This information notice is provided according to Article 13 of EU Regulation 2016\/679, General Data Protection Regulation (\u201cGDPR<\/b>\u201d) in relation to the processing of personal data collected within or through the website https:\/\/www.disaronno.com<\/span><\/a> and any subdomain (the \u201cWebsite<\/b>\u201d), owned and managed by ILLVA Saronno S.p.A<\/b>..<\/span><\/p>\n Third-party websites that are possibly linked to in this Website are regulated by a separate privacy policy and they are in no way linked to this information notice. <\/p>\n ILLVA SARONNO S.p.A. <\/p>\n In addition to the provisions set forth in other pages (with particular reference to the \u201cCookie\u201d), by the Website and the use of the respective features and\/or subscription to services offered therein, the following data can be collected and processed:<\/span><\/p>\n The Website does not contain any information or feature or service directly offered to users of minor age. <\/span><\/p>\n Minors shall not provide information or personal data without the consent of those having parental responsibility. <\/span><\/p>\n Users of minor age are invited not to provide any personal data without prior authorization of their parents or by those exercising parental responsibility. In case the Company will be notified that personal data have been provided by a minor, the Company will immediately delete said data or request appropriate consent by the parents (or by the holder of parental responsibility), reserving the right to prevent any access to the services offered on the Website to any user who hided the minor age or who communicated personal data without consent of the parents (or of the holder of parental responsibility).<\/span><\/p>\n <\/p>\n The processing of personal data is exclusively carried out for the following purposes:<\/span><\/p>\n (i) Fulfilment of contractual or pre-contractual obligations<\/b> (art. 6 lett. B) GDPR) \u2013 for the execution of services or for providing information requested through the Website and\/or through electronic forms herein posted<\/span> and for fulfilling all obligations arising out of pre-contractual or contractual relationships with the user and for managing interactions with the users. It is included the newsletter service (if any) to which the user spontaneously subscribes;<\/span><\/p>\n (ii) Fulfilment<\/b>\u00a0of legal obligations <\/b>(art. 6 lett. c) GDPR)- for the fulfilment of obligations set forth by national and\/or European laws or regulations in force, included the Tax area, as well as the fulfilment of orders of the competent entities or authorities;<\/span><\/p>\n (iii) On the basis of a legitimate interest of the Company<\/b> (art. 6 lett. d) GDPR) for the legal defence of a right or interest before any competent authority or entity (even with respect to cybercrime).<\/span><\/p>\n <\/p>\n The provision of data for the purposes set out in paragraphs (i) (fulfilment of contractual obligations) above is purely optional. However, since the processing of data for such purposes is necessary in order to allow using the online services offered through the Website (including the newsletter, if any), the missing, partial or incorrect provision of data will prevent, as the case maybe, from using the services offered online and, in general, the handling of users\u2019 specific requests.<\/span><\/p>\n <\/p>\n Data can be communicated to the following categories of subjects (\u201crecipients\u201d):<\/span><\/p>\n In addition to the above, in order to pursue the mentioned purposes, personal data may be disclosed to Company\u2019s staff that has been expressly authorized (in particular belonging to the IT and administration offices) and\/or to third parties operating on behalf of the Company, such as, by way of example and not limited to:<\/span><\/p>\n that will process the personal data in their quality as data processors on behalf of the Company or as independent data controller, as the case maybe and on the basis of the specific relationships with the Company.<\/span><\/p>\n In case of transfer of personal data in countries outside the European Union, conditions and requirements set out in the GDPR will be duly complied with. The data will be transferred, therefore, on the basis of requirements provided by GDPR, such as – for example – the adoption of Standard Contractual Clauses approved by the European Commission or by using third parties having operating in countries for which the European Commission issued an adequacy decision.