PRIVACY POLICY

(INFORMATION ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ART. 13 OF EU REGULATION 679/2016)
COLNAGHI ALLESTIMENTI STANDS SRL, deals with the sale of customizable promotional gadgets. Users can request a quote through specific request forms, or send an e-mail to request general information on products and services. COLNAGHI ALLESTIMENTI STANDS SRL, as Data Controller pursuant to EU Regulation 679/2016, will process your data based on the principles of correctness, lawfulness, transparency, purpose and conservation limitation, minimization and accuracy, integrity and confidentiality, as well as the principle of responsibility pursuant to art. 5 of the Regulation. Your personal data will therefore be processed in accordance with the legislative provisions of the Regulation and the confidentiality obligations therein.

This Privacy Policy:

means the site www.articolipromozionali.eu (henceforth: "Site"); is made pursuant to art. 13 of the Regulation to those who interact with the site. By the processing of personal data we mean any operation or set of operations, carried out with or without the aid of automated processes and applied to personal data or sets of personal data, such as the collection, registration, organization, structuring, storage , adaptation or modification, extraction, consultation, use, communication by transmission, diffusion or any other form of making available, comparison or interconnection, limitation, cancellation or destruction.
We inform you that the personal data being processed may consist of textual information, photographic or video images and any other information suitable for making the interested party identified or identifiable, depending on the type of service requested.

1. DATA CONTROLLER AND DATA PROTECTION OFFICER

The owner of the processing of your personal data is COLNAGHI ALLESTIMENTI STANDS Srl - Via Belvedere, 2- 20842 - Besana Brianza - MI. VAT, Tax Code 00771150968

The Data Controller is equipped with a Data Protection Officer or "DPO". The DPO is available at the e-mail address referred to in the "Contacts" section for any information concerning the processing of your personal data and the exercise of your rights, as well as deriving from the Regulation.

2. PERSONAL DATA SUBJECT TO TREATMENT

We inform you that the personal data being processed may consist of an identification such as the name, an identification number, data relating to the location, an online identification or one or more characteristic elements of your physical, physiological, psychic, economic identity , cultural or social.

The personal data processed are as follows:

to. Navigation data

During their normal operation, the IT systems and software procedures used to operate the Platform acquire some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the Site, the addresses in URI (Uniform Resource Identifier) ​​notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Platform to check its correct functioning, to identify anomalies and / or abuses, and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the Data Controller or third parties.

b. Data voluntarily provided by you

Your data is collected by the Data Controller by filling in forms (hereafter referred to as "forms") proposed online on the Platform.

The forms require different types of mandatory data according to the provision of the requested service and the related legal obligations. This is general data for requesting an offer or general information.

This Privacy Policy is also understood to be made for the processing of any further data voluntarily provided by you through the site. In this regard, we invite you not to enter information in the forms that may fall within the category of particular categories of personal data referred to in art. 9 of the Regulation, unless expressly requested of it (see letter and below, "particular categories of data").

c. Third party data provided voluntarily by you

In the use of particular services, the processing of personal data of third parties, communicated by you to the Data Controller, may occur. With respect to these hypotheses, you act as an independent data controller, assuming all the obligations and responsibilities of the law. In this sense, you confer on the point the widest indemnity with respect to any dispute, claim, request for compensation for damage from treatment, etc. that it should reach the Data Controller from third parties, whose personal data have been processed through your use of the site services in violation of the applicable data protection rules. In any case, if you provide or otherwise process personal data of third parties in the use of the site, it guarantees from now - assuming any related responsibility - that this particular hypothesis of treatment is based on the prior acquisition - by you - of consent the third party to the processing of information concerning him.

d. Data processed in interaction with social networks

Your registration on the Platform may also take place through the transmission of the related data by another data controller (Eg Facebook, Google, etc.). For example, by simply clicking on the "Register with Facebook" button, the latter will automatically send some of your data, specified in the appropriate "pop-up" window, and there will be no need to fill in other forms on your part.
< br> is. Special categories of data

