Extended Privacy Policy

Dear All,
CIDAT spa has great respect for the privacy of users.

The data that will eventually be communicated by the User through the Website will be treated with the utmost care and with all the instruments necessary to guarantee its security, in full compliance with the regulations in force to protect the confidentiality of data.

We wish to inform you that the "European Regulation 2016/679 concerning the protection of individuals with regard to the processing of personal data, as well as the free circulation of such data" (hereafter "GDPR") provides for the protection of individuals with regard to processing of personal data as a fundamental right. According to article 13 of the GDPR, therefore, we inform you that:

 

A. DATA CATEGORIES:
object of the processing may be your personal data such as:

1- Data collected automatically. The computer systems and the applications dedicated to the functioning of this website detect, during their normal functioning, some data (the transmission of which is implicit in the use of Internet communication protocols) potentially associated with identifiable users. The collected data includes the IP addresses and the domain names of the computers used by the users connecting to the site, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters concerning the operating system, the browser and the computer environment used by the user, name of the internet service provider (ISP), date and time of visit, web page of origin of the visitor (referral) and exit.

2. Data provided voluntarily by the user. The voluntary and explicit sending of e-mail to the addresses indicated in the different access channels of this site does not imply a request for consent and involves the acquisition of the address and data of the sender, necessary to respond to requests, as well as any other data personal data included in the message.
These data are voluntarily provided by the user at the time of requesting service delivery.
By inserting a comment or other information, the user expressly accepts the privacy policy, and in particular agrees that the contents included are freely disseminated to third parties.
On the contrary, specific summary information will be shown or displayed on the pages of the site prepared for particular services on request (form). The user must therefore explicitly consent to the use of the data reported in these forms in order to send the request.

3. Cookies. The site does not use / uses cookies. The data collected through cookies can be used to access parts of the site or for statistical purposes or to make the browsing experience more enjoyable and more efficient in the future, trying to assess user behavior and change the offer contents according to their behavior. For more information, a special cookie policy is available.

4. Plug-in. The site also incorporates plugins and buttons for social networks, in order to allow easy sharing of content on your favorite social networks. These plug-ins are programmed so as not to set any cookies when accessing the page, to safeguard the privacy of users. Possibly cookies are set, if so provided by social networks, only when the user makes effective and voluntary use of the plug-in.
Please note that if the user browses being logged into the social network then he has already consented to the use of cookies conveyed through this site at the time of registration to the social network.
The collection and use of the information obtained through the plug-in are governed by the respective privacy policies of the social networks, to which reference is made.

B. HOLDER OF THE TREATMENT:
the holder of the treatment CIDAT spa, VIA Bellini, 124 - 21042 Caronno Pertusella (VA) - VAT number 10578050154 - C.f. 02285830150 can be contacted by phone at 0296450155

C. SOURCE OF PERSONAL DATA:
the personal data held by the Data Controller are collected directly from the data subject.

D. CONTACT DETAILS OF THE D.P.O.:
the holder has no obligation to appoint the D.P.O.

E. PURPOSE OF DATA PROCESSING AND LEGAL BASIS:
the processing of your data has as its purpose and legal basis:

a. For data collected automatically, the legal basis is the legitimate interest of the owner and the purpose is to ensure and improve the web browsing experience.

b. For data provided voluntarily by the user, the legal basis is consent and, for sending emails to our addresses, the purpose is to be able to send responses to specific requests made by the user; for the forms, the purpose is indicated in the specific information.

c. For cookies and plug-ins: compare the specific cookies policy.

F. RECIPIENTS OF DATA:
within the limits relevant to the processing purposes indicated, your data may be communicated to partners, consulting firms, private companies, third party technical service providers, hosting providers, IT companies, communication agencies ...

G. TRANSFER OF DATA TO A THIRD COUNTRY:
this site may share some of the data collected with services located outside the European Union. In particular through the social plug-ins and the Google Analytics service. The transfer is authorized and strictly regulated by Article 45, paragraph 1 of EU Regulation 2016/679, for which it does not require specific authorizations.

H. CONSERVATION PERIOD:
on the basis of the conservation limitation principle (art. 5, GDPR), to verify the obsolescence of the data stored in relation to the purposes for which they were collected is carried out periodically.

In particular:

a) the automatically collected data are processed, for the time strictly necessary, for the sole purpose of obtaining statistical information on the use of the site and to check its regular operation, also for security purposes or according to the deadlines established by law .

b) Data provided voluntarily by the user will be kept for a period not exceeding the achievement of the purposes for which they are processed or based on the deadlines required by law.

I. RIGHTS OF THE INTERESTED PARTY:
the interested party is always entitled to request the Data Controller to access your data, correct or cancel it, limit the processing or the possibility of objecting to the processing, requesting data portability , to revoke the consent to the processing by relying on these and other rights provided by the GDPR through a simple communication to the Owner.

The data subject can also lodge a complaint with a supervisory authority.

J. OBLIGATORY OR LESS CONSENT:
the conferment of your data is compulsory during the navigation of our website regarding the points E.1 and E.2 of the aforementioned purposes, to allow the correct provision of the service. The consent of your data for points E.3 is optional and will not compromise the provision of the service in any way.

K. DATA PROCESSING METHOD:
the personal data you have provided will form the subject of processing operations in compliance with the aforementioned regulations and the confidentiality obligations to which the activity of the Data Controller is based.

The data will be processed both with computer tools and on paper and on any other type of suitable support, in compliance with the appropriate security measures pursuant to Article 5 par. 1 letter. F of the GDPR.

L. FINAL NOTES AND METHOD OF UPDATE:
the information is provided only for this website and not for any other websites that may be consulted.