IT

Information on the processing of personal data of the website www.eucos.it

Privacy Policy

This information is provided pursuant to art. 13 of EU Regulation 2016/679 of the European Parliament and of the Council of 27.04.2016 concerning the protection of individuals with regard to the processing of personal data, as well as the free circulation of such data (the so-called "General Regulation on the processing of personal data" or "GDPR") and of Legislative Decree 30.06.2003, n. 196, as amended and supplemented by Legislative Decree 10.08.2018, n. 101 ("Code regarding personal data" or "Privacy Code") by:

► EUCOS SRL with registered office in 33010 - Tavagnacco, via Via Galileo Galilei, 3, Tax ID / PI 02450590308, in the person of Casarin Guido, in the capacity of Data Controller (hereinafter "Owner").

The Data Controller, aware of the importance of guaranteeing the security of private information, in compliance with the applicable European and Italian legislation, in compliance with the principle of transparency pursuant to art. 12, GDPR, below provides the following information in order to make the user aware of the characteristics and methods of processing personal data.

1. Object of the treatment
The Data Controller processes the user's personal data that are provided while using the website and / or after registering on the website. In particular, the Data Controller deals with: i. personal identification data (by way of example, name, surname, tax code, VAT number, email, telephone number - hereinafter, "personal data" or even "data") directly provided by you when registering on the website; ii. data not directly provided by you - and in any case acquired within the limits of the provisions of art. 14, paragraph 5, GDPR - the transmission of which is connected to the use of Internet communication protocols (by way of example, access to the page, amount of data transferred, status message after accesses, session ID numbers, IP addresses, URL addresses, etc.).

2. Legal basis and purpose of the processing
Your personal data are processed:

a) without your express consent (see Article 6, letter b, GDPR), for the following purposes:

the. make the website functions usable as a result of user access;

ii. carry out customer relationship activities based on pre-contractual and / or contractual agreements.

In such cases, in fact, the execution of a service supply contract of which the user is a party, or the performance of pre-contractual activities at the request of the user, constitute the legal basis of the processing.

Furthermore, we mean that your personal data may be processed without your express consent (see Article 6, letters b, c, d, e, f), in order to:

the. fulfill the administrative, accounting and tax obligations deriving from the existing contractual relationship;

ii. fulfill the obligations established by law, by a regulation, by community legislation or by an order of the Authority;

iii. safeguard the vital interests of the data subject or of another natural person;

iv. perform tasks in the public interest or connected to the exercise of public authority vested in the Data Controller;

v. pursue a legitimate interest of the Data Controller or third parties, within the limits and under the conditions set out in art. 6, letter f), GDPR;

you. exercise the rights of the owner (by way of example, the right to defense in court).

b) only with your specific and unequivocal consent (see articles 6, letter a, 7, GDPR), for the following purposes:

the. send via email newsletters, commercial communications and / or advertising material on products and / or services offered by the Data Controller.

In this case, in fact, consent constitutes the legal basis of the processing.

3. Nature of the provision of personal data

The provision of data for the purposes referred to in art. 2, letter a), has a necessary nature, as your refusal to provide the requested personal data could make it impossible for the Data Controller to fulfill the legal obligations and / or those deriving from the management of the contractual relationship, preventing, consequently, its formalization and / or execution, as well as compromising the usability and functionality of the website. The provision of data for the purposes referred to in art. 2, letter b), is optional and failure to provide it may make it impossible to receive email newsletters, commercial communications and / or advertising material on products and / or services offered by the Data Controller.

4. Methods of processing

The processing of your personal data is carried out by means of the operations indicated in art. 4, paragraph 1, n. 2), GDPR, or any operation or set of operations, carried out with or without the aid of automated processes and applied to personal data or sets of personal data, such as collection, registration, organization, structuring, storage , adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, cancellation or destruction. The processing of your data will be based on principles of correctness, lawfulness and transparency and can also be carried out through automated methods designed to store, manage and transmit them and will take place using suitable tools, as far as reason and state of the art, to guarantee security. and confidentiality through the use of suitable procedures that avoid the risk of loss, unauthorized access, illicit use and dissemination. Personal data may be stored both on computer media and on paper, as well as on any other type of support deemed most suitable for processing.