The Data Controller may process particular categories of data where such processing is necessary to fulfill the obligations and exercise the rights in the field of labor law (for example in the case of characteristics that affect the methods of carrying out the work activity or that constitute an essential requirement and decisive for the performance of the service).

f. Cookies
Information on the cookies served by the Site is available at the following link: http://colnaghiallestimenti.it/policy.asp

3. PURPOSE OF THE TREATMENT

Your personal data will be processed, with your consent where necessary, for the following purposes, where applicable:

3.1. to allow the provision of the services requested / offered on the site; among these services, some necessarily involve data processing for profiling purposes, as these are personalized services.

3.2. meet specific requests addressed to the Owner;

3.3. fulfill the obligations established by current labor legislation and meet requests from authorities (e.g. sending all strategic information to the authorities for an effective functioning of the labor market);

3.4. carry out direct marketing activities, except for your refusal expressed during registration or subsequent opposition by simple communication to the Data Controller.

3.5. for statistical purposes, without it being possible to trace your identity.

Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.

4. LEGAL BASIS AND OBLIGATORY OR OPTIONAL NATURE OF THE PROCESSING

The legal basis for the processing of personal data for the purposes referred to in sections 3.1 and 3.2 is art. 6 (1) (b) of the Regulation ([...] processing is necessary for the execution of a contract of which the interested party is a part or for the execution of pre-contractual measures adopted at the request of the same), since the treatments are necessary to the provision of services. With particular reference to the processing concerning your data belonging to particular categories and linked to the provision of the services referred to in section 3.1, it has a legal basis in art. 9 (2) (b) of the Regulation ([...] the processing is necessary to fulfill the obligations and exercise the specific rights of the data controller or the interested party in the field of labor law and social security and social protection, to the extent in which it is authorized by Union or Member State law or by a collective agreement under the law of the Member States, in the presence of appropriate guarantees for the fundamental rights and interests of the data subject); as regards the processing of your data for profiling purposes related to the provision of services, as per section 3.1, this treatment has its legal basis in art. 22 (2) (a) insofar as it is necessary for the conclusion or execution of a contract between the data subject and a data controller.

The purpose referred to in section 3.3 represents a legitimate processing of personal data pursuant to art. 6 (1) (c) of the Regulation ([...] processing is necessary to fulfill a legal obligation to which the data controller is subject). Once the personal data have been provided, in fact, the processing is indeed necessary to fulfill the legal obligations to which the Company is subject.

The provision of personal data for the purposes described above is optional, but any failure to provide it would make it impossible for the Company to provide the requested services.

The treatments carried out for the marketing purposes described in section 3.4 are based on art. 6 (1) (f) ([…] processing is necessary for the pursuit of the legitimate interest of the data controller or third parties, provided that the interests or fundamental rights and freedoms of the data subject that require the protection of personal data, in particular if the person concerned is a minor). The legitimate interest of the Company is based on the existence of a relevant and appropriate relationship between the Data Controller and the interested party and on the latter's reasonable expectations of receiving information aimed at satisfying their requests / job offers (“It can be considered legitimate interest to process personal data for direct marketing purposes "See Recital 47 of the Regulation).

The provision of your personal data for the purposes referred to in section 3.4 is entirely optional and does not affect the use of the services. You can therefore deny the relative authorization already in the registration phase or object later by simple communication to be sent to the Data Controller at the addresses indicated in the "Contacts" section of this information or, where available, through the "settings" of the Platform. It should be noted that if the Data Controller uses, for the purpose of direct sale of his services, the e-mail coordinates provided by the interested party in the context of the provision of a service, he may not request the consent of the interested party, provided that it is of similar services and the data subject, adequately informed, does not refuse such use, initially or on the occasion of subsequent communications. Finally, it should be noted that the treatment referred to in section 3.5 is not carried out on personal data and therefore can be freely carried out by the owner.

