The information and data you have provided or otherwise acquired in connection with the use of the services of the Website will be processed in compliance with the provisions of the Regulations and the confidentiality obligations that inspire the activity of Consulcesi Tech.
According to the rules of the Regulations, the processing carried out by the Data Controller will be based on the principles of lawfulness, correctness, transparency, purpose limitation and retention, data minimization, accuracy, integrity and confidentiality.
- Data Controller and Data Protection Officer
- Personal data
- Navigation data
- Special categories of data
- Data provided voluntarily by the data subject
- Purposes of the processing
- Legal basis for the processing and mandatory or optional nature of the processing
- Recipients of personal data
- Transfer of personal data
- Storage of personal data
- Rights of the data subject
1. Data Controller and Data Protection Officer (“DPO”)
The Data Controller of the data processing related to the Website is Consulcesi Tech SA, as previously defined, at the address: Via G. Motta 6, 6828 Balerna (CH), or email: firstname.lastname@example.org.
The Representative of the Data Controller for European Union is Docta S.r.l., via G. Peroni 400, 00131 Rome (Italy); email: email@example.com.
The Data Protection Officer (“DPO”) can be contacted at the following addresses: tel: +39.02.96515401; email: firstname.lastname@example.org.
2. Personal data processed
Following the navigation of the Site, we inform you that the Data Controller will process your personal data which may be formed by an identifier such as a name, an identification number, an online ID or one or more factors specific to your physical, economic and cultural identity or social, in order to make the subject identified or identifiable (hereinafter also “personal data”).
The personal data processed through the Website are as follows:
a. Navigation data
The computer systems and software procedures of the Website may acquire some personal data whose transmission is implicit in the use of Internet communication protocols.
This collected information cannot be associated with identified subjects but by their very nature could, through processing and associations with data held by third parties, permit to identify users.
This category of data includes: IP addresses, URI addresses (Uniform Resource Identifier) of requested resources, time of request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the response from the server (successful, error, etc..) and other parameters regarding the operating system and computer environment.
These information is used to obtain anonymous statistical information about the site use and to check its correct operation, to allow the proper supply of services, for reasons of safety and liability assessment in case of hypothetical computer crimes against the Site or third parties, and are normally deleted after the processing.
b. Special categories of data
Through the use of some sections of the Website, it may be possible that you provide data falling within special categories of personal data pursuant to art. 9 of the Regulation, namely “personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation”. We invite you to provide these data only where necessary. We remind you that in case of transmission of special categories of personal without a specific consent for the processing of these data, Consulcesi Tech could not be held accountable for any reason, nor will accept disputes of any kind, since in this case the processing will be allowed as it relates to data manifestly made public by the interested party, in accordance with art. 9.1 of the Regulation.
In any case, we specify the importance of giving explicit consent to the processing of special categories of data if you decide to share such data.
c. Data provided voluntarily by the data subject
During the use of some of the Website’s services, personal data of third parties you provide to the Data Controller may be processed. In these cases, you act as an independent Data Controller, assuming all the subsequent legal obligations and responsibilities. In this context, you hold Consulcesi Tech harmless with respect to any dispute, claim, request for compensation for damage deriving from the data processing that Consulcesi Tech could receive from third parties whose personal data have been processed through your use of the Website, in violation of the applicable privacy law. In any case, if you provide or otherwise process third parties’ personal data during the use of the Website, you guarantee from now – assuming all related liability – that this particular hypothesis of treatment is based on an appropriate legal basis, pursuant to art. 6 of the Regulation that legitimizes the processing of the information in question
Definitions, characteristics and application of the legislation
Cookies are small text files that the websites visited by the user record and send to your computer or mobile device, and that are retransmitted to the same websites at the next visit. Thanks to cookies, the website remembers the actions and preferences of users (such as the login data, the preferred language, the font size, other display settings, etc.) so that they do not have to be indicated again.
Cookies perform computer authentication, monitoring of sessions and storing information about the activities of users who log onto a website and they may contain a unique identification code that allows keeping track of user experiences on website for statistical purposes or advertising.
There are several types of cookies, depending on their features and functions, and the user’s computer or mobile device could record them for different periods: “session cookies”, which are automatically deleted after closing your browser; “persistent cookies”, which user’s equipment record up to a predetermined deadline.
According to current legislation, some cookies do not require express consent: “technical cookies”, e.g. those used for the sole purpose of carrying out the transmission of a communication over an electronic communications network, or as strictly necessary in order to provide a service explicitly requested by the user. In other words, cookies indispensable to the operation of the site or required to perform service user requests.
Technical cookies also include:
- “cookies analytics”, used directly by the website to collect information, in aggregate form, about the number of users and how they visit the website;
- “session cookies” (used for user authentication);
- “functionality cookies”, that allow the user to browse according to a series of selected criteria (e.g. the language, the products selected for purchase), in order to improve the services offered through the website.
For the “profilig cookies”, which are the cookies aimed at creating user profiles and used in order to send advertising messages in line with the preferences expressed during the website navigation, a prior consent of the user is required.
Types of cookies used on website and how to disable cookies
The Website uses the following cookies, that can be unselected, except for third parties’ cookies, for which you must refer directly to the relative methods of selection and de-selection of the respective cookies, indicated by means of links:
• Technical or session cookies, strictly necessary for the operation of the website or to allow the user to make use of the content and services they required;
• Functionality cookies, used to activate specific functionality of the site in order to improve the service.
