LAST UPDATE: 27/07/2020
INFORMATION ON THE PROCESSING OF PERSONAL DATA
The CompanyIdeat S.r.l. (P. IVA 06087730484), with registered office in Firenze in Via Gino Capponi 26,as data controller of personal data (hereinafter the “Holder”) of the website www.ideatitaly.it(hereinafter the “Website”), informs visitors to the Website (hereinafter the “Interested”) pursuant to art. 13 of the European regulation n. 2016/679, the General Data Protection Regulation (GDPR).
The Data Controller is aware of the importance of processing the personal data of the interested parties and, for this reason, takes care to indicate which data are processed and how they are processed. By continuing to browse the Site or indicating the desire to use the services provided by it, the interested party declares to have read and accepted this information (hereinafter “Information”), thus issuing consent for the processing of personal data by the Data Controller.
For any information, doubts or requests relating to this Information, the Data Controller makes the following email address available to interested parties:
amministrazione@ideatitaly.it
What are the rights of the interested party in relation to the processing of personal data?
The interested party has the following rights:
right to be informed that there is data processing in progress concerning him and, if so, to access the personal data processed;
right to rectification of personal data;
right to erasure (right to be forgotten) of personal data concerning him;
right to limit the processing of personal data concerning him;
right to data portability to receive, or have personal data concerning him or her transmitted to another Data Controller in a structured, commonly used and machine-readable format;
right to object to the processing of personal data;
right to withdraw previously given consent;
right to make a complaint to the competent authorities for violation of personal data processing.
How to exercise your rights?
The interested party may exercise their rights by writing to the email address indicated above.
The Owner does not intend to make the Interested Parties incur any costs for exercising one of their rights, but to do so the Owner may request specific information to follow up on the Interested Party’s communications in relation to the rights.
The aforementioned communications are usually received within 30 days of receipt of the communication itself, but if this deadline cannot be respected (e.g. due to an excessive load of requests or complexity of the response), the Data Controller will be responsible for communicating this to the interested party and keeping him updated on the developments of the communication sent.
What personal data are processed?
The Data Controller processes the personal data provided to him both by the interested party and by third parties in order to be able to follow up on the contact requests of the interested party received via the Site (hereinafter the “Services”).
a)Data provided directly by the interested party
|
Category of personal data |
Type of data |
|
Identification and contact data |
Name, surname, residence/domicile, email address, telephone number |
|
Technical data |
IP Adress |
|
Audiovisual data |
Image, video, voice recording |
|
Payment details |
IBAN, bank account |
b)Data collected by third parties
|
Third party source of personal data |
Type of data |
|
Analytics providers |
|
Aggregate data
The Owner may collect, use and share aggregate data, such as statistical or demographic data, for any purpose.
The aggregated data may derive from the personal data of the interested party, but once aggregated they do not constitute personal data within the meaning of the GDPR as they are not capable of directly or indirectly identifying the interested party. However, if the Data Controller combines or connects the aggregated data with the personal data of the Interested Party in such a way as to allow the identification of the Interested Party, directly or indirectly, the Data Controller will process the resulting data in accordance with the provisions of the Information.
Special Data
The Data Controller does not process any category of particular data of the interested party (by particular data we mean data relating to ethnic or racial origin, religious or philosophical beliefs, sexual orientation, political opinions, trade union membership, genetic, biometric and health data), as it does not process any data relating to criminal convictions and crimes relating to the interested party.
Why are personal data processed?
The Data Controller processes personal data for the following purposes indicated in the following table.
However, the GDPR requires that, for each purpose of processing personal data, the Data Controller has a legal basis for carrying out the processing.
The Data Controller may process the personal data of the interested parties through their consent as the legal basis for the processing. Consent can be revoked at any time, but the processing carried out until the revocation of consent cannot be influenced.
Below is a summary table of the purposes and their description:
|
Purpose |
Description |
Storage |
|
Providing the Services |
The interested party may, through the Site, request to be contacted to receive information, appointments or quantifications of the activities carried out by the Owner. |
The data will be retained until the provision of the individual Services is concluded |
|
Provide support to interested parties |
Solve technical problems encountered by interested parties during navigation, their requests for assistance, improve the Services and the Site and provide the support requested by interested parties. |
The data will be retained until the interested parties’ request for support is processed |
|
Newsletter |
The Data Controller may send updates, not of commercial content, to inform the interested party regarding developments in their business such as agreements with commercial partners and participation in events. |
The data will be kept for 24 months |
|
Comply with legal, regulatory and protection obligations of the Owner’s business |
The Data Controller may process the personal data of the interested party to comply with legislative and regulatory obligations, as well as to comply with the provisions of the jurisdictional and administrative authorities. Furthermore, the Data Controller may process the data to protect its rights and interests such as, for example, in the case of jurisdictional protection or due diligence in the event of assessments of a change in the corporate structure. |
Personal data will be retained for the period of time determined by law, regulation and/or the relevant authority. |
What happens if the interested party does not provide the necessary personal data?