5. Data retention period

The Data Controller will process personal data for the time strictly necessary to fulfill the aforementioned purposes, in compliance with the principles of minimization and limitation of conservation pursuant to art. 5, paragraph 1, letters c), e), GDPR.

6. Access to data

The personal data processed by the Data Controller will not be disclosed, that is, it will not be disclosed to indeterminate subjects, in any possible form, including that of making them available or simple consultation. Instead, they may be made accessible to workers and / or collaborators who work for the Data Controller and / or to some external subjects who present sufficient guarantees that they have adopted adequate legal, organizational and technical measures so that the processing satisfies the requirements of the GDPR and guarantees the protection of the rights of the data subject. In particular, your data may be made accessible to: i. employees and collaborators of the Data Controller, in their capacity as internal managers, delegates, designated and / or authorized to process personal data and / or system administrators; ii. third-party companies or other subjects (by way of example, credit institutions, professional firms, consultants, insurance companies, etc.) who carry out outsourced activities on behalf of the Data Controller, in their capacity as external managers.

7. Communication of data

Your data may also be communicated, within the strictly necessary limits, to subjects who, for the purpose of order fulfillment or to process other requests relating to the contractual relationship with the Data Controller, must provide goods and / or perform services or services. Furthermore, the Data Controller may communicate your data to subjects entitled to access it by virtue of the provisions of the law, regulations, community regulations, the judicial authority, as well as to all other subjects to whom the communication is mandatory by law.

8. Data transfer

The management and storage of personal data will take place on the servers of the Data Controller and / or third-party companies appointed and duly appointed as data processors, located within the European Union, or in compliance with the provisions of Articles. 45 et seq., GDPR. The servers are currently located in Italy. The data will not be transferred outside the European Union. In any case, it is understood that, should it be necessary to transfer the location of the servers, in Italy and / or the European Union and / or non-EU countries, this movement will always take place in compliance with Articles. 45 et seq., GDPR. In this case, however, the Joint Controllers ensure from now on that the transfer of non-EU data will take place in compliance with the applicable legal provisions by stipulating, if necessary, agreements that guarantee an adequate level of protection and / or adopting the standard contractual clauses. provided by the European Commission.

9. Navigation data

The computer systems and software procedures used to operate the site may acquire, during their normal activity, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses or domain names of computers and terminals used by users, addresses in URI / URL notation ("Uniform Resource Identifier" and "Uniform Resource Locator") of the requested resources, the time of request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (for example, successful, error, etc.) and other parameters relating to the system operational and computer environment of the user. These data, necessary for the use of web services, are also processed for the purpose of: i. obtain statistical information on the use of services (by way of example, most visited pages, number of visitors by time or day, geographical areas of origin, etc.); ii. check the correct functioning of the services offered. These data are deleted immediately after processing (except for any need to ascertain crimes by the judicial authorities).

10. Cookies

When you use the website of the owner, cookies are stored on your computer. Cookies consist of small text files that are saved on your computer to provide certain information. They are widely used in order to make the website work - or to make it work more efficiently, to improve the user experience, as well as to provide certain information to the website owners. The website of the owner uses cookies that remain on your computer for different times. Some expire at the end of each session and some remain longer so that when you return to the Controller's website you can benefit from a better user experience. Web browsers allow you to exercise some control over cookies through your browser settings. Most browsers allow you to block cookies or block cookies from certain sites. Browsers can also help you delete cookies when you close your browser. However, keep in mind that this could mean that any opt-outs or preferences you have set on a site will be lost. We invite you to consult the technical information relating to your browser for instructions. If you choose to disable the setting of cookies or if you refuse to accept a cookie, some parts of the service may not function properly or may be significantly slower.

