PrivacyENG

This Application collects certain Personal Data from its Users.

This document can be printed using the print command available in the settings of any browser.

Data Controller

Via J. Da Ponte, 52 – 36061 Bassano del Grappa (VI), Italy

Data Controller’s email address: [email protected]

Types of Data Collected

Among the Personal Data collected by this Application, either independently or through third parties, are: email address; first name; last name; Cookies; Usage Data.

Complete details on each type of data collected are provided in the dedicated sections of this privacy policy or through specific information notices displayed prior to data collection.
Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when using this Application.

Unless otherwise specified, all Data requested by this Application is mandatory. Failure to provide such Data may make it impossible for this Application to provide its Service.
In cases where this Application specifically states that certain Data is optional, Users are free not to communicate such Data without consequences for the availability or functioning of the Service.

Users who have doubts about which Data is mandatory are encouraged to contact the Data Controller.

Any use of Cookies or other tracking tools by this Application or by the owners of third-party services used by this Application, unless otherwise specified, is intended to provide the Service requested by the User, in addition to the other purposes described in this document and in the Cookie Policy, if available.

The User assumes responsibility for the Personal Data of third parties obtained, published, or shared through this Application and guarantees that they have the right to communicate or disseminate such Data, releasing the Data Controller from any liability towards third parties.

Method and Place of Processing of the Collected Data

Methods of Processing

The Data Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data.

Processing is carried out using computers and/or IT-enabled tools, following organizational procedures and logic strictly related to the purposes indicated.
In addition to the Data Controller, in some cases, other parties involved in the operation of this Application (administrative, sales, marketing, legal staff, system administrators) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the Data. These parties may also be appointed, if necessary, as Data Processors by the Data Controller.

An updated list of Data Processors may be requested from the Data Controller at any time.

Legal Basis of Processing

The Data Controller processes Personal Data relating to the User if one of the following conditions applies:

the User has given consent for one or more specific purposes.
Note: In some jurisdictions, the Data Controller may be allowed to process Personal Data without the User’s consent or another legal basis listed below until the User objects (“opt-out”) to such processing. This does not apply where the processing of Personal Data is governed by European data protection law;
processing is necessary for the performance of a contract with the User and/or for any pre-contractual obligations;
processing is necessary for compliance with a legal obligation to which the Data Controller is subject;
processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party.

The User may request the Data Controller to clarify the specific legal basis applicable to each processing activity, in particular whether the processing is based on the law, required by a contract, or necessary to enter into a contract.

Place

The Data is processed at the Data Controller’s operating offices and in any other place where the parties involved in the processing are located.
For further information, please contact the Data Controller.

Personal Data of the User may be transferred to a country other than the one in which the User is located.
To obtain further information on the place of processing, the User may refer to the section detailing the processing of Personal Data.

The User has the right to obtain information regarding the legal basis for Data transfers outside the European Union or to an international organization governed by public international law or set up by two or more countries, such as the UN, as well as regarding the security measures adopted by the Data Controller to safeguard the Data.

The User can verify whether any of the transfers described above take place by examining the relevant sections of this document or by contacting the Data Controller using the contact details provided.

Retention Period

The Data is processed and stored for as long as required by the purposes for which it has been collected.

Therefore:

Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User shall be retained until such contract has been fully performed.
Personal Data collected for purposes related to the legitimate interests of the Data Controller shall be retained as long as such interest is fulfilled. The User may obtain further information regarding the legitimate interest pursued by the Data Controller by consulting the relevant sections of this document or by contacting the Data Controller.
When processing is based on the User’s consent, the Data Controller may retain Personal Data for a longer period until such consent is withdrawn.
Furthermore, the Data Controller may be required to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority.

Once the retention period expires, Personal Data shall be deleted. Therefore, the right of access, erasure, rectification, and data portability cannot be exercised after the expiration of the retention period.

Purposes of Processing the Collected Data

User Data is collected to allow the Data Controller to provide the Service, comply with legal obligations, respond to requests or enforcement actions, protect its rights and interests (or those of Users or third parties), detect fraudulent or malicious activity, as well as for the following purposes: Contacting the User and Statistics.

For detailed information on the purposes of processing and the Personal Data involved in each purpose, the User may refer to the section “Detailed Information on the Processing of Personal Data.”

Detailed Information on the Processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

Contacting the User
Statistics

User Rights

Users may exercise certain rights regarding their Data processed by the Data Controller.

In particular, Users have the right to:

withdraw consent at any time. Users may withdraw consent previously given for the processing of their Personal Data;
object to processing of their Data. Users may object to processing where it is carried out on a legal basis other than consent. Further details are provided below;
access their Data. Users have the right to obtain information about Data processed by the Data Controller and to receive a copy of such Data;
verify and request rectification. Users may verify the accuracy of their Data and request it to be updated or corrected;
restrict processing. Under certain conditions, Users may request restriction of the processing of their Data. In such cases, the Data Controller will not process the Data for any purpose other than storage;
obtain erasure of their Data. Under certain conditions, Users may request the deletion of their Personal Data;
receive their Data or have it transferred to another controller. Users have the right to receive their Data in a structured, commonly used, and machine-readable format and, where technically feasible, to have it transmitted to another controller without hindrance;
lodge a complaint. Users may lodge a complaint with the competent data protection authority or take legal action.

Details on the Right to Object

Where Personal Data is processed in the public interest, in the exercise of official authority vested in the Data Controller, or for the purposes of legitimate interests pursued by the Data Controller, Users may object to such processing on grounds relating to their particular situation.

Users are informed that, where their Data is processed for direct marketing purposes, they may object at any time without providing any justification. To determine whether the Data Controller processes Data for direct marketing purposes, Users may refer to the relevant sections of this document.

How to Exercise These Rights

To exercise their rights, Users may submit a request to the contact details of the Data Controller provided in this document.
Requests are processed free of charge and will be handled by the Data Controller as soon as possible, and in any event within one month.

Additional Information on Data Processing

Legal Defense

The User’s Personal Data may be used by the Data Controller in legal proceedings or in the preparatory stages thereof for the defense against misuse of this Application or related Services.

The User declares to be aware that the Data Controller may be required to disclose Personal Data upon request by public authorities.

Specific Notices

Upon request, this Application may provide the User with additional and contextual notices regarding specific Services or the collection and processing of Personal Data.

System Logs and Maintenance

For operation and maintenance purposes, this Application and any third-party services used may collect system logs, which are files that record interactions and may also contain Personal Data, such as the User’s IP address.

Information Not Contained in This Policy

Further information regarding the processing of Personal Data may be requested from the Data Controller at any time using the contact details provided.

“Do Not Track” Requests

This Application does not support “Do Not Track” requests.
To determine whether any third-party services used support such requests, Users are encouraged to review their respective privacy policies.

Changes to This Privacy Policy

The Data Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page and, where technically and legally feasible, within this Application and/or by sending a notice to Users using any contact information available.
Users are therefore advised to review this page frequently, referring to the date of the last modification indicated at the bottom.

If changes affect processing activities whose legal basis is consent, the Data Controller will collect new consent from the User where required.