Privacy

Privacy Notice pursuant to Articles 13-14 of the European Regulation “Privacy” (GDPR)

The personal data you provide is processed by the Data Controller indicated at the top of the page, for purposes related to the provision of the services you requested (e.g., requesting information, obtaining quotes, registering on the site to receive benefits and offers, making purchases and receiving them at a location of your choice). Additionally, the data you provide may be processed, only with your explicit consent, to send you commercial communications. In the first case, the legal basis for processing is the execution of a contract; in the second case, it is consent. Processing will be carried out electronically and made available to third parties (External Data Processors) within the European Union, regularly contracted by the Data Controller and offering adequate security guarantees necessary for the provision of essential services to meet your needs. These External Processors, whose list is available upon request, may belong to categories of entities that support the Data Controller in providing the services offered through this site (such as, by way of example: software developers and website managers, couriers). If, for technical and/or operational reasons, it becomes necessary to use entities located outside the European Union, or it becomes necessary to transfer some of the collected data to technical systems and services managed in the cloud and located outside the European Union area, the processing will be regulated in accordance with the provisions of Chapter V of the Regulation and authorized by specific decisions of the European Union. All necessary precautions will be taken to ensure the utmost protection of personal data, based on the following: a) decisions of adequacy by the European Commission regarding third countries’ recipients; b) adequate guarantees expressed by the third-party recipient in accordance with Article 46 of the Regulation; c) the adoption of binding corporate rules (Corporate binding rules). Furthermore, data will be processed for statistical and direct marketing purposes, in an anonymous manner, as better specified in the cookie policy. These are therefore legitimate and necessary processing activities to ensure you receive a service that meets your expectations. Data will be stored for the duration of the services you requested or for longer periods only if required by applicable laws. Your personal data will not be disseminated, but may be communicated to third parties where necessary for the provision of the service to third parties (such as providers of third-party technical services, postal couriers, hosting providers, IT companies), who may be appointed as Data Processors by the Data Controller for technical or organizational tasks related to the provision of services. Access to data is also allowed to categories of persons appointed by the Data Controller involved in data processing activities (administrative, commercial, marketing, customer service staff, system administrators). The updated list of Data Processors can always be requested from the Data Controller. The right to communicate data to third parties remains, where you have given specific and optional consent. At any time, you may exercise the rights provided for in Articles 15-22 of the GDPR by contacting the Data Controller.

• The Data Controller guarantees that you can exercise, at any time, the rights provided by Article 12 of the GDPR. In particular, you have the right:
• to know if the Data Controller holds and/or processes personal data relating to you and to access it in full, even obtaining a copy (Article 15 Right of Access),
• to rectify inaccurate personal data or complete incomplete personal data (Article 16 Right of Rectification);
• to request the deletion of personal data held by the Data Controller if one of the reasons provided for by the GDPR exists (Right to Deletion, Article 17);
• to ask the Data Controller to limit the processing to certain personal data if one of the reasons provided for by the Regulation exists (Article 18 Right to Restriction of Processing);
• to request and receive all your personal data processed by the Data Controller, in a structured, commonly used, and machine-readable format, or to request its transmission to another Data Controller without hindrance (Article 20 Right to Data Portability);
• to object in whole or in part to the processing of data for the purpose of sending advertising materials and market research (so-called Consent) (Article 21 Right to Object)
• to object in whole or in part to the processing of data in automatic or semi-automatic mode for profiling purposes (so-called Consent)

The exercise of these rights can be carried out by contacting the Data Controller/Data Protection Officer, whose details are provided in the relevant section of this notice. Additionally, you always have the right to file a complaint with the Data Protection Authority, which can be contacted at the address garante@gpdp.it or through the website http://www.gpdp.it. To modify or delete only the data stored in the Data Controller’s systems, please contact the Data Controller. The information you enter in the form (including your email address) may be communicated to a third-party company acting as

Privacy Notice and Cookie Policy for Website Visitors

Cookies are small pieces of code installed within the browser that assist the Data Controller in delivering the Service based on the described purposes. Some of the purposes for installing Cookies may also require the User’s consent. When Cookies are installed based on consent, such consent can be freely revoked at any time by following the instructions contained in this page. In order to make your visit to the Data Controller’s website as convenient as possible and to present its range of products, we use cookies and occasionally some usage analysis tools on our web pages aimed at improving their usability.

