PRIVACY POLICY
INFORMATION ON THE PROCESSING OF PERSONAL DATA
The purpose of this page is to inform users of this website about how this website is managed with regard to the processing of their personal data, as required by Articles 13 and 14 of European Regulation No. 679/2016
Interested parties are therefore invited to read their privacy policies carefully before accessing the services of third parties.
1 Type of data collected, legal basis and purpose of processing
(i) Navigation data
Our computer systems and the software procedures used to operate this website acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes the IP addresses or domain names of the users’ terminals that connect to the site, the MAC (Media Access Control) addresses, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment. This data is used for the following purposes:
- obtain anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes to the detriment of the site. The legal basis legitimising such processing is Article 6(1)(b) of the Regulation, insofar as it is necessary to allow the data subject to benefit from the requested service.
- comply with legal obligations or requests by judicial authorities. The legal basis legitimising such processing is Article 6(1)(c) of the Regulation, as the processing is necessary to fulfil a legal obligation to which the data controller is subject.
(ii) Data voluntarily provided by the Data Subject
The Controller may process the user’s personal data for the following purposes:
- respond to requests made by the Data Subject. The legal basis legitimising such processing is Article 6(1)(b) of the Regulation, insofar as it is necessary to provide the data subject with the requested service; the data are kept for the time necessary to respond to the requests received, then deleted.
- Sending of newsletters concerning the company’s activities. Legal basis of the processing is consent, ex art. 6 par.1. lett. a) of the Regulation, as the data subject has given free and informed consent. To carry out this purpose, the Data Controller will process personal contact data.
- registration of an account at the website Centro Altreitalie. The legal basis justifying this processing is Article 6(1)(a) of the Regulation, given that the data subject has given free and informed consent. To carry out this purpose, the data subject must provide: name, surname, e-mail address, telephone number, city and company. In order to perform this function, the data controller will process personal data and contact details; the data will be stored in accordance with the law.
- comply with legal obligations or requests by judicial authorities. The legal basis legitimising such processing is Article 6(1)(c) of the Regulation, as the processing is necessary to fulfil a legal obligation to which the data controller is subject.
(iii) Cookies
The Site uses the following types of cookies:
- technical (session and navigation) cookies, to ensure normal navigation and use of the Site (allowing, for example, authentication to access restricted areas);
- third-party analytical cookies (with reduced identification potential), in order to monitor the use of the Site by Data Subjects for web platform optimisation and statistical purposes. For all information relating to the processing of Data carried out through cookies, please refer to the extended cookie policy, which can be reached [here] or on each page of the portal through the appropriate link in the footer.
- Period of data retention
Data collected and processed as a result of browsing the Site will be retained for as long as the web service is provided.
- The data provided through registration on the site will be stored in accordance with the law and deleted after the requested service has been provided.
- The data provided through social or email subscription to the Centro Altreitalie community and the newsletter will be retained until the newsletter activity is completed.
- Should business relationships be established through the aforementioned pages with users who provide their data, storage will be subject to the duration of the business relationship and for the fulfilment of tax and accounting obligations.
- Methods of processing
The Data will be processed by the in-house staff of the Globus et Locus Association and Centro Altreitalie expressly authorised to do so, using electronic instruments, will be organised in databases and will be stored on any suitable type of support (including computerised and paper). Specific security measures are observed to prevent the loss of Data, any illicit or incorrect use thereof and access by unauthorised third parties. The Data processing carried out by the Globus et Locus Association and Centro Altreitalie may involve automated decision-making processes on a consensual basis.
- Submission of Data
The provision of navigation data is necessary for the provision of the requested service (site navigation) and obligatory for this purpose; failure to provide such data will make it impossible for the Globus et Locus Association and Centro Altreitalie to allow navigation on the Site.
The provision of further data is optional; failure to provide such data does not entail any consequences for the data subject.
- Disclosure of Data
The Data may be communicated to companies or professional studios that provide services and activities on behalf of Centro Altreitalie or Globus et Locus Association as Data Processors for the fulfilment of legal obligations, as well as for any organisational and administrative requirements necessary to provide the requested services. It is possible to request from Centro Altreitalie or Globus et Locus the complete list of names of the external Data Processors involved in data processing.
Data will not be disseminated.
- Transfer of Data to countries outside the European Union or to international organisations
Centro Altreitalie and Associazione Globus et Locus do not transfer Data to countries that are not part of the European Union or to international organisations.
- Links to third-party sites or services
This information is provided only for the processing of personal data carried out through the Site or the tools provided by it, and not for any other websites that may be consulted by the Data Subject via links, whose operators operate as independent data controllers. The Interested Parties are therefore invited to read carefully, before accessing the services of third parties, their information on the processing of personal data.
- Rights of the Interested Parties
Pursuant to Articles 15 to 22 of EU Reg. No. 679/2016, you may at any time exercise the rights set out in these articles and in particular the right to access your data, to rectification, to erasure, to restriction, to portability, to opposition, and to be informed about processing carried out by automated decision-making processes concerning natural persons, including profiling).
As a data subject, you may lodge a complaint with the supervisory authority of the Member State where you habitually reside or work or of the place where the alleged infringement occurred.
The Italian Supervisory Authority can be reached at //WWW.GARANTEPRIVACY.IT/.
- Data controller – Contact details
The Data Controller is the Globus et Locus Association – Via Ercole Oldofredi 23, Milan. To exercise the rights listed above or to receive information regarding the privacy measures adopted, the Data Controller may be contacted at the following address: info@globusetlocus.org