In line with the commitment and care we dedicate to the protection of personal data, we inform you about the methods, purposes and scope of communication and disclosure of your personal data and about your rights, in accordance with Art. 13 of the GDPR.
1. CATEGORIES OF PERSONAL DATA PROCESSED BY THE DATA CONTROLLER
To offer you the services provided by the website, as Data Controller, it must process certain personal data necessary for the provision of the services.
Such data may be provided implicitly by the tools you use to access and use the services or may be provided explicitly by you.
We may process the following categories of users' personal data:
• technical browsing data relating to the IP address, the identification codes of the devices used by the user to use the site or services, the characteristics of the browser and access times;
• browsing data for profiling purposes provided indirectly through the use of the service itself and obtained and analysed with the user's consent;
• common identification data provided by the user (e.g. first name, last name, email, telephone number, etc.) where required to use the products and services;
2. PURPOSES AND LEGAL BASES OF THE PROCESSING
The data and cookies received from you will be processed exclusively in the ways and procedures necessary to provide you with the requested or subscribed services and for the additional purposes for which you have given your consent.
In particular, your data may be used to enable your registration on the site and, where required, to use all the services offered through the site.
Following your possible first registration, where required and as a necessary condition for providing the service you requested, you may use the credentials (username/email/password) already used during the first registration.
In addition, following your registration on the site, your data will be used to allow you to use all the services requested and offered through the site and, specifically, the possibility of sending you service notifications, technical communications, ensuring you the possibility to manage your preferences and subscriptions.
Only with your express consent may the data be used to carry out statistical analyses, market research, promotional activities through social media and to send commercial information on products and promotional initiatives. (Direct marketing purpose)
Also with your consent, the data may be used for profiling purposes carried out automatically by collecting information on the browsing you do while accessing and using the services and, through statistical correlation algorithms, linking it to the same information from other users in order to identify common traits and group similar ones within classes of interest. By assigning your browser to a class of interest, our systems will subsequently be able to offer you content that is closer to your tastes and will present advertising contributions that better meet your needs and better address advertisers' interests, reducing the level of disturbance to use.
Finally, with your explicit consent, your data may be provided to other third-party Companies for statistical analyses, market research and the sending of commercial information on products and promotional initiatives. (Marketing purposes by third parties)
Communications for market research or commercial information on products and promotional initiatives may be carried out by postal mail, email, telemarketing, sms, mms.
We inform you that some activities may be carried out through suppliers, specifically appointed as Data Processors, including those resident outside the European Union.
The legal bases for the purposes described above are the performance of a request by you as data subject and the consents you have expressed.
3. DISCLOSURE, COMMUNICATION AND PARTIES WHO ACCESS THE DATA
Your personal data will not be disclosed, but may be communicated where necessary for the provision of the service to third parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies) appointed, if necessary, as Data Processors for technical or organisational tasks instrumental to the provision of the services.
Access to the data is also permitted to categories of persons in charge involved in the data processing organisation (administrative, sales, marketing, customer service staff, system administrators).
The updated list of Data Processors may always be requested from the Data Controller.
The right to communicate to third parties remains unaffected where you have given specific and optional consent.
4. TRANSFER OF DATA ABROAD
Your personal data will be processed within the territory of the European Union.
If, for technical and/or operational reasons, it becomes necessary to use parties located outside the European Union, or it becomes necessary to transfer some of the collected data to technical systems and cloud-managed services located outside the European Union area, the processing will be regulated in accordance with the provisions of Chapter V of the Regulation and authorised on the basis of specific decisions of the European Union. All necessary precautions will therefore be adopted in order to guarantee the most complete protection of personal data by basing such transfer: a) on adequacy decisions of the recipient third countries expressed by the European Commission; b) on appropriate safeguards provided by the recipient third party pursuant to Art. 46 of the Regulation; c) on the adoption of binding corporate rules, so-called Corporate binding rules.
5. DURATION OF PROCESSING AND RETENTION OF PERSONAL DATA
In accordance with Art. 5.1 e) of the GDPR, we will process the data you provide for the entire duration of the performance of the requested services and will retain it for the following 6 months for the completion of administrative activities, as well as for the time necessary to fulfil legal obligations and for the protection of legal claims.
If you have authorised profiling processing, the anonymous data observed from time to time will be deleted after 12 months from the start of the processing.
6. RIGHTS OF THE DATA SUBJECT
We guarantee that you can exercise at any time the rights provided for by Art. 12 of the GDPR. In particular, you have the right:
- to know whether the Data Controller holds and/or processes personal data relating to you and to access it in full, also obtaining a copy (Art. 15 Right of access);
- to rectification of inaccurate personal data or completion of incomplete personal data (Art. 16 Right to rectification);
- to erasure of personal data held by the Data Controller if one of the reasons provided for by the GDPR applies (Art. 17 Right to erasure);
- to request the Data Controller to restrict the processing to only some personal data if one of the reasons provided for by the Regulation applies (Art. 18 Right to restriction of processing);
- to request and receive all your personal data processed by the controller, in a structured, commonly used and machine-readable format, or to request transmission to another controller without hindrance (Art. 20 Right to data portability);
- to object in whole or in part to the processing of data for the purposes of sending advertising material and market research (so-called Consent) (Art. 21 Right to object)
- to object in whole or in part to the processing of data by automatic or semi-automatic means for profiling purposes (so-called Consent).
The exercise of these rights may be carried out by communicating with the Data Controller/Data Protection Officer whose contact details are indicated in the relevant section of this notice.
In addition, you always have the right to lodge a complaint with the Data Protection Authority, which can be contacted at garante@gpdp.it or through the website http://www.gpdp.it.
7. DATA CONTROLLER
To exercise the rights guaranteed to you, you may contact the following details:
ADV Integration S.r.l. Operational office Via dell'About, 2/a 10015 Ivrea (TO) P.iva 11842880012, email info@adv-integration.com