PRIVACY POLICY FOR THE PROCESSING OF PERSONAL DATA PURSUANT TO ARTICLE 13 OF THE EU GENERAL DATA PROTECTION REGULATION 2016/679
In compliance with the provisions of EU General Data Protection Regulation 2016/679 (European Regulation for the protection of personal data), we provide you with the necessary information regarding the processing of the personal data provided. The information is not to be considered valid for other websites that may be reached through links (links) present on the websites in the domain of the owner, who is therefore not to be considered in any way responsible for the data collected and processed. This is an information that is provided pursuant to art. 13 of EU GDPR 2016/679 (European Regulation for the protection of personal data) and is also inspired by the provisions of Directive 2002/58 / EC, as updated by Directive 2009/136 / EC, on the subject of Cookies as well as provided for by the Provision of the Guarantor Authority for the protection of personal data of 08.05.2014 regarding cookies.
Processable personal data: "personal data": any information relating to an identified or identifiable natural person ("data subject"); the natural person is considered identifiable who can be identified, directly or indirectly, with particular reference to an identifier such as the name, an identification number, location data, an online identifier or one or more characteristic elements of his physical identity, physiological, genetic, psychic, economic, cultural or social.
Specific information: specific information may be presented on the pages of the Site in relation to particular services or processing of the Data provided.
DATA CONTROLLER and other relevant subjects
You will be able to view all the relevant subjects involved in data processing in the SUBJECTS section that you can find in this box. The section also contains the contact details to get in touch with them.
The updated list of data processors is kept at the registered office of the Data Controller.
PURPOSE AND LEGAL BASIS OF THE PROCESSING
The personal data provided will be processed in compliance with the conditions of lawfulness pursuant to art. 6 of EU GDPR 2016/679, for the following purposes:
- navigation on this website: legitimate interest (Article 6 paragraph 1 letter f)) as the legal basis of the processing;
- any request for contact, with the sending of information requested by you: legitimate interest (Article 6 paragraph 1 letter f)) as the legal basis of the processing;
- with prior consent and until revocation: for direct marketing activities of the Owner, newsletters, market research or other sample research and direct sales to receive - via automated means e-mail, fax, messages such as Mms (Multimedia Messaging Service) or Sms ( Short Message Service) or other types, as well as through telephone calls via operator and paper mail - information material, for the detection of the degree of satisfaction, promotional, commercial and advertising material or relating to events and initiatives, by the Owner - consent (art . 6 paragraph 1 letter a)) as the legal basis of the processing;
- acquisition of preliminary information suitable for registering the user account that allows access to the protected and functional areas of the site (Article 6 paragraph 1 letter b)) as the legal basis of the processing;
- process order requests (Article 6 paragraph 1 letter b)) as the legal basis of the processing;
- make communications relating to orders placed (Article 6 paragraph 1 letter f)) as the legal basis of the processing, also of a promotional nature as required by Article 130 of Legislative Decree June 30, 2003, n. 196 and subsequent amendments (so-called soft-spam);
- fulfill tax and / or accounting obligations (e.g. invoice issuance) (Article 6 paragraph 1 letter c)) as the legal basis of the processing;
- fulfill the obligations established by law, by a regulation, by community legislation or by an order of the Authority (such as in the field of anti-money laundering) (Article 6 paragraph 1 letter c)) as the legal basis of the processing;
- exercise the rights of the Data Controller (such as the right to defense in court) (Article 6 paragraph 1 letter f)) as the legal basis of the processing
RECIPIENTS OR CATEGORIES OF RECIPIENTS OF THE DATA
The personal data provided may be disclosed to recipients, who will process the data as managers (Article 28 of EU GDPR 2016/679) and / or as natural persons acting under the authority of the Data Controller and of the Responsible (Article 29 of EU GDPR 2016/679), for the purposes listed above in point 2. Specifically, the data may be communicated to:
- subjects who provide services for the management of the information system and telecommunications networks including e-mail, newsletters and website management;
- professionals, firms or companies in the field of assistance and consultancy relationships;
- subjects who collaborate with the Data Controller for direct marketing activities;
- competent subjects for compliance with legal obligations and / or provisions of public bodies, upon request.
The subjects belonging to the aforementioned categories perform the function of data processor, or operate in total autonomy as separate data controllers.
DATA TRANSFER TO A THIRD COUNTRY AND / OR AN INTERNATIONAL ORGANIZATION AND ITS GUARANTEES
The personal data provided may be transferred to countries belonging to the European Union and to non-EU countries, in order to comply with the related purposes indicated above. If the data were transferred, they will be on the basis of Article 44 - General principle for the transfer; Article 45 - Transfer on the basis of an adequacy decision; Article 46 - Transfer subject to adequate guarantees, specifically data transferred to international organizations for which the Commission intervened with an assessment of adequacy (Article 45 of EU Reg. 2016/679). The data subject can obtain information about the guarantees for data transfer by contacting the data controller.
DATA RETENCTION PERIOD OR CRITERIA FOR DETERMINING THE PERIOD
The processing will be carried out in an automated and manual form, with methods and tools aimed at guaranteeing maximum security and confidentiality, by persons specifically appointed to do so. In compliance with the provisions of art. 5 paragraph 1 letter. e) of EU GDPR 2016/679, the personal data collected will be stored in a form that allows the identification of data subjects for a period of time not exceeding the achievement of the purposes for which the personal data are processed. The retention of the personal data provided depends on the purpose of the processing:
- the treatments put in place through the use of cookies (purposes referred to in point 1) are regulated by the individual elements. The retention data can be verified in the lists of cookies present in this tool;
- data for the contact request (purposes referred to in point 2): 1 year;
- receiving newsletters or promotional communications in general via e-mail (purposes referred to in point 3): up to revocation of the consent that you can exercise by contacting the Data Controller or through the unsubscribe function that you will find in every communication sent;
- for the management of orders (purposes referred to in points 4 and 5) it is not possible to indicate a defined time frame but the Data Controller will carry out processing for the duration strictly necessary to pursue these purposes, respecting the concepts of minimization that the Regulation indicates;
- for all other purposes the times are dictated by specific legislative regulations and in each case for no more than 10 years.
NATURE OF THE CONFERENCE AND REFUSAL
Apart from what specified for navigation data, the user is free to provide personal data. The provision of data is optional or necessary depending on the specific purpose for which the data is processed. Failure to provide the data marked as mandatory in the respective collection forms will make it impossible to obtain what is requested or to use the services of the data controller.
RIGHTS OF THE INTERESTED PARTIES
You can assert your rights indicated in articles from 15 to 22 of EU GDPR 2016/679 by contacting the Data Controller or other Subjects whose references you can find in the SUBJECTS section in this box. The section also contains the contact details to get in touch with them.
For more information about your rights, you can consult the information available at this address. |
|
Italy
United States