1 INFORMATION ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ARTS 12, 13 AND 14 REG. 2016/679/EU

This policy is intended to communicate how the processing of users’ personal data carried out by our company takes place in accordance with the provisions of the European Regulation on the protection of personal data, Reg. 2016/679 / EU, directly applicable from 25 May 2018. We therefore provide the following information and remain available for any clarifications.

2 Who we are

This information on the processing of personal data is provided by ecodao S.r.l., with registered office in Via Santa Giustina 11, Vò (PD), Italy, Fiscal Code and VAT number 05120120281, email info@ecodao.com and certified email ecodao@pec.it.

3 Casa Italia Nigeria platform: what it is and how it works

Casa Italia Nigeria is a trademark of ecodao S.r.l. which identifies a technological platform whose purpose is to allow users of the website to exchange information with each other and conclude sales and purchase transactions between the users themselves in relation to the products displayed on the platform.

In particular, the platform allows registered users to take advantage of the services offered by the platform such as:

• the creation of a personal user ID on the platform valid to access the contents of the platform;

• viewing a user’s company profile. This section displays basic information about a user’s company, such as the description of its business and its address;

• product display. This section displays the images, description and price of the products presented by the sellers;

• visualization of RFQs and Orders. This section displays the status of the RFQs (Request for Quotation) and of the existing Orders for sellers and buyers.

For further information, it is possible to read the information on our sites with the domain name www.casaitalianigeria.com and marketplace.casaitalianigeria.com which explain how the platform works, how to register and what can be done by registering.

The platform and related services must be used in accordance with the provisions and indications in the General Terms of Use found at the bottom of our sites with the domain name www.casaitalianigeria.com and marketplace.casaitalianigeria.com.

4 Role of ecodao S.r.l. in data processing

ecodao S.r.l. is the “Data Controller” pursuant to European Regulation 679/2016/EU, as manager of the platform, of the personal data provided by users through the use of the platform. In particular ecodao S.r.l. will process personal data as indicated in this information and/or in specific information that may be present on the platform.

5 Data Protection Officer

ecodao S.r.l. has appointed its data protection officer, who can be contacted at the following email address dpo@ecodao.com.

6 Which personal data are processed

ecodao S.r.l. processes the following personal data:

• Data provided voluntarily by users when using the platform and/or related services.

• Navigation data collected automatically: we collect and analyze some data that the computer systems and software procedures used to operate the platform acquire during their normal operation, the transmission of which is necessary and implicit for the correct functioning of the platform itself.

• Cookies: the platform uses its own and/or third-party technical cookies to provide its services and allows the sending of third-party cookies. For more information on the aforementioned cookies, you can visit the Cookie Policy section at the bottom of our sites with the domain name www.casaitalianigeria.com and marketplace.casaitalianigeria.com.

7 Purpose of the processing and related legal basis

ecodao S.r.l. processes data for the following purposes:

1. to allow users to register on the platform and use the services offered by the same, pursuant to art. 6 no. 1 lit. b of the European Regulation 679/2016/EU;
2. allow the creation and subsequent operational, technical and administrative management of the relationship with the user and of the user created by this during registration. The data will also be processed to fulfill legal, contractual, accounting and/or tax obligations connected to this relationship and also for evidentiary purposes, to protect one’s credits and/or rights in relation to each relationship on the basis of Article 6 letter b , c and f of Regulation 2016/679/EU. The legitimate interest pursued by ecodao S.r.l. it is the right to do business and to defend or enforce one’s rights;
3. to allow the exchange of information within the platform pursuant to art. 6 no. 1 lit. b and f of Regulation 2016/679/EU. The legitimate interest pursued by ecodao S.r.l. is to carry out one’s own business activity;
4. to carry out statistical analyzes in anonymous and/or aggregate form pursuant to art. 6 no. 1 lit. b and f of Regulation 2016/679/EU to provide and improve their services by combining some data in aggregate form with similar information collected from other users with the aim of creating functions such as “Bestsellers”. The legitimate interest pursued by ecodao S.r.l. is to carry out its business activity and to improve the platform and related services;
5. to carry out security checks in relation to the use of the platform pursuant to art. 6 no. 1 letter f of Regulation 2016/679/EU. The legitimate interest pursued by ecodao S.r.l. is to guarantee the security of the platform, allow the verification of any violations and/or technical problems allowing to intervene;
6. to provide websites connected to the platform with statistics in aggregate and anonymous form on the related products and to analyze the use of the site by visitors in aggregate and anonymous form pursuant to art. 6 no. 1 lit. f of Regulation 2016/679/EU. The legitimate interest pursued by ecodao S.r.l. is to carry on one’s own business.
7. To respond to any communications sent voluntarily by users, using the tools made available.