11. Rights of the interested party

Pursuant to art. from 15 to 21, GDPR, has the right to: i. obtain confirmation of the existence or not of personal data concerning you, even if not yet registered and their communication in an intelligible form; ii. obtain the indication: a) of the origin of the personal data; b) the purposes and methods of the processing; c) of the logic applied in case of treatment carried out with the aid of electronic instruments; d) the identity of the owner and managers; e) of the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them as appointed representative in the State, delegated, designated or authorized to the processing; iii. obtain: a) updating, rectification, or, when interested, integration of data; b) the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including data which need not be kept for the purposes for which the data were collected or subsequently processed; c) the attestation that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment is finds it impossible or involves the use of means that are manifestly disproportionate to the protected right. Again in accordance with the aforementioned articles from 15 to 21, GDPR, you can exercise the following specific rights: i. right of access; ii. right of rectification; iii. right to cancellation (right to be forgotten), except in the case where the processing is necessary for the Data Controller, for the exercise of the rights to freedom of expression and information, for the fulfillment of a legal obligation or for the execution of a task carried out in the public interest, for archiving purposes in the public interest, for scientific or historical research or for statistical purposes, for the assessment, exercise or defense of a right in court; iv. right to limitation of treatment; v. right to object; you. right to withdraw consent at any time, without prejudice to the lawfulness of the processing based on consent before the withdrawal; vii. right to lodge a complaint with the Guarantor Authority for the protection of personal data.

12. Procedures for exercising rights

You have the right to ask the Data Controller: i. access to data concerning you, their correction or cancellation; ii. the integration of incomplete data; iii. the limitation of the processing; iv. to receive the data in a structured format, commonly used and readable by an automatic device; v. to revoke any consent given in relation to the processing of your personal data at any time and object in whole or in part to the use of the data; you. to lodge a complaint with the Authority, as well as to exercise the other rights recognized to you by the applicable European and Italian legislation. You can exercise your rights at any time by contacting the Data Controller:

► by registered letter with return receipt: EUCOS SRL with registered office in 33010 - Tavagnacco, via Via Galileo Galilei, 3;

► by e-mail: certificata@pec.eucos.it.

13. Minors

Pursuant to art. 8, GDPR, as well as art. 2 quinques, Privacy Code, in cases where consent is required, where the person conferring is under the age of 14 (fourteen), the processing is lawful only if and to the extent that the aforementioned consent is given or authorized by the owner of parental responsibility.

14. Owner, managers, delegates, designated and authorized

The Data Controller is:

► EUCOS SRL with registered office in 33010 - Tavagnacco, via Via Galileo Galilei, 3, CF / PI 02450590308, in the person of Casarin Guido. More information about the managers, delegates, designated and authorized to process personal data can be requested by contacting the Data Controller at the addresses indicated in this statement.

Tavagnacco, 01/01/2020

The Data Controller

EUCOS SRL

EN

Privacy statement concerning handling of personal data on the website www.eucos.it

Privacy Policy

This information is provided under Article 13 of the European Parliament Regulation 2016/679 and of the Council of the 27 April 2016 relating to the protection of individuals with regard to the processing of personal data, and on the free movement of such data (the " General personal data protection Regulation "or" GDPR ") and the legislative Decree nr. 196/2003, as amended and supplemented by the legislative Decree nr. 101/2018 ("Codex regarding the protection of personal data" or the "Privacy Code") by:

► EUCOS SRL having its registered office in 33010 - Tavagnacco, Street Via Galileo Galilei, n.3, Tax Code 02450590308, in the person of Casarin Guido, as Data Controller (hereinafter referred to as “Controller”).

The Controller, aware of the importance of guaranteeing the personal data security, in accordance with the applicable European and Italian legislations, and referring to the principle of transparency laid down in the Article 12 of the GDPR, provides the following information in order to make the customer more aware of the features and the methods of the processing of the personal data.

1. Subject
The Controller processes the user's personal data acquired during the use of the website and / or after the registration on it. The Controller processes in particular: i. personal identifying data not sensitive (for example, name, surname, tax code, VAT number, e-mail, telephone number - hereinafter, “personal data” or “data”) provided when registering to the website; ii. data not directly provided by you - and, in any case, acquired in compliance with Article 14, paragraph 5 of GDPR - which transmission is connected to the use of the internet communication protocols (for example, visits to the page, amount of data transferred , Status message on access, session ID, IP and URL addresses, etc.).

Legal basis and purposes
Your personal data are processed:

a) without your express consent (Article 6 (b) of the GDPR) with the following purposes:

the. to make usable the website functionalities after the user's access;

ii. to perform the customer relationship activities according to the pre-contractual and / or contractual agreements;

In this case, the performance of a contract of which you are a party or the implementation of pre-contractual measures taken in response to your request, provides a legal basis for processing.