<\/span><\/p>\n <\/p>\n Personal data will be retained for the entire duration of the contractual relationship and, subsequently, for the period of time allowed by applicable law on statutory or time limitation periods (also with respect to administrative and tax purposes) and, in general, for the time necessary for the exercise of Company\u2019s rights in relation to claims raised by public authorities, public and private entities and subjects.<\/span><\/p>\n <\/p>\n As a data subject, the user may ask to the Data Controller to exercise the following rights:<\/span><\/p>\n The user may ask whether or not his\/her personal data are processed and, if so, have access to that data and to specific information on the processing, such as information on the purposes, on the categories of personal data concerned, on the existence of other rights as set out below. The user may also request copy of his\/her personal data<\/span><\/p>\n The user has the right to request and to have his\/her data rectified in case of inaccuracy or incompleteness<\/span><\/p>\n The user has the right to have his\/her data erased without undue delay if, inter alia, (i) such data are no longer necessary in relation to the initial purposes for which they were collected, (ii) he\/she objects to the processing of his\/her personal data (as indicated below) and there is no other legitimate and prevailing reason for processing, (iii) user\u2019s data are unlawfully processed, (iv) data shall be deleted for the fulfilment of a legal obligation. This right does not apply if the processing is necessary for, among other purposes, the performance of a legal obligation or for the establishment, exercise or defence of legal claims before the court.<\/span><\/p>\n The user has the right to obtain the restriction of processing, meaning that the processing activity will be suspended for a period of time. The circumstances under which this right can be exercised include cases in which the accuracy of personal data was contested but a period of time is necessary to verify the accuracy of such data. <\/span><\/p>\n Users have the right to object at any time, for reasons related to their particular situation, to the processing based on a legitimate interest of the Data Controller, unless the Data Controller can demonstrate legitimate and mandatory grounds for processing that prevail on the interests, rights and fundamental freedoms of the data subject or that the data are necessary for the establishment, exercise or defence of legal claims before the court.<\/span><\/p>\n In relation to the cases of (amongst the others) processing carried out by automated means, processing based on consent or based on the fulfilment of contractual obligations, the user has the right to request and receive personal data in a structured, commonly used and machine-readable format and to transmit the data to another data controller. He\/she has also the right to request the direct transmission from a data controller to another data controller, where technically feasible, without prejudice to the possibility to obtain the erasure of the data, as indicated above.<\/span><\/p>\n The user has the right to present a claim before the Supervisory Authority (http:\/\/www.garanteprivacy.it\/<\/span><\/a>) in the cases referred to by Article 77, GDPR, and then when the user believes that the data are processed infringing the law.<\/span><\/p>\n
\n<\/span>This information notice applies to all users interacting with the pages of the Website.
\n<\/span>All users are invited to read this information carefully.<\/span><\/p>\nDATA CONTROLLER<\/b><\/span><\/h2>\n
\n<\/b><\/span>Via Archimede, 243
\n<\/span>21047 Saronno (VA)
\n<\/span>VAT no. 02649100126
\n<\/span>(\u201cCompany\u201d <\/b>or \u201cData Controller<\/b>\u201d)<\/span><\/p>\nPERSONAL <\/b><\/span>DATA PROCESSED<\/b><\/span><\/h2>\n
\n
\n
LEGAL BASIS AND PURPOSE OF PROCESSING<\/b><\/span><\/h2>\n
CONSEQUENCES OF THE REFUSAL TO PROVIDE DATA<\/b><\/span><\/h2>\n
DATA COMMUNICATION<\/b><\/span><\/h2>\n
\n
\n
DATA RETENTION<\/b><\/span><\/h2>\n
RIGHTS OF DATA SUBJECTS<\/b><\/span><\/h2>\n
Right to access<\/span><\/h3>\n
Right to rectification<\/span><\/h3>\n
Right to erasure<\/span><\/h3>\n
Right to restriction of processing<\/span><\/h3>\n
Right to object<\/span><\/h3>\n
Right to data portability<\/span><\/h3>\n