Cookies are small text aggregates stored locally in your browser’s temporary memory, and thus on your computer, for varying periods depending on the need, generally ranging from a few hours to several years, with the exception of profiling cookies, whose maximum duration is 365 calendar days. Usability analysis tools consist of small software programs (scripts) temporarily activated on certain pages of the site, which anonymously intercept a set of interaction events with the content (such as clicks, mouse path, time spent by the mouse in a particular position). After collecting the data, this information is aggregated and analyzed to understand how to improve the page structure or the service. The Data Controller does not collect the content of the fields you may have filled out during one of these sessions or any other personal information, but only technical and operational data.

The activation of these scripts is subject to acceptance of the cookie policy, as they are similar in terms of the type of data collected and how they are operated. Through cookies, it is possible to semi-permanently record information regarding your preferences and other technical data that allow smoother navigation and greater ease of use and effectiveness of the site itself. For example, cookies can be used to determine whether a connection has already been made between your computer and our sites, to highlight new features, or to maintain “login” information. For your guarantee, only the cookie stored on your computer is identified. In addition to cookies, we also use scripts for similar purposes.

Technical and Aggregate Statistical Cookies

Activities strictly necessary for operation

The application of the Data Controller uses cookies to save the User’s session and to carry out other activities strictly necessary for the functioning of this Application, such as traffic distribution.

Activities for saving preferences, optimization, and statistics

This Application uses cookies to save navigation preferences and optimize the User’s browsing experience. These cookies include, for example, those for setting the language and currency or for managing statistics by the Data Controller of the site.

Other types of Cookies or third-party tools that may install them

Some of the services listed below collect statistics in aggregate and anonymous form and may not require the User’s consent or may be managed directly by the Data Controller – depending on what is described – without the involvement of third parties. If third-party services are listed in the following tools, they may – in addition to what is specified and also without the Data Controller’s knowledge – perform tracking activities on the User. For detailed information on this, it is recommended to consult the privacy policies of the listed services.

Interaction with social networks and external platforms

This type of service allows interactions with social networks or other external platforms directly from the pages of this Application. The interactions and information acquired by this Application are in any case subject to the User’s privacy settings related to each social network. If a social network interaction service is installed, it is possible that, even if Users do not use the service, it may collect traffic data related to the pages where it is installed.

+1 Button and Google+ Social Widgets (Google Inc.)

The +1 button and Google+ social widgets are interaction services with the Google+ social network, provided by Google Inc. Personal Data collected: Cookies and Usage Data. Place of processing: United States – Privacy Policy. Participating in the Privacy Shield.

StumbleUpon Button and Social Widgets (StumbleUpon, Inc.)

The StumbleUpon button and social widgets are interaction services with the StumbleUpon social network, provided by StumbleUpon, Inc. Personal Data collected: Cookies and Usage Data. Place of processing: United States – Privacy Policy.

LinkedIn Button and Social Widgets (LinkedIn Corporation)

The LinkedIn button and social widgets are interaction services with the LinkedIn social network, provided by LinkedIn Corporation. Personal Data collected: Cookies and Usage Data. Place of processing: United States – Privacy Policy.

Tumblr Button and Social Widgets (Tumblr Inc.)

The Tumblr button and social widgets are interaction services with the Tumblr social network, provided by Tumblr Inc. Personal Data collected: Cookies and Usage Data. Place of processing: United States – Privacy Policy.

