Information notice on personal data processing pursuant to articles 13-14 of EU Regulation 2016/679
Interested parties: Internet website surfers
GNA srl in its capacity as Data Controller of your personal data, pursuant to and for the purposes of EU Regulation 2016/679 hereinafter "GDPR", hereby informs you that the aforementioned legislation provides for the protection of data subjects with respect to personal data processing and that such processing will be based on principles of lawfulness, fairness, transparency and protection of your privacy and rights.
Your personal data will be processed according to the legislative provisions of the above-mentioned regulation and the confidentiality obligations provided therein.
Purposes and legal basis of data processing
In particular, your data will also be used for the following purposes relating to the implementation of measures connected to contractual or pre-contractual obligations:
- Technical and functional access to the site, no data retention after closing the browser;
- Advanced navigation purposes or customized management of contents;
- Statistical and analytical purposes of navigation and users.
Methods of processing
Your personal data may be processed in the following ways:
- Through electronic calculators using software systems managed by third parties;
- Through electronic calculators using software systems managed or programmed directly;
- Anonymous temporary treatment.
Each processing procedure is carried out in accordance with the methods set forth in Articles 6, 32 of the GDPR and through the adoption of the appropriate security measures provided. Your data will be processed only by staff members expressly authorized by the Data Controller and, in particular, by the following categories of authorized personnel:
- The Management;
- Computer programmers and analysts.
Transmission
Your data shall be transmitted exclusively to outsourcers entrusted with the performance of services necessary for the proper management of the relation and in particular to the following categories of Recipients including all duly appointed Data Controllers:
- Web service provider for managing and maintaining the platform.
Dissemination
Your personal data shall not be disseminated in any way.
Data transfer
Your personal data may also be transferred, limited to the purposes indicated above, to the following countries:
- EU countries
Data retention period
We inform you that, in compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 of the GDPR, the retention period of your personal data shall:
- Not exceed the time necessary to complete the services provided.
Cookie management
If you have any doubts or concerns about the use of cookies, you can always prevent them from being set and read, for example by changing the privacy settings in your browser to block certain types of them.
Since each browser - and often even different versions of it - also differ significantly from each other, if you prefer to set your browser preferences autonomously, please refer to your browser configuration options. Please visit the website www.cookiepedia.co.ukto find out how to deal with the most common browsers.
Advertising companies also allow you to opt out of receiving targeted ads if you wish it. Setting of cookies is still possible but such companies will no longer use and collect some specific data.
For more information and to know how to opt out, please visit the website www.youronlinechoices.eu.
Data Controller
The Data Controller, as provided for by the law, is G.N.A srl (Via Progresso 15, 40064 Ozzano dell'Emilia (Bologna-Italy), VAT no. 00653341206, and you can contact them by e-mail sdalferro@gnasrl.comor phone +39 051 799226.
You have the right to request the data controller to erase (right to be forgotten), limit, update, rectify your data, as well as to data portability, and to object the processing of your personal data. You may exercise all the rights provided for by articles 15, 16, 17, 18, 19, 20, 21, 22 of the GDPR.
EU regulation 2016/679: Articles 15, 16, 17, 18, 19, 20, 21, 22 - Rights of data subject
The data subject shall have the right to obtain from the data controller confirmation as to whether or not their personal data are being processed, even if they have not yet been registered, their communication in an intelligible form as well as to file a complaint with the Supervisory Authority.
The data subject has the right to be informed about:
- The source of personal data;
- Purposes and methods of data processing;
- Criteria applied if processing is carried out with electronic systems;
- The personal details of the Data Controller, Processor and Representative appointed pursuant to article 5, section 2;
- Subjects or categories of subjects to whom the personal data may be transmitted or who may become aware of them in their capacity as designated representative in the territory, data processors or persons in charge of data processing.
The data subject has the right to:
- Update, rectify or integrate the data, if necessary;
- Erasure, anonymization, blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;
- A certification attesting the activities as per letters a) and b) have been notified, as also related to their contents, to the entities to whom the data were transmitted or disseminated, unless such fulfillment proves impossible or involves disproportionate effort compared to the safeguarded right.
- Data portability.
The data subject has the right to object, in all or in part:
- Processing of their personal data for just cause even if they are relevant to data collection;
- Processing of their personal data if the purposes of data processing is to send advertising materials or direct selling material or to conduct market or commercial communication surveys.