Privacy Policy
PRIVACY POLICY AND COOKIES
In compliance with the obligations arising from national and EU legislation, (European Data Protection Regulation No. 679/2016, GDPR) and subsequent amendments, this site respects and protects the privacy of visitors and users, making every possible and proportionate effort not to infringe the rights of users.
This privacy policy applies only to the online activities of this website and applies to visitors/users of this website. It does not apply to information collected through channels other than this website. The purpose of the privacy policy is to provide maximum transparency regarding what information the site collects and how it uses it.
LEGAL BASIS FOR PROCESSING
This site processes data on the basis of consent. By using or consulting this site, visitors and users explicitly approve this privacy policy and consent to the processing of their personal data in the manner and for the purposes described below, including possible disclosure to third parties if necessary for the provision of a service.
The provision of data and therefore Consent to the collection and processing of data is optional, the User can deny consent, and can revoke at any time a consent already provided (via the Contact link). However, denying consent may result in the inability to provide certain services and the site browsing experience may be impaired.
DATA COLLECTED AND PURPOSE
Like all websites, this site also makes use of log files in which information collected in an automated manner during user visits is stored.
The information collected could be as follows:
- internet protocol(IP) address;
- browser type and parameters of the device used to connect to the site;
- name of the internet service provider (ISP);
- date and time of visit;
- visitor’s source (referral) and exit web page;
- number of clicks.
The above information is processed automatically and collected in aggregate form only in order to verify the proper functioning of the site, and for security reasons.
For security purposes (spam filters, firewalls, virus detection), automatically recorded data may possibly also include personal data such as IP address, which could be used, in accordance with the relevant laws, in order to block attempts to damage the site itself or to harm other users, or otherwise harmful or criminal activities. Such data is never used for user identification or profiling, but only for the purpose of protecting the site and its users.
Where the site allows comments to be posted, or in the case of specific services requested by the user, the site automatically detects and records certain identifying data about the user, including the user’s e-mail address. This data is understood to be voluntarily provided by the user at the time of the request for the provision of the service. By entering a comment or other information, the user expressly accepts the privacy policy, and in particular agrees that the content entered may be freely disseminated to third parties as well.
The data received will be used exclusively for the provision of the requested service and only for the time necessary for the provision of the service.
The information that the users of the site will consider to make public through the services and tools made available to them, is provided by the user knowingly and voluntarily, exempting this site from any responsibility regarding any violation of laws. It is up to the user to verify that he or she has permissions to enter personal data of third parties or content protected by national and international regulations.
The data collected by the site during its operation are used exclusively for the purposes indicated above and kept for the time strictly necessary to carry out the specified activities. In any case, the data collected by the site will never be provided to third parties, for any reason whatsoever, unless it is a legitimate request by the judicial authority and only in the cases provided for by law.
Data used for security purposes (blocking attempts to damage the site) are kept for 7 days.
PLACE OF PROCESSING
The data collected by the site are processed at the premises of the Data Controller, and at the web hosting datacenter. The web hosting (MSW srls – Viale Repubblica Dominicana 80/H, 58100 Grosseto, IT), which is responsible for processing the data, processing the data on behalf of the Data Controller, is located in the European Economic Area and acts in accordance with European standards.
COOKIES
As is customary on all websites, this site also makes use of cookies, small text files that allow us to store information about visitors’ preferences, to improve the functionality of the site, to simplify navigation by automating procedures (e.g. Login, site language), and for site usage analysis.
Session cookies are essential to be able to distinguish between logged in users, and are useful to prevent a requested functionality from being provided to the wrong user, as well as for security purposes to prevent cyber attacks on the site. Session cookies contain no personal data and last for the current session only, i.e. until the browser is closed. Consent is not required for them.
The functionality cookies used by the site are strictly necessary for the use of the site, in particular they are related to an express request for functionality from the user (such as Login), for which no consent is needed.
By using the site, the visitor expressly consents to the use of cookies.
Disabling cookies
Cookies are linked to the browser being used and MAY BE DISABLED DIRECTLY FROM THE BROWSER, thus rejecting/revoking consent to the use of cookies. It should be kept in mind that disabling cookies may prevent the proper use of some functions of the site itself.
