This Website collects certain Personal Data from its Users.
This document contains a section dedicated to Users in the United States and their privacy rights.
This document contains a section dedicated to Users residing in Brazil and their privacy rights.
This document can be printed using the print command available in the settings of any browser.
Cereda Anito srl, VIA STEZZANO 24, 24050, Zanica (BG), Italy. VAT No. 02184030167
Data Controller email address: info@ceredasrl.it
Among the Personal Data collected by this Website, either independently or through third parties, are: Trackers; session statistics; Usage Data; surname; telephone number; email; answers to questions; clicks; keypress events; motion sensor events; mouse movements; scroll position; touch events.
Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or through specific information notices displayed before the Data is collected.
Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when using this Website.
Unless otherwise specified, all Data requested by this Website is mandatory. If the User refuses to provide it, it may be impossible for this Website to provide the Service. In cases where this Website specifically states that some Data is optional, Users are free not to communicate such Data, without any consequence to the availability or operation of the Service.
Users who are uncertain about which Data is mandatory are encouraged to contact the Data Controller.
Any use of Cookies - or other tracking tools - by this Website or by the owners of third-party services used by this Website is intended to provide the Service requested by the User, in addition to the other purposes described in this document and in the Cookie Policy.
The User assumes responsibility for the Personal Data of third parties obtained, published or shared through this Website.
The Data Controller adopts appropriate security measures aimed at preventing unauthorized access, disclosure, modification or destruction of Personal Data.
Processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases, other parties involved in the organization of this Website (administrative, commercial, marketing, legal personnel, system administrators) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the Data, and may also be appointed, where necessary, as Data Processors by the Data Controller. The updated list of Data Processors may always be requested from the Data Controller.
The Data is processed at the Data Controller’s operating offices and in any other location where the parties involved in the processing are located. For further information, please contact the Data Controller.
The User’s Personal Data may be transferred to a country other than the one in which the User is located. To obtain further information about the place of processing, the User may refer to the section containing details on the processing of Personal Data.
Unless otherwise specified in this document, Personal Data is processed and stored for as long as required by the purpose for which it was collected and may be retained for a longer period due to legal obligations or on the basis of the Users’ consent.
User Data is collected to enable the Data Controller to provide the Service, comply with legal obligations, respond to requests or enforcement actions, protect its rights and interests (or those of Users or third parties), identify any malicious or fraudulent activities, as well as for the following purposes: Analytics, Displaying content from external platforms, Tag Management, Contacting the User, Remarketing and behavioral targeting, Spam and bot protection, and Advertising.
To obtain detailed information about the purposes of processing and the Personal Data processed for each purpose, the User may refer to the section “Detailed information on the processing of Personal Data”.
Personal Data is collected for the following purposes and using the following services:
By filling in the contact form with their Data, the User consents to their use for responding to requests for information, quotations, or any other request indicated by the form header.
Personal Data processed: surname; email; telephone number.
Category of Personal Information collected under the CCPA: identifiers.
This type of processing constitutes:
This type of service allows the Data Controller to centrally manage the tags or scripts required on this Website. As a result, User Data may be processed by these services, with the possibility that it may be stored.
Google Tag Manager is a tag management service provided by Google Ireland Limited.
Personal Data processed: Usage Data.
Place of processing: Ireland – Privacy Policy.
Category of Personal Information collected under the CCPA: internet or other electronic network activity information.
This type of service analyzes the traffic of this Website, potentially containing Users’ Personal Data, in order to filter unwanted traffic, messages and content recognized as SPAM or to protect it from malicious bot activity.
Google reCAPTCHA is a SPAM protection service provided by Google Ireland Limited.
Use of the reCAPTCHA system is subject to Google’s privacy policy and terms of service.
To understand how Google uses data, please consult the Google Partner Policies.
Personal Data processed: clicks; Usage Data; keypress events; motion sensor events; touch events; mouse movements; scroll position; answers to questions; Trackers.
