CONTACT
Privacy & Cookie Policy
Dear Data Subject, Consitek srl has great respect for the privacy of its Users. Any data communicated by the User through the Site will be processed with the utmost care and with all the instruments suitable to guarantee its security, in full compliance with the legislation in force for the protection of data confidentiality.
We wish to inform you that “European Regulation 2016/679 on the protection of natural persons with regard to the Processing of Personal Data and on the free movement of such data” (hereinafter the “GDPR”) provides for the protection of natural persons with regard to the processing of personal data as a fundamental right. Pursuant to Article 13 of the GDPR, we therefore inform you that:
A
Categories of data
The processing may concern your personal data such as:
a. Data collected automatically.
The IT systems and applications dedicated to the operation of this website record, in the course of their normal operation, certain data (the transmission of which is implicit in the use of Internet communication protocols) potentially associated with identifiable users. The data collected includes the IP addresses and domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful outcome, error, etc.) and other parameters relating to the operating system, the browser and the IT environment used by the user, the name of the internet service provider (ISP), the date and time of the visit, and the web page from which the visitor came (referral) and through which they left.
b. Data provided voluntarily by the user.
The voluntary and explicit sending of electronic mail to the addresses indicated in the different access channels of this site does not entail a request for consent and entails the acquisition of the sender's address and data, necessary in order to respond to the requests, as well as of any other personal data included in the message. Such data is deemed to be voluntarily provided by the user at the time the service is requested. By entering a comment or other information the user expressly accepts the privacy notice and, in particular, consents to the content entered being freely disclosed also to third parties. Conversely, specific summary notices will be reported or displayed on the pages of the site set up for particular services upon request (forms). The user must therefore explicitly consent to the use of the data provided in these forms in order to be able to submit the request.
c. Cookies.
The site uses cookies. The data collected through cookies may serve to access parts of the site, or for statistical purposes, or to make the browsing experience more pleasant and more efficient in future, by seeking to assess user behaviour and to modify the way content is offered according to that behaviour. Further information is available in a dedicated cookie policy.
d. Plug-ins.
The site also incorporates plug-ins and/or buttons for social networks, in order to allow easy sharing of content on your preferred social networks. Such plug-ins are programmed so as not to set any cookie when the page is accessed, in order to safeguard user privacy. Where applicable, cookies are set, if so provided for by the social networks, only when the user makes actual and voluntary use of the plug-in. Please note that if the user browses while logged in to the social network, they have already consented to the use of cookies conveyed through this site at the time of registration with the social network. The collection and use of the information obtained by means of the plug-in are governed by the respective privacy notices of the social networks, to which reference should be made.
B
Data controller
The data controller is Consitek srl, Piazza del Duomo, 16, 20122 – Milan (MI), VAT number 07857830967, who can be contacted at the email address dpo@consitek.com
C
Source of the personal data
The personal data held by the Controller is collected directly from the data subject.
D
Purposes of the data processing and legal basis
The processing of your data has the following purposes and legal basis:
1.
For data collected automatically, the legal basis is the legitimate interest of the controller and the purpose is to guarantee and improve the web browsing experience.
2.
For data provided voluntarily by the user, the legal basis is consent and, for the sending of emails to our addresses, the purpose is to be able to send replies to the specific requests made by the user; for forms, the purpose is indicated in the specific notice.
3.
For cookies and plug-ins: please refer to the specific cookie policy.
E
Recipients of the data
Within the limits relevant to the processing purposes indicated, your data may be communicated, where appropriate, to other parties connected with the processing activities, both internal and external to the Controller, such as employees and equivalent staff, partners, consultancy firms, private companies, third-party technical service providers, hosting providers, IT companies and communication agencies. Your data will in no way be subject to dissemination.
F
Transfer of data to third countries
The data collected may be transferred to third countries outside the European Economic Area, on the basis of an adequacy decision of the Commission or in the presence of appropriate safeguards, in order to fulfil the purposes set out above.
G
Retention period
In accordance with the principle of storage limitation (art. 5, GDPR), the obsolescence of the data retained in relation to the purposes for which it was collected is verified periodically. In particular:
1.
Data collected automatically is processed, for the time strictly necessary, for the sole purpose of obtaining statistical information on the use of the site and of monitoring its proper operation, also for security purposes or in accordance with the deadlines laid down by law.
2.
Data provided voluntarily by the user will be retained for a period of time no longer than that required to achieve the purposes for which it is processed, or in accordance with the deadlines laid down by law.
H
Rights of the data subject
The data subject always has the right to request from the Controller access to their data, its rectification or erasure, the restriction of processing or the possibility of objecting to the processing, to request data portability, and to withdraw consent to the processing, asserting these and the other rights provided for by the GDPR by simple communication to the Controller. The data subject may also lodge a complaint with a supervisory authority.
I
Whether the provision of data is mandatory
The provision of your data is mandatory while browsing our website as regards points D.1 and D.2 of the purposes referred to above, in order to allow the correct delivery of the service. The provision of consent for your data in relation to point D.3 is instead optional and will in no way compromise the delivery of the service.
J
Methods of data processing
The personal data you provide will be the subject of processing operations in compliance with the legislation referred to above and with the obligations of confidentiality on which the Controller's activity is founded. The data will be processed both by IT means and on paper media as well as on any other suitable medium (e.g. cloud systems, digital archiving and substitutive storage systems, etc.), in compliance with appropriate technical and organisational security measures provided for by the GDPR.
K
Final notes and update procedures
This notice is given solely for this website and not also for other websites which the user may consult through links contained in this site. The notice may be subject to changes as a result of the introduction of new rules on the matter; users are therefore invited to check this page periodically in order to remain up to date on the latest legislative developments. Previous versions of this notice may always be requested from the Data Controller.
L
Automated decision-making processes
No automated decision-making processes are envisaged