Third-party cookies
Specifically, this site uses cookies from the following third parties:
– Google Analytics: an analytics tool from Google that, through the use of cookies (performance cookies), collects anonymous (IP truncated to the last octet) and exclusively aggregated browsing data for the purpose of examining users’ use of the site, compiling reports on site activity, and providing other information, including the number of visitors and pages visited. Google may also transfer this information to third parties where required to do so by law or where such third parties process the information on Google’s behalf. Google will not associate the Ip address with any other data held by Google. The data transmitted to Google is stored at Google’s servers in the United States.
Under specific agreement with Google, which is designated as the data controller, the data controller agrees to process the data according to the Controller’s requests (see bottom of the policy), given via the software settings. Under these settings, the advertising and data sharing options are disabled.
More information about Google Analytics cookies can be found on the Google Analytics Cookie Usage on Websites page.
You can selectively disable the collection of data by Google Analytics by installing the appropriate component provided by Google on your browser (opt out).
For more information about Google’s use of data and its processing, it is recommended that you review the information at the appropriate page prepared by Google, and the page on How Google uses data when using partner sites or apps.
SOCIAL NETWORK PLUGIN
This site also incorporates social media plugins and/or buttons to enable easy sharing of content on your favorite social networks. Such plugins are programmed not to set any cookies when accessing the page, to safeguard the privacy of users. Eventually cookies are set, if so provided by the social networks, only when the user makes actual and voluntary use of the plugin. Keep in mind that if the user browses while being logged into the social network then he/she has already consented to the use of cookies conveyed through this site at the time of registration with the social network. The collection and use of information obtained by means of the plugin is governed by the respective privacy policies of the social networks, to which please refer.
DATA TRANSFER TO NON-EU COUNTRY
This site may share some of the data collected with services located outside the European Union area. In particular with Google, Facebook and Microsoft (LinkedIn) via social plugins and the Google Analytics service. The transfer is authorized under specific decisions of the European Union and the Italian Data Protection Authority, in particular Decision 1250/2016 (Privacy Shield – here the information page of the Italian Data Protection Authority), so no further consent is needed. The companies mentioned above guarantee their adherence to the Privacy Shield.
SECURITY MEASURES
This site processes user data lawfully and fairly, taking appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of data. The processing is carried out by means of computer and/or telematic tools, with organizational methods and logics strictly related to the indicated purposes. In addition to the owner, in some cases, categories of people involved in the organization of the site (administrative, commercial, marketing, legal, system administrators) or external parties (such as third party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the data.
USER RIGHTS
- to request confirmation of the existence of personal data concerning him/her (right of access);
- to know its origin;
- Receive intelligible communication;
- Have information about the logic, methods and purposes of processing;
- request the updating, rectification, integration, cancellation, transformation into anonymous form, and blocking of data processed in violation of the law, including data no longer necessary to achieve the purposes for which they were collected;
- in cases of consent-based processing, receive at the sole cost of any support, your data provided to the data controller, in structured, machine-readable form and in a format commonly used by an electronic device;
- the right to lodge a complaint with the Supervisory Authority (Privacy Guarantor – link to the page of the Guarantor);
- as well as, more generally, to exercise all the rights granted to him by the current legal
Requests should be addressed to the Data Controller.
Where data are processed on the basis of legitimate interests, the rights of data subjects to the processing are still guaranteed (except for the right to portability, which is not provided for in the regulations), in particular the right to object to the processing, which can be exercised by sending a request to the data controller.
DATA CONTROLLER
The data controller under applicable laws is: Obiettivo Remain Impresa Sociale S.r.l., which can be contacted through the contact section.
Data Processor
The web hosting (MSW srls – Viale Repubblica Dominicana 80/H, 58100 Grosseto, IT), is appointed as data controller, processing the data on behalf of the owner. The web hosting, being in the European Economic Area acts in accordance with European standards (link to web hosting policy).
Google is appointed as a data controller, processing data on behalf of the owner (Google Analytics).
UPDATES
This privacy policy is updated as of July 29, 2021