Place of processing: Ireland – Privacy Policy.
Category of Personal Information collected under the CCPA: internet or other electronic network activity information; inferences drawn from other personal information.
This type of service allows User Data to be used for commercial communication purposes. These communications are displayed on this Website in the form of banners and other advertising formats, also based on the User’s interests.
This does not mean that all Personal Data is used for this purpose. Data and conditions of use are indicated below.
Some of the services listed below may use Trackers to identify the User, or use behavioral retargeting techniques, i.e. display personalized advertisements based on the User’s interests and behavior, or measure advertising performance.
For more information, we suggest reviewing the privacy policies of the respective services.
Services of this type usually allow Users to opt out of such tracking. Users can learn how to opt out of interest-based advertising by visiting the relevant opt-out section in this document.
Google Ads Conversion Tracking is an analytics service provided by Google Ireland Limited that connects data from the Google Ads advertising network with actions performed within this Website.
Personal Data processed: Usage Data; Trackers.
Place of processing: Ireland – Privacy Policy.
Category of Personal Information collected under the CCPA: internet or other electronic network activity information.
This type of processing constitutes:
Similar Audiences is an advertising and behavioral targeting service provided by Google Ireland Limited that uses Google Ads Remarketing Data to display advertisements to Users with behavior similar to that of other Users who are already on the remarketing list due to their previous use of this Website.
Based on this Data, personalized ads will be shown to Users suggested by Google Ads Similar Audiences.
Users who do not wish to be included in Similar Audiences may opt out and disable the use of advertising Trackers by visiting Google’s Ad Settings.
To understand how Google uses Data, please consult the Google Partner Policies.
Personal Data processed: Usage Data; Trackers.
Place of processing: Ireland – Privacy Policy – Opt out.
Category of Personal Information collected under the CCPA: internet or other electronic network activity information.
This type of processing constitutes:
This type of service allows this Website and its partners to communicate, optimize and serve advertisements based on the User’s past use of this Website.
This activity is facilitated by the tracking of Usage Data and the use of Trackers to collect information that is then transferred to partners that manage remarketing and behavioral targeting activities.
Some services offer a remarketing option based on email address lists.
Services of this type usually allow Users to opt out of such tracking. Users can learn how to opt out of interest-based advertising by visiting the relevant opt-out section in this document.
Google Ads Remarketing is a remarketing and behavioral targeting service provided by Google Ireland Limited that connects the activity of this Website with the Google Ads advertising network and the DoubleClick Cookie.
To understand Google’s use of Data, please consult the Google Partner Policies.
Users can choose not to use Google Trackers for ad personalization by visiting Google’s Ad Settings.
Personal Data processed: Usage Data; Trackers.
Place of processing: Ireland – Privacy Policy – Opt out.
Category of Personal Information collected under the CCPA: internet or other network activity information.
This type of processing constitutes:
Remarketing with Google Analytics is a remarketing and behavioral targeting service provided by Google Ireland Limited that connects the tracking activity carried out by Google Analytics and its Trackers with the Google Ads advertising network and the DoubleClick Cookie.
Personal Data processed: Usage Data; Trackers.
Place of processing: Ireland – Privacy Policy – Opt OutOpt Out.
Category of Personal Information collected under the CCPA: internet or other network activity information.
This type of processing constitutes:
The services contained in this section enable the Data Controller to monitor and analyze traffic data and are used to track User behavior.
Google Analytics is an analytics service provided by Google Ireland Limited (“Google”). Google uses the Personal Data collected to track and examine the use of this Website, compile reports and share them with other services developed by Google.
Google may use the Personal Data to contextualize and personalize advertisements within its own advertising network.
In Google Analytics 4, IP addresses are used at the time of collection and then deleted before the data is recorded in any data center or server. To learn more, please refer to the official Google documentation.
To understand Google’s use of data, please consult the Google Partner Policies.