8 Processing methods

Personal data is processed with the aid of electronic/IT systems and with the use of measures designed to guarantee confidentiality and to prevent access by unauthorized parties.

9 Duration of treatment

The personal data acquired are kept for a period of time not exceeding that necessary for the purposes for which they were collected or subsequently processed and in compliance with the prescription terms imposed by law or by provisions of the Guarantor for the Protection of Personal Data. In particular, if the data were linked to a specific account created by the user on the platform, we inform you that ecodao S.r.l. will proceed with the automatic cancellation of the data from the platform in the event that the user requests the cancellation of his/her account.

10 Data communication

Without prejudice to communications made in compliance with legal obligations, the personal data provided by the user may be communicated exclusively for the purposes indicated above and limited to the data necessary with respect to the assignment conferred to:

1. appointed personnel within our company, to process personal data in the context of the related duties for the purposes indicated above;
2. companies or consultants or suppliers responsible for carrying out activities related to the provision of services and/or fulfilling legal obligations, such as company accounting;
3. public and/or private subjects, if the communication is necessary or functional to the correct fulfillment of the contractual obligations assumed in relation to the services provided through the platform, as well as the obligations deriving from the law;
4. all those subjects who have access to the data by virtue of regulatory or administrative provisions. The personal data provided by users in relation to registration on the platform are not subject to disclosure.

11 Transfer outside the European Union

The transfer of data outside the European Union is not foreseen with the exception of what is indicated below. Some data collected could be transferred abroad, even outside the European Union, to our suppliers of some limited services for the purposes indicated above in points b) and f) of the paragraph ” Purpose of the processing and related legal basis ” in the forms and in the ways established by current legislation, guaranteeing in any case an adequate level of protection pursuant to the provisions of art. 35 of Regulation 2016/679/EU. In any case, the data will not be disclosed.

12 Automated Decisions

Unless otherwise indicated in any specific information, no automated decision-making processes are implemented that produce effects on the interested parties.

13 Nature of data collection and consequences of failure to provide it

When registering on the platform, each user must provide some mandatory personal data to allow the provision of the service.

The refusal to provide data requested as mandatory prevents registration on the platform and consequently makes it impossible for the user to use what is offered by the same.

The refusal to provide data requested as optional – unless otherwise indicated – has no particular consequences other than the possible one of not being able to make the best use of the services.

14 Rights of the interested party

The interested party has the right to ask the data controller for access to personal data concerning him and for the rectification or cancellation of the same or the limitation of the relative treatment as well as to oppose their treatment in addition to the right to data portability according to the provisions provided for in the art. from 15 to 21 of Regulation 2016/679/EU.

In cases where the treatment is based on consent, the consent to the data processing provided can be revoked at any time without prejudice to the lawfulness of the treatment based on the consent given before the revocation. The interested party also has the right to lodge a complaint with the competent supervisory authority on the matter, the Guarantor for the protection of personal data. Interested parties can contact ecodao S.r.l. to exercise one’s rights by communicating one’s requests by e-mail to the address dpo@ecodao.com or to the certified email address indicated above, specifying in the request the right that the interested party wishes to exercise together with a valid e-mail address/pec to whom the feedback should be sent.

