Welcome on carptackleworld.com

Sell

Fewer unnecessary questions, less wasted time, faster sales.
Publish your listings on a marketplace built on clear rules, secure payments, and defined procedures.

Buy

High-quality used carpfishing equipment. Secure payments, including interest-free instalments. Greater control over
shipping and payments

Carptackleworld.com

Privacy Policy

PRIVACY POLICY

Welcome to carptackleworld.com, a European platform designed and dedicated to carp anglers for the buying and selling of premium used fishing equipment.

In accordance with Regulation (EU) 2016/679 on the protection of personal data (hereinafter, the “GDPR”), we hereby provide you with the following information regarding the processing of your personal data. Where the processing of personal data involves transfers to countries located outside the European Union, including the United Kingdom (UK), such transfers shall take place in compliance with the safeguards provided for under the GDPR, on the basis of adequacy decisions issued by the European Commission and/or appropriate legal instruments designed to ensure an adequate level of protection of personal data

1. DATA CONTROLLER

carptackleworld.com is a platform owned by and a brand controlled by Siamese Network Srls, with its registered office at Via Principe Umberto 79, 97019 (RG), Italy, VAT and Tax Code no. 01700190885 (hereinafter, the “Data Controller”).

For the purpose of providing the services offered through its websites, the Data Controller processes certain personal and business-related data that are necessary for the provision of such services.

Such data may be provided:

  • implicitly, through the tools used by users to access and use the services; or
  • explicitly, through the completion of forms or the voluntary submission of information by users.

The Data Controller may process the following categories of users’ personal data:

  • technical and browsing data, such as IP address, access logs, identifiers of the devices used by the user, operating system, browser characteristics, connectivity provider, date and time of access, and parameters relating to the user’s operating system and IT environment;
  • usage and browsing data for profiling purposes, collected indirectly through the use of the website and the services offered (e.g. interactions, preferences, browsing behaviour), processed exclusively on the basis of the user’s explicit consent, where required under applicable law.
  • standard personal identification and contact data, voluntarily provided by the user, such as first name, last name, email address, telephone number, residential or domicile address, tax identification number and/or VAT number, as well as any additional information required for registration, access to, and use of the products and services offered through the platform;
  • administrative, contractual and fiscal data, where required and applicable, related to the management of contractual relationships, compliance with legal obligations, and the provision of services (e.g. billing data, payment-related information), limited to what is strictly necessary.

Where the processing of personal data involves transfers to countries located outside the European Union, including the United Kingdom (UK), such transfers shall be carried out in accordance with the provisions of the GDPR, on the basis of adequacy decisions adopted by the European Commission and/or appropriate safeguards provided for under applicable law, ensuring a level of protection of personal data equivalent to that guaranteed within the European Union.

2. PURPOSESAND LEGAL BASES OF PROCESSING

The personal data provided by the user and the data collected through cookies and tracking tools are processed by the Data Controller exclusively for purposes related to the provision of the requested services, as well as for any additional purposes for which the user has given valid consent, where required under applicable law.

Personal data are processed, in particular, in order to enable website browsing, registration on the platform, account management, the publication and consultation of listings, the provision of the services offered, and user support activities. Such processing activities are based on the performance of a contract or pre-contractual measures and, where necessary, on the legitimate interest of the Data Controller in ensuring the proper functioning and security of the website. Only with the user’s prior explicit consent may personal data be used for the purposes of carrying out statistical analyses, market research, promotional and commercial communication activities, including through social media, as well as for sending information relating to the services, products, and initiatives of the Data Controller (direct marketing purposes).
Consent is optional and may be withdrawn at any time.
Subject to the user’s prior explicit consent, personal data may be processed for profiling purposes through automated tools that analyse the user’s preferences and browsing behaviour during access to and use of the services, in order to provide personalised content and communications, including advertising-related content. Profiling activities do not involve the adoption of automated decision-making processes that produce legal effects concerning the user or similarly significantly affect the user.

Personal data may also be processed in order to comply with obligations imposed by applicable laws, regulations, or legal provisions, including obligations of a fiscal, accounting, and administrative nature. The use of cookies and similar technologies is governed by the Cookie Policy, to which reference is made. Profiling cookies and third-party cookies are installed exclusively subject to the user’s prior consent. Where the processing of personal data involves transfers to countries located outside the European Union, including the United Kingdom (UK), such transfers shall be carried out in compliance with Articles 44 et seq. of the GDPR. Subject to the user’s prior explicit consent, personal data may also be processed in order to improve the effectiveness of advertising campaigns, analyse the use of the services offered in aggregated or pseudonymised form, and support the development of the Data Controller’s digital strategies (profiling purposes).