Personal Data processed: session statistics; Trackers.
Place of processing: Ireland – Privacy Policy – Opt out.
Category of Personal Information collected under the CCPA: internet or other network activity information.
This type of processing constitutes:
Google Analytics (Universal Analytics) is a web analytics service provided by Google Ireland Limited (“Google”). Google uses the Personal Data collected to track and examine the use of this Website, compile reports and share them with other services developed by Google.
Google may use the Personal Data to contextualize and personalize advertisements within its own advertising network.
This Google Analytics integration anonymizes your IP address. Anonymization works by shortening Users’ IP addresses within the borders of Member States of the European Union or in other countries party to the Agreement on the European Economic Area. Only in exceptional cases will the IP address be sent to Google servers and shortened within the United States.
To understand Google’s use of data, please consult the Google Partner Policies.
Personal Data processed: Usage Data; Trackers.
Place of processing: Ireland – Privacy Policy – Opt Out.
Category of Personal Information collected under the CCPA: internet or other network activity information.
This type of processing constitutes:
Google Analytics (Universal Analytics) is a web analytics service provided by Google Ireland Limited (“Google”). Google uses the Personal Data collected to track and examine the use of this Website, compile reports and share them with other services developed by Google.
Google may use the Personal Data to contextualize and personalize advertisements within its own advertising network.
To understand Google’s use of data, please consult the Google Partner Policies.
Personal Data processed: Usage Data; Trackers.
Place of processing: Ireland – Privacy Policy – Opt Out.
Category of Personal Information collected under the CCPA: internet or other network activity information.
This type of processing constitutes:
This type of service allows content hosted on external platforms to be displayed directly from the pages of this Website and enables interaction with it. These services are often referred to as widgets, namely small elements embedded in a website or application. They provide specific information or perform a particular function and often allow user interaction.
This type of service may still collect web traffic data related to the pages where the service is installed, even when users do not use it.
Google Fonts is a font style visualization service managed by Google Ireland Limited that allows this Website to integrate such content within its pages.
Personal Data processed: Usage Data; Trackers.
Place of processing: Ireland – Privacy Policy.
Category of Personal Information collected under the CCPA: internet or other network activity information.
This type of processing constitutes:
Google Maps is a map visualization service managed by Google Ireland Limited that allows this Website to integrate such content within its pages.
Personal Data processed: Trackers.
Place of processing: Ireland – Privacy Policy.
Category of Personal Information collected under the CCPA: internet or other network activity information.
This type of processing constitutes:
In addition to any opt-out function provided by any of the services listed in this document, Users can read more about how to opt out of interest-based advertising in the dedicated section of the Cookie Policy.
This Website uses Trackers. To learn more, Users may consult the Cookie Policy.
The Data Controller processes Personal Data relating to the User if one of the following conditions applies:
In any case, it is always possible to ask the Data Controller to clarify the specific legal basis of each processing activity and, in particular, whether the processing is based on the law, required by a contract, or necessary to enter into a contract.
Unless otherwise specified in this document, Personal Data is processed and stored for as long as required by the purpose for which it was collected and may be retained for a longer period due to legal obligations or on the basis of the Users’ consent.
Therefore:
When processing is based on the User’s consent, the Data Controller may retain Personal Data for a longer period until such consent is withdrawn. Furthermore, the Data Controller may be obliged to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority.
At the end of the retention period, Personal Data will be deleted. Therefore, once this period has expired, the right of access, deletion, rectification and the right to data portability can no longer be exercised.
Users may exercise certain rights regarding their Data processed by the Data Controller.
In particular, within the limits provided by law, Users have the right to:
Users have the right to obtain information regarding the legal basis for Data transfers abroad, including to any international organization governed by international law or established by two or more countries, such as the UN, as well as regarding the security measures adopted by the Data Controller to safeguard their Data.
