PRIVACY NOTICE — DATA PROCESSING FOR WEBSITE VISITORS
In compliance with EU Regulation 2016/679 (General Data Protection Regulation — GDPR) and subsequent amendments and integrations, we hereby provide you with the necessary information regarding the processing of personal data.
This Privacy Notice does not apply to other websites that may be accessible through links on the owner’s websites, for which the owner shall not be held in any way responsible.
This notice is provided pursuant to Article 13 of EU Regulation 2016/679 (European Regulation on the protection of personal data) and also takes into account the provisions of Directive 2002/58/EC, as amended by Directive 2009/136/EC, on cookies, as well as the Guidelines issued by the Italian Data Protection Authority on 08/05/2014 regarding cookies.
Users/visitors are advised to carefully read this Privacy Policy before submitting any personal information and/or filling out any electronic form on the site.
1. Data Controller
The Data Controller, pursuant to Articles 4 and 24 of EU Regulation 2016/679, is Albaware di Belleffi Laura, acting as owner and legal representative.
2. Purpose and Lawfulness of Processing
The personal data you provide will be processed in compliance with the lawfulness conditions set forth in Article 6 of EU Regulation 2016/679 for the following purposes:
a) Data processing management (Article 6 letter b):
- Website navigation: the IT systems and software procedures used to operate this website acquire, during normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.
This information, by its nature, could — through association and processing with data held by third parties — allow the identification of users/visitors (e.g., IP addresses, domain names of computers, etc.).
Such data is used solely for statistical purposes (thus anonymized) and to check the correct functioning of the website; it is deleted immediately after processing. - Contact/request forms: if users/visitors, by connecting to this website, submit their personal data to request specific services or information by e-mail or via forms, this implies the acquisition by Albaware di Belleffi Laura of the sender’s address and/or any other personal data provided, which will be used exclusively to respond to the request or to provide the requested service.
Personal data provided by users/visitors will only be shared with third parties if the disclosure is necessary to fulfill the users’/visitors’ requests. - Compliance with contractual, legal, and administrative/accounting obligations.
3. Data Recipients or Categories of Recipients
The personal data provided may be communicated to recipients, appointed pursuant to Article 28 of EU Regulation 2016/679, who will process the data as Data Processors and/or as natural persons acting under the authority of the Controller or Processor, in order to fulfill contracts or related purposes. Specifically, data may be communicated to the following categories of recipients:
- Entities providing IT system management services and network communication systems for Albaware di Belleffi Laura (including e-mail services);
- Firms or companies providing assistance and consultancy services;
- Competent authorities for compliance with legal obligations and/or public authority orders, upon request.
Recipients in the above categories may act as Data Processors or as independent Data Controllers.
The updated list of appointed Data Processors is available at the registered office of Albaware di Belleffi Laura.
4. Transfer of Data to Third Countries or International Organizations
The personal data provided will not be transferred abroad, either within or outside the European Union.
5. Data Retention Period and Criteria
Processing is carried out using automated tools (e.g., electronic procedures and media) with methods and tools designed to ensure the highest level of security and confidentiality by specifically authorized personnel.
In accordance with Article 5(1)(e) of EU Regulation 2016/679, personal data will be stored in a form that allows the identification of the data subjects for no longer than is necessary for the purposes for which the personal data is processed.
For more information about the criteria used to determine the retention period of your data, you may write to albaware@pec.it.
6. Nature of Data Provision and Consequences of Refusal
Apart from the navigation data specified above, users are free to provide their personal data in the dedicated areas of the website.
Providing personal data for the purposes mentioned in point (a) of this notice is necessary to enable the specific features and services offered by the Data Controller — for example, to receive a response to an information request. Failure to provide such personal data may result in the inability to obtain the requested service or use the site’s features.
7. Data Subjects’ Rights
The user may exercise their rights as set forth in Articles 15 to 22 of EU Regulation 2016/679 by contacting the Data Controller at albaware@pec.it.
Specifically, the user has the right at any time to:
- request access to their personal data, rectification, erasure, or restriction of processing;
- object to the processing of their personal data (including automated processing);
- request the portability of their data.
Without prejudice to any other administrative or judicial remedy, if the user believes that the processing of their personal data violates the provisions of EU Regulation 2016/679, they have the right to lodge a complaint with the Data Protection Authority (Garante per la Protezione dei Dati Personali).
Where processing is based on Article 6(1)(a) or Article 9(2)(a), the user has the right to withdraw their consent at any time.
The user also has the right to obtain confirmation as to whether or not personal data concerning them exists and to receive such data in an intelligible form.
Any rectifications, erasures, or restrictions of processing carried out upon the data subject’s request — unless this proves impossible or involves a disproportionate effort — will be communicated by the Company to each recipient to whom the personal data has been disclosed. The Company will inform the data subject about such recipients if requested.
In the case of a portability request, the Data Controller will provide the user’s personal data in a structured, commonly used, machine-readable format, without prejudice to paragraphs 3 and 4 of Article 20 of EU Regulation 2016/679.