Information document Article 13 EU Reg. 2016/679- GDPR
Information on the processing of personal data collected from the person concerned
In accordance with the provisions of EU Regulation 2016/679 (European Regulation for the Protection of Personal Data) we provide you with the necessary information regarding the processing of personal data provided.
This information is not to be considered valid for other websites that may be accessed through links on the websites of the owner, who is not to be considered in any way responsible for the websites of third parties.
This information is provided pursuant to art. 13 of EU Regulation 2016/679 (European Regulation for the Protection of Personal Data) to all those who visit the website https://ozzio.com/ (the “Site”) with reference to the processing of personal data of surfers (“Users”) who use it and is also inspired by the provisions of Directive 2002/58/EC, as updated by Directive 2009/136/EC, on Cookies and the provisions of the Provision of the Guarantor Authority for the Protection of Personal Data of 08.05.2014 on cookies.
1. SUBJECTS OF THE PROCESSING
The data controller, pursuant to Articles. 4 and 24 of EU Regulation 2016/679 is the company “POZZOLI GROUP S.r.l.” hereinafter referred to as “Owner” with registered office in Bovisio Masciago (Mb) Via Brughetti, 17 Tax Code and VAT No. 04070240967 REA n. 1723612 in the name and on behalf of the Legal Representative Colla Emanuele, born in Desio (Mb) on 25 April 1966, domiciled for the office at the registered office, available at the following e-mail address: firstname.lastname@example.org
2. TYPE OF DATA PROCESSED PURPOSES AND LAWFULNESS OF TREATMENT
The personal data provided will be processed in compliance with the conditions of lawfulness ex art. 6 Reg. UE 2016/679 without the need for express consent for the following purposes referred to in point a):
a) Management of inherent data processing:
– navigation data:
The computer systems and software procedures used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified subjects, but by its very nature could allow users to be identified.
This category includes (i) IP addresses or domain names of computers used by users connecting to the Site, (ii) URI (Uniform Resource Identifier) of requested resources, (iii) the time of the request, (iv) the method used to submit the request to the server, (v) the size of the file obtained in response, (vi) the numerical code indicating the status of the response from the server (successful, error) and (vii) other parameters relating to the operating system and computer environment of the user.
Legal basis of the processing: execution of the requested service and correct execution of the contractual relationship relating to access to the site;
– statistical data:
The services contained in this section allow the Data Controller to monitor and analyse adequately anonymised traffic data and are used to keep track of the User’s behaviour.
Legal basis of the processing: our legitimate interest in monitoring traffic data on this site for the purpose of analysing statistical data for market research.
– personal data:
Personal data: personal and contact data such as name, city, country, e-mail and profession may be requested in order to proceed with the compilation of:
. data collection form for sending a request for a quote or other information;
. log in for access to reserved areas to take advantage of other dedicated services, such as downloadable materials (eg photos, videos, price lists, catalogs).
3. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF DATA
The personal data provided may be communicated to recipients, appointed pursuant to art. 28 of EU Regulation 2016/679, who will process the data in their capacity as managers and / or natural persons acting under the authority of the owner and manager, in order to comply with contracts or related purposes. Precisely, the data may be communicated to recipients belonging to the following categories:
– Subjects that provide services for the management of the information system and communication networks of the Owner (such as third party technical service providers, hosting providers, IT companies, communication agencies, including e-mail);
The subjects belonging to the above categories are responsible for the processing of data, or operate in total autonomy as separate data controllers.
The list of designated data processors is constantly updated and available at the registered office of the Data Controller.
This is without prejudice, in any case, to the communication of data requested, in accordance with the law, by police forces, judicial authorities, information and security bodies or other public bodies for purposes of defence or state security or for the prevention, detection or repression of crimes.
We inform you that the database may be provided to the Public Administration upon simple request made to the person who is legally entitled to have judicial and extrajudicial relations with the Public Administration.
4. DATA TRANSFER TO A THIRD COUNTRY AND/OR AN INTERNATIONAL ORGANISATION
The personal and particular data provided may be transferred abroad, either internally or externally.
of the European Union (United States subject to the Privacy Shield) only with your express consent and only if this is necessary for the achievement of the purposes referred to in point a) and b). Data processing takes place at the registered office of the Data Controller and in any other place where the parties legitimately involved in the processing are located.
5. STORAGE PERIOD OR CRITERIA
The Owner shall process the personal data of the Users adopting appropriate security measures aimed at preventing unauthorised access, disclosure, modification or destruction of the personal data.
The processing is carried out by means of computerised and non-electronic and/or telematic instruments with organisational methods and with logic strictly related to the purposes indicated, guaranteeing an adequate level of protection of personal data.
In compliance with the provisions of Article 5, paragraph 1, letter e) of EU Regulation 2016/679, the personal data collected will be kept in a form that allows the identification of those concerned for a period of time not exceeding the achievement of the purposes for which the personal data are processed. To know the criteria underlying the period of data retention write to the address given in point 1 of this information notice.
6. NATURE OF THE CONFERMENT AND REFUSAL
Apart from that specified for navigation data, the user is free to provide personal data in dedicated areas on the site.
The provision of personal data for the purposes referred to in point a) of this information document is necessary to improve the specific functions and use the services offered to the Data Controller,
for example to receive feedback on your request for information. Failure to provide personal data may make it impossible to obtain the service requested or to use the services offered by the site.
7. RIGHTS OF THE INTERESTED PARTIES
You may exercise your rights as expressed in Articles 15, 16, 17, 18, 19, 20, 21, 22 of EU Regulation 2016/679 by contacting the Data Controller at the address given in point 1 of this notice.
You have the right, at any time, to ask the Data Controller to access your personal data, rectify, delete them and limit the processing.
Furthermore, you have the right to object, at any time, to the processing of your data (including automated processing, e.g. profiling) and to the portability of your data.
Without prejudice to any other administrative and jurisdictional appeal, if you believe that the processing of your data violates the provisions of EU Regulation 2016/679, pursuant to art. 15 letter f) of the aforementioned EU Regulation 2016/679 you have the right to lodge a complaint with the Guarantor for the protection of personal data and, with reference to art. 6 paragraph 1 letter a) and art. 9, paragraph 2 letter a), you have the right to revoke at any time the consent given.
In the case of a request for data portability, the Data Controller will provide you with your personal data in a structured format, commonly used and readable by automatic means, without prejudice to paragraphs 3 and 4 of Article 20 of EU Regulation 2016/679.
The Data Controller may process the personal data of users in order to pursue his own legitimate interest, consisting in ensuring the security of the Site and the information exchanged on it, i.e. the ability of this Site to withstand, at a given level of security, unforeseen events or unlawful or malicious acts that compromise the availability, authenticity, integrity and confidentiality of personal data stored or transmitted and the security of the related services offered or made accessible.
If the User believes that his rights have been violated, he has the right to lodge a complaint with the Guarantor for the protection of personal data and / or other competent supervisory authority under the law. More information can be found at the following link