INFORMATION ON THE PROCESSING OF PERSONAL DATA of the users visiting the websites
Pursuant to Article 13 of EU Regulation 2016/679
This page contains a description of the policies for managing the website in regard to processing the personal data of the users who visit the site and their privacy. This information is provided pursuant to article 13 of GDPR 679/2016 – Laws concerning the Protection of Personal Data and the individuals who interact with the web services, which is accessible by telematics means through the following web address.
This informative note is provided only for the aforementioned website and not for other websites eventually accessed by the user through links.
THE “CONTROLLER”
Following access to this website, data pertaining to persons that are identified or identifiable may be processed. The “Data Controller” of the personal data collected following a visit to our website or any other data used for providing our services is the entity managing the website.
PLACE WHERE DATA IS PROCESSED
Data processing pertaining to the web services of this website is carried out at the aforementioned headquarters and said data is processed only by our technical personnel in charge of processing of the Data Processing Office, or by eventual persons in charge of processing who are entrusted to process occasional maintenance operations.
The personal data obtained from the users who submit requests or through informative material (informative notes, newsletters, registration, etc.) is used only to carry out the services or assistance requested and is not transmitted to third parties, except in the following possible cases:
- Business partners to whom the controller transmits the data exclusively in order to avoid any transactional service issues;
- Persons, companies or professional offices who lend assistance and consulting services concerning accounting, administrative, legal, financial and tax matters;
- Subjects who are authorized to have access to the data by law or through requests by the authorities.
CATEGORIES OF PROCESSED DATA
Navigational data
The information systems and software procedures relied upon to operate this web site acquire personal data as part of their standard functioning; the transmission of such data is an inherent feature of Internet communication protocols.
Such information is not collected in order to relate it to identified data subjects, however, it might allow user identification per se after being processed and matched with data held by third parties.
This data category includes:
- IP addresses and/or the domain names of the computers used by any user connecting with this web site,
- The URI (Uniform Resource Identifier) addresses of the requested resources,
- The time of such requests,
- The method used for submitting a given request to the server,
- Returned file size,
- A numerical code relating to server response status (successfully performed, error, etc.),
- Other parameters related to the user’s operating system and computer environment.
These data are only used to extract anonymous statistical information on website use as well as to check its functioning; they are erased immediately after being processed.
The data might be used to establish liability in case computer crimes are committed against the website; except for this circumstance, any data on web contacts is currently retained for no longer than seven days.
Data voluntarily provided by the user
Sending e-mail messages to the addresses mentioned on this website, which is done on the basis of a freely chosen, explicit, and voluntary option, entails acquisition of the sender’s address, which is necessary in order to reply to any request, as well as of such additional personal data as is contained in the message(s).
Data will be retained only for registration request to send the newsletters or special offers and will not be disclosed to anyone.
The personal information regarding the individual who visited the website is not collected or used. The visitors remain anonymous.
The only exception to this rule concerns the information for personal identification needed to fulfill the contractual obligations of user requests.
Newsletter
Site visitors can register for our newsletter service. By registering, the user’s e-mail address will automatically be included in a list of contacts to which e-mail messages will be sent.
The newsletter will contain periodic updates with commercial and promotional information relating to initiatives, events or promotions of the data controller.
To subscribe to the newsletter, you can use the registration forms on the site by entering your name and e-mail address.
The information supplied with the registration form will be used only to send our newsletter via e-mail and will not be disclosed to third parties. The newsletters will be sent through an external platform.
PERIOD FOR DATA RETENTION – CRITERIA USED
According to the provisions set forth in art. 5 par. 1 lett. e) of the Regulation (EU) 2016/679, collected personal data shall be kept in a form which permits identification of data subjects for a period not exceeding the purposes for which the personal data were collected and subsequently processed.
Data retention periods depend on the purposes of the processing:
- Technical navigation data for the correct functioning of the website: retention only for the related session, after which the data are deleted;
- Reply to info request/services supply request: up to 12 months for contact requests; 10 years for administrative/accounting/financial documentation relating to the provision of a service;
- Newsletter, marketing or promotional communications in general: up to 24 months – until withdrawal of consent;
- Administrative/accounting/financial management: 10 years as required by law for the conservation of administrative/accounting/financial documentation.
COOKIES AND TRACKING TECHNOLOGIES USED
In this website, cookie technologies are applied for different purposes, including computer technology authentication or to monitor sessions, and to store specific technical information regarding the users that access the web server provider.
This is in compliance with:
- Guidelines on cookies and other tracking tools adopted on the websites (10 June 2021) of the Italian Data Protection Authority,
- Guidelines of the European Data Protection Board (EDPB) of May 2020.
More information on the cookies adopted is available in the Cookie Policy of this site.
TRANSFERS OF PERSONAL DATA TO THIRD COUNTRIES
Personal data is not transferred to non-EU third countries, except for any cases described above where the controller provides appropriate safeguards.
In particular, for transfers to the USA, it takes place on the basis of:
- An adequacy decision of the EU Commission vs third country or an international organization (Article 45 GDPR),
- Particularly the decision on the adequate protection of personal data by the United Kingdom of 28.6.2021 adopted by the EU Commission.
OPTIONAL DATA PROVISION
Subject to the specifications made with regard to navigation data, users are free to provide the personal data listed in the request forms or referred to in contacting the data controller for specific purposes.