Information on privacy and data processing
This is an information that is also provided pursuant to art. 13 of Regulation (EU) 2016/679 (hereinafter also "General Data Protection Regulation" or "GDPR") to those who access the aforementioned site.
The site indicated above is owned by Guana Carla with headquarters in Via Saroch 1289, 23030 Livigno (SO).
The information is provided by Guana Carla exclusively for the site mentioned above and not for other websites or sections / pages / spaces owned by third parties consulted by the user through special links.
If users / visitors are required, to access certain services, to provide their personal data, will be released in advance, on the pages relating to individual services, specific and detailed information on the related processing pursuant to art. 13 of the GDPR which will specify the methods, purposes and limits of the treatment itself.
1. Data controller
The Data Controller is Guana Carla with registered office in Via Saroch 1289, 23030 Livigno (SO), email: firstname.lastname@example.org
2. Type of data processed purposes and legal basis of processing
2.1. Browsing data
The computer systems and software procedures used to operate this site acquire, in normal operation, some personal data that are then implicitly transmitted in the use of Internet communication protocols.
It is information that by their nature could, through associations and processing with data held by third parties, allow users / visitors to be identified (eg IP address, computer domain names used by users / visitors who connect to the site, etc.).
These data are used for the sole purpose of obtaining statistical information (therefore they are anonymous) and to check the correct functioning of the site.
2.2. Data provided voluntarily by users / visitors
If users / visitors connecting to this site send their personal data to access certain services, or to make requests via email, you will have the acquisition of such data by Guana Carla and / or third parties together with whom Guana Carla could provide the service requested by the user / visitor; such data will be processed exclusively to respond to the request, or for the provision of the service in accordance with this Policy and the specific privacy information provided during the phase of access to the individual services.
2.3. Purpose of processing for direct marketing purposes
With the specific consent of the interested party, Guana Carla may use the data provided voluntarily for direct marketing activities, to send advertising and informative material; carry out direct sales or placement of products or services; send commercial information; make interactive commercial communications.
For the processing of data preordered to the conduct of direct marketing activities it is mandatory to acquire the consent - specific and separate - by the interested party, who is now informed that such conferment is entirely optional and any refusal will not entail a consequence (if not that of preventing data processing aimed at direct marketing).
For the treatments referred to in nos. 2.4. it is specified that the legal basis is represented by the express consent. For the treatments referred to in nos. 2.1 and 2.2. the legal basis is represented by the execution of services requested or replicated at the request of users / visitors.
3. Recipients of personal data
No data deriving from the web service will be communicated or disseminated to third parties, except to fulfill the obligations established by laws, regulations or community regulations.
The personal data expressly provided by users / visitors will be communicated to third parties only if the communication is necessary to comply with the requests of users / visitors themselves, without prejudice to what is specified in the specific information of the individual services.
4. Data transfer to third countries
5. Processing methods and data retention period
The processing of data is performed through automated tools (eg using electronic procedures and media) and / or manually (eg on paper) for the time strictly necessary to achieve the purposes for which the data were collected and, however, in compliance with the current regulations in force.
Personal data will be kept for the period of time strictly necessary for the pursuit of the specific purposes of the processing and, in particular:
- for the data indicated in art. 2.1., For the time necessary for carrying out the specified activities, except for any investigation of computer crimes to the detriment of the site;
- for the data indicated in art. 2.2., For the time necessary to perform the services requested or reply to requests made, except for any investigation of computer crimes to the detriment of the site; any further details on the storage of data regarding the single service or request made may be provided in the specific information on the single service requested;
- for the purposes indicated in art. 2.3. (marketing) for 24 (twenty-four) months from the time of issue of the specific and express consent to the treatment by users / visitors.
6. Rights of the interested party
Users / visitors can at any time exercise the direct indicated below.
a. Access to personal data: obtain confirmation of whether data concerning them are being processed and, in this case, access to the following information: the purposes, the categories of data, the recipients, the retention period, the right to lodge a complaint with a supervisory authority, the right to request rectification or cancellation or limitation of processing or opposition to the processing itself and the existence of an automated decision-making process;
b. Request for rectification or cancellation of the same or limitation of the processing that concerns them; "limitation" means the marking of data stored with the aim of limiting its processing in the future;
c. Opposition to processing: to oppose for reasons connected with the particular situation to the processing of data for the execution of a task of public interest or for the pursuit of a legitimate interest of the Data Controllers;
d. Data portability: in the case of automated processing carried out on the basis of consent or in execution of a contract, to receive data concerning them in a structured format, commonly used and readable by automatic device; in particular, the data will be provided by the Data Controllers in .xml format, or similar;
e. Revocation of consent to processing for marketing purposes, both direct and indirect, market research; the exercise of this right does not prejudice in any way the lawfulness of the processing carried out before the revocation;
f. Propose a claim pursuant to art. 77 RGPD to the competent supervisory authority on the basis of habitual residence, place of work or place of infringement of rights; for Italy, the Guarantor for the protection of personal data is competent, which can be contacted via the contact details on the website http://www.garanteprivacy.it.
The aforementioned rights may be exercised by sending a specific request to the Data Controller through the contact channels indicated in art. 1 of this information.
Requests relating to the exercise of the rights will be processed without undue delay and, in any case, within one month of the request; only in cases of particular complexity and in the number of requests can this term be extended by a further 2 (two) months.
7. Communication and provision of data
Except for what specified for the data referred to in art. 2.1 (navigation data, whose missed contribution coincides with the non-navigation of the website), users / visitors are free to provide their personal data and their failure to provide will only result in the impossibility of obtaining the requested service.