Privacy policy
In compliance with the obligations deriving from national legislation (Legislative Decree no. 196 of 30 June 2003, personal data protection code) and Community legislation (European regulation 2016/679, gdpr) and subsequent amendments, this site respects and protects the confidentiality of visitors and users, making every possible and proportionate effort not to infringe the rights of users.
This privacy policy applies exclusively to the online activities of this website and is valid for visitors/users of the website. It does not apply to information collected through channels other than this website. The purpose of the privacy policy is to provide maximum transparency regarding the information the site collects and how it uses it.
Legal basis for processing
This site processes data on the basis of consent. By using or consulting this site, visitors and users explicitly approve this privacy policy and consent to the processing of their personal data in the manner and for the purposes described below, including any disclosure to third parties necessary for the provision of a service.
The provision of data and thus consent to the collection and processing of data is optional; the user may withhold consent, and may revoke a consent already provided at any time (via the contact link at the bottom of the page).
Data collected and purpose
Like all websites, this site also makes use of log files in which information collected automatically during user visits is stored. The information collected may be as follows:
- Internet Protocol (IP) address;
- Type of browser and parameters of the device used to connect to the site;
- Name of the internet service provider (ISP);
- Date and time of the visit;
- Visitor's source (referral) and exit web pages;
- Possibly the number of clicks.
This information is processed automatically and collected in an exclusively aggregated and pseudonymised form for the purpose of verifying the proper functioning of the site and for security reasons; this information will be processed in accordance with the legitimate interests of the owner.
For security purposes (anti-spam filters, firewalls, virus detection), automatically recorded data may possibly also include personal data such as the IP address, which could be used, in accordance with the relevant laws in force, in order to block attempts to damage the site itself or to cause damage to other users, or in any case harmful or criminal activities. Such data are never used for user identification or profiling, but only for the purpose of protecting the site and its users; such information is processed according to the legitimate interests of the owner.
In the case of specific services requested by the user, the site collects and records certain user identification data, including the user's email address. This data is understood to be voluntarily provided by the user when requesting the service (information request). By submitting the request for information, the user accepts the privacy policy and agrees that the contents entered may be freely disclosed to third parties for the purposes expressed.
The data received will be used exclusively for the provision of the requested service and only for the time necessary for the provision of the service.
The information that users of the site choose to make public through the services and tools made available to them is provided by the user knowingly and voluntarily, exempting this site from any liability for any violation of the law. It is up to the user to verify that he or she has the permissions to enter personal data of third parties or content protected by national and international regulations.
The data collected by the site during its operation are used exclusively for the purposes indicated above and kept for the time strictly necessary to carry out the activities specified. In any case, the data collected by the site will never be provided to third parties, for any reason whatsoever, unless it is a legitimate request by a judicial authority and only in the cases provided for by law.
Data used for security purposes (blocking attempts to damage the site) are stored for 7 days.
Place of processing
The data collected from the site are processed by the Data Controller located in Via Vittorio Veneto, 45 Udine (UD), and are handled only by technical personnel authorised to process them, or by persons in charge of occasional maintenance operations.
Transfer of data to countries outside the EU
This site may share some of the data collected with services located outside the European Union. The transfer is authorised on the basis of specific decisions of the European Union and the Data Protection Authority, in particular Decision 1250/2016 (privacy shield), so no further consent is required.
Security Measures
This site processes user data in a lawful and correct manner, adopting appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of data. The processing is carried out using computer and/or telematic instruments, with organisational methods and logics strictly related to the purposes indicated. In addition to the owner, in some cases, categories of people involved in the organisation of the site (administrative, sales, marketing, legal, system administrators) or external parties (such as third party technical service providers, postal couriers, hosting provides, IT companies, communication agencies) may have access to the data.
User rights
Pursuant to the European Regulation 2016/679 (GDPR) and national legislation, the User may, in the manner and within the limits provided for by current legislation, exercise the following rights:
- Request confirmation of the existence of personal data concerning him/her (right of access);
- Know its origin;
- Receive intelligible communication;
- Having information about the logic, methods and purposes of processing;
- Request the updating, rectification, integration, deletion, transformation into anonymous form, and blocking of data processed in breach of the law, including data no longer necessary for the purposes for which it was collected;
- In cases of processing based on consent, receive at the sole cost of any support, your data provided to the data controller, in a structured, machine-readable form and in a format commonly used by an electronic device;
- The right to lodge a complaint with the supervisory authority (Garante Privacy);
- As well as, more generally, exercising all the rights granted to him by the applicable legal provisions.
Requests should be addressed to the Data Controller or the Data Protection Officer.
Where data are processed on the basis of legitimate interests, the data subject's rights to data processing are nevertheless guaranteed (except for the right to portability, which is not provided for by the rules), in particular the right to object to processing, which may be exercised by sending a request to the data controller.
Data Controller and Processor
The data controller is gruppo sereni orizzonti based in via Vittorio Veneto, 45 Udine (UD), which can be contacted at +390432506519 and by e-mail at pec sereniorizzonti.rpd@legalmail.it.