- Art. 13 of EU Regulation 2016/679;
- Provision of the Italian Data Protection Authority no. 231 of 10 June 2021 (Guidelines for cookies and other tracking tools) which supplements Provision no. 229 of 2014 and provides important clarifications in order to assist controllers in the correct application of the current regulatory framework;
- Art. 29 of Working Party Recommendation no. 2/2001 relating to the minimum requirements for collecting personal data online in the EU;
- Directive 2009/136/EC, amending Directive 2002/58/EC (so-called "E-Privacy Directive") concerning the processing of personal data and the protection of privacy in the electronic communications sector;
- WP 29 Guidelines of 10 April 2019, ratified by the European Data Protection Board and replaced by the Guidelines 05/2020 on consent under Regulation 2016/679 adopted on 4 May 2020.
1) TYPE OF DATA PROCESSED AND PURPOSE OF THE PROCESSING
1.1) Purpose of the processingThe processing of the personal data of users/visitors is exclusively intended to allow users to navigate the site. The personal data of users may also be used for the fulfilment of legal obligations.
1.2) Data voluntarily provided by the userThe voluntary and explicit sending of e-mails to the addresses indicated in the different access channels of this site involves the subsequent acquisition of the sender/user’s address and data, which are necessary to respond to the requests made, as well as any other personal information entered by the sender/user. The personal data provided by users will be communicated to third parties only if this communication is necessary to comply with the requests of the users themselves. The collected data will not be retained longer than necessary to fulfil the purpose for which it was acquired. These retention periods generally apply to all personal data that is collected to respond to the requests made.
1.3) Navigation dataThe “software” platform used to operate this website acquires, during its normal operation, some personal data whose transmission is implicit to the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties performed only at the prior explicit request of the court, allow users to be identified. This data category includes the IP addresses or domain names of computers used by users who connect to the website, the Uniform Resource Identifier (URI) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters related to the user’s operating system and computing environment. This data is used only for the purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning.
- Where at least six months have passed since the previous display of the banner;
- In the case in which the conditions of the processing have changed significantly and, therefore, the banner also performs an information function in relation to the changes made (e.g. in case of modification of third-party cookies);
- When Exprivia cannot be certain that a cookie has already been stored on the device for transmission on a subsequent visit by the same user to the site that generated it (e.g. if the user deletes the legitimately installed cookies on the device without the controller being able to keep track of the intention to maintain the default settings and, therefore, to continue browsing without being tracked).
1.4.3) How to manage your cookie settings.You can remove existing cookies and block the installation of new cookies through your browser settings. Users/visitors can choose whether to accept cookies from time to time by configuring their browser to generate an alert each time a cookie is saved. The most commonly used browsers provide the option to block third-party cookies only, accepting only those belonging to the site. The procedure for managing cookies is different for each browser. Here are the instructions for the most popular browsers. Google Chrome
- To find out how to manage cookies through the browser settings: https://policies.google.com/technologies/managing?hl=it.
- To find out how to activate incognito navigation mode: https://support.google.com/chrome/answer/95464?hl=it.
- To find out how to delete cookies, block them selectively, and receive alerts about your cookie settings: https://support.google.com/chrome/answer/95647?hl=it.
- To find out how to manage cookies, delete them and block them through the browser settings: https://support.microsoft.com/it-it/windows/eliminare-e-gestire-i-cookie-168dab11-0753-043d-7c16-ede5947fc64d .
- To find out how to manage cookies through the browser settings and other privacy functions: https://support.mozilla.org/it/kb/Gestione%20dei%20cookie.
- To find out how to manage the privacy settings panel and block the tracking of your network activities: https://support.mozilla.org/it/kb/Impostazioni%20di%20Firefox%20-%20pannello%20Privacy.
- To find out how to enable and disable cookies: https://support.mozilla.org/it/kb/Attivare%20e%20disattivare%20i%20cookie.
- To find out how to delete cookies: https://support.mozilla.org/it/kb/Eliminare%20i%20cookie.
- To find out how to block cookies: https://support.mozilla.org/it/kb/Bloccare%20i%20cookie.
- To find out how to manage cookies through the browser settings: http://supporto.teletu.it/assistenza-tecnica/configurazioni/browser-internet/safari/gestione-cookie/.
- To find out how to manage cookies through the browser settings: http://help.opera.com/Windows/10.00/it/cookies.html.
2) METHOD OF DATA PROCESSING AND STORAGEPersonal data is processed using automated tools (e.g. using electronic media and procedures) and/or manually (e.g. on paper) for the time strictly necessary to achieve the purposes for which it is collected and, in any case, in accordance with the applicable regulatory provisions. Specific security measures are followed to prevent data loss, unlawful or incorrect use, and unauthorised access. No automated decision-making and profiling will be applied to the collected data. After this period, the data will be deleted or anonymised, unless additional retention is required to fulfil legal obligations or to comply with orders issued by public authorities.
3) OPTIONAL PROVISION OF DATAThe provision of personal data by the data subject for the purposes described in the previous section (1.2), should be considered optional. Non-provision may result in the impossibility of browsing certain sections of the site.
4) DATA CONTROLLER, DATA PROTECTION OFFICER (DPO) AND APPOINTEESThe Data Controllers, relating to identified or identifiable persons who have consulted this site, are the companies belonging to Exprivia Group:
- Exprivia S.p.A. with registered office at Via A. Olivetti, 11- Molfetta (BA);
- Exprivia Projects Srl with registered office at Viale del Tintoretto 432 – Rome.
- through Exprivia SpA at the following email address: firstname.lastname@example.org
- through Exprivia Projects Srl at the following email address: email@example.com
5) COMMUNICATION AND/OR DISSEMINATION OF DATAUnless stated in point 1.2, the personal data provided by the user will not be disclosed to third parties or disseminated and will not be transferred to third countries (non-EU).
6) DATA RECIPIENTSFor the purposes described, or if indispensable or required by legal provisions or by authorities with the power to impose it, the Controllers reserve the right to communicate the data to recipients belonging to the following categories:
- the Data Protection Officer (DPO), to respond to the privacy requests of data subjects and for any further purpose that falls within the duties of the DPO, as specified in Art. 39 of EU Regulation 2016/679;
- Supervisory authorities and, in general, public or private subjects with public functions (e.g. police headquarters, judicial authorities, in any case only to the extent that the conditions laid down by the applicable law are met);
- other parent companies, subsidiaries or associate companies, pursuant to Art. 2359 of the Italian Civil Code;
- professional practices or companies in the context of support and consultancy relationships;
- subjects that carry out control, auditing and certification of the activities performed by the Controllers;
- suppliers of the Controllers, formally appointed as processors.