Information on personal data from the interested party pursuant to art. 13 GDPR (effective from 25 May 2018)
Pursuant to art. 13 of the GDPR (EU regulation 2016/679), the following information is provided, in accordance with the principle of transparency, in order to make the user aware of the characteristics and methods of data processing:
a) Identity and contact details
We inform you that the “Data Controller” is: PTA Group S.r.l.
The following contact details are reported: firstname.lastname@example.org.
b) Contact details of the personal data protection officer (DPO) if mandatory or if present
We inform you that the entity has designated, pursuant to art. 37 GDPR the person responsible for the processing of personal data (Data protection officer) who can be contacted through the following channels: email@example.com.
c) Purpose of the processing, legal basis and legitimate interest
The processing of personal data requested from the interested party is carried out for the following purposes:
1) provision of services
The legal basis of the processing is your will to finalize the contract. The treatment is necessary for the pursuit of the legitimate interest of the data controller to respect the contractual obligations signed between the parties. The lawfulness of the processing is based on the consent manifestly expressed by the interested party, also via e-mail or website.
d) Recipients and any categories of recipients of personal data
The data is processed within the body by authorized data processing subjects under the responsibility of the Data Controller for the purposes indicated above. The data may be communicated to the following external data processors who have entered into specific agreements, conventions or protocols of understanding, contracts with the data controller. The data may be disclosed to suppliers or collaborators for a better performance of the assignment.
e) Data transfer to third country
The Data Controller will not transfer data to a third country or to an international organization, unless there is an adequacy decision by the Commission or, the reference to the appropriate or appropriate guarantees and the means to obtain a copy of such data or the place where they were made. available (in the case of the transfers referred to in article 46 or 47, or article 49, second paragraph of the GDPR).
f) Data retention period
Personal data will be kept for an indefinite period of time and in any case for the period necessary to achieve the purposes for which they were collected.
g) Data rights
It should be noted that, with reference to your personal data, you can exercise the following rights: right to access your personal data; the right to obtain the rectification or cancellation of the same or the limitation of the processing concerning him right to object to the processing; right to data portability (law applicable only to data in electronic format), as governed by art. 20 of the GDPR.
We inform you that since the data processing is based on article 6, paragraph 1, letter a), or on article 9, paragraph 2, letter a) of EU regulation 2016/679 you have the right to withdraw your consent at any time without prejudice to the lawfulness of the processing based on consent before revocation. Regarding the methods of exercising the aforementioned rights, the interested party can write to: firstname.lastname@example.org.
The interested party is informed that he has the right to lodge a complaint with the supervisory authority and can contact: email@example.com or further information, see v. the institutional website of the Privacy Guarantor www.garanteprivacy.it
i) Data communications
We inform you that the communication of personal data is a legal or contractual obligation or a necessary requirement for the conclusion of a contract.
j) Provision of data
The provision of data is mandatory as the communication of data is a contractual obligation or a necessary requirement for the conclusion of the contract. Failure to provide the data will not allow the interested party to proceed with the completion of the procedure.
k) Different purpose of the treatment
The data controller intends to further process personal data for a purpose other than that for which they were collected, prior to such further processing, the data controller will provide the data subject with information on this different purpose and any other relevant information.
The owner does not use automated processes aimed at profiling.
For personal data, pursuant to art. 4, first paragraph, lett. a) GDPR means: “any information concerning an identified or identifiable natural person (” interested party “); the natural person who can be identified, directly or indirectly, with particular reference to an identifier such as a name, an identification number, location data, an online identifier or one or more characteristic elements of his physical identity, is considered identifiable, physiological, genetic, psychic, economic, cultural or social “.
TYPES OF DATA PROCESSED
The computer systems and software procedures used to operate this Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This is information that is not collected to be associated with identified interested parties but which by their very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes IP addresses or domain names of the computers used by users who connect to the Site, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s computer environment.
These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the Site.
Data provided voluntarily by the user
The optional, explicit and voluntary sending of an e-mail address to the addresses indicated on the Site, as well as the sending of messages through the published Collection Forms, involves the subsequent acquisition of the sender’s address and any other personal data entered, necessary to respond to requests. Specific summary information may be reported or displayed, from time to time and where strictly necessary, on the pages of the Site prepared for particular services on request.
SCOPE OF CIRCULATION OF DATA
No data will be disclosed or transferred to third parties unless with the express and specific consent of the interested party.
Where the communication to third party suppliers or partners of the Data Controller should be necessary for organizational, administrative or support needs to the services provided, it will be the Data Controller’s responsibility to appoint the latter as data processors, by virtue of the ability, experience and reliability demonstrated.
