Privacy Policy for Users

Yolo Enterprise S.r.l., with registered office at Via San Bernardino 120, 24126 Bergamo (BG), tax code and VAT number 04558280162 (hereinafter, also “Yolo” or the “Data Controller”), as the data controller of the personal data of users (hereinafter, the “Users”) who browse and use the services available on the website www.ct-designer.com (hereinafter, the “Site” and the “Services”), provides the following privacy policy pursuant to art. 13 of EU Regulation 2016/679 of 27 April 2016 (hereinafter, the “Regulation” or also the “Applicable Legislation”).

This Site and its Services are reserved for individuals who are at least eighteen years of age. The Data Controller therefore does not collect personal data relating to individuals under the age of 18. Upon request from Users, the Data Controller will promptly delete all personal data inadvertently collected relating to individuals under the age of 18.

The Data Controller takes the right to privacy and personal data protection of its Users very seriously. For any information regarding this privacy policy, Users may contact the Data Controller at any time using the methods described in paragraph 6 below.

1. Purpose of processing
   Users’ personal data will be lawfully processed by Yolo pursuant to Article 6 of the Regulation for the following processing purposes:

a) contractual obligations and provision of Services, to enable navigation of the Site or to fulfill specific User requests. The User’s data collected by Yolo for the purposes listed above includes: first name, last name, province of residence/domicile, email address, telephone number, and any personal information the User voluntarily discloses. Unless the User gives Yolo specific and optional consent to process their data for additional purposes, the User’s personal data will be used by Yolo exclusively to verify the User’s identity (including by validating the email address), thus preventing possible fraud or abuse, and to contact the User for service-related purposes only (e.g., sending notifications relating to the Services). Without prejudice to the provisions elsewhere in this privacy policy, under no circumstances will Yolo make Users’ personal data accessible to other Users and/or third parties.

b) administrative-accounting purposes, or to carry out organizational, administrative, financial, and accounting activities, such as internal organizational activities and activities functional to the fulfillment of contractual and pre-contractual obligations;

c) obblighi di legge, ovvero per adempiere ad obblighi previsti dalla legge, da un’autorità, da un regolamento o dalla normativa europea.

d) Abandoned cart recovery
If the User initiates a purchase process by entering their data without completing the order, the Data Controller may send a single email containing a cart reminder and a link to complete the purchase. This email is intended solely to complete the process initiated by the User and has no promotional content. The processing is carried out in compliance with the provisions of Article 130 of Legislative Decree no. 196/2003.

Providing personal data for the processing purposes indicated above is optional but necessary, as failure to provide such data will make it impossible for the User to browse the site, register on the Site, and use the Services.
Personal data required for the processing purposes described in this paragraph 1 are indicated with an asterisk in the registration form on the Site.

2. Additional processing purposes: marketing (sending advertising materials, direct sales, and commercial communications).
   With the User’s free and optional consent, some of the User’s personal data (i.e., first name, last name, and email address) may also be processed by Yolo for marketing purposes (sending advertising materials, direct sales, and commercial communications), or so that Yolo can contact the User by post and/or email to propose the purchase of products and/or services offered by Yolo and/or third-party companies, and to present offers, promotions, and commercial opportunities.
   Failure to consent will not affect your ability to use/navigate the Site and/or take advantage of the Services (purchase of products).

If consent is given, the User may revoke it at any time by making a request to Yolo using the methods indicated in paragraph 6 below.
The User may also easily opt out of receiving further promotional communications via email by clicking on the appropriate link to revoke consent, which is included in each promotional email. Once consent is revoked, Yolo will send the User an email confirming the withdrawal of consent.

Yolo informs you that, following the exercise of the right to object to the sending of promotional communications via email, for technical and operational reasons (e.g., contact lists already filled shortly before Yolo receives the opt-out request), you may continue to receive some additional promotional messages. If you continue to receive promotional messages after 24 hours have passed since exercising the right to object, please report the problem to Yolo using the contact details indicated in paragraph 5 below.

3. Additional processing purposes: invitations to leave reviews
   With the User’s free and optional consent, some of the User’s personal data (i.e., first name, last name, and email address) may also be processed by Yolo for marketing purposes, so that Yolo can send the User email invitations to review products purchased through the Site and/or Yolo Services, for subsequent publication on the Site and/or Yolo’s official social media channels.

Failure to consent will not affect your ability to use/browse the Site and/or use the Services (purchase products).
If you have given your consent, you may revoke it at any time by making a request to Yolo using the methods indicated in paragraph 6 below.
Upon withdrawal of consent, Yolo will send you an email confirming your withdrawal.

