1. Data Controller
The controller processing the personal data acquired through this Website is: Liabel S.P.A
The contact detail is the following: email@example.com
2. Data processing
• all data is processed lawfully, fairly and in a transparent manner in relation to the person concerned, in compliance with the general principles established by the GDPR and the Privacy Code;
• The aim is to collect, process and use as few personal data as possible;
• when we have to collect personal data, we make sure that it is as accurate and updated as possible;
• if the collected personal data is no more necessary for any purpose and we are not required to keep it as a legal requirement, we will do as much as possible to delete it, destroy it or render it anonymous;
• specific security measures are observed to prevent data loss, illegal or incorrect use and unauthorized accesses;
3. Collected Data and purpose of processing
The data collected as below indicated will be processed with the support of paper tools (registration forms, order forms, etc.), IT tools (management and counting software etc.) and telematics with organizational and elaboration logics closely related to the the same purposes and in any case in order to guarantee the security, integrity and confidentiality of the data in compliance with the organizational, physical and logical measures provided for by the current provisions.
If the person giving the data is under the age of 16, such data processing is lawful only if and to the extent that such consent is given or authorized by the holder of parental responsibility: he has to provide its identification data and copy its identificaction document.
The collected data is exclusively "common data” such as, for example, first and last name, fiscal code etc.
If it is necessary to collect particular data according to Art. 9 and 10 of the GDPR, an express consent will be required and in any case the data will not be disclosed.
The computer systems and the software procedures responsible for the functioning of the website acquire, during their normal work, some personal data whose transmission is implied in the use of Internet communication protocols, named "navigation data".
This information is not collected to be associated with identified person concerned, but by its nature could - through processing with data held by third parties - allow to identify the users.
This data category includes, for example, the IP addresses or domain names of the PC used by users connecting to the site, the addresses in Uniform Resource Identifier (URI) of the requested resources, the time of the request, the method used for the request to the server, the size of the
obtained file in response, the numerical code indicating the response status given by the server (success, error, etc.) and other parameters related to the operating system and to the user's IT environment.
That data is used for the sole purpose of obtaining anonymous statistical information referred to the site use and to check its correct functioning. The data could also be used to ascertain the responsibility in case of hypothetical computer crimes against the site (lawful interests of the owner).
The data is processed exclusively by internal personnel, duly authorized and instructed and will not be disclosed to third parties, disclosed or transferred to non-EU countries. The data can be made available to the competent authorities only in case of investigation.
Data is usually kept for a limited period of time, except for any extensions related to investigations.
The data is not given by the interested party, but automatically acquired by the site's technological systems.
Cookies are text files stored on your PC or mobile device, that are used by the websites above indicated, in order to make the experience more efficient for the user.
The website uses technical cookies and cookies c.d. profiling, also of third parties. The European Regulation requires that the "site visitor / platform user" expresses consent to the processing of its personal data through a direct, explicit, unequivocal and discernible act, also for the so-called "technical cookies".
3.2 Collected data with the user's consent and purpose of processing
The collected data will be processed with the following purposes:
carry out the customer’ s requests through contact
This page allows the user to register on the website by creating exclusive username and password, in order to be able to access for free a number of services through specific credentials:
The following personal data is required: Customer category, Company name, Sector, First and Last name, Address, Postcode, Town, VAT number or Fiscal Code, Email, Telephone, Fax.
The registration is subject to acceptance of specific, free and informed consent. The data is processed exclusively by authorized personnel who have been duly instructed. Depending on the requested services, the data is kept for times compatible with the specific purpose of its collection. The provision of the data related to the mandatory fields is necessary to obtain an answer. If the mandatory data or the consent are not given, it’s impossible to log in the various services.
3.4. Newsletter subscription
On this page there is a form that allows to subscribe to a newsletter that offers promotional offers reserved to the members of the specific newsletter service or to registered users.
This form requires a series of personal data (Company Name, First and Last name, Email address); the email address is mandatory, while the optional fields are designed to provide additional elements of knowledge. The subscription is subject to the acceptance of specific, free and informed consent. The data is processed exclusively by authorized and duly instructed personnel.
The data is kept until the possible note of cancellation referred to the newsletter subscription, freely practicable at any time through the link at the bottom of each sent message. Failure to provide the email address or consent involves the impossibility of obtaining the newsletter service.
3.5. Order confirm
This page, reachable during the purchase procedure, allows those interested in the products/services on the website to register as customers and make the online purchase of the products/services.
Customers already registered and having their username and password can proceed with the purchase by retrieving all the data previously entered. The form proposed to new customers requires a range of personal data (Customer category, Company name, Sector, First and last name, Address, Postcode, Town, VAT number or Fiscal Code, email, Phone number, Fax number) and the choice of an individual and exclusive username and password. The registration is subject to acceptance of specific, free and informed consent and of the general / sales conditions.
The data is processed exclusively by authorized and trained personnel. The data is kept for times in accordance with the current national administrative and fiscal rules. The data referred to the mandatory fields is necessary to obtain an answer. The refusal to provide the mandatory data or the consent will prevent from purchasing.
3.6 - Login
The Login page allows the access to a reserved area of the website for those who are already registered customers and who are in possession of special login credentials (username and password), or who register as new customers by filling out the form on the page "Contacts" and generating the own login credentials (user and password).
4. Categories of data recipients
All the collected and processed data will be communicated exclusively for the above specified purposes to the following categories, without prejudice to the communications carried out in fulfillment of legal and contractual obligations: Companies or Professional Studies that provide consulting or collaboration in accounting, fiscal, legal, commercial matters; Public administrations for the performance of institutional functions within the legal limits; third party service providers to whom communication is necessary to fulfill the services covered by the contract; subjects managing the web platform.
5. Maintaining of personal data
Mandatory data for contractual, accounting and service-related purposes is kept for the time needed to perform the contractual relationship, including the applicable legislative requirements. The data of those who do not buy or use products / services, despite having had previous contact with company representatives, will be deleted within 6 months or processed anonymously, unless their maintaining is not otherwise justified, considering the acquired consent of the interested parties regarding a following commercial promotion or market research activity.
6. Legal basis
The data processing is based on the consent given by the customer or on the necessity for the execution of a contract in which the customer is a contracting party, or to take the necessary measures before the contract is signed upon request of the customer (see Art. 6 paragraph 1 lett. a and b of the GDPR).
If the data processing is based on the user's consent, the same can revoke it at any time using the contact data specified in point 1. In order to proceed with the stipulation of a contract regarding the purchase of goods or services, it is necessary to provide the requested personal data.
If not all the requested data is provided, it will be impossible to carry out what has been requested.
7. Data subject’ s rights
The person concerned has the right to obtain from the data controller, in the cases provided for by the current provisions, the access to the personal data, the correction or deletion of it, limit its processing or oppose it (Art. 15 and following of the Regulation). The appropriate application is presented by contacting the data controller named in point 1.
If the person concerned believes that the processing of the personal data has been carried out illegally, he can submit a claim to the Personal Data Protection Authority, as provided for by Art. 77 of the Regulation, or take a legal action (Art. 79 of the Regulation).
8. Transfer of personal data outside the European Union
The management and maintaining of Personal Data will occur on servers, normally located within the European Union, of the Owner and / or third parties duly appointed.
If servers are located in non-EU countries, for ex. for google-analitycs activities or similar, the Data Controller ensures that the data will be transferred in compliance with the guarantees provided by law, verifying that the processing of the personal data is lawful and in any case, if it’s requested, also assuming the necessary guarantees on the data processing.
In any case, the person concerned is invited to periodically consult this policy.