INFORMATION ON THE PROCESSING OF PERSONAL DATA
pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR)
1. Data controller
CRISDEN S.R.L. | Via Raffaello Sanzio, 32 42124 Reggio Emilia (RE) | VAT No. 00616000352 | E-mail: info@crisden.com | Website: https://crisden.it
2. Types of data collected and purposes of processing
The website https://crisden.it is an institutional website presenting the company. It does not conduct online sales. Personal data are collected exclusively through the contact forms in the following sections.
2.1 General contact form (“Do you need support?”)
Data collected: name, e-mail address, telephone number, company name, free message.
Purpose: responding to requests for information or quotes sent by the user.
Legal basis: performance of pre-contractual measures at the request of the data subject (Art. 6, para. 1, lett. b GDPR).
Retention: data are kept for the time necessary to handle the request and, in the event of the establishment of a business relationship, for the duration of the relationship plus the period required by applicable legal obligations.
2.2 “Work with us” form
Data collected: personal and contact details, curriculum vitae, and any other data contained in the material spontaneously submitted by the data subject (e.g. cover letter).
Purpose: to evaluate the application for potential recruitment.
Legal basis: performance of pre-contractual measures at the request of the data subject (Art. 6, para. 1, lett. b GDPR).
Retention: data is stored for 12 months from receipt of the application, unless express consent to the contrary is provided by the data subject.
2.3 “Let’s Play” form – Creative Project Proposal
Data collected: personal and contact details, description of the creative project/idea, and any other material voluntarily attached by the data subject.
Purpose: to receive and evaluate creative and/or design collaboration proposals from designers and industry professionals.
Legal basis: consent of the data subject (Art. 6(1)(a) GDPR), granted by voluntarily submitting the form. Consent may be withdrawn at any time by writing to info@crisden.com, without affecting the lawfulness of processing based on consent before its withdrawal.
Retention: data is retained for the time necessary to evaluate the proposal and, in the absence of project developments, for a maximum of 24 months from receipt.
2.4 Newsletter subscription
Data collected: email address.
Purpose: sending updates, news, and promotional communications regarding the activities of CRISDEN S.R.L.
Legal basis: consent of the data subject (Art. 6(1)(a) GDPR). Consent may be withdrawn at any time via the unsubscribe link found in every email or by writing to info@crisden.com.
Retention: data is retained until consent is withdrawn.
2.5 Browsing data
The computer systems and software procedures that manage the site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols (e.g., IP addresses, browser type, operating system, date and time of the request). This data is used solely to obtain anonymous statistical information on site usage and to ensure its proper functioning. It is not used to identify the user, except when necessary to establish liability for any unlawful conduct.
Legal basis: legitimate interest of the Data Controller (Art. 6(1)(f) GDPR).
3. Cookies and third-party tools
The site uses technical cookies and, with your consent, statistical and third-party cookies. Specifically, the following services are available:
- Google Analytics (Google LLC) – collection of anonymous statistics on website usage (
_gaand_ga_*cookies). Data may be transferred to the United States in compliance with the safeguards provided by the GDPR. For more information: https://business.safety.google/privacy/ - Google Fonts (Google LLC) – loading of fonts with transmission of the user's IP address to Google servers.
- Elementor – content creation tool, uses technical cookies for the proper functioning of the site.
To manage cookie preferences, a banner is displayed upon your first visit to the site. For the full information on cookies, please refer to the site's Cookie Policy, available at: https://crisden.it/en/cookie-policy-ue/
4. Methods of processing
Personal data is processed using computerized and electronic means, adopting appropriate technical and organizational security measures to prevent loss, illicit or incorrect use, and unauthorized access.
5. Communication and dissemination of data
Personal data is not disseminated. It may be shared with:
- entities that provide technical and IT services functional to the site (e.g., hosting providers, email platforms), acting as data processors pursuant to art. 28 GDPR;
- subjects to whom communication is mandatory by law or by order of the authority.
The data is not transferred to third parties for their own purposes, nor used for commercial profiling activities by third parties.
6. Transfer of data to third countries
Data may be transferred to countries outside the European Economic Area (EEA) only if adequate safeguards are in place pursuant to Articles 44-49 of the GDPR (e.g., adequacy decisions, standard contractual clauses). Specifically, the use of Google Analytics and Google Fonts involves the transfer of data to the United States by Google LLC, based on applicable safeguards.
7. Rights of data subject
The data subject has the right to exercise, at any time, the following rights against the Data Controller:
- Right of access (Art. 15 GDPR): obtain confirmation as to whether or not personal data concerning them is being processed, and where that is the case, access such data.
- Right to rectification (Art. 16 GDPR): obtain the rectification of inaccurate data or the completion of incomplete data.
- Right to erasure (Art. 17 GDPR): obtain the erasure of one's personal data, in cases provided for by law.
- Right to restriction of processing (Art. 18 GDPR): obtain restriction of processing in certain circumstances.
- Right to data portability (Art. 20 GDPR): receive one's data in a structured, commonly used format, or transmit it to another controller, where technically feasible.
- Right to object (Art. 21 GDPR): object to the processing of one's data on grounds relating to one's particular situation.
- Right to withdraw consent: withdraw previously given consent at any time, without affecting the lawfulness of the processing carried out prior to withdrawal.
To exercise their rights, the data subject may write to: info@crisden.com
The data subject also has the right to lodge a complaint with the Italian Data Protection Authority(www.garanteprivacy.it).
8. Updates
This policy may be subject to updates. We therefore invite you to consult this page periodically.
Last updated: April 2025
CRISDEN S.R.L. – Via Raffaello Sanzio, 32 – 42124 Reggio Emilia – info@crisden.com