PRIVACY POLICY

This information represents the concrete methods of management of the website in relation to the processing of personal data of users who connect to it. The data processing is always carried out following the principles of lawfulness, transparency and correctness and appropriate security measures are adopted to guarantee their protection. Further and specific information on the processing of personal data may be obtained by sending a request to the Data Controller using the contact form.

The Data Controller of the personal data of users who browse the website www.italora.it is the company Italora Srl, with registered office in Via Sitia Yomo, 4 – 20080 Pasturago di Vernate (Mi) – Italy VAT number 00737630152. The Data Controller can be contacted at the registered office or at Tel.: +39.02.90.57.21.

LEGAL BASIS

Contractual Basis: The processing of data for the “Contractual Purposes” is mandatory as it is necessary for the provision of the services requested by you. Legal Basis: The provision of data for the “Legal Purposes” is also mandatory as it is required by applicable regulations such as compliance with tax matters or to defend the rights of the Data Controller or third parties in court. Consensual Basis: The processing of data for specific purposes such as, for example, requesting quotes, using contact forms or for Marketing purposes is optional and is permitted only with your consent (which can be revoked at any time) without which Italora Srl will not be able to follow up on the services or requests made by the user. Legitimate interest of the Data Controller: The Data Controller may process the data collected for its legitimate interest and within the limits set by the Regulation. The user may object at any time to the processing for purposes of legitimate interest of the Data Controller and without prejudice to the limits imposed by the legislation.

TYPE OF DATA PROCESSED

To provide the services on the website, Italora Srl collects and processes only “personal identification data” such as, for example, name and surname, date and place of birth, city, telephone number, e-mail. Additional data collected The computer system on which the operation of this website is based acquires some personal data during its operation. Such data is not collected to be associated with identified users, but by their nature through processing/association with data held by third parties could allow the identification of the user. This category of data includes, for example, the IP address, domain name, access time, parameters relating to the operating system used by the user, etc. Such data is collected for the sole purpose of obtaining statistical information on the use of the website and its correct functioning or for the detection of any computer crimes against the website. Italora Srl does not collect and does not process special categories of personal data, i.e. sensitive data, health data (including genetic or biometric data) and criminal data.

METHODS and PURPOSES of PROCESSING

The processing of personal data is necessary to manage relationships with users of the website, including the provision of services. The data collected is processed using computer, telematic and paper methods and is protected by suitable security measures to guarantee its confidentiality, integrity and recovery. In particular, organizational and procedural measures are adopted (e.g. distribution of roles among staff, internal and external data processors/data controllers) as well as technical measures (e.g. backup, antivirus, firewall). The purposes for which we collect and process personal data are multiple, in any case we process the data provided exclusively for the purposes strictly relevant to each individual service requested or used, in particular: Contact Form / Information: the data you provide us using this service we use exclusively to give precise feedback to what you requested and, to this end, we expressly collect your consent. Quote Form: the data you provide us using this service we use exclusively to provide you with a quote on the services offered by our company. For this purpose we expressly collect your consent. Sending Curriculum Vitae: when you send your CV using the service on our website we will use your data, with your consent, to carry out the necessary selection activities. When you send your CV for the application we will provide you with specific information. Customer Care: The Data Controller provides users of the website with an assistance service (usually provided via live-chat, telephone, email) aimed at supporting its customers before, during and after the purchase of a service or to provide information on the activities we carry out. In some cases, to use the Customer Care service, we may need to ask you for your personal data when this is necessary to respond to requests for clarification, information on services offered or for after-sales assistance, etc.

DATA RECIPIENTS

We communicate your personal data to third parties only when this is necessary and functional to the achievement of the processing purpose pursued in accordance with the requested service, in any case we proceed with the communication only after having informed you and collected your consent to do so, where required. In general, the data collected through the individual services and for the purposes pursued in this information may be communicated to the following categories of subjects: Any Public Authority to which the right to access them is attributed by provisions of law; data processing and IT services companies (e.g. web hosting, data entry, management and maintenance of IT infrastructures and services, web agency, etc.); companies and professional firms that provide consultancy services to comply with legal provisions or to protect the legitimate interests of the Data Controller; Some navigation data are collected by third parties such as social networks when the user decides to use the relevant interaction button and, in some cases, even without using the interaction service. The processing of said data is left to the privacy policies of each individual third party.

