Privacy Policy

Privacy Policy under the General Data Protection Regulation (GDPR)

According to the indicated legislation, this treatment will be based on principles of correctness, lawfulness, transparency, and protection of your privacy and your rights. This privacy policy is given as a piece of brief information under Article 13 of Legislative Decree 196/2003 and under art. 13 GDPR 679/2016 European Regulation on privacy, as well as under the Provision on cookies n. 229 of 8 May 2014 to inform site visitors about the use of the data entered and the cookies used by the site itself. The information is also provided under Recommendation no. 2/2001 adopted by the Working Group established by art. 29 of the directive n. 95/46 / EC. to those who interact with the web services of this site, to protect personal data. By using any of our services and/or accepting this information, for example in the context of registering for one of our services, you consent to the collection and use of personal information as described in this information.

Please note that this Notice does not apply to the processing of personal information on behalf of and is subject to the instructions of third parties, such as other service providers or business partners.

The company ICardoo Digital Marketing S.r.l with the registered office via Lussu, SNC - 07100 Sassari (SS) and having VAT number 02756180903 (hereinafter referred to as the Data Controller) as data controller informs you under article 13 of the GDPR 2016/679 that your data will be processed in the manner and for the purposes described below.

An object of the treatment

The owner is responsible for managing non-sensitive personal identification data in full compliance with the law (by way of example but not limited to: name, surname, address, telephone, email - hereinafter referred to as personal data or more simply data) on the occasion of your registration. to this website (hereinafter referred to as the site) owned by the owner, or following participation in opinion and satisfaction surveys, filling out registration forms and participating in events organized by the owner, appeared following online requests and through social networks for clarifications or support requests, or in the case of sending newsletters, promotions or updates on-site activities.

Purpose of the treatment

Service purpose Without your express consent (art. 24 letter a, b, c of the Privacy Code and art. 6 letter b, e of the GDPR) the personal data provided will be collected for the following purposes: operate and maintain the site; allow you to use the services you requested; participate through the site in initiatives organized by the owner (for example: events, premières and exhibitions) to which you have subscribed; process and manage a contact, support or payment request; monitor and analyze site traffic data; interact with social networks or other external platforms, for example through "Like" buttons (provided by the external service and for which the privacy settings relating to the service itself apply); fulfill the obligations established by law and by community legislation; fulfill the obligations established by an order from the Authorities; fulfill the obligations related to the management of the community of users of the site; fulfill the processing obligations connected to the VAT regulation (VAT tax register, etc.); prevent or identify fraudulent activities or abuses against the site or the owner; exercise the rights of the owner, for example to exercise a right in court. In some cases, the provision of the data that is requested is mandatory for access to the service, any refusal to provide such data involves the failure to improve or maintain the requested services.

Other Purposes

Subject to your specific and distinct consent (Articles 23 and 130 of the Privacy Code and Article 7 of the GDPR) the personal data provided will be collected for the following other purposes: send you via email newsletters, opinion and/or satisfaction surveys, invitations to events organized by the owner. The provision of this data is optional. You can therefore decide not to provide any data or to subsequently deny the possibility of processing the data already provided for Other Purposes. In this case, you will not be able to receive email newsletters, invitations to events or opinion and satisfaction surveys but in any case you will continue to be entitled to the services related to the Service Purposes. Methods of data processing The processing of your data is carried out by means of the operations indicated in the art. 4 Privacy Code and art. 4 no. 2 of the GDPR, or more precisely: collection, registration, organization, conservation, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Your data is subjected to both paper and electronic and/or automated processing. The owner will process your personal data for the time necessary to fulfill the aforementioned purposes and in any case for no more than 10 years from the termination of the relationship for service purposes and for no more than 2 years from data collection for other purposes. The updated list of data processors and persons in charge of processing is kept at the owner's headquarters.


The owner has adopted various security measures to protect your data against the risk of loss, misuse or alteration. In particular: he has adopted the measures referred to in Articles 32-34 Privacy Code and art. 32 GDPR; uses data encryption technology according to the most modern standards and uses the protected data transmission protocol (HTTPS).

Data access

Your personal data may be communicated to: staff and collaborators of the owner as managers and persons in charge of the treatment and management of personal data and the right to privacy; State bodies in charge of checks and controls on the regularity of the obligations required by law; external subjects who carry out specific tasks on behalf of the owner in relation to site management; by way of example but not limited to: the provider (hosting) of the site, cloud service providers, electronic payment service providers, credit institutions, merchandising suppliers or other businesses related to the site, shippers and carriers . In any case, the prohibition to communicate or disseminate personal data to subjects not necessary for the performance of services or products relating to the site remains unaffected.