CAUTION: Disabling the technical cookies and / or functionality cookies the website or certain services of this website may not be available may not be available or not function properly and you should modify manually some information or preferences each time you visit the Site.
You can find more details about the cookies used on this website at the following link:
Users can authorize, block or delete (in whole or in part) cookies through specific browsers’ functions. However, we inform you that not allowing technical cookies may make it impossible to use the site, view the contents and benefit of the related services.
Disabling the functionality cookies may mean that some services or certain functions of the Website are not available or do not work properly and you may be forced to change or manually enter some information or preferences each time you visit the Website.
The choices made about cookies on the website will be registered in a special cookie. In some circumstances this cookie may not function correctly: in these cases, we advise you to delete unwanted cookies and to inhibit their use also through the browser’s features.
Your preferences regarding cookies will be reset if you use different devices or browsers to access the Website.
How to view cookies through the browser
You can authorize, block or delete (in whole or in part) cookies through specific functions of your browser. For more information on cookies’ settings through your web browser, you can refer to the related instructions:
3. Purposes of data processing
The data processing we intend to realize, with your specific consent where necessary, has the following purposes:
a. Allow the provision of the services you require, such as: i) access to reserved areas of the website; ii) request of contact from Consulcesi Tech; iii) conclude a contract.
b. Respond to requests for assistance or information;
c. Fulfill any legal, accounting and tax obligations.
4. Legal basis for the processing and mandatory or optional nature of the processing
The legal basis for the data processing indicated in section 3.a and 3.b is article 6.1.b) of the Regulation, as the data processing is necessary for the provision of the services or to match the requests of the interested subject. The provision of personal data for these purposes is optional, but failure to provide it would make it impossible to activate the services provided by the Website or to give feedback to the requests.
The purpose indicated in section 3.c represents a legit data processing according to art. 6.1.c) of the Regulation. Once the personal data have been provided, the processing is indeed necessary to fulfill legal obligations to which Consulcesi Tech is subject.
Where necessary, specific information on the processing of personal data and requests for consent will be progressively reported or displayed on the pages of the Site assigned to particular services.
5. Recipients of personal data
Your personal data may be shared, for the purposes referred to in Section 3 above, with:
a. subjects that typically act as Data Processors pursuant to art. 28 of the Regulation, namely: i) companies, professionals or professional studies who provide assistance and advice to the Data Controller in accounting, administrative, legal, tax, financial and debt collection relating to the provision of the website services; ii) subjects with whom it is necessary to interact for the provision of the Services (for example hosting providers); iii) subjects delegated to carry out technical maintenance activities (including maintenance of network equipment and electronic communications networks); [collectively named “data recepients”]. The list of Data Processors can be requested from the Data Controller or the DPO at the following addresses: email@example.com; firstname.lastname@example.org.
b. subjects, bodies or authorities, acting as independent Data Controllers, to whom it is mandatory to communicate your personal data in accordance with the provisions of law or orders of the authorities;
c. subjects authorized by Consulcesi Tech to the processing of personal data, pursuant to art. 29 of the Regulation, that are necessary for carrying out activities strictly related to the purposes mentioned above, who have committed themselves to confidentiality or have an appropriate legal obligation of confidentiality (for example, Consulcesi Tech employees).
Personal data required to activate the services will not be subject to diffusion.
6. Transfer of personal data
Regarding the possible transfer of data to Third Countries, the Data Controller inform you that the processing will take place according to one of the methods permitted by the law, such as the consent of the data subject, the adoption of Standard Model Clauses approved by the European Commission, the selection of subjects adhering to international programs for free circulation of data (eg. EU-USA Privacy Shield) or operating in countries considered safe by the European Commission. For more information you can contact the Data Controller using the above contacts.
7. Storage of personal data
Personal data processed for the purposes indicated in section 3.a and 3.b will be retained for the time strictly necessary to achieve those same purposes, in compliance with the principles of minimization and storage limitation pursuant to art. 5.1.e) of the Regulation. In any case, Consulcesi Tech will process personal data for the time necessary for contractual and legal obligations.
More information about the data retention period and the criteria used to determine that period may be requested to the Data Controller -by sending an email at email@example.com- or to the Data Protection Officer to the following addresses: Largo Boccioni 1, 21040 Origgio (VA), Italy; email: firstname.lastname@example.org.
8. Rights of the data subject
According to article 15 and following of the Regulation, you have in any moment the right to access your personal data, to ask the rectification or erasure of personal data, the limitation of the processing in the cases provided for in article 18, to receive your personal data in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, in the cases provided for in art. 20 of the Regulation.
In any moment, you have the right to withdraw the consent following art. 7 of the Regulation; you have the right to lodge a complaint with a supervisory authority pursuant to art. 77 of the GDPR, if you believe that the processing of your data is not in compliance with the legislation in force.
You can make a request for opposition to the treatment of your personal data ex art. 21 of GDPR, in which to give evidence of the reasons justifying the opposition; in this case, the Data Controller reserves the right to evaluate the request, which would not be accepted in case of legitimate reasons to proceed with the processing that prevail over your interests and rights.
The requests for the exercising of your rights must be addressed to the Data Controller at email@example.com, or to the DPO at the following addresses: Largo Boccioni 1, 21040 Origgio (VA) – Italy ; email: firstname.lastname@example.org.
Last update: 25.05.2018