Privacy and Data Protection
Information on the processing of personal data - Privacy Policy website
pursuant to the provision of the Privacy Guarantor of 8 May 2014 - Version of 01/02/2020
This policy aims to describe how this website is managed, with reference to the processing of personal data of users/visitors who consult it pursuant to Regulation (EU) 2016/679. on the protection of personal data (hereinafter, "the Regulation").
This policy is also intended as information, pursuant to art. 13 of the Regulation, given to those who interact with the services offered by the website.
More detailed information on the processing of personal data are reported, where necessary, in the sections relating to the various services offered. This information is aimed at defining the limits and methods of data processing for each service, on the basis of which visitors can freely express their consent and possibly authorize the collection of data and its subsequent use.
Please note that this privacy policy applies to this website and not to other websites that may be consulted by the user through the links on this site, for which please refer to the information provided by other sites regarding their privacy management.
Owner and persons in charge of processing
AB.AV SRLS with registered office in Via Della Bufera 54 - 06046 Norcia (PG), in the person of its legal representative, is the Data Controller for the processing carried out on personal data collected and obtained from this website and determines how the data will be stored and who will have access to the information collected by the website.
The data will be processed by personnel expressly authorised by the Data Controller pursuant to Art. 29 of the Regulations, and may also be processed by subjects appointed as external managers pursuant to Art. 28 of the Regulations.
Type of data processed
The website offers content of an informative nature. While browsing the site, you may acquire information about the visitor, in the following ways:
Navigation data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the communication protocols of the Internet.
This category of data includes: IP addresses, the type of browser used, the operating system, the domain name and addresses of websites accessed or exited from, information on pages visited by users within the site, access time, internal path analysis and other parameters relating to the operating system and the user's IT environment. Such technical/informatics data are collected and used only in an aggregate and non-identifying way and could be used to ascertain responsibility in case of hypothetical computer crimes against the site.
Purpose of the treatment
The data collected will be used for:
- technical management of the services provided
- anonymous statistical analysis of generated traffic and visited pages
- prosecution of computer crime
Data voluntarily provided by the visitor in the "CONTACTS" page or in the data collection form "Name, Phone, Email, Notes".
This is personal data freely provided by the visitor to the site, filling in the fields indicated in the contact form to request information about our services.
Purpose of the treatment
The data collected will be used for:
- Please provide the requested information to the contact details given in the contact form.
The consent, free, informed and specific, is required only for the data collected in the page "CONTACTS" or in the data collection form "Name, Phone, Email, Notes" for the purposes specified. The consent is given by means of a "special box" and the sending of the request with the data is not possible without first giving the consent, which is recorded and stored by the Owner for the purposes of exhibition at the request of the interested party or the Authority.
Treatment modalities
Personal data may be processed in the following ways:
- Outsourcing of processing operations to third parties;
- Processing by means of computer systems.
All processing is carried out in compliance with the methods set out in Articles 6 and 32 of the Regulations and by adopting the appropriate security measures.
Communication
Your data will be communicated exclusively to competent and duly appointed subjects for the performance of the services necessary for the correct management of the relationship, with a guarantee of protection of the rights of the interested party. The data will be processed only by personnel expressly authorised by the Data Controller, or also by third parties expressly appointed as Data Processors for the processing of their competence pursuant to Art. 29 of the Regulations.
Link to/from third party sites
From this website it is possible to connect through specific links to other websites of third parties. The owner of the site declines any responsibility regarding the possible management of personal data by other sites other than this site. For information on the purposes, type and methods of collection, processing, use and storage of personal data by the site visited, as well as on how to exercise their rights, please see the privacy policy of the site visited.
Diffusion
The personal data collected are not and will not be disseminated. Personal data may also be transferred, limited to the above purposes, to the following states:
- stored at Internet Providers located within the European Union;
- processed at Internet providers in the USA on the basis of appropriate contractual guarantees.
Retention Period: in accordance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 of the GDPR, in addition to the purposes for which they are collected, the data could be used to ascertain responsibility in case of hypothetical computer crimes against the site. Except for this eventuality, subject to the need to retain data for legal purposes, the data is retained for time so established:
- the time stipulated by the hosting service provider in accordance with the regulations on the retention of electronic traffic data for technical connection data;
- the time necessary to carry out the services requested for the data collected in the "CONTACTS" form;
You have the right to obtain from the owner of the Treatment the cancellation, communication, updating, rectification, integration of personal data concerning you, and in general you can exercise all the rights provided by Articles. 15 to 22 of the Regulation herein.
Changes to the Privacy Policy
This policy governs the methods for processing personal data provided by visitors when browsing the website. The possible coming into force of new sector regulations, as well as the constant examination and updating of the services to the user, could imply the need to vary these modalities. It is possible that our policy may change over time and we therefore invite visitors to periodically consult this page. To this end, the policy document highlights the date of updating.
EXERCISE OF DATA SUBJECT'S RIGHTS
In order to exercise their rights ensured by the above articles, the interested party should contact [email protected] by email.
Regulation (EU) 2016/679 - Article 15 - Data subject's right of access
- The data subject shall have the right to obtain from the data controller confirmation as to whether or not personal data relating to him or her are being processed and, if so, to obtain access to the personal data and the following information:
(a) the purposes of the processing;
(b) the categories of personal data concerned;
(c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular to recipients in third countries or international organisations
(d) where possible, the proposed period for which the personal data will be stored or, if that is not possible, the criteria used to determine that period
(e) the existence of the right of the data subject to request from the controller the rectification or erasure of personal data or the restriction of the processing of personal data concerning him or her or to object to the processing of personal data concerning him or her
(f) the right to lodge a complaint with a supervisory authority;
(g) where the data are not collected from the data subject, all available information as to their source;
(h) the existence of automated decision making, including profiling as referred to in Article 22(1) and (4), and, at least in such cases, meaningful information on the logic used, as well as the importance and the envisaged consequences of such processing for the data subject. - Where personal data are transferred to a third country or an international organisation, the data subject shall have the right to be informed about the existence of appropriate safeguards in accordance with Article 46 relating to the transfer.
- The controller shall provide a copy of the personal data being processed. In case of further copies requested by the data subject, the controller may charge a reasonable fee based on administrative costs. If the data subject submits the request by electronic means, and unless otherwise specified by the data subject, the information shall be provided in a commonly used electronic format. The right to obtain a copy referred to in paragraph 3 shall not affect the rights and freedoms of others.
For the information of the data subject, the other articles of the Regulation on the exercise of their rights, which the Data Controller is required to apply in the processing of personal data, are listed.
Article 16 - Right of rectification;
Article 17 - Right to erasure ("right to be forgotten");
Article 18 - Right to restriction of processing;
Article 19 - Obligation to notify in case of rectification or erasure of personal data or restriction of processing;
Article 20 - Right to data portability;
Article 21 - Right to object;
Article 22 - Automated decision making concerning natural persons, including profiling.