Subject to the user’s prior explicit and specific consent, the user’s personal data may be disclosed to third parties operating, by way of example, in the publishing, financial, insurance, automotive, energy, and fast-moving consumer goods sectors, as well as to humanitarian and charitable organisations. Such third parties shall process the data as independent Data Controllers for the purposes of carrying out statistical analyses, market research, and sending commercial and promotional communications relating to their own products, services, or initiatives (third-party marketing purposes). An updated list of third-party data recipients may be requested at any time from the Data Controller using the contact details provided in this Privacy Policy. Marketing and market research communications may be carried out via postal mail, email, telephone calls with an operator, SMS, or other electronic communication tools, in compliance with applicable law. The consent provided is optional and may be withdrawn at any time. Certain processing activities may be carried out by external service providers, duly appointed as Data Processors pursuant to Article 28 of the GDPR, including providers located outside the European Union.

The legal bases for the processing activities described above are the performance of requests made by the data subject, where applicable, and the user’s explicit consent, pursuant to Article 6(1)(a) of the GDPR.

3. DISCLOSURE, COMMUNICATION AND RECIPIENTS OF PERSONAL DATA

The user’s personal data are not subject to public disclosure.

However, personal data may be communicated, within the limits of the purposes set out in this Privacy Policy and where necessary for the provision of the services, to third parties such as technical and IT service providers, hosting service providers, maintenance and support service providers, communication service providers, entities responsible for payment processing, shipping services, and customer support services.

Such parties shall process personal data either as Data Processors, where appointed pursuant to Article 28 of the GDPR, or as independent Data Controllers, where they independently determine the purposes and means of the processing. Access to personal data is also permitted to individuals authorised by the Data Controller who are part of the internal organisational structures involved in the management and delivery of the services, including, by way of example, administrative, commercial, marketing, customer support staff and system administrators, within the scope of their respective duties and in accordance with the instructions provided by the Data Controller. Some of the above-mentioned recipients may be established outside the European Union. In such cases, the transfer of personal data shall be carried out in compliance with Articles 44 et seq. of the GDPR. An updated list of the appointed Data Processors may be requested at any time from the Data Controller using the contact details provided in this Privacy Policy.

The Data Controller retains the right to disclose personal data to third parties where the user has provided specific and optional consent, as well as in cases where such disclosure is required to comply with legal obligations or orders issued by the competent authorities.

4. TRANSFER OF PERSONAL DATA OUTSIDE THE EUROPEAN UNION

The user’s personal data are primarily processed within the territory of the European Union.

However, for technical and organisational requirements, the Data Controller may engage suppliers or services located outside the European Union, or make use of infrastructure and cloud services that involve the transfer of personal data to third countries.
In such cases, the transfer of personal data shall be carried out in full compliance with the provisions set out in Chapter V of the GDPR and exclusively where appropriate safeguards are in place.

5.  DURATION OF PROCESSING AND RETENTION OF PERSONAL DATA 

The user’s personal data are processed for the period strictly necessary to achieve the purposes for which they were collected.

Personal data provided for the provision of the services are retained for the entire duration of the contractual relationship and, thereafter, for a maximum period of 12 months following termination of the service, unless a longer retention period is required by law or is necessary for the establishment, exercise, or defence of legal claims.

Personal data processed for marketing purposes are retained until the user withdraws their consent.

Personal data processed for profiling purposes are retained for a maximum period of 12 months from the commencement of the processing.

6. RIGHTS OF THE DATA SUBJECT

The user may exercise, at any time, the rights provided for under Articles 15 et seq. of the GDPR.

The user also has the right to lodge a complaint with the competent Data Protection Authority.

7.  PRIVACY CONTACTS 

The Data Controller has not appointed a Data Protection Officer (Data Protection Officer – DPO), as the conditions set out in Article 37 of the GDPR do not apply.

For any request relating to privacy matters or for the exercise of the rights provided for in this Privacy Policy, the user may contact the Data Controller at the following details:

Siamese Network Srls
Via Principe Umberto 79
97019 – RG – (Italy)
📧 Email: dpo@siamesenetwork.it

Privacy Policy – last updated: 21/01/2026