Data Subjects: Surfers
Pursuant to Regulation (EU) 2016/679 (hereinafter referred to as the ‘Regulation’), this page describes the methods for processing the personal data of users consulting the websites accessible by electronic means at the following addresses:{!site_name!}.
This information does not concern other sites, pages or online services that can be reached through hypertext links that may be published on the sites but refer to resources outside the Owner’s domain.
Please note that the Privacy Policy may be modified from time to time depending on the activation of new services or as a result of updates to the Law, so it is advisable to periodically check the above-mentioned site for any news on the subject. This page describes how the site is managed with regard to the processing of the personal data of the users who consult it. This information is also provided pursuant to Article 13 of the Regulation (EU) on the protection of individuals with regard to the processing of personal data to those who interact with the web services of {!rag_soc!}, accessible electronically from the address {!name_site!}, further and possible data processing are defined in the information and cookie policy corresponding to the first page of the official website {!name_site!}.
The information is provided only for the {!site_name!} website and not for any other websites that may be consulted by the user via links. The information is also based on Recommendation no. 2/2001 that the European authorities for the protection of personal data, meeting in the Group established by art. 29 of Directive no. 95/46/EC, adopted on 17 May 2001 to identify certain minimum requirements for the collection of personal data online, and, in particular, the methods, timing and nature of the information that data controllers must provide to users when they connect to web pages, regardless of the purpose of the connection, and the further updates resulting from the application of the GDPR.
The Data Controller
Following consultation of this site, data relating to identified or identifiable persons may be processed.
The ‘owner’ of their processing is {!rag_soc!}, with head office in {!address!} – {!postcode!} {!city!} {!province!}, VAT no.: {!p_iva!}
Legal basis for processing
The personal data indicated on this page are processed by{!rag_soc!} for the purpose of carrying out its activities. Consent, performance of a contract, fulfilment of a legal obligation as well as the pursuit of a legitimate interest are the legal bases that will be pursued, depending on the data processing carried out on the aforementioned website.
Place of data processing
The processing operations connected to the web services of this site are based in the European Union, are managed by the service provider Semplify Srl and are carried out by technical personnel of Network Service Srl (responsible for processing), and by other persons in charge of Network Service Srl, during updating and maintenance operations. No data deriving from the web service is disseminated. The personal data voluntarily provided by users forwarding contact requests are used for the sole purpose of performing the service or provision requested, also possibly through external service providers.
Types of data processed and purposes
Navigation data
The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes the IP addresses or domain names of the computers and terminals used by users, the URI/URL (Uniform Resource Identifier/Locator) notation addresses of the resources requested, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment.
Tali dati, necessari per la fruizione dei servizi web, vengono anche trattati allo scopo di:
• Ottenere informazioni statistiche sull’uso dei servizi (pagine più visitate, numero di visitatori per fascia oraria o giornaliera, aree geografiche di provenienza, ecc.);
• Controllare il corretto funzionamento dei servizi offerti.
Data provided by the user
The optional, explicit and voluntary sending of messages to the contact addresses of {!rag_soc!}, as well as the completion and forwarding of the forms on the website{!site_name!}, entail the acquisition of the sender’s contact details, which are necessary for replying, as well as any other personal data included in the communication.
Specific information will be published on the pages of the site {!site_name!} set up for the provision of certain services.
Cookies and other tracking systems
Cookies are not used for user profiling.
On the other hand, session (non-persistent) cookies are used strictly limited to what is necessary for the safe and efficient navigation of the sites. The storage of session cookies in the terminals or browsers is under the user’s control, whereas on the servers, at the end of HTTP sessions, information relating to the cookies remains recorded in the logs of the services, with retention times specific to each third-party service provider. The data that may be acquired through cookies, and the methods for managing them, are described in full in the ‘cookie policy’ document.
Navigation data
This data is only used to obtain anonymous statistical information on the use of the site and to check its correct operation and is deleted immediately after processing. The information collected automatically may be used by {!rag_soc!} to ascertain responsibility in the event of hypothetical computer crimes to the detriment of the site, for statistical purposes and to improve navigation and site content. Any data acquired through cookies is described in full in the ‘cookie policy’ document.
Data provided voluntarily by the user
The optional, explicit and voluntary sending of data entered in the data collection forms (forms), or the sending of emails to the email addresses indicated on this site entails the subsequent acquisition of the sender’s address, which is necessary to reply to requests, as well as any other personal data included in the message. Please note that personal and/or company data entered in the forms on the {!site_name!} site are protected by {!rag_soc!} and used to answer user queries and provide the information and services requested.
Optional provision of data
Apart from what is specified for navigation data, the user is free to provide the personal data indicated in the information request forms to {!rag_soc!}, whenever such data is requested, specific information will be provided and, where necessary, consent will be requested.
Processing methods
Personal data are processed by automated tools for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorised access. We inform you that, in order to provide a complete service, there are links to other websites operated by other owners. We accept no liability for errors, content, cookies, publication of unlawful immoral content, advertisements, banners or files that do not comply with the regulations in force, and for compliance with the Privacy Law by sites not managed by us to which reference is made.
Recipients of the data
The recipients of the data collected following consultation of the websites listed above are the following entities designated by {!rag_soc!}, pursuant to Article 28 of the Regulation, as data processors.
Network Service srl as provider of web platform development and maintenance services;
Semplify srl in respect of the site as the provider of development, delivery and operational management services for the technological platforms used.
The personal data collected are also processed by the staff of {!rag_soc!}, who act on the basis of specific instructions on the purposes and methods of processing.
Data transfer abroad
Third countries: Data is not disclosed to third countries.
Rights of data subjects
You have the right to obtain from the data controller the erasure (right to be forgotten, if any), restriction, updating, rectification, portability, objection to the processing of personal data concerning you, as well as in general you may exercise all the rights provided for in Articles 15, 16, 17, 18, 19, 20, 21, 22 of the GDPR, where applicable with respect to the purposes of data processing.
EU Reg. 2016/679: Articles 15, 16, 17, 18, 19, 20, 21, 22 –
– The data subject shall have the right to obtain confirmation as to whether or not personal data concerning him or her exists, even if not yet recorded, and communication of such data in intelligible form.
– The data subject has the right to be informed of
a. the origin of the personal data
b. the purposes and methods of processing
c. the logic applied in the event of processing carried out with the aid of electronic instruments
d. the identity of the data controller, data processors and the representative designated pursuant to Article 5(2)
e. of the entities or categories of entity to whom or which the personal data may be communicated or who or which may get to know said data in their capacity as designated representative(s) in the State’s territory, data processor(s) or person(s) in charge of the processing.
– The data subject has the right to obtain
a. the updating, rectification or, where interested therein, the integration of the data;
b. the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed
c. certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected;
d. portability of the data.
– The data subject has the right to object, in whole or in part
a. on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection
b. to the processing of personal data concerning him/her for the purposes of sending advertising or direct sales material or for carrying out market research or commercial communication.
Right of complaint
Data subjects who consider that the processing of personal data relating to them carried out through this website is in breach of the provisions of the Regulation have the right to lodge a complaint with the Garante, as provided for by Article 77 of the Regulation itself, or to take legal action (Article 79 of the Regulation).