Privacy Policy

Processing purpose

Data type

Legal Basis

Data retention

NAVIGATION DATA

Website navigation — ensuring proper website functionality and cybersecurity

– navigation data

– legitimate interest of the controller to promote its business through the web channel and to protect users and the website from cyber attacks

We will retain navigation data for the time strictly necessary to achieve the purposes for which it is collected, and subsequently automatically deleted; regarding cookies, the retention period is indicated in the specific lists, where available.

STATISTICS

Processing of statistical surveys for analytical purposes

– navigation data

– legitimate interest of the Controller to improve and enhance the website and user experience based on statistical surveys, in order to make these changes relevant and data-driven.

The information necessary for producing statistics will be retained in disaggregated form for the period necessary to process anonymous and aggregated indicators.

CONTACT FORM

Following up on information/contact requests and managing communications with the data subject

– identifying data

– contact and address details

– specific information related to the request

– fulfillment of pre-contractual needs of which the data subject is a party

Data will be processed for the time strictly necessary to respond to your information/contact request and to manage communications. Subsequently, they will be deleted or used to achieve other purposes (e.g., establishing a relationship with the data subject).

NEWSLETTER

Sending newsletters and email communications

– identifying data

 – contact and address details

– express consent of the user

Your email address and other data necessary for sending the newsletter will be retained until consent is revoked or you exercise your rights.

These faculties can be exercised by choosing not to receive our newsletter anymore.

You can communicate your choice not to receive the newsletter anymore through our contact details or directly within our communications, by clicking the unsubscribe link at the bottom of the email

SOCIAL NETWORKS

Managing communication through social networks

– identifying data

– data related to the data subject’s social profile

– data communicated by the user in the context of interaction with the Controller through social media

– fulfillment of pre-contractual needs of which the data subject is a party

– legitimate interest of the Controller to manage communication with the data subject

Data will be processed for the time strictly necessary to respond to your information/contact request and to manage communications based on the policies identified by the social network.

Subsequently, they will be deleted or used to achieve different purposes (e.g., establishing an employment or commercial relationship)

STATISTICS

The Controller may process information about website usage by users. This information, processed where possible in anonymized and/or aggregated form, will be necessary to detect statistics on user interaction with the site itself to evaluate improvement, enhancement or revision interventions of functionalities in order to optimize, make more pleasant and meaningful the user experience, as well as evaluate more comprehensively the tool’s impact.

The results of the processing will not constitute personal data, as they will be expressed in aggregated, anonymous terms for the Controller’s exclusive internal use.

CONTACT FORM

Through the contact form on the website, users are asked for personal identification data and contact details, as well as other information inherent and pertinent to the specific request of the interested user.

Data is entered and sent voluntarily by the user who wishes to be contacted by the site owner to submit specific information requests and questions to the latter.

The collected data will be used exclusively to respond to submitted requests and will be subject to further processing only if a relationship is established between the user and the Controller.

NEWSLETTER

Through the newsletter service, it carries out promotional activities for the company among users and customers by sending emails or other electronic communications containing updates and news regarding the Controller’s activities.

Acquired data will not be communicated to third parties for marketing purposes.

Communication of data for newsletter service provision purposes is subject to the data subject’s prior consent when the email address is collected through the site.

This is without prejudice to the data subject’s possibility to avail themselves of the faculty to unsubscribe from the mailing list, an action that will suspend the sending of further promotional communications of this kind.

SOCIAL NETWORKS

The controller manages part of its online communication through public profiles on social networks.

Comments left under posts/shared content and any other interaction will follow the regulations and policies of the social platform (the latter may configure itself as an autonomous Controller of these processes, therefore reference is made to the privacy policies of the individual social network).

Private correspondence maintained with data subjects (through messaging/chat tools made available by the social network itself) will be subject to processing in compliance with social platform rules for the purpose of managing communication and providing responses to data subject requests.

The latter’s data may also be processed outside the social network in pre-contractual and, subsequently, contractual contexts in case of establishing a relationship with the data subject.

The data controller mainly uses the following social network: Facebook, LinkedIn

·       companies that provide services for managing the information system and website (subjects dealing with hosting services, e-commerce and payment platforms, consultants in website development, etc.)

·       offices or companies that provide services within assistance and consultancy relationships (in IT, accounting/administrative fields, etc.);

·       companies and entities providing technical or consultancy services regarding market research, marketing and promotion activities of our business and products;

·       entities, administrations and public authorities, for fulfilling legal obligations connected to commercial relationships should evidence of crimes or cyber attacks against our system or other site visitors be found or in the context of dispute management with the data subject.

§ Access to personal data: you can ask us to confirm that processing of your personal data is taking place and obtain access to data in our possession concerning you.

§ Rectification and updating of personal data: if you believe your data is incorrect or no longer updated, you have the right to ask us for rectification.

§ Erasure of personal data: when processing is concluded, you withdraw consent or object to processing and there are no other legal reasons why we can retain your personal data, you can request its deletion.

§ Restriction of processing: if processing is based on the legitimate interest of the controller or third parties or you wish to restrict the processing scope of such data, you can request restriction of processing.

§ Objection to processing and use of automated decision-making processes: you can object to processing for a particular purpose when it is based on the legitimate interest of the controller or third parties; furthermore, you can object to the use of automated decision-making processes, including profiling.

§ Portability of personal data: in certain circumstances, you can request that your data be provided to you in a structured, commonly used and machine-readable format.

§ Withdraw given consent: if processing is based on your consent, you can withdraw it at any time.

For more information, you can visit the Privacy Authority website: https://www.garanteprivacy.it/i-miei-diritti