Skip to main content

Privacy and Cookie Policy

Our Privacy Policy complies with GDPR regulations.

Our Privacy Policy was last updated on July 3, 2024. ((European Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data – in short “GDPR”).
Welcome to our website “www.y-dry.com” (hereinafter referred to as the “Site“), under exclusive license from C.A.V. S.r.l. Unipersonale.
Please read our Privacy Policy carefully, which applies in any case you access our website (“Site“) and decide to browse it.
C.A.V. S.r.l. Unipersonale in the person of its pro-tempore legal representative, in its capacity as owner of the personal data voluntarily communicated by you (verbally, by business card, by e-mail, via social networks, through the websites owned by it, etc.), provide you with this information pursuant to Article 13, GDPR (in short, “Information on the Environment”).”).
The Data Controller, as subsequently identified, may amend or simply update, in whole or in part, this Policy by informing Users thereof.
Changes and updates will be binding as soon as they are published on the Site.
The User is therefore invited to read the Privacy Policy each time the Site is accessed.
In the event of non-acceptance of this Privacy Policy, the User is required to cease using this Site and may request the Data Controller to remove their Personal Data.
Please also read the Site’s “Cookie Policy“, which contains detailed information about the conditions relating to our services.
Certain services may be subject to specific legal terms, in which case we will provide you with all appropriate information from time to time. 1. Data Controller and Data Protection Officer The data controller of the data collected through this site is C.A.V. S.r.l., with registered office in Italy, Via di Corticella, 72, 40128 Bologna, Italy, Iscr.
Reg.
Imp.
R.E.A. 167447/1997, C.F. and P.IVA n.
04334740372, (hereinafter: “CAV“).
it decides autonomously on the purposes and methods of processing, as well as on the security procedures to be applied to guarantee the confidentiality, integrity and availability of the data.
The Data Protection Officer (DPO) is available for any information regarding the processing of personal data.
You can contact the DPO by writing to: info@y-dry.com2. Personal Data collected by the Website The Data Controller collects the following types of Personal Data:

  • Content and information provided voluntarily by the User:
  • Personal Data that the User voluntarily provides through the Site during its use, such as personal data, contact details, access credentials to the services and/or products provided, personal interests and preferences and other personal content, etc. Failure by the User to provide Personal Data, for which there is a legal or contractual obligation or if they constitute a necessary requirement for the use of the service or for the conclusion of the contract, will make it impossible for the Data Controller to provide all or part of its services.
    The User who communicates to the Data Controller the Personal Data of third parties is directly and exclusively responsible for their origin, collection, processing, communication or dissemination.
  • Technical data that the computer systems and software procedures used to operate this Site may acquire, during their normal operation, as Personal Data, the transmission of which is implicit in the use of internet communication protocols.
    This information is not collected to be associated with identified Users, but by its very nature, could, through processing and association with Data held by third parties, allow Users to be identified in certain circumstances.
    This category includes IP addresses, or domain names used by Users who connect to the Site, URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, etc.
  • Data relating to the use of the Site by the User may also be collected, such as the pages visited, the actions performed, the functions and services used.
  • Personal data collected through cookies or similar technologies for statistical reporting such as Data about pages, links visited, and other actions you take when you use our Services, within advertising or email content.
    They are stored and then retransmitted to the same sites on the next visit by the same User.
    The User can view the complete Cookie Policy on this page, further down.

3. Purposes of data processing Your Personal Data will be processed: a) without the User’s consent (Article 6, letters b, c, f, GDPR), for the following purposes:

  • collect data on Users such as personal data such as name and surname, address, email, telephone, browsing data.
  • to provide the operation of the computer systems and software procedures used to operate the Site; they acquire, in the course of their normal operation, some data whose transmission is implicit in the use of Internet communication protocols, information that is not collected by CAV;
  • comply with the provisions of laws and regulations (national or EU), or execute an order of judicial authorities or supervisory bodies to which CAV is subject,
  • exercise the rights of CAV, in particular, the right of defence in court;
  • to allow Users to register on the Site and use the services reserved for registered Users;
  • statistical analysis with anonymous data;
  • manage requests forwarded to our Customer Service.

