PRIVACY POLICY
Update April 2025
In compliance with the obligations provided for by the European Privacy Regulation EU/2016/679 (GDPR) we hereby intend to inform you about the processing of personal data freely provided by you and/or other parties communicated to Czerny's International Auction House S.r.l., in particular through:
- browsing web pages, accessing and registering in the reserved area, filling in forms or subscribing to newsletters on our website
- access to the reserved area and participation in auctions via the Czernys App (in this regard, the same treatment as for the reserved area of the website is specified).
The processing of data will be carried out in compliance with the privacy regulations in force and will be based on the principles of correctness, lawfulness and transparency and carried out in compliance with the principles of relevance, completeness and non-excessiveness.
CONTROLLER'S IDENTITY AND CONTACT DATA
The data controller, under Articles 4 and 24 of EU GDPR 2016/679, is:
Czerny’s International Auction House S.r.l (P .Iva. 01071900110)
Based in: Piazza Matteotti n. 48, Sarzana (SP),
e-mail: [email protected]
Website: www.czernys.com
Tel. + 39 0187 691376
1. CATEGORIES OF PERSONAL DATA AND PROCESSING METHODS
In the course of browsing and using our website, certain information may be collected and processed for the sole purpose of security and improving the service offered. The information collected mainly relates to interactions with the website and only session cookies are used.
In addition, some information is collected automatically (in anonymous, aggregate and pseudonymised form) using cookies and similar technologies when you browse the website. You can read more about our use of cookies in our "Cookies Policy".
Should you decide to participate in the auctions listed on our website, you will be required to register for access to the private area of our website and create your own account (in this regard, we invite you to read the Terms and Conditions of Sale of our website).
In this case, the information collected will include, but is not limited to:
- simple common data (customer master data, tax code, shipping address, contact data, telephone number and email);
- Information on offers and purchases made;
Once registered, in order to participate in the auction, you will be asked for additional information necessary for the fulfilment of the contract and compliance with the relevant regulations, such as but not limited to
- Common and 'parasensitive' personal data (ID, gun permit, credit card or bank details)
2. PURPOSES OF DATA PROCESSING AND RELATED LEGAL BASIS
The requested or acquired personal data will be treated exclusively for the purposes and according to the legal basis provided below:
| Finalità | Base giuridica |
| 1. 1Process information and contact requests, provide assistance and technical support services, including by telephone from the 'Contacts' section. | Consent is not required as the processing is necessary for the performance of the service requested by the user or for the establishment and/or performance of the contractual relationship (Art.6.1.b of the GDPR). |
| 2. For the performance of activities related to the establishment, management and continuation of contractual relationships. | |
| 3. For acting as an intermediary in the purchase/sale of the auctioned products. | |
| 4. Customer profile creation and management. | |
| 5. For logistics management and dispatch of the purchased product. | |
| 6. For the proper execution, operation, maintenance, security and improvement of the website, Czernys App and IT infrastructure. | Consent is not required as the processing is necessary for the pursuit of the legitimate interest of the data controller, security and maintenance (Art. 6.1.f GDPR). |
| 7. Send newsletters and other commercial communications | Consent is not required as these are communications relating to similar services and/or products (softspam). (art. 130 paragraph 4 Legislative Decree 196/2003) |
| 8. Sending messages and communications via Whatsapp. | Should the initial communication originate from Czerny's be consent is required (Art. 6.1.a Gdpr). If the communication originated by the customer the consent is to intended as implicit. In any event, the data subject may revoke it at any time by notifying the Controller. |
| 9. Sending messages and communications by SMS. | Legal basis is consent (Art. 6.1.a Gdpr). |
| 10. To fulfil any kind of obligation under laws, regulations or EU legislation. | Consent is not required as the processing is necessary to fulfil legal obligations to which the data controller is subject (Art. 6.1.c GDPR) |
| 11. For the settlement of any legal disputes that may arise during the course of the relationship; | Consent is not required as the processing is necessary for the pursuit of a legitimate interest of the Controller to protect itself for breach of contract or other causes of damage (Art. 6.1.f GDPR) |
In the performance of the service and for the purposes of compliance with anti-money laundering regulations (Legislative Decree 231/2007), the Controller may become aware of or collect data of a judicial nature, which will be processed for the sole purposes provided for by law.
Any refusal, even if legitimate, to provide all or part of the above data, could make it difficult to access and use our services and compromise the regular course of the relationship with our structure and in particular, for the personal data defined as mandatory and indispensable, could make it impossible to access and participate in the auction and result in our inability to carry out the normal course of business operations and the regular provision of the products/services requested.
3. METHODS OF TREATMENT
The processing of your personal data is mainly carried out with the aid of computer systems - and may consist of the following operations: collection, recording, organisation and storage, consultation, use, processing, modification, selection, extraction, comparison, interconnection, transmission, communication, dissemination, deletion, destruction, blocking and restriction.
In carrying out the processing operations, all technical, IT, organisational and procedural security measures will always be adopted, so that the minimum level of data protection required by law is guaranteed. The aforementioned methods, applied for the processing, will guarantee access to the data only to the subjects specified in point 6.
4. CATEGORIES OF RECIPIENTS OF PERSONAL DATA
The subjects or categories of subjects who may become aware of the personal data or to whom they may be disclosed are as follows
• Processors include: IT consultants and software houses, consultants and consulting companies, freelancers, self-employed workers, transport and logistics companies.
• judicial or supervisory authorities, administrations, public bodies and organisations (domestic and foreign), but solely for the purpose of fulfilling legal, regulatory or EU obligations, auditors and audit firms for the same purposes.
Personal data may also be disseminated, but only in aggregate, anonymous form and for statistical purposes.
5. STORAGE AND TRANSFER OF PERSONAL DATA ABROAD
The management and storage of personal data takes place on servers located within the European Union owned by and/or at the disposal of the Data Controller and/or third party companies, duly appointed as processors.
The company is also equipped with the Whatsapp Business application to answer customer queries and therefore the use of this application will result in WhatsApp Ireland Limited being appointed as the external processor and the possible transfer this data outside the EU.
6. PERIOD OF PERSONAL DATA RETENTION
The data will be collected and recorded only for the purposes described above and will be kept for a period strictly necessary for these purposes: 50 years for all personal data and identification documents in the cases provided for by art. 35 Tulps; 10 years from the conclusion of the relationship for administrative and/or legal purposes; for the purposes of sending newsletters, for the period strictly necessary to develop communication campaigns, also taking into account the particular activity of collecting.
7. EXERCISABLE RIGHTS
In accordance with the provisions of the GDPR, you may exercise the rights set out therein and in particular:
a) You may at any time request from the Data Controller, copies of your personal data, information on the location where your personal data are processed, and an updated list with the identification details of all Processors and System Administrators authorised to process your data.
b) At any time, he/she may freely revoke the consent given, without any charge and prejudice to the lawfulness of the processing carried out up to that moment, and exercise the following rights of the data subject vis-à-vis the Data Controller as provided for by the European Privacy Regulation EU/2016/679 of Access, Rectification, Cancellation, Limitation, Opposition, Portability and Complaint to the Privacy Guarantor.
8. The request can be made by using the UNSUBSCRIBE option in the newsletter or by writing an email to [email protected]