided by users will be processed for the duration of the existing contractual relationship and retained only for the period provided for the fulfillment of legal obligations, provided that no further retention is necessary to defend or enforce a right or to fulfill any further legal obligation or order of authority.

Specific security measures are implemented to prevent data loss, illegal or incorrect use, and unauthorized access.

Location of data processing and storage

The processing of data relative to the Website services, takes place at the registered office of Khater S.r.l., located in Marina di Carrara, Via Argine Destro Carrione, 29, VAT 00672400454, Tel. +39 0585 783034, Email info@khater.it.

Data related to the website and the newsletter mailing list are stored on the servers of the Site hosting and/or management companies, SHELLRENT S.R.L.

Transfer of personal data

Khater S.r.l. may transfer users’ personal data to third parties located in countries outside the European Union. In this case, such third parties will be appointed as Data Processors pursuant to and for the purposes of Article 28 of the GDPR, and the transfer of personal data to such parties, limited to the execution of specific processing activities, will be regulated in accordance with the provisions of Chapter V of the GDPR.

Rights of the Concerned Party

At any time, users may exercise, pursuant to Article 7 of Legislative Decree 196/2003 and Articles 15 to 22 of EU Regulation No. 2016/679, the right to:

1. request confirmation of the existence of their personal data;
2. obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be disclosed and, when possible, the period of retention;
3. obtain rectification and/ordeletion of data;
4. obtain processingrestriction;
5. obtain transferability of data, i.e., receive them from the data controller, in a structured, commonly used, machine-readable format, and transmit them to another data controller without hindrance;
6. object to processing at any time and also in the case of processing for direct marketing purposes;
7. object to automated decision-making related to natural persons, including profiling;
8. to request from the Data Controller access to and the rectification or deletion of personal data or restriction of processing concerning them or to object to its processing, as well as the right to data transferability;
9. withdraw consent at any time without affecting the lawfulness of the processing based on the consent given before the withdrawal;
10. to submit a complaint with a supervisory authority.

Each user may exercise his/her rights by written request sent to the mailing address of the registered office or to the email address info@khater.it.

Updates

The Privacy Policy of this Website is subject to updates. Therefore, users are encouraged to check its content periodically.

More detailed information regarding the European Data Protection Regulation can be found at: https://www.garanteprivacy.it.

I, the undersigned, declare that I have read the above information.

I, the undersigned, in light of the information received

◻express consent ◻I do not express consent to the processing of my personal data as indicated in the above disclaimer