Where Personal Data is processed for a public interest, in the exercise of official authority vested in the Data Controller or for the purposes of the legitimate interests pursued by the Data Controller, Users may object to such processing by providing a reason related to their particular situation.
Users are informed that, if their Personal Data is processed for direct marketing purposes, they may object to such processing at any time, free of charge and without providing any justification. Where Users object to processing for direct marketing purposes, Personal Data will no longer be processed for such purposes. To determine whether the Data Controller processes Personal Data for direct marketing purposes, Users may refer to the relevant sections of this document.
Any requests to exercise User rights may be directed to the Data Controller through the contact details provided in this document. Requests are free of charge and the Data Controller will respond as early as possible and in any event within one month, providing Users with all information required by law. Any rectification, deletion or restriction of processing will be communicated by the Data Controller to each recipient, if any, to whom the Personal Data has been disclosed, unless this proves impossible or involves disproportionate effort. The Data Controller will inform the User about those recipients if requested.
This section of the document supplements and completes the information contained in the rest of the privacy policy and is provided by the entity operating this Website and, where applicable, its parent company and its subsidiaries and affiliates (for the purposes of this section collectively referred to as “we”, “us”, “our”).
This section applies to all Users in Brazil (such Users are referred to below simply as “you”, “your”, “yours”), pursuant to the “Lei Geral de Proteção de Dados” and, for such Users, prevails over any other information that may differ from or conflict with this privacy policy.
In this part of the document, the term “personal information” is used as defined in the LGPD.
We process your personal information only when one of the legal bases for such processing applies. The legal bases are as follows:
To learn more about the legal bases, you may contact us at any time using the contact details provided in this document.
To find out which categories of personal information are processed, you may refer to the section “Detailed information on the processing of Personal Data” in this document.
To find out why we process your personal information, please refer to the sections “Detailed information on the processing of Personal Data” and “Purposes of Processing of the collected Data” in this document.
You have the right to:
You will never be discriminated against, nor will you in any way suffer unfavorable treatment as a result of exercising your rights.
You may submit an explicit request to exercise your rights free of charge at any time using the contact details provided in this document or through your legal representative.
We will do our best to respond to your request as quickly as possible.
In any case, if it is impossible for us to do so, we will make sure to communicate the factual or legal reasons that prevent us from immediately complying with or following up on your request. If your personal information is not processed by us, and where we are able to do so, we will indicate the natural or legal person to whom you should address your requests.
Should you decide to submit a request for access or a request for confirmation of the existence of processing of personal information, please make sure to specify whether you prefer to receive your personal information in electronic or paper format.
You should also let us know whether you would like an immediate response, in which case you will receive a simplified reply, or whether you require a complete disclosure.
In the latter case, we will respond within 15 days of your request, providing all information regarding the origin of your personal information, confirmation of whether personal information concerning you exists, all criteria used for processing and the purposes of such processing, while safeguarding our trade and industrial secrets.
Should you decide to submit a request for rectification, deletion, anonymization or blocking of personal information, we will ensure that the other parties with whom we have shared your personal information are immediately informed of your request so that they may also comply with it - except where such communication proves impossible or excessively burdensome for us.
We may transfer your personal information outside Brazilian territory in the following cases:
This part of the document integrates with and supplements the information contained in the rest of the privacy policy and is provided by the business running this Website and, if the case may be, its parent, subsidiaries and affiliates (for the purposes of this section referred to collectively as “we”, “us”, “our”).
The information contained in this section applies to all Users (Users are referred to below, simply as “you”, “your”, “yours”), who are residents in the following states: California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Nevada, Delaware, Iowa, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island and Montana.
For such Users, this information supersedes any other possibly divergent or conflicting provisions contained in the privacy policy.
This part of the document uses the term Personal Information.
The following Notice at collection provides you with timely notice about the categories of Personal Information collected or disclosed in the past 12 months so that you can exercise meaningful control over our use of that Information.
