INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ARTICLE 13 OF EU REGULATION 679/2016
Last updated October 2026
This privacy notice will be reviewed and updated, where necessary, in the event of changes to applicable legislation.
Corcos srl, with registered office at Via Dei Ceramisti, 26 – 50055 Lastra a Signa (FI), Italy (hereinafter referred to as the “Data Controller” or the “Controller”), acting as Data Controller, hereby informs you, pursuant to Article 13 of EU Regulation No. 2016/679 (hereinafter also referred to as the “GDPR”), about our privacy policy, how your personal information is handled when you use our services, and, where applicable, how you may give your explicit and informed consent to the processing of your personal data in the sections of the website where you are asked to provide such data. This notice also fully complies with Recommendation No. 2/2001 adopted on 17 May 2001 by the European data protection authorities to establish certain minimum requirements for the collection of personal data online, particularly regarding the methods, timing and nature of the information that data controllers must provide to users when they visit web pages, regardless of the purpose of their visit. Consent mechanisms will be clear, concise and easy to understand. If the original conditions under which consent was requested change, for example if the purpose of data processing changes, further consent will be requested in accordance with European Regulation No. 679/2016. In accordance with the Regulation, all processing activities carried out by Corcos srl shall comply with the principles of lawfulness, fairness, transparency, purpose limitation, storage limitation, data minimisation, accuracy, integrity and confidentiality.
1. Data Controller
The Data Controller is Corcos srl, with registered office at Via Dei Ceramisti, 26 – 50055 Lastra a Signa (FI), Italy, which you may contact to exercise your rights. The Controller’s contact details are listed below:
• Telephone: +39.055.8721551
• Fax: +39.055.8721329
• Address: Via Dei Ceramisti, 26 – 50055 Lastra a Signa (FI), Italy
• Certified email (PEC): amministrazione@pec.corcos.com
• Email address: corcos@corcos.com
2. Data Protection Officer
The Data Protection Officer (DPO) of Corcos srl, whose registered office is at Via Dei Ceramisti, 26 – 50055 Lastra a Signa (FI), Italy, is Sara Corcos, acting in her capacity as Legal Representative. You may contact her using the following details:
• Telephone: +39.055.8721551
• Fax: +39.055.8721329
• Certified email (PEC): amministrazione@pec.corcos.com
• Email address: corcos@corcos.com
3. Purposes of Data Processing
Subject to your specific consent where required, we intend to process your personal data for the following purposes:
A) To provide the Services you request, including the collection, storage and processing of data for the purpose of establishing and subsequently managing the operational, technical and administrative aspects of the relationship associated with the provision of the Services, including the collection of data for unsolicited job applications, and to send communications relating to the management of the established relationship;
B) To enable you to browse and access the Corcos srl website;
C) To respond to requests for assistance or information received by email, telephone, chat through the application, or via the appropriate contact form;
D) To fulfil legal, accounting and tax obligations;
E) To carry out direct email marketing for services similar to those you have subscribed to, unless you initially objected to such processing or subsequently object through our communications, in pursuit of Corcos srl’s legitimate interest in promoting products or services in which you may reasonably be interested;
F) Where applicable, to conduct studies, research and market surveys; to send you advertising and informational material, commercial information or surveys aimed at improving the service (“customer satisfaction”), by email or SMS, by telephone with an operator, and/or through Corcos srl’s official social media pages;
G) To make personalised commercial offers based on the products or services you have purchased or shown an interest in while browsing our Website;
H) To subscribe you to newsletters;
I) Solely for security purposes and the prevention of fraudulent conduct, the Controller operates an automated monitoring system that involves detecting and analysing user behaviour on the website in connection with the processing of Personal Data.
3.1 Legal basis and mandatory or optional nature of processing
The legal basis for processing Personal Data for the purposes described in the preceding section is Article 6(1)(b) of the Regulation, as such processing is necessary for the provision of contracted services. Providing Personal Data for these purposes is optional; however, failure to provide such data may make it impossible to activate the requested Services. Processing carried out to comply with legal obligations is lawful under Article 6(1)(c) of the Regulation. Once Personal Data have been provided, processing may be necessary to fulfil legal obligations to which Corcos srl is subject. Processing for the marketing and newsletter purposes described above is based on your consent pursuant to Article 6(1)(a) of the Regulation. Providing your Personal Data for these purposes is entirely optional and does not affect your ability to use the Services. Subsequent processing for email marketing relating to products or services similar to those you have purchased is instead based, pursuant to Article 6(1)(f) of the Regulation, on Corcos srl’s legitimate interest in promoting its products or services in a context where the data subject may reasonably expect such processing. You may object to this processing at any time. If you wish to object to the processing of your data for these marketing purposes, you may do so at any time through your control panel, by sending a request to Corcos srl at corcos@corcos.com, or by using the mechanism provided in the commercial email itself.
4. Processing Methods
In relation to the purposes set out in the preceding section, personal data are processed in compliance with the principles of confidentiality, fairness, lawfulness and transparency, using manual, computerised and electronic tools and procedures strictly related to those purposes. These may include the use of fax, telephone, mobile phone, email or other remote communication technologies. Personal data will be managed by implementing appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with Article 32 of the GDPR.
