Information notice – Articles 13 and 14 of the EU Regulation 2016/679 (“GDR Regulation”)
What laws does this document refer to? The information notice is provided considering the combined provisions of the:
1) DATA CONTROLLER
The company Gls72.srl, with head office in Torricella, 315 – 47863 Novafeltria (RN), VAT number and Tax Code 00175030410, tel.: 0541 921404
2) PURPOSES, LEGAL BASIS, NATURE OF THE PROCESSING AND RETETION PERIOD
Your personal data is collected for the following purposes:
3) PERSONAL DATA PROCESSED
Processing of personal data means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, deletion or destruction.
Data that can be qualified, according to Article 9 of the GDPR, as “special categories of personal data”, i.e. data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, data concerning the health or sexual life or sexual orientation of the person, may also be requested. These categories of data may be processed by the Data Controller only with explicit consent.
The personal data processed are as follows:
By registering in the reserved area of the website, the Data Controller processes the following personal data:
The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes IP addresses or domain names of computers and terminals used by users, URI/URL (Uniform Resource Identifier/Locator) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters relating to the user’s operating system and computer environment.
These data, necessary for the use of web services, are also processed for the purpose of:
Navigation data do not persist for more than 365 days and are deleted immediately after their aggregation (except for any need to investigate crimes by the judicial authorities).
The optional, explicit and voluntary sending of messages to the contact addresses of the site involves the acquisition of the sender’s contact data, necessary to reply, as well as all personal data included in the communications.
The user has the right to register with the portal to use the services offered by the Data Controller in the reserved area.
Please refer to the detailed information available in the next document on the Cookies Policy.
4) DATA RELATING TO UNDER-18-YEAR-OLDS
Children under 18 years of age may not provide personal data. The Data Controller will not be in any way responsible for any collection of personal data, as well as for false statements, provided by the minor, and in any case, should the use of the data be identified, the Data Controller will facilitate the right of access and deletion forwarded by the legal guardian or by those who exercise parental responsibility.
5) RECIPIENTS OF PERSONAL DATA
Your personal data may be shared, for the above purposes, with:
The complete list of Data Processors is available by sending a written request to the Data Controller.
6) TRANSFER OF PERSONAL DATA
Some of your personal information is shared with recipients outside the European Union. The Data Controller ensures that the processing of your personal data by these recipients takes place in compliance with the GDPR. As a matter of fact, transfers may be based on an adequacy decision or on Standard Terms and Conditions approved by the European Commission. Further information is available from the Data Controller.
7) EXISTENCE OF AN AUTOMATED DECISION-MAKING PROCESS, INCLUDING PROFILING
The Data Controller, for the purpose of the conclusion or performance of the contract, shall not adopt an automated decision-making process on the processing of personal data, including profiling, referred to in Article 22 of the GDPR.
8) RIGHTS OF DATA SUBJECTS
Data subjects have the right to obtain from the Data Controller, in the cases provided for, access to personal data and the rectification or cancellation of the same or the limitation of the processing that concerns them or to object to the processing (Articles 15 et seq. of the GDPR). The appropriate request to the Data Controller is made by contacting the dedicated email address to provide responses to data subjects.
Data subjects who believe that the processing of personal data referred to them is in violation of the provisions of the GDPR, have the right to lodge a complaint with the Data Protection Authority (www.gpdp.it), as provided for in Article 77 of the GDPR itself, or to take appropriate legal action (Article 79 of the GDPR).
The Data Controller reserves the right to make changes to this information at any time. The current version is published at the following link: https://www.gls72.com/it/pages/cookie-e-policy