In the above cases, the processing of your personal data is legitimate as it is necessary to perform a contract with a User or to provide him with the service he has requested from us.
In addition, we carry out statistical surveys and analysis with aggregate data to understand how users interact with and use the Site, to improve our offer and services.
b) with the consent of the User (Article 7, GDPR), for the following purposes:

  • organization of events, meetings, conferences and seminars;
  • marketing activities of various kinds, including the promotion of products and services, the distribution of information and promotional material, the sending of newsletters and publications,
  • management of surveys and questionnaires, also relating to the degree of customer satisfaction.

The provision of data for the purposes referred to in the previous section
(a) is mandatory.
The lack of data and/or any express refusal to process will make it impossible for CAV to follow up on a request, or the possible violation of requests from the competent authorities.
The provision of data for the purposes referred to in the previous section
(b) it is optional, with the consequence that the User may decide not to provide his/her consent, or to revoke it at any time by contacting the DPO.
When using particular Services (e.g. connecting to the CAV / Y-DRY profile on Twitter, Facebook, Instagram, YouTube, Linkedin and other social networks) the Personal Data sent by the User to the Service manager may be processed.
With respect to these hypotheses, the User acts as an independent data controller, assuming all legal obligations and responsibilities.
In this sense, the User grants the widest indemnity on this point with respect to any dispute, claim, request for compensation for damage from processing, etc., that may be received by CAV even from third parties whose Personal Data have been processed through the use by the User of the Services in violation of the applicable personal data protection regulations.
In any case, if the User provides or otherwise processes Personal Data of third parties in the use of the Service, he/she hereby guarantees – assuming all related responsibility – that this particular processing hypothesis is based on a suitable legal basis (for example, the consent of the data subject) pursuant to art.
6 of the Regulation which legitimizes the processing of the information in question. 4. Categories of personal data processed Within the scope of the purposes of the processing highlighted in paragraph (3) above, only personal data will be processed concerning, by way of example, name and surname, tax code, VAT number, residence, domicile, place of work, e-mail address or certified e-mail address, telephone and fax numbers, etc. 5. Transfers of personal data The Data are processed at the Data Controller’s operational offices and in any other place where the parties involved in the processing are located.
For the purposes referred to in paragraph (3), section (a) above, the personal data provided by the User may be made accessible:

  • to employees and collaborators of CAV, in their capacity as persons authorised to Process Data (or so-called “persons in charge of the Processing”), such as, for example, personnel management officers, sales area employees, system administrators, etc.,
  • to third parties who carry out activities in partnership with CAV or supply on behalf of CAV (IT companies, service providers, postal couriers, hosting providers, etc.) who, if necessary, may be appointed as Data Processors by the Data Controller, as well as access the Users’ Personal Data whenever necessary and will be contractually obliged to keep the Personal Data confidential in their capacity as Data Processors,
  • judicial or supervisory authorities, administrations, public bodies and bodies (national and foreign).

Should the User express his/her consent to the use of personal data for the purposes referred to in paragraph (2), section (b) above, the same may be made accessible to the subjects indicated in points (1), (2), and (3) above. 6. Transfer and storage of personal data The management and storage of Personal Data takes place in the cloud and on servers located within the European Union at the disposal of CAV, duly appointed as Data Processors.
Users’ personal data will not be disseminated.
Personal Data collected for the purposes indicated in paragraph (3), section
(a) will be processed and stored for the entire duration of the relationship established.
From the date of termination of this relationship, for any reason or cause, the Data will be kept for the duration of the applicable statutes of limitations.
Personal Data collected for the purposes indicated in paragraph (3), section
(b) will be processed and stored for the time necessary to fulfil these purposes and in any case for no longer than 10 years from the date on which CAV receives the User’s consent and in any case until the completion of the limitation period provided for by the regulations in force.
All Data collected will not be subject to any automated decision-making, including profiling, which may produce legal effects for the individual or that may significantly affect him. 7. Exercisable rights The User has the right to ask CAV through the Site, at any time, for access to his/her Personal Data, the correction or deletion of the same or to object to their processing in the cases provided for by sending a request via e-mail to the DPO for:

  • Right of access – Obtain confirmation as to whether or not personal data concerning you is being processed (Article 15, GDPR),
  • Right to rectification – Obtain, without undue delay, the rectification of inaccurate personal data concerning you and the completion of incomplete Personal Data (Article 16, GDPR),
  • Right to erasure – Obtain, without undue delay, the erasure of Personal Data concerning you, in the cases provided for by the GDPR (Article 17, GDPR),
  • Right to restriction – Obtain from CAV the restriction of processing, in the cases provided for by the GDPR (Article 18, GDPR),
  • Right to portability – Receive in a structured, commonly used and machine-readable format, the Personal Data concerning the User provided to CAV, as well as obtain that the same be transmitted to another Data Controller without hindrance, in the cases provided for by the GDPR (Article 20, GDPR),
  • Right to object – Object to the processing of Personal Data concerning you, unless there are legitimate grounds for CAV to continue processing (Article 21, GDPR),
  • Right to lodge a complaint with the supervisory authority – Lodge a complaint with the Guarantor Authority for the protection of personal data, Piazza di Montecitorio n.
    121, 00186, Rome (RM).

To exercise their rights, Users may send a request to the contact details of the Data Controller indicated on this page.
Requests are made free of charge and processed by the Data Controller as soon as possible, in any case within 30 days. 8. Processing methods The processing of Users’ Personal Data is carried out by means of the operations indicated in Article 4, no. 2) of the GDPR – carried out with or without the aid of IT systems – and precisely: collection, recording, organization, structuring, updating, storage, adaptation or modification, extraction and analysis, consultation, use, communication by transmission, comparison, interconnection, limitation, cancellation or destruction.
In any case, the logical and physical security of the Data and, in general, the confidentiality of the Personal Data processed will be guaranteed, by implementing all the necessary technical and organizational measures appropriate to ensure their security. 9. Versions of the Privacy Policy This Privacy Policy is effective from 3 July 2024.
CAV reserves the right to modify or simply update its content, in part or completely, also due to changes in the applicable legislation.
If the changes to this Policy concern substantial changes in processing or may in any case have a significant impact on Users, CAV will take care to notify the data subjects.
The updated version of the Privacy Policy, in any case, will be published on this page, indicating the date of its last update. 10. Security We protect your Personal Data with technical and organizational security measures designed to prevent it from being used unlawfully or fraudulently.
We take technical, physical, and administrative security measures designed to provide reasonable protection of Personal Data from loss, misuse, unauthorized access, disclosure, and alteration.
Security measures include firewall software, data encryption, access controls to our offices, and information access authorization controls.
While we strive to protect our systems and services, you are responsible for protecting and maintaining the privacy of your passwords and account registration information, and for ensuring that the Personal Data we maintain about you is accurate and current.
We are not responsible for the protection of Personal Data that we share with third parties based on an account connection that you have authorized.
In particular, we use security measures that guarantee the encryption of the Data, the confidentiality, integrity, availability of the User’s Data, the ability to restore the Data in the event of a data breach.
In addition, CAV undertakes to regularly test, verify and evaluate the effectiveness of technical and organizational measures in order to ensure continuous improvement in the security of the Processing. 11. Complaints If you believe that the Processing of your Personal Data has been carried out unlawfully, you may lodge a complaint with one of the competent Supervisory Authorities for compliance with the rules on the protection of Personal Data.
In Italy, the complaint can be submitted to the Italian Data Protection Authority, at https://www.garanteprivacy.it.
v1.0 – 03/07/2024