Privacy notice pursuant to Articles 13-14 of the European Privacy Regulation (GDPR)
PRIVACY NOTICE
This page describes how the site is managed with regard to the processing of personal data of users who consult it, as well as the methods and purposes of the processing of personal data.
This is a privacy notice also provided pursuant to Articles 13-14 of EU Regulation 2016/679 to those who interact with web services accessible electronically from the address: site_domain
This site is owned by site_name, which operates and maintains this site for the purpose of providing information and communications concerning the products or services offered.
This privacy notice is provided only for the website in question and not for any other websites that may be consulted via our links, for which site_name is in no way responsible.
site_name, in its capacity as Data Controller of your personal data, pursuant to and for the purposes of EU Reg. 2016/679 – GDPR, hereby informs you that the aforementioned legislation provides for the protection of data subjects regarding the processing of personal data and that such processing will be based on the principles of fairness, lawfulness, transparency and the protection of your privacy and your rights.
Your personal data will be processed in accordance with the legislative provisions of the aforementioned legislation and the confidentiality obligations laid down therein.
TYPES OF DATA PROCESSED
Browsing Data
The IT systems and software procedures used to operate this website collect, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected with the intention of being associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, make it possible to identify users. This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment. This data is used solely to obtain anonymous statistical information on the use of the website and to check that it is functioning correctly, and is deleted immediately after processing. The data may be used to establish liability in the event of any hypothetical computer crimes committed against the website.
Data provided voluntarily by the user
The optional, explicit and voluntary sending of e-mails to the addresses listed on this website, as well as the completion of forms to submit specific enquiries, entails the subsequent collection of the sender’s e-mail address – which is necessary to respond to the enquiries – as well as any other personal data included in the e-mail or form.
Summary information is provided or displayed on the website pages dedicated to specific on-demand services.
Profile data
Such data, provided at the time of registration in the customer area, includes your first and last name, date of birth, gender, the email address you use to register and the corresponding password, as well as contact details.
Purchase details
When you place an order, we collect your purchase details, including your order number, details of the subscription you are purchasing, and payment details.
Payment details
For the execution of payment, we collect the payment details provided by you, including IBAN and BIC or account number and bank code, credit card details and solvency data. We receive further payment data from external payment management services and credit reference agencies with which we cooperate for the purpose of payment management and solvency verification. We transmit to our payment management services only those data that are necessary for the processing of the payment. Any information relating to debit or credit cards is not stored by our systems when an order is placed. The provision of such data is mandatory in order to execute the requested order.
CONSEQUENCES OF REFUSING TO PROVIDE DATA
Apart from what is specified regarding browsing data, the user is free to provide the personal data given in request forms, mailing list subscription forms, event participation forms or otherwise indicated in contacts to request the sending of informational, technical or commercial material or other communications. Failure to provide such data may entail only the impossibility of obtaining what has been requested.
METHODS OF PROCESSING
Data is processed primarily using electronic and computerised tools and stored on computer media, paper media and any other suitable type of media, in compliance with the procedures set out in Articles 6 and 32 of the GDPR and by adopting appropriate security measures to prevent data loss, illicit or incorrect use and unauthorised access.
We would like to inform you that, in order to provide a comprehensive service, our portal may contain links to other websites that are not managed by us. We are not responsible for any errors, content, cookies, the publication of unlawful content, advertisements, banners or files that do not comply with current legislation, nor for compliance with data protection regulations by the websites we manage to which reference is made. To help us improve the service we offer, please report any malfunctions, misuse or suggestions immediately to the following email address: 1@mail.com
Your data will be processed solely by personnel expressly authorised by the Data Controller.
PURPOSE OF THE PROCESSING
Data will be processed for the following purposes:
- to provide access to the public and/or restricted sections of the website;
- carry out the activation and maintenance of any services subscribed to online or the sending of newsletters;
- to enable the purchase to be completed and the service to be provided;
- to process requests for information, quotations and technical support; - to provide information on the services and products supplied and on changes to products or services;
- comply with obligations established by law or regulations;
- protection of the Data Controller in legal proceedings;
- to enable the ongoing monitoring of the effectiveness of the proposed service.
PARTIES TO WHOM PERSONAL DATA MAY BE DISCLOSED
The personal data relating to the processing in question may also be disclosed to entities who are granted the right to access your personal data by statutory provisions or secondary and/or EU regulations. Your data may be disclosed exclusively to competent entities duly appointed for the performance of services necessary for the proper management of the relationship, with a guarantee of protection of the data subject's rights. Furthermore, certain data may be disclosed and disseminated to internet operators used by site_name for the management of its domains.
Your personal data will not be disclosed in any way.
Your data will not be transferred to third countries.
DATA RETENTION PERIOD
We inform you that, in compliance with the principles of lawfulness, purpose limitation and data minimisation, pursuant to Art. 5 of the GDPR, the retention period of your personal data is set for the period necessary for the performance of the requested services and in compliance with current regulations concerning the retention of fiscal, tax and contractual documentation.
RIGHTS OF DATA SUBJECTS
1. The data subject has the right to obtain confirmation as to whether or not personal data concerning them exist, even if not yet recorded, and their communication in an intelligible form.
2. The data subject has the right to obtain information on:
a. the origin of the personal data;
b. the purposes and methods of processing;
c. the logic applied in the case of processing carried out with the aid of electronic means;
d. the identification details of the data controller, the data processors and the designated representative pursuant to Article 5(2);
e. of the parties or categories of parties to whom the personal data may be communicated or who may learn of them as designated representatives within the State territory, data processors or persons in charge of processing.
3. The data subject has the right to obtain:
(a) the updating, rectification or, where interested, integration of the data;
b. the deletion, transformation into anonymous form or blocking of data processed in violation of the law, including those whose retention is unnecessary in relation to the purposes for which the data were collected or subsequently processed;
c. certification that the operations referred to in letters a) and b) have been notified, also as regards their content, to those to whom the data were communicated or disseminated, unless this requirement proves impossible or involves the use of means
d. manifestly disproportionate to the right protected;
f. data portability.
4. The data subject has the right to object, in whole or in part:
a. on legitimate grounds relating to the processing of his/her personal data, even if pertinent to the purpose of collection;
b. to the processing of personal data concerning him/her for the purpose of sending advertising or direct sales material or for carrying out market research
commercial or marketing communication
Furthermore, if the data subject considers that the processing of their personal data infringes current legislation, they may lodge a complaint with the supervisory authority for the protection of personal data pursuant to Article 77 of Regulation 2016/679.
THE DATA CONTROLLER
The data controller is site_name, with its registered office at site_address1, represented by its legal representative pro tempore.
The user has the right to obtain from the data controller the erasure (right to be forgotten), restriction, updating, rectification, portability of, and opposition to the processing of personal data concerning them, and in general may exercise all the rights provided for under Articles 15, 16, 17, 18, 19, 20, 21, and 22 of the GDPR.
To exercise the rights listed above, the data subject must submit a written request via email. The email should be sent to: 1@mail.com
