Policy pursuant to Article 13 of Regulation (EU) 2016/679 – WEB
version n.2 del 06-10-2021
With this document (“Information”) the Data Controller, as defined below, wishes to inform you on the purposes and methods of processing your personal data and on the rights granted to you by Regulation (EU) 2016/679 relating to the protection of natural persons, with regard to the processing of personal data and their free movement (“GDPR”). This Information may be integrated by the Data Controller where any additional services requested by you should involve further processing.
OWNER OF THE TREATMENT
ETIKO SRLS Email: etikosrls@gmail.com; P.IVA / CF: 04458350230;
TYPES OF DATA PROCESSED
The processing activities carried out are aimed at acquiring the following personal data:
- Cookie: Profiling cookies.
- Behavioral data: Browsing log.
- Common data: Personal data.
CATEGORIES OF INTERESTED PARTIES
The processing activities carried out are aimed at the following categories of data subjects:
| Category |
| Individuals, legal persons, public and private organizations. |
PURPOSE OF THE TREATMENT AND CONDITION WHICH MAKES THE TREATMENT LEGAL
- SITE – Navigation data
Obtain anonymous statistical information on use, check the correct functioning of the site, ascertain responsibility in the event of hypothetical computer crimes against the Owner.
Condition Lawfulness Treatment:
Legitimate Interest – Art. 6, c.1, let. f. GDPR
Purpose of the treatment:
- Data analysis to perform the evolution and maintenance of the website.
- Ascertainment of responsibility in the event of potential computer crimes against the site and/or the Data Subjects.
- Statistical analysis, anonymous, on the use of the site.
Nature of the provision:
Mandatory – Failure to provide data will make it impossible for the company to provide the web service provided.
Personal data retention period:
The data is kept for 30 days.
Processing methods:
The treatment is performed with IT tools.
- SITE – Requests from the Site
Requests made by interested parties through the website of the Data Controller.
Condition Lawfulness Treatment:
Contract Execution – Article 6, c.1, let. b. GDPR
Purpose of the treatment:
- Sending requests via web platform tools.
Nature of the provision:
Optional – Failure to provide data will make it impossible for the Data Controller to respond to requests from the interested party.
Personal data retention period:
Fulfillment of the request.
Processing methods:
The treatment is performed with IT tools.
- SITE – Use of the Service and Reserved Area
Use of the services offered through the reserved area of the Owner’s website.
Condition Lawfulness Treatment:
Contract Execution – Article 6, c.1, let. b. GDPR
Purpose of the treatment:
- Registrazione all’interno dell’area riservata.
- Use of the service provided by accessing the reserved area of the site.
Nature of the provision:
Optional – Failure to provide data will make it impossible for the Data Controller to provide services through the reserved area of the site.
Personal data retention period:
User deletion.
Processing methods:
The treatment is performed with IT tools.
- FACEBOOK SOCIAL PAGE
When a user uses the Page administered by the Owner, Facebook (“Social Media“) collects information such as the types of content viewed or interacted with, the actions performed as well as information on the devices used (IP addresses, operating system, type of browser, language settings, cookie data).
Page Insights are aggregated statistics created from certain events recorded by Facebook’s servers when users interact with Pages and the content on them.
As illustrated in Facebook’s Privacy Policy, the Social Media also collects and uses information to provide statistical data collection services called Page Insights to page administrators to allow them to understand the way people interact with the content contained therein.
Details on the methods of treatment performed by Facebook are available at the following link:
https://www.facebook.com/privacy/explanation
Details on the personal data processed for Insights are available at the following link:
https://www.facebook.com/legal/terms/information_about_page_insights_data
Details on the cookies used by Facebook are available at the following link:
https://www.facebook.com/policies/cookies/
The Data Controller as administrator of the Page and Facebook Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) are co-owner treatment in accordance with article 26 of the GDPR for the treatment of such personal data registered for the events provided through Page Insights (“Insights Data”).