This document is updated as at 01 August 2023.

Introduction

In accordance with the continuous commitment of Casa Italia Nigeria to offer the best service to its users and customers, Casa Italia Nigeria wants to respond in the best possible way to the requirements of the Nigerian Regulation on Data Protection and the European General Data Protection Regulation (GDPR). In particular, Casa Italia Nigeria has adopted the Privacy Policy and the Cookie Policy to make them clearer and more transparent and to get the new rights that the Regulation guarantees you. Casa Italia Nigeria, therefore, invites you to read it.

The Personal Data that Casa Italia Nigeria collects

To offer you the services provided by Casa Italia Nigeria, as Data Controller, it must process some personal data necessary for the provision of services. This data may be provided implicitly by the tools you use to access and use the services or maybe provided explicitly by you. Casa Italia Nigeria can process the following categories of personal data of users and customers:
• technical navigation data related to the IP address, addresses in URI (Uniform Resource Identifier) of the requested resources, identification codes of the devices used by the user for the use of the site or services, browser characteristics and access times;
• cookies and navigation data aimed at profiling provided indirectly through the use of the service itself and obtained and analysed with the user’s consent;
• common identification data provided by the user (eg. name, surname, email, telephone number, etc.) for the use Casa Italia Nigeria services.

The navigation data are collected by the computer system responsible for the operation of the website and acquired during their normal operations (the transmission is implicit in the use of internet communication protocols).
Cookies are used to collect information, in aggregate form, on the number of users and how they visit the site. Cookies used are only of a technical, statistical and performance type and therefore do not require specific consent.
Personal data are processed only with your specific and distinct consent, for the following marketing purposes:
• send you newsletters, commercial communications and/or information on the services offered by the Data Controller via e-mail, post and/or SMS and/or telephone contacts.

Purpose of the Data Processing (What your Personal Data are used for)

The personal data that Casa Italia Nigeria collects are processed for the following purposes:
• to fulfil obligations arising from any contract of adhesion to the services provided by Casa Italia Nigeria or, before the acceptance;
• to fulfil its specific requests,
for any market analysis activities, information or promotional campaigns,

Data are received by Casa Italia Nigeria on the initiative of the user and the customer.

Data Processing Methods (How your Personal Data are processed)

Data are processed in compliance with the principles of their confidentiality, integrity and availability, manually and electronically, with the aid of electronic tools and stored both on computer and paper supports, or on any other type of suitable support and they may be kept even after the expiry of the contract for the fulfilment of all related obligations. The Data Controller will process personal data for the time necessary to fulfil the aforementioned purposes.

Nature of the conferment and consequences of possible rejection

For any promotional activities and purposes, any refusal to give consent has no negative consequences on the provision of services related to the contract with Casa Italia Nigeria.

Scope of communication and dissemination (Who can access your Personal Data)

The employees of Casa Italia Nigeria (and any collaborators) may become aware of your personal data, as persons in charge and/or data processors, exclusively in relation to the tasks they perform and the purposes expressed above.
They may also become aware of your personal data, as external managers, some specific categories of subjects external to our company, always for purposes related to the execution of obligations deriving from existing work relationships.
These categories include, for example:
• post office or other mail delivery companies;
• credit institutions, financial institutions for the management of payments;
• law firms;
• insurance company;
• hardware and software maintenance companies, in relation to the necessary maintenance, improvements etc. of our infrastructures;
• professional firms and/or companies and/or associations of companies and entrepreneurs who provide us with certain accounting and/or tax services, etc.

Your personal data may also be disclosed to subjects to whom the right to access the data is granted by legal or regulatory provisions (eg. Financial Police, Police Forces, supervisory authorities, local public security authorities, etc.).
There is no form of disclosure of your data (by dissemination we intend to make your data known to an indefinite number of subjects).
Personal data are stored on local servers located within the European Union.