DATA TRANSFER to OTHER COUNTRIES

Personal data collected through the website are stored and retained within the national territory or in other countries of the European Union. The data are not transferred to non-EU countries or to international organizations. If the user wishes information on the place where the data is stored, he/she can obtain it by making an express request to the Data Controller.

DATA RETENTION PERIOD

We retain, by adopting the appropriate security measures, the data provided for the period necessary to achieve the purposes for which they were collected, in particular: the data collected and processed to fulfill legal purposes are retained for the period provided for by the individual provision of law; the data collected to execute a contract are retained for the period of 10 years from its conclusion; The data collected in the case of use of the contact form are retained for 24 months from the request; The data collected to make a quote at the user’s request are retained for 24 months. The data collected in the case of sending a curriculum vitae are retained for 24 months.

PROFILING and AUTOMATED DECISION-MAKING PROCESSES

Italora Srl does not process the data collected for the purposes or activities of profiling the users of the website and does not adopt decision-making systems based solely on the automated processing of data.

NATURE OF DATA PROVISION

Mandatory Provision: The provision of the requested data is always mandatory when it is necessary to execute a contract to fulfill a legal obligation or to follow up on your request. In such cases, failure to provide data will not allow the Data Controller to execute the requests received. To this end, the mandatory data entry fields in the forms on the website are marked with an asterisk. Optional Provision: Failure to provide optional data in the collection forms does not affect obtaining the requested service. The fields where it is optional to enter data are recognizable as they are not marked with the asterisk that distinguishes mandatory fields. Voluntary sending: When you spontaneously send an email to one of the email addresses indicated on our sites, we acquire the sender address and any other personal data that you have entered in the message and attachments. The email boxes corresponding to the addresses indicated on our sites and any other email boxes of Italora Srl, are not personal in nature even when they contain the name and/or surname of a natural person. They belong to the Owner and have the primary purpose of allowing the effective performance of work activities within the company. By sending an email to the email addresses indicated on the website, you declare that you have read and accepted the processing conditions contained in this information.

RIGHTS OF THE INTERESTED PARTY

You may exercise the rights that Regulation (EU) no. 679/2016 grants you at any time. In particular, you may exercise, by contacting the Data Controller or the Data Processor (it is possible to have a list of external Data Processors appointed by making a specific request to the Data Controller): Right of Access (art. 15). You may obtain from the data controller confirmation as to whether or not personal data concerning you is being processed and, if so, obtain a copy of the data being processed; Right of Rectification (art. 16). You may obtain the rectification (i.e. the modification, integration or updating) of inaccurate personal data concerning you, in the event of inaccuracy, incompleteness or obsolescence; Right of Erasure (art. 17) (so-called Right to be Forgotten). You may obtain the erasure of personal data concerning you. The data controller will delete them without undue delay if one of the reasons listed in the said art. 17 applies; Right to Restriction of Processing (art. 18). As a data subject, you have the right to obtain restriction of processing when one of the hypotheses listed in art. 18 applies; Right to Object (art. 21). You have the right to object at any time to the processing of personal data concerning you for reasons relating to your particular situation and if the conditions set out in art. 21 apply; Right to Data Portability (art. 20). You have the right to receive the personal data concerning you provided to a Data Controller in a structured, commonly used and machine-readable format and you have the right to transmit those data to another Data Controller without hindrance from the Data Controller to whom they were provided if the conditions set out in art. 20 apply; Right to Withdraw Consent. You have the right to withdraw consent in relation to all processing based on it. To exercise this right, without this circumstance affecting the lawfulness of the processing based on the consent given up to that point, you can at any time write to the email address on the dedicated page of the website or through the contact page of the website; Right to lodge a complaint with the Guarantor. Where necessary, you can lodge a complaint with the competent Supervisory Authority for the protection of the rights guaranteed to you by Legislative Decree 196/2003 and by European Regulation 679/2016 (www.garanteprivacy.it)