Facebook “Like” Button and Social Widgets (Facebook, Inc.)

The “Like” button and Facebook social widgets are interaction services with the Facebook social network, provided by Facebook, Inc. Personal Data collected: Cookies and Usage Data. Place of processing: United States – Privacy Policy. Participating in the Privacy Shield.

Tweet Button and Social Widgets (Twitter, Inc.)

The Tweet button and Twitter social widgets are interaction services with the Twitter social network, provided by Twitter, Inc. Personal Data collected: Cookies and Usage Data. Place of processing: United States – Privacy Policy. Participating in the Privacy Shield.

“Pin it” Button and Social Widgets (Pinterest)

The “Pin it” button and Pinterest social widgets are interaction services with the Pinterest platform, provided by Pinterest Inc. Personal Data collected: Cookies and Usage Data. Place of processing: United States – Privacy Policy.

Remarketing and Behavioral Targeting

This type of service allows this Application and its partners to communicate, optimize, and serve ads based on the past use of this Application by the User. This is done by tracking the Usage Data and using Cookies, information that is transferred to partners with whom the remarketing and behavioral targeting activities are linked. In addition to the opt-out options offered by the services listed below, the User can opt out of receiving cookies related to a third-party service by visiting the Network Advertising Initiative opt-out page.

AdWords Remarketing (Google Inc.)

AdWords Remarketing is a remarketing and behavioral targeting service provided by Google Inc. that links the activity of this Application with the AdWords advertising network and the Doubleclick Cookie. Personal Data collected: Cookies and Usage Data. Place of processing: United States – Privacy Policy – Opt Out.

Remarketing with Google Analytics for Display Advertising (Google Inc.)

Google Analytics for Display Advertising is a remarketing and behavioral targeting service provided by Google Inc. that links the tracking activity performed by Google Analytics and its Cookies with the AdWords advertising network and the Doubleclick Cookie. Personal Data collected: Cookies and Usage Data. Place of processing: United States – Privacy Policy – Opt Out. Participating in the Privacy Shield.

Statistics

The services contained in this section allow the Data Controller to monitor and analyze traffic data and help track the User’s behavior.

Google Analytics with Anonymized IP (Google Inc.)

Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google uses the Personal Data collected to track and examine the use of this Application, compile reports, and share them with other services developed by Google. Google may use Personal Data to contextualize and personalize the ads of its advertising network. This integration of Google Analytics anonymizes your IP address. Anonymization works by shortening the IP address within the European Union member states or other countries adhering to the European Economic Area agreement. Only in exceptional cases will the IP address be sent to Google servers and shortened within the United States. Personal Data collected: Cookies and Usage Data. Place of processing: United States – Privacy Policy – Opt Out. Participant in the Privacy Shield.

WordPress Stats (Automattic Inc.)

WordPress Stats is a statistics service provided by Automattic Inc. Personal Data collected: Cookies and Usage Data. Place of processing: United States – Privacy Policy.

Display of Content from External Platforms

This type of service allows you to view content hosted on external platforms directly from the pages of this Application and to interact with it. If a service of this type is installed, it is possible that, even if Users do not use the service, it may collect traffic data related to the pages where it is installed.

Google Maps Widget (Google Inc.)

Google Maps is a mapping service provided by Google Inc. that allows this Application to integrate such content within its pages. Personal Data collected: Cookies and Usage Data. Place of processing: United States – Privacy Policy. Participant in the Privacy Shield.

How to give consent for the installation of Cookies?