Data communication

Without your express consent (pursuant to article 24 letter a, b, d of the Privacy Code and article 6 letter b and c of the GDPR) the owner will be able to communicate your data to Supervisory Bodies, Judicial Authorities as well as to all subjects which communication is mandatory by law for the accomplishment of the related purposes. Your data will not be disclosed. The interested party has the right to obtain confirmation of the existence or not of personal data concerning him, even if not yet registered, and their communication in an intelligible form. Data will never be disclosed for other purposes not previously expressed or indicated in this privacy statement.

Place of data storage

The data are processed at the owner's operating offices and in any other place where the parties involved in the processing are located. The management and storage of data will take place in Europe. For more information, contact the owner.

Your rights

As a direct interested party in the data provided, you are entitled on the basis of art. 7 of the Privacy Code and art. 15 of the GDPR to: obtain confirmation of the existence or not of personal data concerning you, even if not yet registered, and their communication in an intelligible form; get the indication: the origin of the personal data; the purposes and methods of processing; of the logic applied in case of treatment carried out with the aid of electronic instruments; of the identification details of the owner, of the managers and of the designated representative pursuant to art. 5, paragraph 2 of the Privacy Code and art. 3, paragraph 1, GDPR; of the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as designated or appointed representatives; obtain: updating, rectification or integration of data; the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed; the attestation that the operations indicated in the two previous points have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment proves impossible or involves a use of means manifestly disproportionate to the protected right; object in whole or in part: for legitimate reasons, to the processing of personal data concerning you, even if pertinent to the purpose of the collection; to the processing of personal data concerning you for the purpose of sending advertising material or direct sales or for carrying out market research or commercial communication, in whole or only in part. Where applicable, you also have the rights provided for in articles 16-21 of the GDPR (right to rectification, right to be forgotten, right to limitation of treatment, right to data portability, right to object) as well as the right to complain to the Guarantor Authority. Minors This site and the owner's services are not intended for minors under the age of 16 and the owner does not intentionally collect personal information even referring to minors under the age of 18. In the event that personal data on minors under the age of 16 are involuntarily recorded, the holder will delete them in a timely manner as soon as he becomes aware of them and consequently the services associated with them will be interrupted, without prejudice to the possibility of the holder of parental responsibility to authorize consent to the use of the data of the subject under the age of 16.

Methods of exercising rights

You can exercise your rights at any time by sending an email to

Types of data collected

Among the personal data collected by the site and by the owner, independently or through third parties, there are cookies. To view the types of data collected through cookies, refer to the Cookies page on this site. Personal data may be entered voluntarily by you or collected automatically during the use of this site. Any use of cookies or other tracking tools by this site or by the owners of third-party services used by this site, unless otherwise specified, have the purpose of identifying users and recording their preferences for purposes strictly related to provision of the requested service. Failure to provide certain data could prevent this site from providing its services. Each user assumes responsibility for the personal data of third parties published or shared through this site and guarantees to have the right to communicate or disseminate them, freeing the owner from any liability towards third parties. System and maintenance logs For needs related to operation and maintenance, this site and any third party services used by it may collect system logs, i.e. files that record interactions and which may also contain personal data, such as the IP address.

Changes to this privacy policy

The owner reserves the right to make changes to this privacy policy at any time by giving notice to users through this page. We therefore invite you to consult this page often, referring to the date of the last modification indicated at the bottom. In case of non-acceptance of the changes made to this privacy policy, you are required to cease using this site and request the owner to remove your personal data. Unless otherwise specified, the previous privacy policy will continue to apply to the personal data collected up to that moment.

Important note

To improve personal data management procedures and optimally comply with current regulations, the data collected during registration on this site prior to May 14, 2018, which moreover had not been used for some time now not even for sending newsletters, they will be deleted altogether including from the backup media. A single, last email will then be sent to all those who have registered on the site, informing them that - from that moment on - the data will be deleted and to access future services offered by the site, they will have to register again.

Purpose of Service

Without your express consent (Article 24 letter a, b, c of the Privacy Code and Article 6 letter b, e of the GDPR) the personal data provided will be collected for the following purposes: