Privacy Notice EU Regulation 2016/679 and Legislative Decree 196/2003

PASSAGLIA MARIA TERESA, with registered office in Via Treggìaìa, 90 – 50020 Romola (FI) as Data Controller (hereinafter, “Data Controller”), informs, pursuant to art. 13 D. Lgs. 196/2003 (hereinafter, ” Privacy Code “) and art. 13 EU Regulation 2016/679 (hereinafter, ” GDPR “), which will process user data (hereinafter “User” and / or “Users”) collected through the website (hereinafter, also “Site”) with the methods and for the following purposes.

1. Type of data processed through the Website

The Data Controller deals with the following types of personal data (hereinafter, “data”) given by the Users of the Site during their consultation and navigation, and in particular:

1.1 Data obtained during the navigation of a User on the Website

The computer systems, the cookie technology and the software procedures used to operate the Website acquire, during their normal operation, some data whose transmission is implicit in the use of the Internet. This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes, for example, the IP addresses or the domain names of the computers used by the Users who connect to the Site, the pages visited by the Users within the same, the domain names and the addresses of the websites which the User has accessed (by referral) the Site, the addresses in URI (Uniform Resource Identifier) ​​notation of the requested resources, the time of the request, the method used in submitting the request to the web server, the size of the file obtained in response, the numerical code indicating the response status given by the web server, and other parameters related to the type of browser (eg Internet Explorer, Chrome, Firefox …), operating system (eg Macintosh, Windows) and all ‘ User’s IT environment.

These data are collected through first-party technical cookies and third-party analytical cookies . For more information on browsing data, Users are invited to consult the Site Cookie Policy .

1.2 Personal data provided by Users

The Website is accessible to the User without its identification for the purpose of consultation. The User, however, has the right, if desired, to provide the owner with identification data such as name and surname, e-mail, in order to receive information on the structure and commercial offers on the products / services on the site and this either directly or by filling out the contact form or newsletter subscription form.

2. Purpose of the processing

2.1 The data provided by the User will be processed, without the prior consent of the User pursuant to art. 24 lit. b) Privacy Code and art. 6 lett. b) GDPR, for the following Service purposes:

1. for the management and processing of statistical surveys on the use of the Site;
2. to carry out the maintenance and technical assistance necessary to ensure the correct functioning of the Site and the services connected to it;
3. to improve the quality and structure of the Site, as well as to create new services, features and / or features of the same;
4. to allow the User to find the information to increase his knowledge on the issues present on the site and on the products and services offered by it;
5. to process an eventual contact request forwarded by the User by filling in the appropriate form or by email;
6. to allow the holder to exercise his rights in court and to repress illegal behavior;
7. to fulfill legal obligations or regulations.

• Nature of the provision : necessary
• Consequences refusal to provide data : Failure to provide the data will prevent the Data Controller from performing the activity requested by the user.
• Data protection measures: The server operating system, in which the website and the database are allocated, is installed on a cloud-based hardware infrastructure provided by the Hostgator company that guarantees high levels of integrity, availability and confidentiality of information .
  The data held by the owner of the site (e-mails and names of any contacts) are kept inside computers and are accessible only to the owner and protected by access password and by external anti-virus and anti-intrusion systems. Any other external icloud systems will further guarantee data retention according to current regulations.

2.2 The data provided by the User will be processed, subject to the User’s consent pursuant to art. 23 of the Privacy Code and art. 6 lett. a) GDPR, for the following commercial purposes:

1. to allow the User to send commercial communications by e-mail about products, initiatives and / or services offered through the website and / or newsletters containing information on the services offered by the structure.

• Nature of the provision : optional
• Consequences refusal to provide data: Failure to provide consent, although it will allow the Data Controller to perform the requested activity in the same way, will prevent the Data Controller from identifying the services compliant and best suited to their needs.

3. Nature of the provision of data

The provision of data by the User is necessary for the purposes of the Service referred to in paragraph 1 of the previous paragraph and optional for the purposes of service referred to in point 2. Any refusal to provide such data may result in the impossibility to provide services.