Yolo informs you that, following the exercise of your right to object to receiving review invitations, you may continue to receive some additional promotional messages for technical and operational reasons (e.g., contact list creation was already complete shortly before Yolo received your request to object). If you continue to receive messages with review invitations after 24 hours have passed since exercising your right to object, please report the problem to Yolo using the contact details provided in paragraph 6 below.

4. Data processing methods and retention periods
   The Data Controller will process Users’ personal data using manual and electronic means, using methods strictly related to the purposes themselves and, in any case, in a manner that guarantees the security and confidentiality of the data.

Users’ personal data will be retained for the time strictly necessary to fulfill the primary purposes outlined in paragraph 1 above, or in any case as necessary to protect the interests of both Users and Yolo in civil proceedings.
In the cases referred to in paragraph 2 above, Users’ personal data will be retained for the time strictly necessary to fulfill the purposes outlined therein and, in any case, for no longer than 24 months.

In the cases referred to in the previous paragraph 3, Users’ personal data will be retained for the time strictly necessary to carry out the purposes illustrated therein and, in any case, for no longer than 2 months.

5. Scope of communication and dissemination of data
Users’ personal data may be disclosed to the Data Controller’s employees and/or collaborators responsible for managing the Site and all services related to the provision of the Services. These individuals, who have been instructed to do so by the Data Controller pursuant to Article 29 of the Regulation, will process Users’ data exclusively for the purposes indicated in this policy and in compliance with the provisions of the Applicable Law.

Furthermore, third parties who may process personal data on behalf of the Data Controller as “External Data Processors” may become aware of the Users’ personal data, such as, for example, suppliers of IT and logistics services functional to the operation of the Site and/or the Services, suppliers of outsourcing or cloud computing services, professionals and consultants.

Users have the right to obtain a list of any data processors appointed by the Data Controller by making a request to the latter using the methods indicated in the following paragraph 6.

Furthermore, Yolo may disclose Users’ personal data, to the extent necessary and essential to fulfill contractual obligations, to independent third-party data controllers, such as payment service providers and logistics providers required for the delivery of goods sold through the Site. These independent data controllers will process the User’s data exclusively for the purpose of properly fulfilling orders relating to the Services.

1. Data Subject Rights
   Users may exercise the rights granted to them by Applicable Law by contacting the Data Controller in the following ways:
   • Sending a registered letter with return receipt to the Data Controller’s registered office (Via San Bernardino 120, 24126 Bergamo (BG))
   • Sending an email to info@ct-designer.com
   • Sending a certified email to yoloenterprisesrls@registerpec.it.

Pursuant to Applicable Law, the Data Controller informs Users that they have the right to obtain information on (i) the source of their personal data; (ii) the purposes and methods of processing; (iii) the logic applied to processing carried out with the aid of electronic means; (iv) the identification details of the Data Controller and data processors; (v) the entities or categories of entities to whom the personal data may be disclosed or who may become aware of it in their capacity as data processors or persons in charge of processing.
Furthermore, Users have the right to obtain:

a) access, updating, rectification or, when interested, integration of the data;

b) the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including data whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;

c) certification that the operations referred to in letters a) and b) have been brought to the attention, including with regard to their content, of those to whom the data were communicated or disseminated, except in the case in which such fulfillment proves impossible or involves the use of means manifestly disproportionate to the right protected.

Furthermore, Users have:

a) the right to withdraw consent at any time, if the processing is based on their consent;

b) (where applicable) the right to data portability (the right to receive all personal data concerning them in a structured, commonly used and machine-readable format), the right to restrict the processing of personal data and the right to erasure (“right to be forgotten”);

c) the right to object:
i) in whole or in part, for legitimate reasons, to the processing of personal data concerning them, even if pertinent to the purpose of the collection;
ii) in whole or in part, to the processing of personal data concerning them for the purposes of sending advertising or direct sales materials or for carrying out market research or commercial communications;
iii) where personal data are processed for direct marketing purposes, at any time, to the processing of their data carried out for such marketing, including profiling to the extent that it is related to such direct marketing.

d) if they believe that the processing of their data violates the Regulation, the right to lodge a complaint with a supervisory authority (in the Member State in which they habitually reside, in the one in which they work, or in the one in which the alleged violation occurred). The Italian supervisory authority is the Italian Data Protection Authority, located in Piazza Venezia 11, 00187 – Rome (http://www.garanteprivacy.it/).

The Data Controller is not responsible for updating all links displayed in this Policy; therefore, whenever a link is not functioning and/or updated, Users acknowledge and accept that they must always refer to the document and/or section of the websites linked to by that link.

Versione del 16/04/2026