On this webpage you will find information regarding the processing of your personal data on the website www.candy-domestic.co.uk (hereinafter the "Website").
We know how important is privacy to our customers, the protection of personal data is one of our company's fundamental values, therefore according to (EU) General Data Protection Regulation no. 2016/679 (hereinafter "GDPR"), we wish to inform you and to provide you with all the information you may require to help you protect your privacy and explain you how your data is used when you visit our Website.
WHO WE ARE
The Website and the services provided through it are offered by Candy Hoover Group S.r.l. that processes your data according to the applicable data protection law. Below you will find our contact details.
Data Controller and Data Protection Officer
The Data Controller of your personal data, meaning the person who determines purposes and means of data processing, is Candy Hoover Group S.r.l., with legal office in Via Comolli 16 – 20861 Brugherio (MB) and office in Via Privata Eden Fumagalli 20861 Brugherio (MB), Italy, tax code no. 04666310158 - Vat number 00786860965 (hereinafter "CHG").
The Data Protection Officer ("DPO") is responsible for overseeing compliance with the GDPR, in relation to the personal data processed by CHG.
You can get in touch with the DPO by writing an e-mail to email@example.com or by post at:
Candy Hoover Group S.r.l.
Via Privata Eden Fumagalli
20861 Brugherio (MB), Italy
to the attention of Data Protection Officer
WHAT PERSONAL DATA WE COLLECT
When you use our Website or our services, ask for assistance and support, CHG processes some of your personal data. Below you can find additional information.
Personal data collected
When you visit, consult or use the services available on the Website, when you fill our form online (e.g. when you ask for support in order to receive assistance), or when you decide to receive marketing communications, we may process the following personal data (meaning information related to an identified or identifiable natural person):
a) data provided by you when filling our forms available online, for example to request assistance, including name and surname, contact details (e-mail address, landline number and mobile), residency, information on the products purchased (date of purchase, code and product line, price, etc.) and the type of assistance you requested (including the information contained in the dedicated field for request details);
b) data that we collect while browsing the Website (so-called browsing data), such as your IP address, Uniform Resource identifier, the time when you submit your request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system. The transmission of such information is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by their very nature could, through associations and processing with data held by third parties, allow users to be identified. These data could also be used to ascertain responsibility in case of hypothetical violation committed when browsing our website or against our website.
WHY WE PROCESS YOUR DATA
We need your data in order to permit you to surf the Website safely, to receive product assistance or product related services and manage other specific requests or to register your appliance and receive operational/services communications.
We care about knowing our customers and how our services are used as best as possible because we would like to offer safer services that match market expectations. To that end, we can analyse aggregated data and, with your consent, we want to use these data to keep in touch with you and suggest you products and services, provided by CHG's group and our business partners that you could be interested in. Below you will find additional information.
Purpose of data processing and legal basis for data processing
We can process your data for the following purposes:
a) allowing you to browse our website safely and improving your browsing experience;
b) respond to your enquiry/request for assistance on the use and maintenance of an appliance, supplying you with the assistance required and answering your questions about our products and services. If we ask to fill a form with your data in order to send your request, please note that data contained in fields marked with an asterisk are mandatory and in its absence it will not be possible to proceed to your requests. We can process these data without your consent because we need this information to perform your request;
c) allowing the registration of your appliance, even for enjoying further product warranties and receiving updates about your appliance and service/operational communications, permit you to access your personal information and information related to your product, ask for assistance. If we ask you to provide your data to fill a form, please note that data contained in fields marked with an asterisk are mandatory and in its absence it will not be possible to proceed to your requests. We can process these data without obtaining your consent because we need this information to perform your request;
d) receiving our newsletter if you registered for the service. In this case we process you data to offer the service you subscribed;
e) receiving commercial and promotional communications, through automated means such as e-mail, SMS, as well as non-automated calls for CHG's and possibly for CHG Group's products and / or services, also based on your preferences and products purchased by you, participating in market research and surveys in order to point out the degree of customer satisfaction in relation to the products and assistance received, inviting you to CHG's initiatives and events. Your consent is required for these purposes and represents the legal basis for the processing of your data. Except for the case of objecting the processing of your data, we want to be sure to send you only communications that could be of your interest; for this reason we will contact you only with offers and updates that are in line with your profile, the appliances you registered and the use of our products and services. Please remember that if you deny your consent or reject to provide data that are useful for these purposes, you can always use our services without any prejudice for the quality and functioning of our products and services; in this case we don't send marketing communications related to our products and offers;
g) receiving commercial and promotional communications from our business partners operating in financial services (e.g. extended warranty payable in installments, insurance policies) for their marketing activities also based on your preferences and the products you have purchased. For these purposes we can ask for your consent that represents the legal basis for processing your data. Please note that if you deny your consent or you do not provide us with data that are useful for these purposes, you can always use our services.
HOW WE PROCESS YOUR DATA
We mainly process your data through our registration, analysis and storage systems that are protected by technical and organizational security measures that are in line with security industry standard . We process and store your data for the period required for the purposes indicated above, by using technical and organizational means that delete data after this period. Below you will find additional information.
Method of processing
Your data may be mainly processed by automated means and analysis tools by authorized personnel that has been informed and instructed by CHG. We implement security measures according to the principles of fairness, loyalty and transparency provided by current data protection legislation (including the GDPR) and protecting your privacy through technical and organizational security measures to prevent loss, illicit and incorrect use as well as unauthorized access to your data. We can also use other digital communication means (e.g. e-mail, instant messaging services, etc.) as well as telephone (non- automated calls, SMS) and postal.
