Privacy policy

Dear User,

This Privacy Policy is made pursuant to Articles 13 and 14 of the EU Regulation 2016/679 - (hereinafter only GDPR) and related provisions of the Privacy Code (Legislative Decree no. 196/03) as amended by Legislative Decree no. 101/18 regarding the protection of personal data to those who connect to the website

https://www.prodocto.it/ and use its services. Through this page, the methods of management of the website owned by Nome Società (hereinafter also "the Data Controller") and the processing operations of personal data of users who access and navigate the site are described. The information refers only to the page mentioned above and not also to other websites that may be consulted by the user through appropriate links.

‍

1. PERSONAL DATA CONTROLLER

According to Article 4, point 7 of the GDPR, Data Controller is the one who "determines the purposes and means of the processing of personal data." With regard to this website, the Data Controller is: Prodocto by Andrea Pietrocola, with registered office at Via Trieste. 100, 20037 Paderno Dugnano (MI), VAT no. 12050370969, e-mail bottega@prodocto.it,.

‍

2. TYPE OF DATA AND PURPOSE OF PROCESSING
‍

A. Navigation data

The computer systems and software procedures used to operate this web page acquire, during normal operation and for the sole duration of the connection, some personal data whose transmission is implicit in the use of Internet communication protocols.This information is not collected to be associated with identified interested parties, but by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) notation addresses of the requested resources, the time of the request, the method used in submitting the request to the server (successful, error, etc.) the country of origin, the various temporal connotations of the visit (e.g. the time spent on each page) and other parameters related to the user's operating system and computer environment.


‍

Such data may be used for:

  1. Statistics: collection of data and information in aggregate and anonymous form in order to verify the proper functioning of the site. None of this information is related to the physical person-User of the site, and does not allow in any way its identification;
  2. Security: collection of data and information in order to protect the security of the website (e.g., firewall filters and virus detection) and Users and to prevent or detect illegal behavior to the detriment of the website;

‍

B. Data voluntarily provided by the user
‍

This category includes:The data that the user provides by sending electronic mail to the e-mail addresses indicated on the Site or by any communication to the contacts contained therein. In particular, in addition to the user's e-mail address or telephone/fax number, which are necessary to respond, any other personal data contained in the e-mail message or communication will be processed. The e-mail address that the user provides by subscribing to the newsletter.


‍

Such data may be used for:

  1. costumer service: responding to requests for information or instances of any kind related to customer service;
  2. Contract and pre-contract negotiations;
  3. Defense of the Holder's rights and interests in case of litigation;ì
  4. marketing: with the user's consent, expressed by subscribing to the newsletter, sending email messages and newsletters containing information, including of a commercial and promotional nature, related to the services offered;
  5. marketing: with the user's consent, expressed by subscribing to the newsletter, sending communications containing invitations to corporate events, conferences, webinars and other meeting occasions ("Event") organized by the Data Controller, to which the data subject may subscribe by sending an email confirming participation to the email addresses indicated in the invitation. In the event that the data subject proceeds to register for the Event in the manner indicated above, the Data Controller will provide separate information on the processing of personal data related to the organization and implementation of the Event. As of now, the Data Controller informs the interested party that photographic and audio-video images may be taken during the Event. Consequently, by confirming participation in the Event, the interested party gives consent and authorizes the Data Controller in accordance with Articles 10 and 320 of the Civil Code and Articles 96 and 97 of Law 22.4.1941, no. 633 to record, transmit, print, publish and/or disseminate in any form audio, video, photographic material relating to the Event, in which the Interested Party may possibly appear represented or otherwise be recognizable.

‍

C. Cookie

The site makes use of cookies as detailed in the cookie policy to which reference is made (LINK).

‍

3. LEGAL BASIS

We indicate below the legal bases of the processing of personal data for the purposes indicated in the preceding paragraph, referring to the cookie policy the identification of the legal basis for the data acquired through the installation of cookies:purposes explicit in § 3, lett. A), points 1) and 2) and lett. B) point 3): legitimate interest of the Owner;purposes explicit in § 3, lett. B), points 1) and 2) contract and pre-contractual negotiations;purposes explicit in § 3, lett. B) point 4) and 5): consent of the person concerned.

