PRIVACY POLICY
Information on data protection and the use of cookies pursuant to Regulation (EU) 2016/679 (‘GDPR’)
Dear Customer, the company NAME AND INFO SOCIETY (hereinafter, the “Company”), is the Data Controller of the data you provide when registering on the site, or in any case acquired during the provision of the services you may access. You can send requests or communications to the Data Controller at the email address info@illeoncino.it
Access to the site does not require you to enter your personal details. For the possible use of the online service ‘contacts’ and to have access to other additional services, you will have to enter your personal data in appropriate sections of the site. The data entered will be processed using security measures appropriate to current technological standards and in compliance with the obligations set out in Regulation (EU) 2016/679 on the protection of personal data (“GDPR”).
According to the indicated legislation, such treatment will be based on the principles of correctness, lawfulness and transparency and protection of your privacy and your rights. The following information is related only to this site and does not concern other websites that may be consulted by the user through redirect links placed on the pages of our site. No data deriving from the consultation of the web service is communicated or disseminated.
Pursuant to Article 13 of the GDPR, we therefore provide you with the following information:
1. OBJECT OF THE PROCESSING
The personal data that may be collected are the following:
• personal data provided to receive a specific service (e.g. name and contact information);
• navigation data (e.g. IP address, location – Country -, information on the pages visited by the user within the website, time of access to the website, navigation time on each page, click flow analysis, device name, system and application version, regional and language settings, device identification number, information on the geographic location, the network ID of your operator, and your IP address. Although the Company does not collect this information in order to associate it with specific users, it is still possible to identify such users directly through this information or by using other information collected);
• cookies (i.e. small text files that can be sent and recorded on the user’s computer by the websites visited and then sent back to the same sites when the user visits them again. For details, see the website’s Cookie Policy).
2. PURPOSE OF THE PROCESSING.
The personal data collected (“Data”) may be processed for the following purposes:
a) to execute a specific request from the user or provide the requested service (“Service”);
b) allow the Company to carry out customer satisfaction surveys (“Customer Satisfaction”) regarding the quality of the Company’s goods and services in accordance with a legitimate interest of the Company;
c) subject to your express consent, send commercial communications and advertising on the Company’s products and services or carry out market research (“Marketing”);
f) improve the user experience on the Company’s websites.
3. METHODS
The processing will be carried out both manually and using automatic or electronic means, including post or e-mail, telephone, in compliance with all the necessary precautions to guarantee the security and confidentiality of the information.
4. ACCESS TO DATA.
Your data may be processed within our Company by all data processors appointed in writing by the Data Controller and trained on the obligations of the Law on Privacy.
5. DATA AND THEIR COMMUNICATION.
The data may be communicated to third parties, exclusively for technical and operational needs strictly connected to the purposes listed above and in particular to the following categories of subjects:
a) Entities, professionals, companies or other structures entrusted by us with the processing connected to the fulfillment of administrative, accounting, commercial and management obligations related to the ordinary performance of our economic activity, also for credit recovery purposes;
b) To public authorities and administrations for purposes related to the fulfillment of legal obligations; c) Banks, financial institutions or other entities for which the transfer of data is necessary for the purposes of carrying out the activities of our Company, in particular in relation to the fulfillment, on our part, of the contractual obligations undertaken towards you.
6. DATA STORAGE.
Your personal data will be stored on servers available to the Company located in the European Union. The Company does not transfer personal data to countries outside the European Union.
7. DATA RETENTION PERIODS.
The personal data concerning you will be retained for the entire duration of your contractual relationship with the Company. After the termination of the contractual relationship, the Company will retain the personal data relating to the execution of the contract for the fulfillment of contractual and legal obligations, including tax-related ones. Subsequently, the personal data relating to the execution of the contract will be retained for a period not exceeding the limitation period provided by law to possibly assert or defend a right in court.
8. OPTIONAL / MANDATORY NATURE OF THE PROVISION.
The provision of your personal data is optional, without prejudice to the fact that the refusal to disclose the data or to give consent to the processing referred to in point 1 of this information notice will make it impossible for us to conclude the contract and provide any services requested and to fulfill legal obligations. In the event of refusal to process the personal data referred to in art. 2 of this information notice, the processing will be limited to the full execution of the obligations arising from the provision of the services requested by you, as well as to the fulfillment of the obligations provided for by laws, regulations and community legislation.
9. RIGHTS OF THE INTERESTED PARTY.
You may exercise your rights towards the Data Controller at any time, pursuant to articles 15-22 of the GDPR, which we summarize below for your convenience. In particular, you have the right:
to obtain the cessation of processing in cases where your personal data is processed for direct marketing purposes, including in relation to services identical to those already purchased from our Company (so-called right to object);
to obtain information in relation to the purposes for which your personal data are processed, the period of processing and the subjects to whom the data are communicated (so-called right of access);
to obtain the rectification or integration of inaccurate personal data concerning you (so-called right of rectification);
to obtain the deletion of personal data concerning you in the following cases
(a) the data are no longer necessary for the purposes for which they were collected;
(b) You have withdrawn Your consent to the processing of data if they are processed on the basis of Your consent;
(c) You have objected to the processing of personal data concerning You in the event that they are processed for our legitimate interest; or
(d) the processing of your personal data is not compliant with the law.
However, we inform You that the retention of personal data by the Company is lawful if it is necessary to allow You to comply with a legal obligation or to ascertain, exercise or defend a right in court (so-called right to erasure);
to obtain that the personal data concerning You are only stored without any other use of them in the following cases
(a) You contest the accuracy of the personal data, for the period necessary to allow us to verify the accuracy of such personal data;
(b) the processing is unlawful but you still oppose the erasure of your personal data by us;
(c) the personal data are necessary for you to ascertain, exercise or defend a right in court;
(d) you have objected to the processing and are awaiting verification as to whether our legitimate grounds for processing prevail over those of the data subject (so-called right to restriction);
to receive, in a commonly used, machine-readable and interoperable format, the personal data concerning you processed by automated means, if they are processed under a contract or on the basis of your consent (so-called right to portability).
We also remind you that you have the right to contact the Data Protection Authority (Piazza di Monte Citorio, 121 – 00186 Rome RM) to assert your rights in relation to the processing of your personal data.
10. DATA CONTROLLER.
The Data Controller and Processor is COMPANY NAME AND INFO and can be requested by sending an email to the email address: info@illeoncino.it
