PRIVACY POLICY PURSUANT TO LEGISLATIVE DECREE 196/03 AND EU REGULATION NO. 679/2016
Pursuant to art. 13 of Legislative Decree 196/03 and following the entry into force of EU Regulation no. 679/2016, in accordance with the provisions of art. 13 of the aforementioned European Regulation, we wish to inform you of the following:
PURPOSE OF THE PROCESSING
Your personal data, freely provided and acquired by us by reason of the activity carried out by:
CRISBO Srl with registered office in Via Galileo Galilei 35 – 46013 Canneto Sull’Oglio (Mn)
Tax Code and VAT number: 02622190201 for the HEUFORIA brand (hereinafter HEUFORIA) will be processed lawfully and fairly for the following purposes:
Types of data processed and purposes of the processing
1. Browsing data:
The IT systems and software procedures used to operate this site acquire, during their normal operation, certain personal data that are then implicitly transmitted in the use of Internet communication protocols. This information is not collected in order to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and IT environment. These data are used solely for the purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing.
2. Data voluntarily provided by users/visitors:
If users/visitors, by connecting to this site, send their personal data to access certain services, or to make requests by email, this entails the acquisition by HEURORIA of the sender's address and/or any other personal data that will be processed exclusively to respond to the request, or for the provision of the service. The personal data provided by users/visitors will be disclosed to third parties only if such disclosure is necessary to comply with the requests of the users/visitors themselves.
Processing methods
Personal data are processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures are observed to prevent data loss, unlawful or incorrect use and unauthorized access.
Optional nature of data provision
Apart from what is specified for browsing data, users/visitors are free to provide their personal data. Failure to provide them may only make it impossible to obtain what has been requested.
Place of data processing
The processing connected to the web services of the sites indicated above takes place at the company headquarters and/or at the premises of the hosting company and/or website management company and is handled only by technical personnel of the Office in charge of processing, or by any persons in charge of occasional maintenance operations. No data deriving from the web service are communicated or disclosed. The personal data provided by users who submit requests for the sending of informative material are used solely for the purpose of performing the requested service or provision and are communicated to third parties only if this is necessary for that purpose.
Rights of data subjects
The subjects to whom the personal data refer have the right at any time to obtain confirmation of the existence or otherwise of such data and to know their content and origin, verify their accuracy or request their integration or updating, or rectification (art. 7 of Legislative Decree 196/03). Pursuant to the same article, they have the right to request the deletion, transformation into anonymous form or blocking of data processed in violation of the law, as well as to object in any case, for legitimate reasons, to their processing.
The processed data are updated, relevant, complete and not excessive in relation to the purposes listed above for which they are collected and subsequently processed.
PROCESSING METHODS
The same data will be processed, in compliance with the necessary security and confidentiality, through the following methods: collection of data from the data subject, collection and recording for specific, explicit and legitimate purposes, used in further processing operations in terms compatible with such purposes, processing carried out with the aid of electronic and automated tools (collection of data electronically, directly from the data subject)
LEGAL BASIS FOR PROCESSING
The legal basis for the processing of your personal data is based on registration on the portal www.heuforia.com
Legitimate interests pursued by the Data Controller:
The legitimate interests pursued by the Data Controller in processing the data are given by the need to comply with and honor the contractual obligations entered into between the parties. Pursuant to art. 6, the lawfulness of the processing is based on the manifestly expressed consent of the data subject, documented in written form. Mandatory or optional nature of the provision of data and consequences of any refusal to respond: the nature of the provision of data by you is mandatory so that the data controller can provide the requested services. In the event of refusal, it will therefore be impossible to complete the registration process and the System Owner will not be able to fulfill the contractual obligations.
DISCLOSURE OF DATA TO THIRD PARTIES
Your personal data will be processed by the Data Controller, by the Data Processors appointed by him and by the persons in charge of processing who are strictly authorized. Your personal data are not subject to dissemination.
RETENTION PERIODS
Your personal data will be stored for no. 10 years, from the termination of the service provision/product supply relationship in the IT archives owned by HEUFORIA.
INTENTION OF THE PERSONAL DATA CONTROLLER
The Data Controller will not transfer your personal data to a third country or to an international organization.
DATA CONTROLLER AND PROCESSOR
The data controller is CRISBO. Contact details of the Data Controller, email: info@heuforia.com
The data subject may at any time exercise the rights reserved to him, established by art. 7, the full text of which is reproduced below: art. 7 Legislative Decree 196/2003 and art. 15 EU Regulation 679/2016 – Right of access to personal data and other rights – “The data subject has the right to obtain confirmation as to whether or not personal data concerning him exist, even if not yet recorded, and their communication in an intelligible form. The data subject has the right to obtain indication of: the origin of the personal data; the purposes and methods of processing; the logic applied in the event of processing carried out with the aid of electronic instruments; the identification details of the data controller, the processor and the representative designated pursuant to art. 5 paragraph 2; the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them as designated representative in the territory of the State, as processors or persons in charge. The data subject has the right to obtain: the updating, rectification or, when interested therein, integration of the data; the deletion, anonymization or blocking of data processed in violation of the law, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed; certification that the operations referred to in letters a. and b. have been made known, also as regards their content, to those to whom the data were communicated or disseminated, except where this requirement proves impossible or involves a use of means manifestly disproportionate to the protected right. The data subject has the right to object, in whole or in part: on legitimate grounds to the processing of personal data concerning him, even though relevant to the purpose of collection; to the processing of personal data concerning him for the purpose of sending advertising material or direct selling or for carrying out market research or commercial communication”.
Information not contained in this policy
Further information in relation to the processing of Personal Data may be requested at any time from the Data Controller using the contact details.
Changes to this privacy policy
The Data Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page and, if possible, on this Application as well and, where technically and legally feasible, by sending a notification to Users through one of the contact details in its possession. Therefore, please consult this page frequently, referring to the date of the last modification indicated at the bottom.
