1. Data Controller and Data Processor
The Data Controller is the Company with registered office in Piazza degli Affari 2 – 20123, Milano (MI), in person of its interim Chief Executive Officer domiciled at the Company’s registered office.
The User can contact the Data Controller at the following addresses:
by email: firstname.lastname@example.org
by post: Clessidra Holding S.p.A. – Piazza degli Affari, 2 – 20123 MI.
The Data Controller has appointed the Data Processor. The Data Controller can appoint other internal or external Data Processors as well as a person in charge of the processing. A complete and updated list of Data Processors and person in charge of the processing can be requested to the following e-mail address: email@example.com
2. Personal data object of the processing
“Personal data” means any information concerning an identified or identifiable physical person with particular reference to an identifier such as a name, an identification number, location data or an online identifier.
The personal data collected by the Site are the following:
2.1 Navigation Data
The information systems and software procedures relied upon to operate this Site acquire personal data as part of their standard functioning; the transmission of such data is an inherent feature of Internet communication protocols. Such information is not collected in order to relate it to identified data subjects, however it might allow user identification after being processed and matched with data held by third parties.This data category includes IP addresses and/or the domain names of the computers used by any user connecting with this Site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of such requests, the method used for submitting a given request to the server, returned file size, a numerical code relating to server response status (successfully performed, error, etc.), and other parameters related to the user’s operating system and computer environment.
These data are only used to extract anonymous statistical information on Site use, without therefore the possibility of identifying the user, as well as to check its functioning including the resolution of technical problems; they are erased immediately after being processed. The data might be used to establish liability in case computer crimes are committed against the Site.
This processing is aimed at pursuing a legitimate interest of the Company.
2.2 Data Provided Voluntarily by Users
These are all personal data voluntarily released by the User on the Site, such as: User’s contact details voluntary provided by sending e-mail to the addresses indicated on the Site in order to have a direct contact with the customer service, as well as any other personal data included in the message; data provided by sending CV (curriculum vitae) to the Company and other relevant information for personnel selection purposes; data provided in order to register and / or access the reserved area, or in order to request information on a specific product or service via form.
Each User can change his/herdata by sending an email to firstname.lastname@example.org, taking care to specify in the heading “Exercise of rights regarding the protection of personal data”.
Specific summary information notices will be shown and/or displayed on the pages that are used for providing services on demand.
3. Data Processing purposes and legal basis of data processing
For the purposes of access to the Site as a User, it is necessary to register by filling in the fields of the form.
Apart from that specified for the navigation data referred to in paragraph 2.1), the personal data provided by Users through the Site are processed for the following purposes:
a) to allow the execution of operations strictly connected and instrumental to the management of relations with the Users, such as – merely by way of example – the answer to questions received with the contact forms, the authorization to the reserved area and the execution of sales contracts of goods and /or services and the verification of their development, the management for the selection of CV personnel (curriculum vitae) and other relevant information provided by the User;
b) to allow the correct execution of the contractual obligations assumed by the Company towards the Users and customers and vice versa, as well as the consequent accounting and tax obligations;
c) to allow the fulfillment of the obligations established by law, regulations and European legislation, or provisions issued by authorities entitled by law and by supervisory and control authorities;
d) the purposes necessary for the establishment, exercise or defense of a right in court or whenever the courts exercise their judicial functions;
e) purposes of statistical research/analysis on aggregated or anonymous data, without the possibility of identifying the User, aimed at measuring the functioning of the Site and the related operational functions, including the resolution of any technical problem.
The legal basis for the processing of personal data for the purposes listed in point a) is the provision of a service or the answer to a request. Pursuant to the applicable law, the consent of the Users is not necessary for those activities.
As to the purposes listed in points b), c) and d), the processing is necessary for the pursuit of a legitimate interest of the Company.
The purposes listed in point e) do not involve personal data processing.
It is always possible to withdraw consent to the processing of data for this purpose, even in a disjointed way, for example, to decide to receive advertising only by postal service and not through automated systems.
4. Nature of the provision of personal data and consequences of any refusal
Apart from what is specified for navigation data that are automatically collected by the system and for the operation of cookies (please refer to the related information notice), the User is free to provide or not his/her personal data.
For the free registration as a User to the Site it is necessary to fill in the form, inserting some personal data in the predefined fields.
The compilation, completely optional, allows to assign credentials for the management of online services; the missed conferment, as well as the partial or inexact conferment, does not allow, therefore, the provision of the service.
The use of passwords, identification numbers (IDs) or other special access keys on this Site is under the Users’ responsibility.
5. Processing modalities and storage periods
Users’ data will be processed with or without the aid of electronic and / or automated means for the time strictly necessary for the purposes for which the data are collected and subsequently processed and, in any case, for the times established by the legislation GDPR and the regulations in the applicable time. Further information about the retention period of personal data and / or the criteria used to determine this period can be requested by writing to the Data Controller at the following address email@example.com.
Specific security measures are observed to prevent data loss, confidentiality and illicit or incorrect use of unauthorized access.
6. Scope of communication and disclosure of data
For the pursuit of the purposes indicated above, the provided Personal Data will be only communicated to persons entrusted by the Company, e.g. employees, collaborators and internal and external consultants, appointed in writing as persons in charge for the processing or internal or external data processors. Specific instructions have been provided to the pre-mentioned persons.
Your Personal Data may also be communicated and transferred to subjects whose right to access is recognized by provisions of law or by instructions given by authorities legitimated by the legislation.
7. Rights of the Data Subject
Pursuant to art. 13 of the Privacy Regulation, the Data Subject can at any time:
request from the Controller access to and rectification or erasure of Personal Data or restriction of Data processing;
a) object to Data processing;
b) exercise the right to Data portability;
c) withdraw consent, without affecting the lawfulness of processing based on consent before its withdrawal;
d) lodge a complaint with a supervisory authority;
e) get information about the possible existence of automated decision-making, including profiling.
The aforementioned rights can be exercised with a request made without formalities towards the Data Controller at the following addresses:
by e-mail: firstname.lastname@example.org
by post: Clessidra Holding S.p.A. – Piazza degli Affari, 2 – 20123 Milano.