In addition to what is stated in this document, the User can manage cookie preferences directly within their browser and prevent – for example – third parties from installing them. Through the browser preferences, it is also possible to delete cookies installed in the past, including the cookie where the consent for the installation of cookies by this site is stored. The User can find information on how to manage Cookies with some of the most common browsers at the following addresses: Google Chrome, Mozilla Firefox, Apple Safari and Microsoft Internet Explorer. Regarding Cookies installed by third parties, the User can also manage their settings and revoke consent by visiting the respective opt-out link (if available), using the tools described in the third party’s privacy policy, or contacting them directly. Furthermore, the User can make use of the information provided by EDAA (EU), Network Advertising Initiative (USA), and Digital Advertising Alliance (USA), DAAC (Canada), DDAI (Japan), or other similar services. These services allow the User to manage tracking preferences for most advertising tools. Therefore, the Data Controller advises Users to use these resources in addition to the information provided in this document. Since the installation of cookies and other tracking systems operated by third parties through the services used within this Application cannot be technically controlled by the Data Controller, any specific references to cookies and tracking systems installed by third parties should be considered indicative. For complete information, the User is encouraged to consult the privacy policy of any third-party services listed in this document.

Cookie Management

If you have doubts or concerns about the use of cookies, you can always intervene to prevent their setting and reading, for example, by modifying the privacy settings in your browser to block certain types or by using the refusal buttons that RCS provides in this Privacy Policy. Since each browser – and often different versions of the same browser – differ even significantly from one another, if you prefer to act independently via your browser’s preferences, you can find detailed information on the required procedure in your browser’s guide. For an overview of how to manage cookies for the most common browsers, you can visit the address http://www.cookiepedia.co.uk/index.php?title=How_to_Manage_Cookies. Advertising companies also allow opting out of receiving targeted ads, if desired. This does not prevent the setting of cookies but interrupts the use and collection of some data by these companies. For more information and the possibility of opting out, visit http://www.youronlinechoices.eu/.

Acceptance or Refusal of Cookies

By continuing to browse the Data Controller’s website, closing the information banner, or clicking anywhere on the page or scrolling to highlight further content, you make a clear and explicit act of acceptance of the Data Controller’s Cookie Policy and the cookies not refused will be set and collected. In case of refusal of cookies by abandoning navigation, any cookies already registered locally in your browser will remain there but will not be read or used by the Data Controller until a subsequent and possible acceptance of the Policy. You will always have the option to remove these cookies at any time through the methods described in the “Cookie Management” section or by visiting the site http://www.youronlinechoices.eu/it/ for those not controlled by the Data Controller.

Definitions and Legal References

Personal Data (or Data)

Personal data means any information that, directly or indirectly, also in connection with any other information, including a personal identification number, makes a natural person identified or identifiable.

Usage Data

Usage Data is information collected automatically through this Application (also from third-party applications integrated into this Application), including: the IP addresses or domain names of the computers used by the User who connects to this Application, the URI (Uniform Resource Identifier) addresses, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server response (successful, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal characteristics of the visit (e.g., time spent on each page), and the details of the itinerary followed within the Application, particularly with respect to the sequence of pages viewed, operating system parameters, and the User’s computing environment.

User

The individual who uses this Application, who, unless otherwise specified, coincides with the Data Subject.

Data Subject

The natural person to whom the Personal Data refers.

Data Controller (or Controller)

The natural person, legal entity, public authority, or any other body that processes personal data on behalf of the Data Controller, as outlined in this privacy policy.

Data Controller (or Controller)

The natural or legal person, public authority, service, or other body that, alone or jointly with others, determines the purposes and means of processing personal data and the tools adopted, including the security measures regarding the operation and use of this Application. The Data Controller, unless otherwise specified, is the owner of this Application.

This Application

The hardware or software tool through which the Personal Data of Users is collected and processed.

Service

The Service provided by this Application as defined in the relevant terms (if present) on this site/application.

European Union (or EU)

Unless otherwise specified, any reference to the European Union in this document refers to all current member states of the European Union and the European Economic Area.

Cookie

A small portion of data stored on the User’s device.

Legal References

This privacy policy is written based on various legislative frameworks, including Articles 13 and 14 of Regulation (EU) 2016/679. Unless otherwise specified, this privacy policy concerns only the website of the Data Controller mentioned at the top of the page.