5. Recipients of Personal Data
Your Personal Data may be shared, for the purposes described above, with:
A) Parties typically acting as data processors, namely: i) individuals, companies or professional firms providing Corcos srl with accounting, administrative, legal, tax, financial and debt recovery assistance and consultancy in connection with the provision of the Services; ii) parties with whom interaction is necessary to provide the Services; iii) parties appointed to carry out technical maintenance activities, including maintenance of network equipment and electronic communication networks;
B) Parties, bodies or authorities to whom your personal data must be disclosed pursuant to legal provisions or orders issued by the competent authorities;
C) Individuals authorised by Corcos srl to process Personal Data where necessary to carry out activities strictly related to the provision of the Services, who are bound by confidentiality obligations or an appropriate legal duty of confidentiality, such as employees of Corcos srl;
D) Business partners for their own independent purposes, but only if you have given specific consent. The complete list of data processors is available by sending a written request to Corcos srl at corcos@corcos.com.
6. Data Retention Period
Data will be processed throughout the duration of the contractual relationship and thereafter, where necessary, to fulfil legal obligations and for administrative and commercial purposes.
7. Rights of the Data Subject
Pursuant to Articles 7, 15, 16, 17, 18, 20, 21 and 22 of EU Regulation No. 2016/679, the data subject has the right to obtain confirmation as to whether or not personal data concerning them are being processed and, where that is the case, to access such data and the following information. The data subject has the right to obtain information about:
a) The purposes of the processing;
b) The categories of personal data concerned;
c) The recipients or categories of recipients to whom the personal data have been or will be disclosed, particularly recipients in third countries or international organisations;
d) Where possible, the envisaged retention period for the personal data or, if this is not possible, the criteria used to determine that period;
e) Any available information regarding the source of the data, where the data have not been collected from the data subject;
f) The existence of automated decision-making, including profiling.
The data subject also has the following rights:
a) The right to obtain from the Controller, without undue delay, the rectification of inaccurate personal data concerning them;
b) The right to obtain from the Controller, without undue delay, the erasure of personal data concerning them (“right to erasure” or “right to be forgotten”);
c) The right to obtain restriction of processing from the Controller;
d) The right to object at any time, on grounds relating to their particular situation, to the processing of personal data;
e) The right to receive their personal data in a structured, commonly used and machine-readable format;
f) The right to withdraw consent at any time;
g) The right to lodge a complaint with a supervisory authority;
h) The right to be informed of the existence of appropriate safeguards where personal data are transferred to a third country or an international organisation;
i) The right to obtain a copy of the personal data undergoing processing.
To exercise these rights, you may contact the Controller using the contact details provided in Section 1 – Data Controller, by submitting a request by registered letter, fax and/or email.
8. Data Transfers
In accordance with applicable legislation, the personal data provided may be transferred, for the purposes described in the preceding section, to countries within the European Union or to countries outside the European Union. Corcos srl ensures that the processing of your Personal Data by these recipients complies with the Regulation. Such transfers may be based on an adequacy decision or on Standard Contractual Clauses approved by the European Commission. Further information is available from the Controller.
9. Cookies
Cookies are small text files stored by a website through your browser on the hard drive of a client computer to retain small amounts of information from the website for a certain period of time. There are generally different types of cookies, divided into technical cookies and profiling cookies (cookies used for marketing and promotional purposes).
This website uses technical and profiling cookies. Further details are provided below.
Technical cookies are particularly important for the functionality of the website. These include navigation and session cookies, which enable user-friendly browsing. There are also so-called analytics cookies, which collect information such as the number of website visitors or the pages visited and the paths followed through the website. Technical cookies also include functional cookies, which allow the website to remember your choices, such as filters you have selected or the automatic language setting of a website.
There are also cookies that record user settings, preferences and actions and are used to create a user profile. These are known as profiling cookies. They are used to match advertising messages to users’ interests, thereby enabling targeted advertising aimed at specific user groups. When a web page using these cookies is opened, a banner appears informing users that the website operators use cookies for marketing purposes. The banner also informs users that the page may allow third-party cookies.
The banner links to a page containing detailed information (the page you are currently viewing), where users can refuse the storage of cookies.
The banner allows users to give their consent and displays a notice indicating that continuing to browse the website automatically constitutes consent to the use of cookies.
Clicking on the detailed information does not necessarily imply consent. The banner does not disappear after a certain period of time; it remains visible until the user has consented, refused or knowingly continued browsing. We are legally required to record and store the user’s decision, so the banner will no longer appear on the user’s next visit.
You may also refuse the use of cookies either entirely or selectively. If you do not wish to accept our cookies, you can reject them through your web browser. The relevant function varies from browser to browser; further details can be found below. Please note that refusing cookies may limit certain website functionalities.
Users may selectively opt out of data collection by Google Analytics by installing the appropriate opt-out component provided by Google in their browser.
The collection and use of information obtained through social media plugins are governed by the respective privacy policies of those social networks, which you are invited to consult.
Corcos srl complies with the provisions of the Italian Personal Data Protection Code (“Privacy Code”), as amended by Legislative Decree No. 69 of 28 May 2012, implementing European Directive 2009/136/EC, and with the provisions of Regulation (EU) 2016/679.
Users may prevent cookies from being stored on their devices by configuring the browser they use to access the website. If you use www.corcos.com without changing your browser settings, we assume that you wish to receive all cookies used by the website and to benefit from all its functionalities.
For full details of the cookies installed, please refer to our Cookie Policy.
10. Data Processors and Authorised Persons
The up-to-date list of data processors and persons authorised to process personal data is kept at the registered office of the Data Controller.