Information on the processing of personal data of users who browse this website pursuant to art. 13 and 14 of EU Regulation 2016/679 (for brevity RGPD) and of Legislative Decree. 196/2003 and subsequent amendments (PRIVACY CODE for brevity)
Last updated 31/05/19
This page describes how to manage the site with reference to the processing of personal data of users who consult it. The information, pursuant to articles 13 and 14 of the RGPD together with the PRIVACY CODE (applicable legislation on the protection of personal data), is provided to those who consult the pages or interact with the web services of the Data Controller (hereinafter referred to as the Data Controller for brevity) accessible electronically. starting from the address:
The information is provided only for the domain / site of the owner, identified above, and not for other websites that may be consulted by the user through hypertext links that may be published on the site, but referring to resources outside the domain of the owner.
HOLDER OF THE TREATMENT
The C.M.G. SpA, with registered office in Via Antonio Sarti, 2 - 40054 Cento di Budrio (Bo) - Tel. +39 051 6920875, e-mail firstname.lastname@example.org - PEC email@example.com, Data Controller, wishes to inform you that, following the consultation of pages of this site, may process some data that identify or make your person identifiable, for which the applicable legislation considers them personal data.
TYPES OF DATA PROCESSED
The computer systems and software procedures used to operate this website acquire, during their normal operation, some data considered of a personal nature by the RGPD, the transmission of which is implicit in the use of internet communication protocols (the so-called data of traffic). This is information that is not collected to be associated with identified data subjects, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes: IP addresses or domain names of computers connecting to the site, web addresses in URI / URL (Uniform Resource Identifier / Locator) notation of the requested resources, date and time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the IT environment of the user.
Purpose of processing, storage and legal basis of navigation data
An IP address is a number automatically assigned to your personal computer each time you connect to the Internet, either through your Internet Provider or from a company network that uses the same Internet protocols. This address is used by websites to be able to send their pages and may vary with each Internet connection. In this case, only your provider or company can trace the user to whom this address was associated in his previous connection sessions.
For the owner, the IP addresses are therefore data that cannot be assimilated to a user identified in a simple way, and the navigation data are used for the sole purpose of:
- obtain anonymous statistical information on the use of the site (most visited pages, number of visitors by time or day, geographical areas of origin, etc.);
- check its correct functioning.
The navigation data could be used to ascertain responsibility in the event of computer crimes against the site: except for this possibility, this type of web data currently does not persist for more than seven days.
The legal basis, which justifies the processing of navigation data, is based on legitimate interest, as they promote their services and / or products through the visibility of the site and increase the image of the Company.
With regard to navigation data, the provision is mandatory as it is necessary for the correct functioning of the communication between the site and your browser.
In particular, to determine the site's visibility statistics, Google Analytics cookies are used, set so that the IP address is anonymized by resetting the last part of the address.
In the browser used, privacy preferences can be set so as not to store cookies and to be able to delete them after each visit or each time the browser is closed. These preferences can also be set to accept only cookies from the domain of this site and not those of third parties. Finally, there is also a service, called Your Online Choices, which shows you which cookies the various services install and how to disable them, one by one.
Data communicated by the user
The user is free to provide personal data to the Data Controller and the optional, explicit and voluntary sending of e-mails to the address indicated on this site, or filling out the electronic form called "contact form", to forward requests aimed at having information on the services or products offered or initiatives proposed upon receipt of our promotions, invitations to conferences or training or information events, advertising material, cost estimates and any supply of goods and / or services, involves the acquisition of the coordinates of the 'sender's address, as well as any other personal data included in the message and / or in the "Contact us" form. Furthermore, specific summary information will be progressively reported or displayed on the pages of the site prepared for the collection of specific personal data.
Purpose of the processing, storage and legal basis of the data provided voluntarily by the user
Personal data, provided voluntarily by the user, are used for the sole purpose of:
perform the service or provide you with the requested information.
In particular, we would like to inform you that we will treat, as categories of personal data, only information of an identifying nature such as name, surname, location and address, e-mail address of the interested party, telephone number and the company name of the company to which the same person indicated belongs as well as additional information it deems necessary to better specify your request. What has been said only to achieve the purpose for which they are collected and not for other purposes.
Failure, partial or incorrect provision of personal data, for this purpose, may make it impossible for the Data Controller to satisfy your request if such data are necessary for this. The processing of related personal data does not require the collection of the expression of consent. The legal basis that justifies the processing is one of the requirements necessary to respond to your requests.
All data will be kept for the time strictly necessary for the purposes for which they were collected. At the end of the conservation, the personal data referred to you will be deleted or made anonymous.
PLACE, METHOD OF TREATMENT AND RECIPIENTS OF THE DATA
Personal data, in particular navigation data and data provided voluntarily by the user connected to the consultation of the pages and to the interaction with the web services offered by this site (physically located in "Hosting" at the provider: GESCAD SPA, via G Ricci Curbastro 6 / a Argenta (FE) - as independent data controller) are processed by internal staff and / or our collaborators, specifically authorized, for the pursuit of the aforementioned purposes. This processing takes place at the headquarters of the owner's company, or by the website provider for the development and maintenance part of the site, with manual procedures (eg on paper) and / or through electronic and / or telematic tools, for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
Finally, the personal data you provide are disclosed to third parties only if this is necessary for this purpose to conclude your specific request.
The recipients of the data collected following consultation of the site listed above are the following subjects designated by the Data Controller, pursuant to art. 28 of the GDPR, as data controllers.
Gates Project s.a.s., in relation to this site, as a provider of development and maintenance services for the web platform;
RIGHTS OF THE INTERESTED PARTIES
At any time, the subjects to whom the personal data refer can exercise the rights provided for by art. from 15 to 22 of the RGPD, by means of a simple written request addressed to the Data Controller also by e-mail, ordinary mail, Pec or through a delegated person, in accordance with the procedures set out in art 12 of the RGPD, within the limits established by Title I - Chapter III of the Privacy Code, for which: (i) obtain access to personal data to know the origin of the data, purpose of the processing, logic applied to the processing with the use of electronic tools, categories of data, recipients (or categories of recipients) to whom they will be communicated, retention period and their communication in an intelligible form; (ii) obtain the rectification, integration, deletion of data or limitation of processing; (iii) oppose the processing of your personal data; (iv) obtain data portability, where relevant; (v) withdraw consent at any time; (vi) to lodge a complaint, pursuant to art. 77 of Regulation (EU) 2016/679, if you believe that the processing that concerns you violates the applicable legislation on the protection of personal data, to the Italian Guarantor for the protection of personal data or to the supervisory authority of the EU Member State in where he habitually resides or works, or the place where the alleged violation occurred.
Finally, the Data Controller informs you that the communication of data, following your request or exercise of rights, could take place after a refund of expenses.