While such categorization of Personal Information is mainly based on California privacy laws, it can also be helpful for anyone who is not a California resident to get a general idea of what types of Personal Information are collected.
Personal Information collected or disclosed: Trackers, session statistics, Usage Data, answers to questions, clicks, keypress events, motion sensor events, mouse movements, scroll position, touch events
Purposes:
Retention period: for the time necessary to fulfill the purpose
Sold or Shared ℹ️: Yes
Targeted Advertising: ℹ️: Yes
Third-parties: Google Ireland Limited
Personal Information collected or disclosed: surname, telephone number, email
Purposes:
Retention period: for the time necessary to fulfill the purpose
Sold or Shared ℹ️: Yes
Targeted Advertising: ℹ️: Yes
Personal Information collected or disclosed: Usage Data, Trackers, answers to questions, clicks, keypress events, motion sensor events, mouse movements, scroll position, touch events
Purposes:
Retention period: for the time necessary to fulfill the purpose
Sold or Shared ℹ️: Yes
Targeted Advertising: ℹ️: Yes
Third-parties: Google Ireland Limited
ℹ️ You can read the definitions of these concepts inside the “Definitions and legal references section” of the privacy policy.
To know more about your rights in particular to opt out of certain processing activities you can refer to the “Your privacy rights under US state laws” section of our privacy policy.
For more details on the collection of Personal Information, please read the section “Detailed information on the processing of Personal Data” of our privacy policy.
We won’t process your Information for unexpected purposes, or for purposes that are not reasonably necessary to and compatible with the purposes originally disclosed, without your consent.
We collect the above-mentioned categories of Personal Information, either directly or indirectly, from you when you use this Website.
For example, you directly provide your Personal Information when you submit requests via any forms on this Website. You also provide Personal Information indirectly when you navigate this Website, as Personal Information about you is automatically observed and collected.
Finally, we may collect your Personal Information from third parties that work with us in connection with the Service or with the functioning of this Website and features thereof.
You may exercise certain rights regarding your Personal Information. In particular, to the extent permitted by applicable law, you have:
In addition to the rights listed above common to all Users in the United States, as a User residing in California, you have:
In addition to the rights listed above common to all Users in the United States, as a User residing in Virginia, Colorado, Connecticut, Texas, Oregon, Nevada, Delaware, Iowa, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island and Montana you have
In Minnesota and Maryland Users also have the right to obtain a list of the specific third parties to which the controller has disclosed the consumer's personal data
* Note that in some states like Minnesota you have the following specific rights connected to profiling:
In addition to the rights listed above common to all Users in the United States, as a User residing in Utah and Iowa, you have:
To exercise the rights described above, you need to submit your request to us by contacting us via the contact details provided in this document.
For us to respond to your request, we must know who you are. We will not respond to any request if we are unable to verify your identity and therefore confirm the Personal Information in our possession relates to you. You are not required to create an account with us to submit your request. We will use any Personal Information collected from you in connection with the verification of your request solely for verification and shall not further disclose the Personal Information, retain it longer than necessary for purposes of verification, or use it for unrelated purposes.
If you are an adult, you can make a request on behalf of a child under your parental authority.
How to exercise your rights to opt out
In addition to what is stated above, to exercise your right to opt-out of Sale or Sharing and Targeted Advertising you can also use the privacy choices link provided on this Website.
If you want to submit requests to opt out of Sale or Sharing and Targeted Advertising activities via a user-enabled global privacy control, such as for example the Global Privacy Control (“GPC”), you are free to do so and we will abide by such request in a frictionless manner.
We will respond to your request without undue delay, but in all cases within the timeframe required by applicable law. Should we need more time, we will explain to you the reasons why, and how much more time we need.
Should we deny your request, we will explain to you the reasons behind our denial (where envisaged by applicable law you may then contact the relevant authority to submit a complaint).