If the data is necessary to provide the Services and to provide support to the interested parties, the Data Controller will not be able to provide them and support the interested party in their requests. In this case the Data Controller may, alternatively, request the integration of personal data or delete the personal data of the interested party, preventing the provision of the Services.
For purposes other than the provision of Services and the provision of support to interested parties, the provision of data is optional and failure to provide personal data will not affect the aforementioned processing purposes.
To whom are personal data communicated and disseminated?
a)Communication
The personal data of the interested parties may be communicated to third parties with respect to the Data Controller, as better indicated in the following table:
|
Recipients |
Purpose of communication |
|
Providers |
The Owner’s suppliers support him in the provision of the Services with, by way of example and not limited to, Site development, hosting, maintenance, backup, virtual infrastructure. |
|
External consultants |
In the event of legal obligations or obligations relating to a relationship established with the interested party, the Data Controller may communicate the personal data to external consultants, such as, for example, the accountant and the lawyer. |
|
Authorities and judicial proceedings |
The Data Controller may communicate the personal data of interested parties to state and/or administrative and/or judicial authorities if this is mandatory by law, regulations or measures of the authorities or to defend one’s own rights and/or interests. |
b)Diffusion
The personal data of the interested parties will not be disclosed.
Where do we store personal data?
The Data Controller retains personal data in paper archives within the Data Controller’s headquarters, as well as computer archives located both within the European Union and outside if this is instrumental to the pursuit of the purposes indicated above. In this last case, the Data Controller ensures that companies not having offices within the European Union are processing personal data with the utmost confidentiality in compliance with the adequacy decisions of the European Commission, any Privacy Shield or, if necessary, stipulating agreements that guarantee an adequate level of protection.
How are personal data processed?
The Data Controller processes the personal data of the interested parties by adopting appropriate security measures aimed at preventing unauthorized access, disclosure, modification and destruction.
The data processing is carried out through IT procedures, telematic means and, residually, on paper supports by specifically authorized internal subjects as well as by external managers if appointed, and this also on the basis of existing contractual agreements.
What is the policy on the processing of minors’ data?
The Data Controller is aware of the sensitivity of data processing of minors. In particular, the Services are not intended to be provided to minors under the age of 14 and the Data Controller does not voluntarily process data of minors under the age of 14: in this sense, interested parties are asked not to request the provision of the Services if the age is under 14 years.
The Owner encourages those who exercise parental responsibility over minors under 14 years of age to check that they do not request the provision of the Services and, in any case, to educate minors under 14 years of age not to release their personal data via the Site.
If the Data Controller becomes aware that some personal data refers to minors under 14 years of age, the Data Controller will take steps to delete the personal data.
What if there are links to other websites?
The Data Controller informs the Interested Parties that this Information applies only to the Site and, if there are links to other websites, the Interested Party must verify the information on said sites before releasing their personal data.
The Owner takes no responsibility for the personal data provided by the interested parties on other websites.
Changes to the Policy
The Owner reserves the right to modify this Information at any time. In the event of changes, the Data Controller will upload the new information on this page and, in this sense, if it urges the interested party to check the changes to the information: the interested party will be able to see the history of the information by checking the date provided.
By continuing to use the Site following the changes, the interested party accepts these changes and consents to the data processing as modified.
COOKIES INFORMATION
The Company Ideat S.r.l. (P. IVA 06087730484), with registered office in Firenze alla Via Gino Capponi 26, as data controller of personal data (hereinafter the “Holder”) of the website www.ideatitaly.it (hereinafter the “Website“), informs visitors to the Site (hereinafter the “Interested”) pursuant to art. 13 of European regulation no. 2016/679, the General Data Protection Regulation (GDPR).
The Data Controller is aware of the importance of processing the personal data of the interested parties and, for this reason, takes care to indicate which data are processed and how they are processed. By continuing to browse the Site or indicating the desire to use the services provided by it, the interested party declares to have read and accepted this information (hereinafter “Information”), thus issuing consent for the processing of personal data by the Data Controller.
For any information, doubts or requests relating to this Information, the Data Controller makes the following email address available to interested parties:
amministrazione@ideatitaly.it
What are the rights of the interested party in relation to the processing of personal data?
The interested party has the following rights:
right to be informed that there is ongoing data processing concerning him or her and, if so, to access the personal data processed;
right to rectification of personal data;
right to erasure (right to be forgotten) of personal data concerning him/her;
right to limit the processing of personal data concerning him;
right to data portability to receive, or have personal data concerning him or her transmitted to another Data Controller in a structured, commonly used and machine-readable format;
right to object to the processing of personal data;
right to withdraw previously issued consent;
right to make a complaint to the competent authorities for violation of personal data processing.
How to exercise your rights?
The interested party may exercise their rights by writing to the email address indicated above.
The Owner does not intend to make the Interested Parties incur any costs for exercising one of their rights, but to do so the Owner may request specific information to follow up on the Interested Party’s communications in relation to the rights.
The aforementioned communications are usually received within 30 days of receipt of the communication itself, but if this deadline cannot be respected (e.g. due to an excessive load of requests or complexity of the response), the Data Controller will be responsible for communicating this to the interested party and keeping him updated on the developments of the communication sent.
