Privacy policy

Introduction

Pursuant to Regulation (EU) 2016/679 ("General Data Protection Regulation" or "GDPR"), Italian Legislative Decree No. 196/2003, as amended by Legislative Decree No. 101/2018 ("Italian Privacy Code"), and all other applicable national and European legislation concerning the protection of personal data, Cart-One S.r.l. ("Cart-One" or the "Company") has prepared this Privacy Policy to explain to all users of the website https://www.cart-one.com ("Website") the purposes and methods by which Cart-One, acting as the Data Controller ("Controller"), collects and processes personal data ("Personal Data") obtained while users browse the Website.

This Privacy Policy applies to all individuals who access the Website, as well as those who communicate with Cart-One by sending emails to the addresses published on the Website ("Users").

This Privacy Policy applies exclusively to the Website https://www.cart-one.com and not to any third-party websites that may be accessed through links provided on this Website. Such websites are governed by their own privacy notices.

The use of social media features available on this Website (such as the LinkedIn plug-in) does not automatically allow the Company to collect Users' personal data. However, if a User is logged into their social media account when activating the plug-in, the relevant social network may associate the visit to our Website with the User's account. Any data transmission between the social network and the User's device, as well as interactions on the social platform, are governed solely by the privacy policy of the respective social network. Users are therefore encouraged to review the applicable privacy policy before using the plug-in. The social plug-in remains active until it is disabled or the related cookies are deleted.

Data Controller and Data Processor

The Data Controller is Cart-One S.r.l., with registered office at Via del Lavoro No. 2, 43056 Torrile (Parma), Italy.

Cart-One belongs to the SADA Group.

Website management is entrusted to the parent company Sada Partecipazioni S.r.l., acting as Data Processor pursuant to Article 28 GDPR, with registered office at Via Pacinotti snc, 84098 Pontecagnano Faiano (Salerno), Italy.

The Data Processor may also be contacted at:

Personal Data Voluntarily Provided by Users

  • Email communications
    Sending emails voluntarily to the addresses published on the Website results in the acquisition of the sender's email address, which is necessary to respond to requests, together with any additional personal data voluntarily included in the message. Such data are processed solely for the purpose of handling the request.
  • Contact Form
    When Users complete the Website's contact form, the information provided (first name, last name, email address, telephone number, VAT number, company name, quantity of items, delivery location) together with any additional information voluntarily entered in the message, is processed exclusively for responding to the request.
  • Offline data collection
    If Cart-One collects personal data offline (for example through paper forms), it will provide the data subject with the information required by Article 13 GDPR and, where necessary, obtain the appropriate consent. The same applies to downloadable forms made available through the Website.

Disclosure and Processing of Personal Data

Personal Data relating to the use of this Website are stored on the servers of the Company's hosting provider, Flamenetworks S.r.l., located within the European Union.

Personal Data are processed exclusively by duly authorized technical staff, who have received appropriate training regarding the GDPR, the Italian Privacy Code, and applicable data protection legislation.

Appropriate technical and organizational measures are implemented to protect Personal Data against accidental loss, destruction, unauthorized access, or unlawful processing. These measures are regularly updated in line with technological developments.

Personal Data collected through the Website are never publicly disclosed. They may, however, be communicated to service providers engaged by the Controller to perform specific activities, acting as independent controllers, joint controllers, or processors where applicable. Data may also be disclosed where required by law to judicial authorities, law enforcement agencies, or other public authorities.

Browsing Data

During normal operation, the Website's systems automatically collect certain technical information whose transmission is inherent in the use of Internet communication protocols. These data include IP addresses, domain names, requested URI addresses, request time, request method, file size, server response status, and information relating to the User's operating system and computing environment.

Such information is not collected to identify Users but, by its nature, could potentially allow identification through association with data held by third parties.

These data are processed exclusively to obtain anonymous statistical information regarding Website usage and to ensure the proper functioning of the Website. They are deleted immediately after processing unless required for investigating cybercrime affecting the Website. Under normal circumstances, browsing data are retained for no longer than seven (7) days.

Cookies

For more information regarding the cookies installed by this Website, please refer to our Cookie Policy .

Data Retention

Personal Data are processed only for as long as necessary to achieve the purposes for which they were collected. Thereafter, they may be retained only to comply with legal obligations, for administrative purposes, or for the establishment, exercise, or defense of legal claims.

Browsing Without Registration

Access to the Website is free of charge and does not require Users to register. Website browsing is not monitored with regard to referring websites or pages visited.

Data Subject Rights

Pursuant to Articles 15 et seq. of the GDPR, Users have the right to:

  • obtain confirmation as to whether their Personal Data are being processed;
  • access their Personal Data;
  • receive a copy of their Personal Data;
  • request correction or updating of inaccurate Personal Data;
  • request deletion of their Personal Data;
  • request restriction of processing;
  • request blocking of unlawfully processed data.

Users also have the right to object, on legitimate grounds, to the processing of their Personal Data where applicable.

Where processing is based on consent (for example, for direct marketing, advertising, market research, or commercial communications), Users may withdraw their consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Requests concerning the exercise of these rights may be submitted to the Data Processor at: privacy.grupposada@sadaspa.it , or by PEC at privacy.grupposada@pec.it .

If Users believe that the processing of their Personal Data violates the GDPR, they have the right to lodge a complaint with the competent Data Protection Authority pursuant to Article 77 GDPR or to seek judicial remedy pursuant to Article 79 GDPR.

Changes to this Privacy Policy

Cart-One processes Personal Data only for the purposes expressly authorized or requested by Users. However, this Privacy Policy may be updated to reflect changes in applicable legislation or the Company's data processing practices.

The latest version of this Privacy Policy will always be available in the dedicated section of the Website.

Users are encouraged to review this page periodically to remain informed of any updates.

Last updated: July 15, 2025

Cerca...