PRIVACY POLICY

Information provided pursuant to Article 13 of EU Reg. 2016/679 (hereinafter GDPR)

The undersigned organization considers the protection of individuals, with regard to the processing of personal data, a fundamental right. Transparency towards data subjects therefore represents a primary objective, pursued through effective communication tools aimed at making basic information on the processing of their data available to interlocutors.

1. GENERAL INFORMATION
The interested parties are informed of the following general profiles, valid for all areas of processing:
• all the data of the subjects with whom we interface are treated in compliance with current privacy regulations (EU Reg. 2016/679 hereinafter GDPR and Legislative Decree 196/2003, as amended and supplemented by Legislative Decree 101/2018)
• all data are processed lawfully, correctly and transparently, in compliance with the general principles set out in Article 5 of the GDPR;
• specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access, pursuant to Article 32 of the GDPR.

References Owner and contacts
• the Data Controller is the undersigned Organization, in the person of the pro-tempore legal representative.
Contact details: Valcolatte Srl – 0523.519043 – info@valcolatte.it
• The company has appointed a Data Protection Officer, to whom it is possible to contact for any information regarding privacy or to exercise the rights listed below (DPO contacts: Dr. Gregorio Galli – Strada della Viggioletta, 8 – 29121 Piacenza ; Tel: 0523.1865049 – Email: dpo@gallidataservice.com)

Rights of interested parties
– right to request the presence and access to personal data concerning him (Article 15 “Right of access”)
– right to obtain the rectification / integration of inaccurate or incomplete data (Article 16 “Right of rectification”)
– right to obtain, if there are justified reasons, the cancellation of data (Article 17 “Right to cancellation”)
– right to obtain the limitation of processing (Article 18 “Right to limitation”)
– right to receive the data concerning him in a structured format (Article 20 “Right to portability)
– right to object to the processing and automated decision-making processes, including profiling (Articles 21, 22)
– right to revoke a previously given consent;
– the right to submit, in case of non-response, a complaint to the Data Protection Authority.

2) PROCESSING OF DATA CONNECTED TO THE OPERATION OF THIS SITE

Navigation data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) ​​addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment.

Purpose and legal basis of the processing
(GDPR-Art.13, paragraph 1, letter c) These data are used for the sole purpose of obtaining statistical information on the use of the site and to check its correct functioning. The data could also be used to ascertain responsibility in the event of hypothetical computer crimes against the site (legitimate interests of the owner).
Communication scope
(GDPR-Article 13, paragraph 1, letter e, f) The data can only be processed by internal personnel, duly authorized and trained in the processing (GDPR-Article 29) or by any persons in charge of maintenance of the web platform ( appointed in this case external managers) and will not be disclosed to other subjects, disseminated or transferred to non-EU countries. Only in the event of an investigation can they be made available to the competent authorities.
Data retention period
(GDPR-Art.13, paragraph 2, letter a) The data are normally kept for short periods of time, with the exception of any extensions connected to investigation activities.
Conferment
(GDPR-Art.13, paragraph 2, letter f) The data are not provided by the interested party but acquired automatically by the technological systems of the site.

Cookies
What are cookies: Cookies are short fragments of text (letters and / or numbers) that allow the web server to store information on the client (the browser) to be reused during the same visit to the site (session cookies) or later. , even after days (persistent cookies). Cookies are stored, according to user preferences, by the single browser on the specific device used (computer, tablet, smartphone). Similar technologies, such as, for example, web beacons, clear GIFs and all forms of local storage introduced with HTML5, can be used to collect information on user behavior and use of services. In the following of this information we will refer to cookies and all similar technologies by simply using the term “cookie”.

Possible types of first-party cookies and how to manage preferences
CATEGORY PURPOSE MANAGEMENT OF PREFERENCES
Navigation or session technicians Guarantee normal navigation and use of the site Through the main navigation browsers it is possible:
• Block the reception of all (or some) types of cookies by default
• View the analytical list of cookies used
• Remove all or some of the installed cookies
For information on setting individual browsers see specific paragraph. It should be noted that blocking or deleting cookies could compromise the navigability of the site.
Analytical technicians Collect information on the number of visitors and the pages viewed
Functional technicians Allow navigation according to a series of selected criteria
Profiling Create user profiles in order to send advertising messages in line with preferences

The site may contain links to third party sites and third party cookies; for more information, we invite you to view the privacy policies of any linked sites.

Managing preferences via the main navigation browsers The user can decide whether or not to accept cookies using the settings on their browser (we point out that, by default, almost all web browsers are set to automatically accept cookies). The setting can be changed and defined specifically for the different websites and web applications. Furthermore, the best browsers allow you to define different settings for “proprietary” and “third party” cookies. Usually, the configuration of cookies is done from the “Preferences”, “Tools” or “Options” menu.