We retain your data for the period strictly necessary to fulfill the purpose for which data were collected and, for statutory purposes, no longer than 10 years. When you ask for our newsletter services or you want to receive our commercial communications, you can ask to be unsubscribed from them by writing CHG, at any time, using the contact details provided below. In this case we will delete your data except for the case in which we have other relationship with you (for example for the product registration, for warranty, demand for assistance). If you do not want to receive our commercial communication you can object at any time to the profiling activities and to receiving this customised information as described below.
SHARING OF YOUR DATA
In order to guarantee the functionalities of the Website and provide you with CHG services we need to disclose your data with third parties service providers that perform services requested by CHG. When providing services to CHG, these third parties can access your data under the conditions and instructions included in our data protection agreements, which limit the processing only to those activities strictly necessary to the functioning of the Website and the services provided and according to our instructions. Such third parties services providers act in the role of data processors (hereinafter "Data Processors"), and are liable for any breach of the instructions that has been provided by CHG.
CHG mainly store the data in Italy or European Union, but some data can be processed and managed by third party services providers that are located in countries outside of the EEA. In such cases CHG has executed specific data processing agreement binding for the third parties services providers not only for the warranties indicated above but also to implement other mechanism provided by the GDPR (for example the implementation of the contractual clauses approved by the European Commission according to the GDPR).
Below you will find additional information.
Sharing and disclosing your data
Except for our legal obligations to communicate your data to third parties, your data may be communicated to CHG's authorized personnel, that has been informed and instructed, or to third parties who work on behalf of and according to the instructions provided by CHG in the role of Data Processors including companies that help us with pre/after-sales service related to your appliance. In particular, in case of a request for assistance and support, your data may be accessed, as Data Processors, by the companies of Candy Group or other companies that in your country provide such support, maintenance and assistance on our behalf, which can access data related to appliance malfunctioning and defects.
In addition, with reference to the location of the CHG (or its suppliers) server, we can disclose personal data to our suppliers (such as companies that help us with customer contact centres or hosting services), as Data Processors, located in non-European Countries. In these cases CHG undertakes to implement adequate level of protection and safeguard for data subjects' rights, including the implementation of the standard contractual clauses. For data retained in our CRM, please note that our supplier has joint the Privacy Shield.
In carrying out our ordinary business activities, your data may be communicated to freelancers, consultancies or other subjects that act as independent Data Controllers.
Furthermore, with your consent, your data may be disclosed to other parties as independent Data Controllers, including CHG partners who operate in the financial services sector (e.g. extended warranty payable in installments, insurance policies) for their marketing purposes or service provision.
In case of consent to the processing of data for marketing purposes, your data may also be processed by marketing agencies, or other companies, as Data Processors, for purposes related to the management and sending of newsletters and business information via email, direct sales, market research or other promotional activities.
In the event that CHG is involved in extraordinary corporate transactions, if necessary for the purposes of the related evaluations, data may be disclosed to the parties involved in such transactions (for example, our counterparties) and to the professionals that support CHG or the our counterparts in conducting the aforementioned transactions.
For more information on the Data Processors who process your data on behalf of CHG, you can write to the CHG office (to the attention of the DPO) or using the following e-mail firstname.lastname@example.org.
WHAT ARE YOUR RIGHTS AND HOW TO EXERCISE THEM
According to data protection law, you can control how your data is processed; you can limit its use, if any. You can exercise these rights at any time and free by writing us as indicated above. CHG will do everything necessary to facilitate the exercise of your rights.
Below you will find additional information.
Data subject's rights
Under articles 15-21 of the GDPR, you have the right to:
- receive confirmation of the existence of your personal data, access your data and obtain a copy (right to access);
- update, modify and / or correct your personal data (right to rectification);
- request the deletion or restriction of the processing of data in the cases provided for by GDPR, including where data has been processed in violation of the law or if storage is not necessary in relation to the purposes for which data was collected or otherwise processed (right to deletion and right to restriction);
- withdraw your consent, where given, at any time and without prejudice to the lawfulness of the processing based on the consent given prior to the withdrawal (right of withdrawal of consent);
- within the limits of the provisions of GDPR, receive a copy of data provided by you in a structured, commonly used and readable by automatic devices and, where possible, ask for the transmission of such data to another data controller (if technically feasible) (right to data portability);
- You also have the right to object the processing of your data in the cases in which it is provided for by GDPR (right to object).
We inform you that requests for deletion of data are subject to current legal requirements to retain documents imposed on us by laws or regulations, if applicable (for example in the case of extended warranty or assistance).
You can exercise rights at any time by sending an email to email@example.com or by post-write to:
Candy Hoover Group S.r.l.
Via Privata Eden Fumagalli
20861 Brugherio (MB), Italy
to the attention of Data Protection Officer (DPO).
When contacting us, please make sure that you include your name, email address, postal address and / or telephone number (s) to make sure we can handle your request correctly.
If you believe that your personal data are not processed in accordance with the law or there are complaints about their use, you can lodge a complaint with the supervisory authority of the member state where you live, work, or where you think the alleged violation has occurred.
You will also find links to third-party websites on our Website; we therefore invite you to read their privacy notice to know methods and purposes of the processing of your data through these websites.
When you access of our Website area dedicated to the product registration and to the purchasing of the warranty extension on your appliance and fill out the form, your data will be processed by Domestic & General Group Limited ("D&G"), who act as data controller. For more information on how D&G process your data, please see its privacy notice.
Last update 11/12/2018