Information on the processing of personal data pursuant to EU Regulation no. 679/2016 (GDPR) and other regulations in force
This page is intended to inform the interested party / user on how ASSISTEDILE Srl uses personal data collected from the website www.assistedile.it and its online applications, regardless of the purpose of the connection. The information cannot be extended to websites that may be consulted by the user via links. The methods for collecting and managing the processing of personal data are described, identifying: type of data, legal basis, recipients of the processing (including any foreigners), retention period, rights of the interested party, whether there is an obligation to communicate data and any consequences of the refusal, possible presence of automated decision-making processes (including profiling) and categories of data processed. Following consultation of this website, data relating to identified or identifiable persons may be processed pursuant to art. 4 and 24 of EU Reg. 2016/679 - GDPR. This information is collected, evaluated and subsequently used exclusively for the authorized and permitted purposes and is not transmitted to third parties, except with express authorization or if specified for the achievement of the purposes. The information is provided in compliance with the provisions of Articles 12, 13 and 14 of the EU Reg. 2016/679 - GDPR.
1. Data Controller
The Data Controller is ASSISTEDILE Srl, based in VIALE CERTOSA, 121 - 20151 MILAN, Italy, which can be contacted at firstname.lastname@example.org. The processing operations will be carried out by Appointees designated by the Data Controller, who operate under his direct authority in compliance with the instructions received.
2. Personal Data Collected and Processed
Navigation data The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. The collected data includes information relating to access, such as the IP addresses and domain names of the computers used by users who connect to the site, as well as other parameters regarding the IT environment used by users (such as: the Internet browser used , the operating system, the domain name of the website last visited before accessing our website, the number of visits, the time spent on our website and the pages accessed). These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning. These data, collected automatically, are not associated with data from other sources, consequently preventing the identification of the Data Subjects. However, we reserve the right to retrospectively verify and associate such data, if concrete indications of illegal use are brought to our attention.
Data provided voluntarily by the user Some personal data (for example: name, surname, email address, etc.) are requested from the User for registration or for the use of the online services on our site. In this case, personal data is collected, as far as possible, on a voluntary and optional basis. In any case, for each of the services on our website there is a dedicated information that allows the User to understand precisely what the related treatment is. In fact, we believe that this is the best way to ensure the correctness, transparency and intelligibility of the information that must be given to the User.
If, on the other hand, the User decides to spontaneously and freely send electronic or paper mail to the addresses indicated on this website, this will result in the subsequent acquisition of the sender's email or civic address, necessary to respond to requests, as well as any other data. personal data included in the message. The personal data collected in this case are exclusively related to: - Identification data (for example: name, surname, address, telephone, fax, e-mail, etc.). - Tax data (if required by law - for example, tax code, VAT number, etc.). Personal data sent to us of a different nature or not related to those specified above (such as: sensitive or judicial personal data) will be processed in compliance with EU regulation 2016/679 and related legislation only with the express consent of the interested party and only if necessary to pursuit of the requested purposes, otherwise they will be ignored and not processed or destroyed, with the exception of those necessary for the fulfillment of contractual obligations or the fulfillment of legal obligations.
3. Lawfulness, Purposes and Methods of Processing
The personal data provided by the interested party interacting with this website will be processed in compliance with the conditions of lawfulness pursuant to art. 6 EU Reg. 2016/679 (express consent to the processing, execution of a contract or pre-contractual measures, fulfillment of legal obligations, pursuit of the legitimate interest of the Data Controller) and are processed and used, to the minimum necessary extent, exclusively for the following purpose:
Operation and improvement of navigation within this website.
Provision, improvement and support of our online services.
Response following requests sent through the use of the contact form (dedicated information at the time of any use).
Legitimate interest of the Data Controller.
Obligations provided for by Law and Regulations
In any case, personal data will be processed in computerized, telematic, paper form and entered in the relevant databases which can only be accessed by the Data Controller and his representatives. With regard to the data processed in all their forms, it is emphasized that all appropriate security measures have been taken to protect the rights, freedoms and legitimate interests of the interested party. Furthermore, specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access. This website is provided on an HTTPS encrypted connection (SSL certificate).
