Privacy policy

INFORMATION ON THE PROCESSING OF PERSONAL DATA
pursuant to Article 13 of EU Regulation 2016/679 (General Data Protection Regulation or "GDPR")

Cosmic Srl (hereinafter "Cosmic Srl" or the "Data Controller"), with its legal headquarters at Via Conchia 50, 70043 Monopoli (BA) - Italy, VAT number 06683590720, phone (+39) 080 4240793, email info@cosmicsrl.com, is committed to protecting the privacy of users of its website (hereinafter "the Site"). This privacy policy describes how we collect, use, and protect users' personal data in compliance with EU Regulation 2016/679 (GDPR).

1. Data Controller

The Data Controller is Cosmic Srl, with headquarters at Via Conchia 50, 70043 Monopoli (BA) - Italy, contactable via email at info@cosmicsrl.com or by phone at (+39) 080 4240793.

2. Categories of Personal Data Processed

  • Connection and Navigation Data: technical information automatically collected, such as IP addresses, browser type, cookie data, and access times, used for statistical purposes and to ensure the proper functioning of the Site.
  • Data Provided by the User: voluntary information provided through contact forms, such as name, surname, email address, phone number, and messages.
  • Cookies: for detailed information on the use of cookies, please refer to our Cookie Policy.

3. Purposes and Legal Bases of Processing

Personal data will be processed for the following purposes:

  • Navigation of the Site: allowing users to navigate and enjoy the content of the Site. Legal basis: performance of a contract (Article 6, letter b GDPR).
  • Managing Requests: Responding to information requests sent via contact forms. Legal basis: performance of a contract and pre-contractual measures (Article 6, letter b GDPR).
  • Legal Obligations: compliance with regulatory obligations. Legal basis: legal obligation (Article 6, letter c GDPR).
  • Protection of the Data Controller's Rights: prevention of potential abuses and protection of legal rights. Legal basis: legitimate interest (Article 6, letter f GDPR).

4. Processing Methods

Personal data is processed using both electronic and manual tools, in compliance with the principles of lawfulness, fairness, transparency, minimization, and security. Cosmic Srl adopts appropriate technical and organizational measures to prevent unauthorized access, loss, or destruction of data.

5. Data Communication

Personal data may be communicated to:

  • Technical service providers and external professionals for the management and maintenance of the Site.
  • Public authorities, as required by law or judicial orders.
  • No data will be disclosed to third parties without the user's explicit consent.

6. Data Retention

Personal data will be retained for as long as necessary to fulfill the purposes described:

  • Data for responding to requests: up to 36 months from the closure of the communication
  • Data for legal obligations: for the period required by applicable laws.

7. Transfer of Data Outside the EU

If necessary, data may be transferred to non-EU countries. In such cases, Cosmic Srl ensures that the providers comply with adequate levels of protection, in accordance with Articles 44-49 of the GDPR.

8. Rights of Data Subjects

The user has the right to:

  • Access their personal data.
  • Request the rectification or deletion of their data.
  • Restrict the processing of data or object to its processing.
  • Request the portability of data to another Data Controller.
  • Withdraw consent to processing, where applicable, without affecting the lawfulness of processing based on consent before its withdrawal.
  • File a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

Requests can be sent to info@cosmicsrl.com or to the legal headquarters of Cosmic Srl.

9. Changes to the Privacy Policy

Cosmic Srl reserves the right to periodically update this policy. Changes will be posted on the Site with the updated revision date.
Last revision date: 20/01/2025.

Go back