We do not charge a fee to process or respond to your request unless such request is manifestly unfounded or excessive and in all other cases where it is permitted by the applicable law. In such cases, we may charge a reasonable fee or refuse to act on the request. In either case, we will communicate our choices and explain the reasons behind them.
The User's Personal Data may be used by the Data Controller in legal proceedings or in the preparatory stages leading to possible legal action for the defense against abuses in the use of this Website or related Services by the User.
The User declares to be aware that the Data Controller may be required to disclose the Data upon request of public authorities.
Upon request by the User, in addition to the information contained in this privacy policy, this Website may provide the User with additional and contextual information concerning specific Services, or the collection and processing of Personal Data.
For operation and maintenance purposes, this Website and any third-party services used by it may collect system logs, i.e. files that record interactions and may also contain Personal Data, such as the User’s IP address.
Further information regarding the processing of Personal Data may be requested at any time from the Data Controller using the contact details provided.
The Data Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page and, if possible, on this Website, as well as, where technically and legally feasible, by sending a notification to Users through any contact details available to the Controller. Therefore, please consult this page regularly, referring to the date of the latest modification indicated at the bottom.
Should the changes affect processing activities whose legal basis is consent, the Data Controller will collect the User’s consent again, if required.
Personal data means any information that, directly or indirectly, including in connection with any other information, including a personal identification number, makes a natural person identified or identifiable.
Sensitive Personal Information means any Personal Information that is not publicly available and reveals information considered sensitive under applicable privacy laws.
Information collected automatically through this Website (including from third-party applications integrated into this Website), including: the IP addresses or domain names of the computers used by the User connecting to this Website, URI (Uniform Resource Identifier) addresses, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server response (successful outcome, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various time details of the visit (for example, the time spent on each page), and details concerning the path followed within the Application, with particular reference to the sequence of pages visited, the operating system parameters, and the User’s IT environment.
The individual using this Website who, unless otherwise specified, coincides with the Data Subject.
The natural person to whom the Personal Data refers.
The natural or legal person, public authority, agency, or other body that processes Personal Data on behalf of the Data Controller, as described in this privacy policy.
The natural or legal person, public authority, service, or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data and the tools adopted, including the security measures concerning the operation and use of this Website. Unless otherwise specified, the Data Controller is the owner of this Website.
The hardware or software tool through which Users’ Personal Data is collected and processed.
The Service provided by this Website as described in the relevant terms (if available) on this website/application.
Sale means any exchange of Personal Information by the Owner with a third party, in exchange for money or other valuable consideration, as defined by applicable U.S. state privacy laws. Please note that the exchange of Personal Information with a service provider pursuant to a written contract that meets the requirements established by applicable law does not constitute a Sale of your Personal Information.
Sharing means any sharing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating, orally, in writing, or by electronic or other means, a consumer’s Personal Information by a business to a third party for cross-context behavioral advertising, whether for monetary or other valuable consideration, including transactions between a business and a third party involving cross-context behavioral advertising for the benefit of a business where no money is exchanged, as defined by California privacy laws. Please note that the exchange of Personal Information with a service provider pursuant to a written contract that meets the requirements established by California privacy laws does not constitute Sharing of the User’s Personal Information.
Targeted Advertising means displaying advertisements to a consumer where the advertisement is selected based on Personal Information obtained from that consumer’s activities over time and across non-affiliated websites or online applications to predict that consumer’s preferences or interests, as defined by applicable U.S. state privacy laws.
Unless otherwise specified, any reference to the European Union in this document shall be deemed to include all current member states of the European Union and the European Economic Area.
Cookies are Tracking Tools consisting of small portions of data stored within the User’s browser.
A Tracking Tool means any technology – e.g. Cookies, unique identifiers, web beacons, embedded scripts, e-tags, and fingerprinting – that enables the tracking of Users, for example by collecting or storing information on the User’s device.
This policy is drafted on the basis of multiple legislative systems.
Unless otherwise specified, this policy concerns this Website exclusively.
Last modified: March 8, 2024