Privacy notice
How we process the personal data of website visitors and of people who contact us, under Article 13 of Regulation (EU) 2016/679 (GDPR).
1. Data controller
- Controller
- Casaitalia Distribuzione Società Consortile a r.l.
- Address
- Strada Settimo 366, 10156 Turin (TO), Italy
- info@casaitaliadistribuzione.it
- Phone
- +39 011 2239510
- Certified email (PEC)
- casait@legalmail.it
No data protection officer (DPO) has been appointed, as one is not required for the processing carried out.
2. Data we process
Browsing data
The servers hosting the website automatically record some technical data (IP address, date and time, page requested, browser type). This data is used only to keep the website running and secure and is not used to identify users. The website does not use cookies, does not store data in your browser and does not use any analytics tools (details in the cookie policy).
Data you give us
If you write to us by email or certified email (PEC) or call us, we process the data you provide: name, contact details, the content of your request and, for product requests, the product and purchase details. If a report concerns harm to a person, please include only the information that is strictly necessary: we will use it solely to handle the report and to meet our product safety obligations.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Answering sales and supply enquiries | Pre-contractual measures (Art. 6(1)(b) GDPR) |
| Answering support and information requests | Legitimate interest (Art. 6(1)(f) GDPR) |
| Handling complaints and safety reports on own-brand products | Legal obligation, Regulation (EU) 2023/988 Arts. 9 and 20 (Art. 6(1)(c) GDPR) |
| Website security | Legitimate interest (Art. 6(1)(f) GDPR) |
| Establishing, exercising or defending legal claims | Legitimate interest (Art. 6(1)(f) GDPR) |
Your data is not used for marketing communications. Without the necessary data we cannot follow up on your request.
4. Recipients
- authorised staff of the consortium;
- providers of hosting (Infomaniak Network SA, Geneva, Switzerland) and email services, appointed as data processors (Art. 28 GDPR);
- the member responsible for your area (Chieppa S.p.A., Frescura S.p.A. or Viscio Trading S.r.l.), as an independent controller, if your sales enquiry concerns supplies it handles directly;
- the product supplier and the competent authorities, to the extent necessary to handle a safety report.
Your data is not disclosed to the public or sold. It is processed in the European Union and in Switzerland, where the website's servers are located: the European Commission recognises Switzerland as providing an adequate level of protection (Art. 45 GDPR), so no further safeguards are required.
5. Retention
- requests and correspondence: up to 24 months after the request is closed, unless a business relationship begins;
- complaints and safety reports: 10 years, for traceability and legal protection;
- server logs: up to 6 months, unless needed to investigate security incidents.
6. Your rights
You can ask for access to your data, rectification, erasure, restriction of processing and portability, and object to processing based on legitimate interest (Arts. 15–22 GDPR), by writing to info@casaitaliadistribuzione.it or casait@legalmail.it. We reply within one month. You can lodge a complaint with the Italian Data Protection Authority, Garante per la protezione dei dati personali, or with the supervisory authority of the country where you live or work. We do not carry out automated decision-making or profiling.
7. Changes
This notice may be updated, for example when the website is expanded. The date of the latest update is shown alongside.
This is a translation of the informativa privacy; if the two versions differ, the Italian version prevails.