What are cookies?
A “cookie” is a text file created by some websites on the computer of the interested party when he accesses a particular site, with the purpose of storing and transporting information. Cookies are sent by a web server (which is the computer on which the visited website is running) to the interested party’s browser (Internet Explorer, Mozilla Firefox, Google Chrome, etc.) and stored on the latter’s computer; they are then re-sent to the website at the time of subsequent visits.
Some operations could not be performed without the use of cookies, which, in some cases, are therefore technically necessary. In other cases, the site displayed uses cookies to facilitate and facilitate navigation by the interested party or to allow them to use specifically requested services.
What cookies does the Owner use?
The Owner uses both its own cookies and third-party cookies, as better specified in the following table:
|
Typology |
Purpose |
Retention period |
|
Session cookies |
The Site uses c.d. cookies session (which are not stored permanently on the interested party’s computer and disappear when the browser is closed). These cookies are strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to allow safe and efficient exploration of the Site. |
Browsing session |
|
Technical Cookies |
Cookies are operational on the Site which collect information on how the Site itself is used and whether there are error messages on certain pages. All information collected by these cookies will only be used to improve the use of the Site. |
Browsing session and possible resolution of problems |
|
C O O K I E S
D I
T E R Z E
P A R T I
|
There are third-party cookies on the Site that collect traffic information on the Site and how this is used by those who browse the Site itself. The information collected by these cookies does not directly identify the interested parties, but can make the interested parties indirectly verifiable. The information collected is aggregated and anonymous and is used to increase the operational efficiency of the Site and evaluate its performance.
At the moment the Site has implemented the following third-party cookies:
|
|
|
Google Analytics (Google Inc.) Google Analytics is a web analytics service. Google uses the Personal Data collected for the purpose of tracking and examining the use of the Site, compiling reports and sharing them with other services developed by Google.
For more information see:https://policies.google.com/privacy?hl=it
|
Users are not identified |
|
|
Facebook Pixel (Facebook Ireland Ltd.) Facebook Pixel is a web analytics service. Facebook uses the Personal Data collected for the purpose of tracking and examining the use of the Site. For more information see: –https://www.facebook.com/privacy/explanation
|
Determined by fellow marketers |
How long are cookies stored for?
Cookies will be stored for the time necessary to achieve the purposes described above. For further details on the storage times of each individual category of cookies indicated in the table above, the interested party is invited to contact the Data Controller at the email address amministrazione@ideatitaly.it
Deselection and activation of cookies
The interested party can manage preferences relating to Cookies directly within their browser and prevent – for example – third parties from installing them. Through the browser preferences it is also possible to delete Cookies installed in the past, including the Cookie in which the consent to the installation of Cookies by this site is possibly saved. It is important to note that by disabling all Cookies, the functioning of this site may be compromised. The interested party can find information on how to manage cookies in his browser at the following addresses:
- Google Chrome (https://support.google.com/chrome/answer/95647?hl=it&p=cpn_cookies)
- Mozilla Firefox (https://support.mozilla.org/it/kb/Attivare%20e%20disattivare%20i%20cookie)
- Apple Safari (https://support.apple.com/kb/PH19214?viewlocale=it_IT&locale=en_US)
- Microsoft Windows Explorer (https://support.microsoft.com/it-it/help/17442/windows-internet-explorer-delete-manage-cookies)
In the case of services provided by third parties, the interested party may also exercise their right to object to tracking by inquiring through the third party’s privacy policy, via the opt out link if explicitly provided or by contacting the third party directly.
Without prejudice to the foregoing, the Data Controller informs that the interested party can make use of Your Online Choices (https://www.youronlinechoices.com/) e All About Cookies (www.allaboutcookies.org). Through this service it is possible to manage the tracking preferences of most advertising tools. The Owner, therefore, advises Users to use this resource in addition to the information provided in this document.
Where do we store personal data?
The Data Controller retains personal data in paper archives within the Data Controller’s headquarters, as well as computer archives located both within the European Union and outside if this is instrumental to the pursuit of the purposes of data processing. In this last case, the Data Controller ensures that companies not having offices within the European Union are processing personal data with the utmost confidentiality in compliance with the adequacy decisions of the European Commission, any Privacy Shield or, if necessary, stipulating agreements that guarantee an adequate level of protection.
How are personal data processed?
The Data Controller processes the personal data of the interested parties by adopting appropriate security measures aimed at preventing unauthorized access, disclosure, modification and destruction.
The data processing is carried out through IT procedures, telematic means and, residually, on paper supports by specifically authorized internal subjects as well as by external managers if appointed, and this also on the basis of existing contractual agreements.
Changes to the Policy
The Owner reserves the right to modify this Information at any time. In the event of changes, the Data Controller will upload the new information on this page and, in this sense, if it urges the interested party to check the changes to the information: the interested party will be able to see the history of the information by checking the date provided.
By continuing to use the Site following the changes, the interested party accepts these changes and consents to the data processing as modified.