‍

‍

4. NATURE OF CONTRIBUTION

Apart from what is specified for navigation data, the user is free to provide personal data by sending communications to the indicated contacts, subscribing to the newsletter or filling in the form in the "send Your CV" section. The provision of such data is, therefore, optional. Where the user intends to use the contact forms of the Site, there are some data whose conferment is mandatory in order to proceed with the sending of the message. The mandatory nature of the provision is indicated with an asterisk (*). Failure to provide mandatory data will result in the inability to subscribe to the newsletter or forward the message to the Owner. The provision of data for which there is no asterisk (*) is optional. In the event that the user intends to subscribe to the Events offered in the newsletter, the authorization pursuant to Articles 10 and 320 Civil Code and Articles 96 and 97 Law 22.4.1941, No. 633 - Law on Copyright to the reproduction of images and videos portraying the person is mandatory in order to register and participate in the Event and will be understood to be issued through the confirmation of participation. For the effect, failure to provide such data or refusal to render the aforementioned authorization will result in the inability to register and participate in the Event.

If the user provides, publishes, shares or otherwise processes personal data of third parties in the use of the site's functionalities, he guarantees as of now that he has the right to carry out the processing and, where necessary, that he has previously acquired the third party's consent to the processing of the information concerning him, assuming all responsibility in this regard with every indemnity in favor of the Site Owner.

‍

‍

5. METHOD AND PLACE OF PROCESSING, COMMUNICATION AND DISSEMINATION OF DATA

The processing of personal data is carried out in a lawful, correct and transparent manner and, in any case, in compliance with the provisions of Articles 5 and 6 of EU Regulation 2016/679 - GDPR. Your personal data are processed using manual and computerized tools with logic strictly related to the purposes for which they were acquired and, in any case, in such a way as to ensure the security and confidentiality of the data.Data storage takes place on servers provided by hosting providers located outside the European Union. The transfer of data outside the European Union takes place in compliance with appropriate and adequate safeguards for the purposes of the transfer itself, such as standard contractual data protection clauses, in accordance with the applicable legislation and in particular Articles 45 and 46 of the GDPR.Personal Data may be communicated to and processed by internal collaborators and/or employees of the Data Controller, in their capacity as authorized persons for processing, within the scope of their respective functions and in accordance with the instructions given by the Data Controller. In some cases, it may be communicated to external parties acting on behalf of the Data Controller, duly appointed, if necessary, as Data Processors pursuant to Article 28 of the GDPR on the protection of personal data, such as:Individuals and legal entities performing the site development and maintenance service and hosting providers;Individuals and legal entities performing marketing and CRM management activities on behalf of the Data Controller;Accountants, lawyers and other professionals to whom the Data Controller refers;Financial entities and public bodies.

The updated list of Responsible Parties can always be requested from the Data Controller. It should be noted that user data will not be disclosed to unspecified third parties. Data may be transferred to countries outside the European Union. The transfer will take place in accordance with the applicable legal provisions, if necessary by entering into agreements that guarantee an adequate level of protection or by adopting the standard contractual clauses provided by the European Commission.

‍

‍

6. RETENTION PERIOD

Except as provided in the cookie policies, the data collected is kept for the time strictly necessary to perform the activities specified in § 3. Upon expiration, the data will be deleted or anonymized, unless there is no further purpose for retaining the data. Data used for site security purposes (blocking attempts to damage the site) are kept for 30 days. Data for statistical purposes are kept in aggregate form for 24 months.

‍

‍

7. USER RIGHTS

You may exercise your rights with respect to the Data Controller by using the following contact information in the Data Protection Officer's availability: info@prodocto.it,. To ensure the proper exercise of rights, it must make itself unambiguously identifiable. The Data Controller undertakes to provide feedback within 30 days and, if it is impossible to comply with these timeframes, to justify any extension of the timeframe. The response will be free of charge except in cases of unfoundedness (e.g., there is no data concerning the requesting data subject) or excessive requests (e.g., repetitive over time) for which a fee may be charged not exceeding the costs actually incurred for the research carried out in the specific case. At any time you may exercise, pursuant to Articles 15 to 22 of the GDPR, the right to:

a) request confirmation of the existence or non-existence of their personal data;

b) obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, the period of storage;

c) obtain the rectification and deletion of data;

d) obtain the restriction of processing;

e) obtain the portability of the data, i.e., receive them from a data controller, in a structured, commonly used and machine-readable format, and transmit them to another data controller without hindrance;

f) object to the processing at any time and also in the case of processing for direct marketing purposes;

g) object to automated decision-making regarding natural persons, including profiling.

h) request from the data controller access to and rectification or erasure of personal data or restriction of processing concerning him or her or to object to its processing, in addition to the right to data portability;

i) withdraw consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation;

j) lodge a complaint with a supervisory authority.You may also manage the preferences expressed with respect to the use of cookies in the manner specified in the cookie policy.

‍

8. AMENDMENTS TO THIS DOCUMENT

This document constitutes the privacy policy of this site.It may be subject to change or update. Where relevant changes and updates are made these will be indicated with appropriate notifications to users.

‍