Furthermore, your personal data can be processed without your express consent (Article 6 (b), (c), (d), (e), (f)) with the following purposes:

the. to fulfill the administrative, accounting and fiscal obligations arising from the existing contractual relationship;

ii. to comply with obligations of laws, regulations, Community legislation or as ordered by an authority;

iii. to protect the vital interests of the data subject or of another natural person;

iv. to perform the public interest tasks or related to the exercise of official authority by the Controller;

v. to pursue a legitimate interest by the Controller or third party in compliance with Article 6 (f) of the GDPR;

you. to exercise the Controller's rights (including without limitation, his rights of defense).

b) Only with your specific and irrevocable consent (Articles 6 (a) and 7 of the GDPR), with the following purposes:

the. to send by e-mail any newsletter, commercial communication and / or promotional material on products and / or services offered by the Controller.

In that case, your consent provides a legal basis for processing.

2. Provision of personal data

The provision of data for the purposes laid down in Article 2 (A) is necessary, since any refusal to supply the required personal data would imply the unfulfillment of legal and / or contractual obligations, preventing the conclusion and / or the performance of the contract and the website functionality.

The provision of data for the purposes laid down in Article 2 (B) is optional and the non-conferment of data would imply the impossibility to receive email newsletter, commercial communication and / or promotional material on products and / or services offered by the Controller .

3. Methods of data processing

The processing of your personal data is carried out by means of the procedures as mentioned in Article 4, paragraph 1, n. 2 of the GDPR, namely any operation or set of operations which is performed upon any personal data or set of personal data whether or not by automatic means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation , use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction. The processing of your personal data shall be based on the principles of correctness, lawfulness and transparency and may be carried out electronically to store, manage and transfer them; it will be carried out using instruments which are, mutatis mutandis and according to the state of the art, suitable to guarantee the security and the confidentiality and procedures suitable to prevent the risk of loss, the unauthorized access, the illicit use and the dissemination of date. Data is processed using mainly electronic and computerized instruments both on IT and paper supports or any other suitable supports.

4. Retention period of data

The Controller will process your personal data as long as to fulfill the purposes mentioned above, in accordance with the principles of data minimization and limitation of the retention of data laid down in the Article 5, paragraph 1, (c), (e) of the GDPR.

5. Data access

The personal data processed by the Controller won't be disseminated or give access to undetermined people in any form, including their public disclosure or their merely consultation. Your data may, however, be disclosed to the Controller's employees and / or collaborators and to certain external parties providing sufficient guarantees to implement appropriate technical and organizational measures and procedures in such a way that the processing will meet the requirements of the provisions adopted pursuant to the GDPR and ensure the protection of the rights of the data subject.

Your data may be made accessible to: i. the Controller's employees and associate workers in their capacity as internal managers, as delegated, designated and authorized data processors and / or as system administrators; ii. third parties (including but not limited to, credit institutions, professional firms, consultants, insurances companies, etc.) performing outsourcing activities on the Controller's behalf, in their capacity as external managers.

6. Disclosure of data

Your data may be disclosed, within the limits strictly necessary, to third parties which, with the purpose of orders delivery or other demands or provision of service related to or the contractual relationship with the Controller, shall provide goods and / or services on the Controller's behalf. Finally, the data may be made accessible to persons eligible pursuant to any legal provisions, regulations and Community legislations, to the judicial authority and to any subjects to whom communication is obligatory by law.

7. Data transfer

The data will be managed and stored on the Controller's server and / or the third-party companies' server - involved and duly named as data controllers - which are located within the European Union, in accordance with the Article 45 and followings of the GDPR.

The server is currently located in Italy. Your data won't be transferred outside the European Union. It is understood in any case that, if it shall become necessary to move the location of the server to Italy and / or to the European Union and / or to countries outside the European Union, this shall be always take place in accordance with the Article 45 and followings of the GDPR. In such a situation, however, the co-controllers ensure that the data transfer outside the European Union will take place in accordance with the applicable law, also, if necessary, entering into agreements in order to guarantee an adequate data protection level and / or adopting the European Commission's standard contractual clauses.

8. Navigation data

The IT systems and software procedures for the functioning of the website may acquire, during the normal course of operation, some personal data whose transmission is implicit in the communication protocols of the Internet.

