This page describes how to manage this website with reference to the processing of the personal data of users who consult it. THET he processing of data is carried out in compliance with the criteria established by the European regulation on the protection of personal data, Reg. 2016/679 / EU and any other national legislative text, provision or authorization of the competent Authority connected to it. According to the indicated legislation, the treatment must be based on principles of correctness, lawfulness and transparency and protection of your privacy and your rights.
The information is provided only for this site and not for other websites that may be consulted by the user via links. Personal data is collected for the following services:
a) allow navigation on the website;
b) respond to your requests for information regarding the services offered by the Data Controller.
THE HOLDER OF THE TREATMENT
Following consultation of this site, data relating to identified or identifiable persons may be processed. The owner of their treatment is Eco-dem srl, in the person of its pro tempore legal representative, with registered office in Strada del Chiodo, 50 – 37060 Alpo di Villafranca (VR) tel .: 045-513611 e-mail: firstname.lastname@example.org.
PLACE OF DATA PROCESSING, COMMUNICATION AND DIFFUSION
The treatments connected to the web services of this site take place at the aforementioned headquarters of the Company and are handled by internal staff or, if necessary, by appointed external personnel (eg for maintenance and updating of IT systems).
On the other hand, no data deriving from the web service is disclosed.
They may be communicated to third parties, duly appointed, only if this is necessary for this purpose for the performance of the service.
The payment data will be processed directly by the chosen payment manager (eg credit card, PayPal, cash on delivery).
The Data Controller also informs that it does not resort to fully automated decision-making processes, including profiling, to achieve the purposes set out in this information.
PURPOSE AND LEGAL BASIS OF THE PROCESSING
The personal data provided by users who submit requests for information regarding products and purchases will be used only to perform the requested service.
The legal bases of data processing are:
1) art. 6.1 lett. f) GDPR “legitimate interest of the Data Controller”, consisting in allowing the use of the “contact us” service and art. 6.1 lett. a) GDPR “the consent of the data subject”.
2) art. 6.1 lett. b) GDPR “execution of pre-contractual and contractual measures in place with the data subject” for viewing the company’s products and services.
TYPE OF DATA PROCESSED
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment.
This type of data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site. For these data, limited to the aforementioned purpose, it is not necessary to request explicit consent.
Data provided voluntarily by the user
These are the identification data necessary for the user’s registration, for the insertion of the specific request. The insertion takes place by filling in the form of the specific sections, it involves the subsequent acquisition of the information. Processing is necessary for the aforementioned purposes and is optional; failure to acquire the requested data will make it impossible to provide the service.
TRANSFER OF DATA TO NON-EU COUNTRIES
The Data Controller does not transfer (and does not keep) personal data collected from the website in third countries outside the EU
The Data Controller will process personal data for the time necessary to fulfill the aforementioned purposes and in any case for no later than the terms established by Italian law for the storage of data for billing. The contact data may be deleted following your exercise of the right of cancellation even immediately.
RIGHTS OF THE INTERESTED PARTIES
Pursuant to art. 15 – 22 GDPR, the interested party has the right to ask the data controller to access your personal data or to correct or cancel them or limit their processing, or have the right to object to their processing, as well as the right to request the portability of the data.
The request can be made by e-mail or fax or registered letter with the subject: “request by the interested party” specifying in the request the right that the interested party wishes to exercise (cancellation, rectification, portability, oblivion), together with a valid e-mail / pec address to which the reply is to be delivered.
The data controller or anyone appointed by the same, will proceed to satisfy the request within 30 days from the date of receipt. If the response is complex, the time could be extended to a further 30 days, subject to timely communication to the interested party.
If he deems it appropriate to assert his rights, he has the right to lodge a complaint with the competent supervisory authority, corresponding to the Guarantor for the protection of personal data, based in Piazza Venezia, 11 – 00187 Rome, e-mail: email@example.com.