It is understood that the personal data of users may be freely disclosed to third parties, such as the police, whenever this is permitted by law or required by an order or provision of a competent authority.
The personal data of users of the Site will not be transferred abroad, to those countries outside the European Union that do not ensure adequate levels of protection of personal data. Should this prove necessary for the purposes of providing the requested service, it will be the responsibility of the Data Controller to request specific consent from the data subject or otherwise act in accordance with the law and applicable regulations.
LINKS TO OTHER WEBSITES
The Data Controller does not control or has the ability to supervise neither the content nor the policies for the processing of personal data, websites and third-party services accessible through the links contained within the Site. The Data Controller, therefore, will not be able to in no case be held responsible for the treatments carried out through or in relation to such third party sites.
Users are therefore invited to pay close attention in this regard, by viewing the conditions of use and the privacy policies published on the portals visited.
WHAT ARE COOKIES?
Cookies are small portions of data that allow you to carry out statistics relating to the use of the Site, to understand browsing experiences and any needs. The data collected through cookies are used to make the browsing experience more enjoyable and more efficient in the future.
Cookies can be divided into two types:
“first part”, when they are managed directly by the owner and / or publisher of the website visited by the user; and / or
“third part”, when they are managed by parties unrelated to the website visited by the user.
Furthermore, they can be further distinguished according to the purposes for which they are used: some allow better navigation, memorizing some user choices with respect to specific configurations (so-called “technical cookies”) and thus guaranteeing increasingly performing functions, while others allow to monitor the user’s navigation also for the purpose of sending advertising and / or offering services in line with his preferences (“profiling cookies”).
This Site uses technical cookies and, in particular:
navigation or session cookies: essential to allow the user to move normally within the Site and to properly use the related services. Not being stored on the user’s computer, they disappear when the browser is closed;
functionality cookies: solely aimed at improving and speeding up navigation on the Site, by storing certain choices made by the user (such as language preferences);
These types of cookies allow normal navigation and use of the Site, allow you to properly use the published content or to authenticate yourself to access restricted areas. The cookies used also make it possible to collect information, in aggregate form, on the number of users and how they visit the Site as well as information relating to the language selected during navigation.
With reference to these, the Cookies Provision imposes an opt-out regime. The user has the right to be informed, through this information prepared by the Data Controller, and can also choose to deny their consent to the use of these tools
THIRD PART COOKIES
It is possible that while a user is browsing, some cookies that are not directly controlled and managed by the Owner may be stored on his device, such as when the user visits a page that includes the contents of a third party website.
These cookies, called “third party” cookies, can be divided into:
analytical, used to collect and analyze statistical information on the number of users and visits to the Site. Disabling these third-party cookies does not compromise the use of the Site;
Widgets / Plugins: some widgets and plugins made available by social networks (such as, by way of example and not limited to, the LinkedIn button or the display of YouTube videos directly within the websites where the user is located to browse) can use their own cookies to facilitate interaction with the reference site. Its deactivation does not compromise the use of the Site, if not with the sole reference to the possibility of quick sharing of contents and / or viewing of multimedia contents present within it;
profiling: used to collect information regarding the preferences and habits expressed by the user during their navigation and therefore to make the advertisements provided by third parties more engaging and targeted.
Google will use this information for the purpose of tracing and examining the use of the Site, compiling reports on its activities for the Site managers and providing other services relating to Site activities and Internet use.
In order to understand the actual functioning of Google cookies, as well as to be able to deny your consent to the use of these files, please refer to the information drawn up to this effect by Google, which can be found at this link.
PERFORMANCE OF CONSENT
In line with the provisions of current legislation, where profiling cookies will be introduced on this Site, at the first access opportunity (homepage or any page of the same), the Data Controller will request the user’s consent to send the above cookies. indicated, in the following ways:
- by clicking on the “Accept” or on the closing “X” button in the banner that will be displayed;
- by clicking on any element of the web page of the Site, even by scrolling, outside the banner itself;
We therefore reiterate that the user’s consent is only necessary for the installation of third-party cookies.
The user has the right to change the settings of the browser used for browsing the internet at any time, choosing not to receive all cookies or only some types of them.
The following table shows the instructions provided by each manufacturer of the most used browsers. If the browser used by the user does not fall within those included in the table, the same is invited to visit the manufacturer’s support pages in order to understand how to disable cookies.
Internet Explorer http://windows.microsoft.com/it-it/windows7/block-enable-or-allow-cookies
Mozilla Firefox https://support.mozilla.org/it/kb/Attivare%20e%20disattivare%20i%20cookie
Google Chrome https://support.google.com/accounts/answer/61416?hl=it
THE USER’S RIGHTS
The identification details of the Data Controller are shown in the introductory part of this document.