The co-ownership agreement, between the Owner and Facebook, covers the creation of these events and their aggregation in Insights on the Page provided to each administrator.
The legal basis of the processing is the legitimate interest of the Data Owner, art. 6, paragraph 1, letter f), GDPR. Therefore, it is not necessary to acquire your prior consent to the processing.
Condition Lawfulness Treatment:
Legitimate Interest – Art. 6, c.1, let. f. GDPR
Purpose of the treatment:
- Statistical surveys relating to the use of elements contained within the Facebook page administered by the Data Controller.
Nature of the provision:
Mandatory – Failure to provide the requested data will make it impossible for the Data Controller to provide services through the Page published on Facebook.
Personal data retention period:
The data collected will be processed for the time strictly for the realization of the purposes described above as specified in the Facebook policies described above.
Processing methods:
The treatment is carried out with IT means by the Facebook Joint Controller
EXTRA EU DATA TRANSFER
Personal data is processed exclusively within the European Union
RECIPIENTS OF THE TREATMENT
- Responsible for the Treatment: Supplier.
- Subject Designated for Processing (Internal): Collaborators.
RIGHTS OF THE INTERESTED PARTY – COMPLAINT TO THE SUPERVISORY AUTHORITY
In relation to the treatments described in this Information, as an interested party you may, as provided for by European Regulation 679/2016, exercise the rights established by articles 15 to 21 and, in particular:
- right of access – article 15 GDPR: right to obtain confirmation as to whether or not personal data concerning you is being processed and, if so, obtain access to your personal data, including a copy of the same.
- right of rectification – article 16 GDPR: right to obtain, without unjustified delay, the rectification of inaccurate personal data concerning you and/or the integration of incomplete personal data;
- right to cancellation (right to be forgotten) – article 17 GDPR: right to obtain, without unjustified delay, the cancellation of personal data concerning you.
- right to limitation of treatment – article 18 GDPR: right to obtain limitation of treatment, when:
- the interested party disputes the accuracy of the personal data, for the period necessary for the owner to verify the accuracy of such data;
- the processing is unlawful and the interested party opposes the cancellation of personal data and instead requests that their use be limited;
- personal data are necessary for the interested party to ascertain, exercise or defend a right in court;
- the interested party has opposed the processing pursuant to art. 21 GDPR, in the waiting period of the verification regarding the possible prevalence of legitimate reasons of the data controller with respect to those of the interested party.
- right to data portability – article 20 GDPR: right to receive, in a structured format, in common use and readable by an automatic device, the personal data concerning you provided to the Data Controller and the right to transmit them to another data controller without impediments, if the treatment is based on consent and is carried out by automated means. Furthermore, the right to obtain that your personal data be transmitted directly by the Data Controller to another data controller if this is technically feasible;
- right of opposition – article 21 GDPR: right to object, at any time for reasons connected to your particular situation, to the processing of personal data concerning you based on the condition of lawfulness of legitimate interest or the execution of a task of public interest or the exercise of public powers, including profiling, unless there are legitimate reasons for the Data Controller to continue processing which prevail over the interests, rights and freedoms of the data subject or for the assessment, exercise or defense of a right in court judicial; you may object to the processing at any time if the personal data are processed for direct marketing purposes, including profiling, to the extent that it is connected to such direct marketing;
The above rights may be exercised, against the Data Controller, by contacting the references indicated above.
The exercise of your rights as an interested party is free in accordance with article 12 of the GDPR. However, in the case of manifestly unfounded or excessive requests, also due to their repetitiveness, the Data Controller could charge you a reasonable fee, in light of the administrative costs incurred to manage your request, or deny the satisfaction of your request.
- RIGHT OF WITHDRAWAL:
The interested party has the right to withdraw his consent at any time. The withdrawal of consent does not affect the lawfulness of the processing based on the consent before the withdrawal.
- RIGHT TO COMPLAINT:
At any time, the interested party has the right to lodge a complaint with the Guarantor Authority for the protection of personal data, www.garanteprivacy.it