Privacy policy

STATEMENT PURSUANT TO ART. 13 OF GDPR REGULATION EU NO. 2016/679 OF 27 APRIL 2016

This privacy policy is provided pursuant to and in accordance with art. 13 of GDPR Regulation EU No. 2016/679 of 27 April 2016 (henceforth also “GDPR”) on the protection of natural persons with regard to the processing of personal data. Specifically, Gruppo Icat S.r.l., as Data Controller, wishes to inform you that, in performance of the obligations deriving from GDPR, it is required to provide certain information regarding the methods and purposes of the processing of personal data in its possession or likely to come into its possession following consultation and use of the website by the user.

A. DATA CONTROLLER

The Data Controller for all personal data collected for the purpose of management of the website, is Gruppo Icat S.r.l., with registered office in Corso Stati Uniti 1/77, (35127) Padua.
E-mail address of the Data Controller: info@legittodibelzoni.it

B. DATA PROCESSED AND PURPOSE OF THE PROCESSING

1. Navigation data
   During normal operation, the IT systems and software procedures used to run this website collect a series of personal data, which is implicitly transmitted through the use of Internet communication protocols. This information is not collected in order to be associated with identified data subjects, but could, by its very nature, and if processed and integrated with third-party data, allow users to be identified IP addresses, browser type, domain names of the computers used by users to connect to the website, URI addresses (Uniform Resource Identifier) of the requested resources, time of the request, method used to submit the request to the server, file size obtained in response, numerical code about the status of the response made by the server (successful, error, etc.) and other parameters related to the operating system and the user’s IT environment all fall under this category of data.
   This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and is deleted immediately after processing.
   The data could be used to ascertain responsibility in the event of hypothetical IT crimes detrimental to the site.
2. Data provided voluntarily by the user
   The personal data that the user provides voluntarily by completing the contact form on the site, indicating his/her name, address and e-mail address, entails the subsequent acquisition of such personal data, required for the purpose of responding to requests sent.
   Furthermore, the optional, voluntary and explicit sending of electronic mail to the addresses given on this site involves the subsequent acquisition of the sender’s e-mail address, necessary for replying to the requests, and of any other personal data included in the communication.
   All content provided voluntarily by the user will be disclosed to the Data Controller and to appointed persons.

C. LAWFUL BASIS FOR PROCESSING

The lawful basis for the processing of the above-mentioned personal data is:

• as provided at point 1 lett. B) the need to enable navigation of the site;
• as provided at point 2.a lett. B) the purpose of responding to user requests.

D. METHODS OF DATA PROCESSING

Personal data is processed both with and without automated tools, for the purposes for which it was collected. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorised access. Data collected may be used by the Data Controller, administrators entrusted with processing services and with the correct performance of website activities.
Processing linked to the online services provided by this website may also take place on the premises of the online service provider. Personal data will be stored and secured, also in relation to knowledge acquired on the basis of technical progress, the nature of the data and the specific characteristics of the treatment, so as to minimize, through the adoption of suitable preventive security measures both physical and logical, risks of destruction or loss, even accidental, of the data itself, of unauthorized access or treatment not allowed or not in accordance with the purpose of the collection.
All processing of personal data takes place in Italy.
Processing will be carried out by the Data Controller and by subjects expressly authorised by the Data Controller.

E. PERSONAL DATA STORAGE PERIOD

The retention period for data provided voluntarily by the user is given by the time required to perform the specific request. On completion of said request, the personal data is anonymised or else deleted.
The storage time for automatically acquired browsing data is 6 months.

F. RECIPIENTS AND CATEGORIES OF RECIPIENTS

Collected data may be disclosed to the website management company, which is appointed as External Data Processor on the basis of a written contract.
The list of subjects appointed as external Data Processors is available from: Gruppo Icat S.r.l., with registered office in Corso Stati Uniti 1/77, (35127) Padua; or the e-mail address: info@legittodibelzoni.it

G. RIGHTS OF THE DATA SUBJECT

The data subject has the right:

• to access, rectification, erasure, restriction and the right to object to the processing of data;
• the right to receive personal data in a structured, commonly used and automatic-device-readable form and the right to transmit such data to another data controller without impediments;
• to withdraw consent to processing, without prejudice to the lawfulness of the processing based on consent given prior to revocation;

Further to this matter, the time limit for a reply to the data subject in relation to all rights is one calendar month from the day of receipt of the request, extendable to a maximum of three months in the case of particularly complex requests.
The data subject can exercise the aforementioned rights at any time by writing to the e-mail address: info@legittodibelzoni.it or by sending a registered letter with return receipt to: Corso Stati Uniti 1/77, (35127) Padua.

H. RIGHT TO LODGE A COMPLAINT

The data subject has the right to lodge a complaint with the Italian Supervisory Authority – the Garante del Trattamento dei dati.
Lodging a complaint is the method that allows data subjects to report an infringement of data protection rules to the Supervisory Authority pursuant to art. 77 of the GDPR and to request verification.
The data subject may lodge the complaint with a Supervisory Authority in the Member State of his/her habitual residence, or in his/her place of work or the place of the alleged infringement.
The data subject also has the right to seek judicial remedy before a Tribunal of First Instance if he/she believes that his/her rights have been breached following data processing.

I. TRANSFER OF DATA ABROAD

Data will be securely stored and processed in Italy. No data deriving from the online service is disclosed or shared.