4. Mode, place and duration of treatment

  The processing of user data is carried out by means of the operations indicated in art. 4 of the Privacy Code and art. 4 n. 2) GDPR and in particular: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, access, use, interconnection, blocking, communication, cancellation and destruction of data.
The Data Controller processes the Personal Data of Users by adopting appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data.
Processing is carried out using IT and / or telematic tools , with organizational methods and with logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases, they may have access to external data (such as third party technical service providers, hosting providers, IT companies, communication agencies) also appointed, if necessary, Data Processors by the Data Controller.
The updated list of the Managers can always be requested from the Data Controller.

Place

The Data are processed at the Data Controller’s operating office and in any other place where the parties involved in the processing are located. For more information, contact the owner.
Duration of the Treatment

For the only time strictly necessary to achieve the purposes for which they were collected and, in any case, no later than 2 years from their collection for the purposes of Service referred to in paragraph 1 paragraph II and no later than 1 year from their collection for Commercial purposes referred to in point 2 of paragraph II.

Details on the processing of personal data:

To contact the User

• Contact form present on the site

By filling out the contact form with their Data, the User consents to their use to respond to requests for information, quotes, or any other kind indicated by the form header.

Personal Data collected: surname, email address, telephone number, and various types of Data as specified in the privacy policy of the service.

• Contact by phone

Users who provided their telephone number may be contacted to provide more information on the requested service or, as a result of consent, for commercial or promotional purposes related to this activity, as well as to satisfy requests for support.

Personal Data collected: telephone number.

For statistical site management

The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to keep track of User behavior.

Google Analytics (Google Inc.)

Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google uses Personal Information collected for the purpose of evaluating the use of this site, compiling reports and sharing them with other services developed by Google.
Google may use the Personal Data to contextualise and personalize the advertisements of its advertising network.

Personal Data collected: Cookies and Usage Data.

Place of processing: USA – Privacy Policy – Opt Out

Google Tag Manager (Google Inc.)

Google Tag Manager is a statistical service provided by Google Inc.

Personal Data collected: Cookies and Usage Data.

Place of processing: USA – Privacy Policy

For viewing content from external platforms

This type of service allows you to view content hosted on external platforms directly from the pages of this site and to interact with them.
In the event that a service of this type is installed, it is possible that, even if the Users do not use the service, the same collect traffic data relating to the pages in which it is installed.
Flickr Instagram widget and Facebook  

see Cookie information .

Google Maps widget (Google Inc.)

Google Maps is a map visualization service managed by Google Inc. that allows this application to integrate such contents within its pages.

Personal Data collected: Cookies and Usage Data.

Place of processing: USA – Privacy Policy

  5. Access to data

The data may be made accessible only for the purposes mentioned above to the following subjects:

Data controller (site owner) in his capacity as responsible / authorized and / or internal manager of the processing and / or system administrator and any additional internal / authorized agents specifically indicated by the Data Controller.

Third-party companies or other entities carrying out outsourcing activities on behalf of the owner (eg e-mail service provider, web agency, advertising agency, webmaster) in their capacity as external data controllers pursuant to article 29 of the Code on protection of personal data.

6. Data communication

Without the express consent of the User (ex Article 24 letter a), b), d) Privacy Code and art. 6 lett. b) and c) GDPR), the Data Controller may communicate the User’s data for the purposes of the Service referred to in art. II.1) to Supervisory Bodies, Judicial Authorities and to all the other subjects to whom the communication is mandatory by law for the accomplishment of the said purposes, as autonomous data controllers. User data will not be disclosed.

7. Data transfer

  The personal data provided by the User may be used only to allow the sending of communications related to the requested service, by e-mail or telephone for initiatives and / or services offered by the site and / or, in the case of specific consent, newsletter containing insights into the main issues related to the services offered.

Apart from this case, the management and storage of data will be carried out on servers located within the European Union or the US and / or, in particular for the web servers in which the website’s web space resides ( www.hostgator). com / which provides for its privacy policy – https://www.hostgator.com/privacy ).

