Privacy notice provided in accordance with EU Regulations 679/2016 of the European Parliament and Council on personal data protection, known as the “General Data Protection Regulation” (in short GDP 2016/679).
Data Controller and Processors
The Data Controller is Zetaesse S.p.A. For any inquiry or information regarding your rights, you can send an email to firstname.lastname@example.org.
Types of data processed, purposes and applied legal basis
The Site collects some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but they could, by their very nature, allow the user to be identified through the processing and association with data held by third parties. This category of data includes the IP addresses or domain names of computers used by the user who logs on to the Site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system and the user's IT environment. These data are used only to obtain anonymous statistical information on the use of the site and to check its correct functioning. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the Site.
The optional, explicit and voluntary sending of messages using the "Contacts" service on the Site or sending e-mail messages to the company's address, involves the subsequent acquisition of the sender's address, necessary to respond to requests, and any other personal data included in the request. The legal basis for this treatment is art. 6.1.b of the GDPR 2016/679, that is the execution of measures requested by the user.
Newsletter and commercial communications
Users can voluntarily choose to receive the Site newsletter. The Site asks for an explicit and free consent before undertaking initiatives of this type and can ask the user for additional information in order to create personalized and more pertinent communications. Users can always easily revoke their consent, which is the legal basis for this type of data processing (art. 6.1.a of the GDPR 2016/679).
Categories of data recipients
The Data Controller can transfer the user's personal data to qualified third parties, who act as data processors in carrying out any technical or commercial operations necessary to perform the services connected to the best management of the Site (e.g. couriers and postal operators; advertising, commercial and social media agencies; computer service providers; payment service providers; customer service providers). In these cases the communication of data is essential to meet contractual commitments and to improve the performance of the Site. The Data Controller is committed to establishing agreements with Data Processors so as to ensure that data are managed properly and securely. Users can request the list of data processors by sending an e-mail to the Data Controller. Furthermore, the Data Controller may be required to share the users’ personal data when required by law or by an order of the public authority or to protect their own or any third-party rights. The Data Controller shall not transfer data outside the European Union.
The Data Controller stores personal data for the time necessary to provide the users with the services requested or to fulfil legal or fiscal obligations or for the minimum period required by law. In order to determine the appropriate period of storage of personal data stored by the Site with the user's consent, the Data Controller also takes into consideration the following criteria: the specific purposes stated in the privacy notice for which the Site stores personal information; the type of relationship in progress with the user (if the user makes requests via a contact form or continues to receive newsletters or commercial communications); any specific request by the users for deletion of their data or revocation of consent; the legitimate commercial interest of the Data Controller. The Site will promptly cancel or make personal data whose storage is no longer required by law anonymous.
Rights of the Data Subject
The user has the right to receive confirmation of the existence of his/her personal data processed by the Data Controller.
Pursuant to GDPR 2016/679, the user has the right to:
• be informed on the collection and use of his/her personal data;
• access to his/her personal data free of charge;
• obtain the rectification or completion of inaccurate or incomplete personal data;
• obtain the erasure of his/her personal data;
• obtain, under specific conditions, the restriction of processing or the deletion of his/her personal data;
• obtain and reuse his/her personal information for own purposes in different services when data processing is based on a contract or consent and this is executed automatically (“data portability right”);
• under specific conditions, object to the processing of his/her personal data;
• lodge a complaint with the relevant Privacy Guarantor;
• revoke the consent to the processing of his/her personal data at any time, without prejudice to the lawfulness of the processing carried out up to that time based on the revoked consent.
For more details, the user can consult the dedicated section in the Guarantor’s website www.garanteprivacy.it.
Nature of the provision of personal data and consequences of a refusal to respond
In addition to navigation data indications, the user can voluntarily provide his/her data by compiling the contact form or in order to receive promotional communications or to purchase goods or services, and failure to provide data may make it impossible to obtain what is requested. Each form clearly indicate what data is compulsory to be able to respond to what is requested by the user.
Changes to the Privacy Notice
Any changes to this Privacy Notice will be posted on the Site. The user is asked to check for any updates or changes thereof.