Information pursuant to articles 13-14 of the GDPR (General Data Protection Regulation) 2016/679
In compliance with the obligations deriving from national legislation (Legislative Decree no. 196 of 30 June 2003, Personal Data Protection Code) and Community legislation (European Regulation for the protection of personal data no. 679/2016, GDPR) and subsequent amendments, this website respects and protects the privacy of visitors and users, making every possible and proportionate effort not to infringe the rights of users.
Legal basis of processing: important information
As of 25 May 2018 (the date on which the GDPR came into force), this site will process some of the data based on the legitimate interests of the Data Controller.
Data collected and purpose of information collected
Like all websites, this website makes use of log files in which information collected automatically during user visits is stored. The information collected may be as follows:
- Internet Protocol address (IP);
- browser type and parameters of the device used to connect to the site;
- Internet Service Provider name (ISP);
- date and time of visit;
- the visitor’s source (referral) and exit web pages;
- possibly the number of clicks.
This information is processed automatically and collected in aggregate form only, in order to verify the proper functioning of the site and for security reasons (as of 25 May 2018, this information will be processed on the basis of the legitimate interests of the Data Controller). For security purposes (anti-spam filters, firewalls, virus detection), automatically recorded data may also include personal data such as the IP address, which could be used, in accordance with applicable laws, to block attempts to damage the site itself or to harm other users, or in any case harmful or criminal activities. Such data is never used to identify or profile the User, but only for the purpose of protecting the site and its users (from 25 May 2018 such information will be processed according to the legitimate interests of the Data Controller).
The data collected by the site during its operation are used exclusively for the purposes indicated above and stored for the time strictly necessary to carry out the activities specified. In any case, the data collected by the site will never be provided to third parties, for any reason whatsoever, unless it is a legitimate request by a judicial authority and only in the cases provided for by law.
Place of processing
The data collected by the site are processed at the Data Controller’s premises and at the web hosting data centre. The web hosting Aruba Business Srl (with registered office in Via Gulinelli, 21/A – 44122 Ferrara), which is responsible for data processing by processing the data on behalf of the Data Controller, is located in the European Economic Area and acts in accordance with European regulations.
Session cookies are essential to distinguish between logged in users and are useful to prevent a requested functionality from being provided to the wrong user, as well as for security purposes to prevent cyber attacks on the site. Session cookies do not contain any personal data and last only for the current session, i.e. until the browser is closed. Consent is not required for them. The Functionality Cookies used by the site are strictly necessary for the use of the site, in particular they are linked to an express request for functionality by the User (such as login), for which no consent is required.
Disabling cookies choices and obligations
This site also acts as an intermediary for third party cookies, which are used to provide additional services and functionality to visitors and to enhance the use of the site, such as social buttons or videos. This site has no control over third party cookies, which are entirely managed by the third party. Consequently, information on the use of these cookies and their purposes, as well as on how to disable them, is provided directly by the third parties on the pages indicated below.
More information about Google Analytics cookies can be found at Google Analytics Cookie Usage on Websites.
The User can selectively disable the collection of data by Google Analytics by installing the appropriate component provided by Google on his browser (Opt Out).
cookie: test_cookie .doubleclick.net is not a permanent cookie, but is used to check whether the User’s browser supports cookies.
For further information on the use of your data and its processing by Google, please refer to the information provided on the relevant page page prepared by Google, and the page on How Google uses data when you use partner sites or apps.
Plugin Social Network
Data transfer to non-EU countries: important information
This site may share some of the data collected with services located outside the European Union. In particular with Google, Facebook and Microsoft (LinkedIn) via social plugins and the Google Analytics service. The transfer is authorised on the basis of specific decisions of the European Union and the Italian Data Protection Authority, in particular Decision 1250/2016 (Privacy Shield – here the information page of the Italian Data Protection Authority), so no further consent is required. The above-mentioned companies guarantee their adherence to the Privacy Shield.
This site processes user data in a lawful and correct manner, adopting appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of data. The processing is carried out using computer and/or telematic instruments, with organisational methods and logics strictly related to the purposes indicated. In addition to the Data Controller, in some cases, the data may be accessed by categories of staff involved in the organisation of the site (administrative, commercial, marketing, legal, system administrators), or external parties (such as third party technical service providers, postal couriers, hosting providers, IT companies, communications agencies).
Pursuant to European Regulation 679/2016 (GDPR) and national legislation, the User may, in the manner and within the limits provided for by current legislation, exercise the following rights:
- request confirmation of the existence of personal data concerning him/her (right of access);
- know its origin;
- receive intelligible communication;
- have information on the logic, methods and purposes of processing;
- request the updating, rectification, integration, deletion, transformation into anonymous form, blocking of data processed in breach of the law, including data no longer necessary for the purposes for which they were collected;
- in cases of processing based on consent, receive, at the sole cost of any support, your data provided to the Controller, in a structured, machine-readable form and in a format commonly used by an electronic device;
- the right to lodge a complaint with the supervisory authority (Privacy Authority – link to the Authority’s page);
- as well as, more generally, to exercise all the rights conferred on him by the laws in force.
Requests should be addressed to the Data Controller.
Where data are processed on the basis of legitimate interests, the rights of data subjects are in any case guaranteed (except for the right to portability, which is not provided for by the rules), in particular the right to object to the processing, which can be exercised by sending a request to the Data Controller.
The data controller in accordance with the laws in force is the site administrator, Ameta s.r.l., who can be contacted via the CONTACTS section.
Responsible for processing
Google is appointed as data processor, processing data on behalf of the owner (Google Analytics).