The data acquired with the user’s consent according to point 2 on the Purpose of the Treatment, will not be transferred outside the European Union.

8. Third party websites

It should be noted that if the Website contains links to third-party websites, the Data Controller may not exercise any control over the content of such websites nor has access to the personal data of the visitors of the same .

The owners of the aforementioned websites will therefore remain the sole and exclusive owners and controllers of the personal data processing of their users, remaining, the Data Controller, unrelated to this activity as well as any liability, prejudice, cost, that may derive from his failure or incorrect completion.

9. Rights of Users

The User will have the right to exercise the rights referred to in art. 7 of the Privacy Code and art. 15 GDPR .

In particular, the User has the right at any time to obtain from the Owner confirmation of the existence or not of personal data concerning him, even if not yet registered, and their communication in intelligible form.

In relation to the treatments described in this Informative note, the interested party may, under the conditions established by the GDPR, exercise the rights established by articles 15 to 21 of the GDPR and, in particular, the following rights:

• right of access – Article 15 of the GDPR : right to obtain confirmation that personal data processing is being processed and / or in this case obtain access to your personal data, including a copy thereof.
• right of rectification – article 16 GDPR : right to obtain, without unjustified delay, the correction of inaccurate personal data concerning him / her and / or the integration of incomplete personal data;
• right to cancel ( right to be forgotten ) – Article 17 GDPR : right to obtain, without undue delay, the cancellation of personal data concerning him.
• right to limitation of treatment – Article 18 GDPR : right to obtain limitation of treatment, when:
  • the interested party disputes the accuracy of personal data, for the period necessary for the holder to verify the accuracy of such data;
  • the processing is illegal and the interested party opposes the cancellation of personal data and asks instead that its use is limited;
  • personal data are necessary for the interested party to ascertain, exercise or defend a right in court;
  • the interested party opposed the treatment pursuant to art. 21 GDPR, during the waiting period for verification of the possible prevalence of legitimate reasons of the data controller with respect to those of the interested party.
• right to data portability – Article 20 GDPR : right to receive, in a structured format, commonly used and readable by an automatic device, the personal data concerning him provided to the Owner and the right to transmit them to another holder without impediments, if the treatment is based on consent and is done by automated means.
• right of opposition – Article 21 GDPR : right to object, at any time for reasons connected with its particular situation, to the processing of personal data concerning him based on the lawfulness of legitimate interest or the performance of a task in the public interest or exercise of public powers, including profiling, unless there are legitimate reasons for the Data Controller to continue processing that prevail over the interests, rights and freedoms of the data subject or for the assessment, exercise or defense of a right in court. Furthermore, the right to oppose the processing at any time if personal data are processed for direct marketing purposes, including profiling, to the extent that it is related to such direct marketing.

The above rights may be exercised against the Owner, by contacting the references described above.

The exercise of rights as an interested party is free under Article 12 of the GDPR . However, in the case of manifestly unfounded or excessive requests, also due to their repetitiveness, the Holder may charge a reasonable fee for the costs, in light of the administrative costs incurred to manage the request, or deny the satisfaction of his request.

• RIGHT OF REVOCATION: The interested party has the right to withdraw his consent at any time. The withdrawal of consent does not affect the lawfulness of the treatment based on consent before revocation.
• CLAIM LAW: The interested party has the right to lodge a complaint with the Guarantor for the protection of personal data, Piazza di Montecitorio n. 121, 00186, Rome (RM)

Contact Owner: PASSIA MARIA TERESA

10. How to exercise rights

To exercise the rights referred to in the previous article, the User may, at any time, contact the owner of the site via email info@icasalini.it

11. Holder and Manager of the Treatment

The data controller is Mrs PASSAGLIA MARIA TERESA with registered office Via Treggìaìa, 90 – 50020 Romola (FI) (CI) PI 04770280487
email contact: info@icasalini.it

12. Information updates

Please note that this information will be subject to periodic updates which will be highlighted on the website.

13. Date of last modification

This information was updated on 11/04/2018. Any updates will always be published on this page.