4. Obligation to provide the data
The data transmitted in the implicit use of internet communication protocols, as previously specified, are automatically provided and necessary to start browsing the website.
With regard to the online services offered on this website, the provision of the data indicated as mandatory in the fields of the relevant forms is necessary to obtain what is requested, carry out the service and / or any professional or working relationships.
Apart from the above, the User is free to provide any other personal data while browsing this site and filling in the online service forms.
5. Place of Data Processing
The treatments connected to the web services of this site take place at the aforementioned headquarters of the Data Controller and are only handled by authorized personnel, or by persons in charge of occasional maintenance operations. The acquired data are saved on web servers in housing at dedicated server farms located in Italy and in the EU.
6. Any Data Recipients
The data is never transmitted to third parties except in the case in which they are necessary and / or involved in the achievement of the purposes and / or provision of the service and / or execution of orders or contracts. Furthermore, we may be required to disclose personal data in order to comply with legal obligations and / or to meet legal requirements and / or to enforce rights and agreements.
Transmission of data to third parties: the data of the interested party is not transmitted to third parties except in cases of execution of an explicit request or the need to carry out a contract or service.
Transmission of data abroad: we do not transmit data to foreign parties.
Compliance with laws and similar obligations: only if necessary, we will transmit the user's personal data in order to:
apply or comply with a law, regulation, order issued by a public authority or mandatory measures;
detect and prevent security threats, fraud or other harmful activities;
protect and / or enforce the rights and properties of ASSISTEDILE Srl or third parties;
protect the rights and personal safety of our employees and third parties.
In relation to the purposes indicated in the previous points, the data may also be communicated to the following subjects or to the categories of subjects indicated below, duly entrusted with this form of treatment in full compliance with the measures in force:
Accounting firms when the communication is required by law, or is in the interest of the subject (natural or legal person);
Lawyers' offices when the communication is required by law, or when the communication is in the interest of the subject (natural or legal person);
Technical and / or Commercial Consultants to fulfill requests or services.
7. Data Retention Period
At the end of the performance or provision of the service, or in cases that do not provide otherwise in the dedicated information and accepted by the interested party, personal data will be kept exclusively for historical or statistical purposes or for any obligations, in accordance with the law, the regulations, community legislation and codes of ethics and good conduct signed pursuant to art. 40 of EU Reg. 2016/679, for a period as per current legislation (usually 10 years), or, if they are not subject to any law, for a period not exceeding 5 years. Beyond this period, personal data will be stored anonymously, or will be destroyed.
8. Absence of an Automated Decision-Making Process
There is no automated decision-making process on this website and, in particular, there is no profiling system.
9. Rights of the interested parties
The interested party has the right to:
obtain confirmation of the existence or not of personal data concerning him, even if not yet registered, and their communication without delay in an intelligible form;
request information, in writing, on your personal data stored by us (e.g. origin, purpose, methods, categories, applied logic, retention period, rights, identification data of the Data Controller, subjects or categories to whom the data may be communicated );
withdraw consent to data processing;
request the deletion of data;
request the transformation and / or limitation or blocking of data processed in violation of the law;
request the updating, rectification or integration of data;
obtain their personal data, provided to the Data Controller, in order to be able to transmit them to another Data Controller;
request certification that the aforementioned operations have been brought to the attention of those to whom the data have been communicated, except in the case where this proves impossible or involves the use of means disproportionate to the protected right;
object, in whole or in part, for legitimate reasons, to the processing of personal data concerning him, even if pertinent to the purpose of the collection;
lodge a complaint with the Privacy Authority (garanteprivacy.it).
For more information regarding the laws and privacy rights, the interested party can visit the website of the Authority for the Protection of Personal Data at the address: www.garanteprivacy.it.
The interested party who wants to exercise his right must use the contacts of the Data Controller.