This category of data includes IP addresses or domain names of computers used by users who connect to the site, URI / URL addresses ("Uniform Resource Identifier" and "Uniform Resource Locator") of requested resources, the time of the request, the method utilized to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the response from the server (for example successful, error, etc ..) and other parameters related to the operating system and the users. These data, necessary to provide the web services, are processed with the following purposes: i. to obtain statistical information on the service use (for example, the most visited pages, number of hourly and daily visitors, their geographical area, etc.); ii. to control the smooth functioning of the services offered. These data are deleted immediately after processing (except in case of necessary detection of criminal offences by the judicial authority).

9. Cookies

When using the Controller's website, cookies are stored on your computer. Cookies are small text files stored on your computer, which provide us certain information. They are widely used for the functioning or the better functioning of the websites, to improve the user experience and to provide certain information to the owners' website. The Controller's website uses cookies remaining on your computer with different times. Some expire at the end of each session and some remains longer in such a way that when you come back on the website, you could get a better experience as a user. The web browsers allow you to exercise some control over the cookies through the browser settings. Most web browsers allow you to block all cookies or cookies from certain websites. Browsers could help you to delete cookies when closing themselves. However, you should bear in mind that any opt-out or preferences set up in the website could be lost. We encourage you to consult the technical information of your browser for instructions. If you choose to disable cookies or if you refuse to accept a cookie, certain part of the service may not work properly or may work considerably slower.

10. Data subject's rights

Under the Articles from 15 to 21 of the GDPR, you are entitled to exercise the following rights: i. to obtain confirmation of the existence or not of personal data relating to you, although not yet recorded, and the communication of the same in an intelligible form; ii. to obtain information about: a) the source of the personal data; b) the purposes and methods of the processing of data; c) the method applied in electronical processing of data; d) the identification details of the Controller and the managers; e) to whom the personal data may be communicated or who may access them in their capacity as designated representative in the territory of the Country, and delegated, designated and authorized data processors; iii. to obtain: a) updating, rectification or, where interested therein, integration of the data; b) erasure, anonymization or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed; c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected. Again according to the abovementioned Articles from15 to 21 of the GDPR, you are entitled to exercise the following rights: i. the right of access to your personal data; ii. the right of rectification; iii. the right of erasure (the right to be forgotten), except in the case where the data process is necessary for the Controller in order to exercise the rights of freedom of expression and access to information, or to comply with a legal obligation or to perform a task carried out in the public interest, or for storage purposes in the public interest, for scientific or historical or with statistic purposes research, to establish, exercise or defend a right in a legal claim pending before a court; iv. the right of restriction of processing; v. the right to object; you. the right to revoke consent at any time, without prejudging the lawfulness of the processing based on the given consent prior to withdrawal; vii. the right to lodge a complaint with the Data Protection Supervisor.

11. Procedure for the exercise of any right

You have the right to ask to the Controller: i. to access to your personal data, its rectification and removal; ii. the integration of the complete data; iii. the limitation of the processing; iv. to receive your data in a structured, commonly used and automatic device readable format; v. to withdraw at any time the given consent to your data processing and to object in part or fully to the use of your data; you. to lodge a complaint with the Supervisor Authority as well as to exercise your rights pursuant to the applicable European and Italian law.

You may, at any time, exercise your rights sending:

► a registered letter to EUCOS SRL having its registered office in 33010 - Tavagnacco, Street Via Galileo Galilei, 3;

► sending an e-mail to certificata@pec.eucos.it.

12. Minors

Under Article 8 of the GDPR and Article 2- quinques of the Privacy Code, in cases where consent is necessary, where the data subject is a minor under 14 years old (fourteen), the data processing is lawful only if and to the extent that the consent is given or authorized by the child's parent or custodian.

13. Controller, data processors and persons in charge of the processing

The data Controller is ► EUCOS SRL having its registered office in 33010 - Tavagnacco, Street Via Galileo Galilei, n.3, Tax Code 02450590308, in the person of Casarin Guido. To get more information about the managers and the delegated, designated and authorized data processors, you may contact the Controller at the above addresses.

Tavagnacco, 01/01/2020

Controller's signature

EUCOS SRL