5. RECIPIENTS OF PERSONAL DATA

Your personal data may be shared, for the purposes referred to in section 3 of this Privacy Policy, with:

5.1. subjects, entities or authorities to whom it is mandatory to communicate your personal data pursuant to legal provisions or orders from the authorities;

5.2. i) persons, companies or professional firms that provide assistance and advice to the Data Controller in accounting, administrative, legal, tax and financial matters; ii) subjects delegated to carry out technical maintenance activities; iii) credit institutions, insurance companies and brokers; iv) parent companies, subsidiaries and associates of the Company, limited to the pursuit of administrative-contractable purposes connected with the performance of organizational, administrative, financial and accounting activities;

5.3. persons authorized by the Company to process personal data necessary to carry out activities strictly related to the provision of services, who are committed to confidentiality or have an adequate legal obligation of confidentiality;

6. TRANSFERS OF PERSONAL DATA

Some of your personal data may be shared with recipients outside the European Economic Area. The Data Controller ensures that the processing of your personal data by these recipients takes place in compliance with the Regulation. Indeed, transfers can be based on an adequacy decision or on the Standard Contractual Clauses approved by the European Commission pursuant to the provisions of articles 45 and 46 of the Regulation. More information is available from the DPO.

7. STORAGE OF PERSONAL DATA

Personal data processed for the purposes referred to in sections 3.1 and 3.2 will be kept for the time necessary to achieve those same purposes.

Personal data processed for the purposes referred to in section 3.3 will be kept until the time provided for by the specific obligation or applicable law.

For the purposes referred to in section 3.4, your personal data - if you have not expressed your refusal during registration - will be processed until your possible opposition. In any case, the possibility remains for the owner to keep your personal data for the period of time foreseen and allowed by Italian law to protect his interests (Art. 2946 of the Italian Civil Code and following). More information is available from the DPO.

8. DATA SUBJECT'S RIGHTS

Pursuant to articles 15 and following of the Regulation, you have the right to request the owner, at any time, access to your personal data, rectification or cancellation of the same, or to oppose their treatment pursuant to art. 21 of the Regulation. You also have the right to request the limitation of treatment in the cases provided for by art. 18 of the Regulation, as well as obtaining the data concerning you in a structured format, commonly used and readable by an automatic device, in the cases provided for by art. 20 of the Regulation.

If the treatment is based on articles 6 (1) (a) and 9 (2) (a), you will have the right to withdraw consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation.

Requests should be sent in writing to the Data Controller at the addresses indicated in the "Contacts" section of this statement.

If the communication of your personal data is a legal or contractual obligation or a necessary requirement for the conclusion of a contract, you have the obligation to provide your personal data. Failure to communicate such data by you will make it impossible for the Data Controller to follow up on your request and to provide the services.

In any case, you always have the right to lodge a complaint with the competent supervisory authority (Guarantor for the protection of personal data), pursuant to art. 77 of the Regulation, if you believe that the processing of your data is contrary to the legislation in force.

9. CHANGES

The Company reserves the right to modify or simply update the content of this Privacy Policy, in part or completely, also due to changes in the applicable legislation. These changes will be binding as soon as they are published on the Site. If you continue to access or use the service after such publication, it is assumed that you have expressly accepted these changes.

The Company therefore invites you to regularly visit this section to get acquainted with the most recent and updated version of the Privacy Policy in order to always be updated on the data collected and the use made of it. COLNAGHI ALLESTIMENTI STANDS SRL

10. CONTACTS

To exercise the rights referred to in this statement, you may write to the Data Controller: COLNAGHI ALLESTIMENTI STANDS Srl - Via Belvedere, 2- 20842 - Besana Brianza - MI VAT, Tax Code 00771150968

For any information concerning the processing of your personal data and the exercise of your rights, you can write to the DPO at the following E-mail address: colnaghi@colnaghiallestimenti.it.