Below are the links to the guides for managing the cookies of the main browsers:
Internet Explorer: http: //support.microsoft.com/kb/278835
Internet Explorer [mobile version]: http://www.windowsphone.com/en-us/how-to/wp7/web/changing-privacy-and-other-browser-settings
Chrome: http: //support.google.com/chrome/bin/answer.py? Hl = en-GB & answer = 95647
Safari: http: //docs.info.apple.com/article.html? Path = Safari / 5.0 / en / 9277.html
Safari [mobile version]: http://support.apple.com/kb/HT1677
Firefox: http: //support.mozilla.org/en-US/kb/Enabling%20and%20disabling%20cookies
Android: http: //support.google.com/mobile/bin/answer.py? Hl = en & answer = 169022
Opera: http: //help.opera.com/opera/Windows/1781/it/controlPages.html#manageCookies

Further information
• www.allaboutcookies.org (for more information on cookie technologies and how they work)
• www.youronlinechoices.com/it/a-proposito (allows users to oppose the installation of the main profiling cookies)
• www.garanteprivacy.it/cookie (collection of the main regulatory interventions on the subject by the Italian Guarantor Authority)
Specific services
The site may contain data collection forms aimed at guaranteeing the navigator any services / functionalities (eg: request information, registrations, etc.).

Purpose and legal basis of the processing
(GDPR-Art.13, paragraph 1, letter c) The identification and contact data necessary to be able to respond to the requests of the interested parties are requested. The sending of the request is subject to specific, free and informed consent (GDPR-Article 6, paragraph 1, letter a)
Communication scope
(GDPR-Article 13, paragraph 1, letter e, f) The data are processed exclusively by duly authorized and trained personnel (GDPR-Article 29) or by any persons in charge of maintaining the web platform or providing of the service (appointed in this case external managers) .The data will not be disseminated or transferred to non-EU countries.
Data retention period
(GDPR-Art.13, paragraph 2, letter a) The data are kept for times compatible with the purpose of the collection
Conferment
(GDPR-Art.13, paragraph 2, letter f) The provision of data referring to the mandatory fields is necessary in order to obtain an answer, while the optional fields are aimed at providing the staff with additional useful elements to facilitate contact.

Data provided voluntarily by the user
The optional, explicit and voluntary sending of electronic and / or ordinary mail to the addresses indicated on this site entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message. If the sender sends his CV to submit his professional application, he remains solely responsible for the relevance and accuracy of the data sent. It should be noted that any curriculum without authorization to process data will be immediately deleted.

3) PROCESSING OF DATA RELATED TO RELATIONSHIPS ESTABLISHED WITH CUSTOMERS AND SUPPLIERS

3.1 Object of the treatment
The organization processes personal identification data of customers / suppliers (for example, name, surname, company name, personal / fiscal data, address, telephone, e-mail, bank and payment details) and their operational contacts (name, surname and contact data) acquired and used in the provision of the services provided.

3.2 Purpose and legal basis of the processing
The data is processed for:
• conclude contractual / professional relationships;
• fulfill the pre-contractual, contractual and tax obligations deriving from existing relationships, as well as manage the necessary communications connected to them;
• fulfill the obligations established by law, by a regulation, by community legislation or by an order of the Authority
• exercise a legitimate interest as well as a right of the Data Controller (for example: the right of defense in court, the protection of credit positions; the ordinary internal needs of an operational, managerial and accounting nature).
Failure to provide the aforementioned data will make it impossible to establish a relationship with the Data Controller. The aforementioned purposes represent, pursuant to Article 6, paragraphs b, c, f, suitable legal bases for the lawfulness of the processing. If it is intended to carry out treatments for different purposes, a specific consent will be requested from the interested parties.

3.3 Processing methods
The processing of personal data is carried out by means of the operations indicated in Art. 4 n. 2) GDPR and more precisely: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Personal data are subjected to both paper and electronic and / or automated processing. The Data Controller will process personal data for the time necessary to fulfill the purposes for which they were collected and related legal obligations. The data are not subject to automated decision-making processes that produce significant consequences for the data subjects.

3.4 Scope of the processing
The data is processed by internal subjects duly authorized and trained in accordance with Article 29 of the GDPR. It is also possible to request the scope of communication of personal data, obtaining precise information on any external parties who operate as managers or independent data controllers (consultants, technicians, banks, transporters, etc.). The data are not normally subject to disclosure or transfer to non-EU countries (they may be transferred outside the EU only in compliance with the conditions set out in Chapter V of the GDPR, aimed at ensuring that the level of protection of the data subjects is not compromised. “Article 45 Transfer on the basis of an adequacy decision, Article 46 Transfer subject to adequate guarantees, Article 47 Binding corporate rules, Article 49 Specific exceptions”).

4) POLICY UPDATE

It should be noted that this information may be subject to periodic review, also in relation to the relevant legislation and jurisprudence. In the event of significant changes, appropriate evidence will be given on the home page of the site for a suitable time. However, the interested party is invited to periodically consult this policy.