Privacy Policy
1. PURPOSES AND METHODS OF PROCESSING
Any data acquired, always and in any case in compliance with current legislation, will be processed for institutional purposes, connected and/or instrumental to providing access to the site ww.zaccantispa.it including any additional services requested by the user, in particular:
a) to carry out a service (such as accessing the site with all its features). To this end, the data may be disclosed to third parties whose collaboration ZACCANTI S.p.A. may and/or must make use of for the performance of the aforementioned purposes. However, it is possible to consult the site without providing any personal data, even if some functions may not be available and some services may not be provided, as set out and specified, as the case may be, in this privacy policy;
b) to perform, in general, legal obligations;
c) per esigenze di tipo operativo e gestionale interne a ZACCANTI S.p.A. e inerenti ai servizi e/o ai prodotti offerti.c) for operational and management needs within ZACCANTI S.p.A. and related to the services and/or products offered.
In the event of explicit and optional consent, the data will be processed for marketing and/or commercial promotion purposes, including the sending of printed and/or digital advertising material, relating to the services and/or products offered by ZACCANTI S.p.A. Any profiling activity is excluded.
The data will be processed lawfully and correctly and used only for the purposes referred to in the preceding paragraphs, for more details see also art. 5. The data will be processed using suitable tools to ensure security and confidentiality and may be carried out with paper and/or automated tools to store, manage and transmit the data. The data will be kept for the times prescribed by law. The interested parties whose data will be processed will have the opportunity to exercise the right to be forgotten as provided for in Article 17 of the GDPR. 2016/679.
2. NATURE OF DATA PROVISION AND CONSEQUENCES OF REFUSAL TO PROVIDE THEM
The granting of consent to the processing of data for the purposes referred to in art. 1, paragraphs 1 and 2, is mandatory only for the purposes indicated in relation to each service, subject to information provided in the manner established by law. In other words, the consequences of any refusal to provide or give consent are always explicit and are related to each service provided: for example, any refusal to process it may prevent browsing of the website with all its features (in the case of cookies), the receipt of the newsletter (in the case of the newsletter service) or the receipt of advertising material (in the case of art. 1 paragraph 2). Therefore, the user is informed in the manner appropriate to each specific case, but in any case may browse the website even denying consent to the processing of personal data, where required, in which case, certain features or characteristics may be disabled.
3. DATA CONTROLLER
A seguito della consultazione di questo sito e della fruizione di uno o più servizi possono essere trattati dati relativi a persone identificate o identificabili. Il titolare del loro trattamento è ZACCANTI S.p.A., con sede legale in Bologna, via Benedetto Marcello n. 1, CAP 40141 Cod. Fisc. e Iscrizione Reg. Imp. Bo 08864080158 – R.E.A. 327027 – P. IVA 04156880371.
4. DATA PROCESSING LOCATION
The processing operations connected with the web services referred to in ww.zaccantispa.it are carried out at the registered office of ZACCANTI S.p.A., with the exception of explicit exceptions, and are only handled by ZACCANTI S.p.A. technical personnel in charge of processing. The site hosting service is provided by DIGIBYTE Srl., Via Marziale, 9 – 40128 Bologna,Email: digibyte@digibyte.it, which guarantees, as far as its competence is concerned, the compliance of ZACCANTI S.p.A. with current legislation. The data will be processed and stored within EU countries. The data acquired via the web, or otherwise resulting from web services, may be communicated to technological and instrumental partners that the Owner uses for the provision of services requested by users/visitors.
5. TYPES OF DATA PROCESSED/SPECIFIC TREATMENTS
Depending on the service rendered, personal data of different types may be processed. The specification for each type of processing is set out in this Article. In particular, each interested party is invited to read art. 7 (“Rights for data subjects”).
5.1 Browsing Data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the navigation of the websites. This information is not collected to be associated with identified data subjects but, by its very nature, it could enable identification of the users through the processing and matching of data held by third parties. These include IP addresses or domain names of computers used by users who connect to the site, the URL addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server and other parameters relating to the operating system and the platform used by the user. These data are only used to obtain anonymous statistical information on the use of the website and to control its correct functioning and are immediately deleted after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the website: except for this eventuality, at present the data on web contacts do not persist for more than seven days. With regard to cookies, please refer to par. 5.3.
5.2.1 Data supplied voluntarily by the interested party (communications)
The optional, explicit and voluntary sending of communications by means of contact forms on the site or by e-mail to the addresses indicated on this site entails the subsequent acquisition of the data communicated by the sender, including his e-mail address, any Curriculum Vitae and consent to receive any messages in response to their requests. Requests can also be made by telephone at the numbers indicated on the site. The personal data thus provided are used only to meet or respond to requests transmitted and are disclosed to third parties only where this is necessary for that purpose.
5.2.2 Data supplied voluntarily by the interested party (to receive communications for marketing and/or commercial promotion purposes)
Each interested party may voluntarily provide their personal data to ZACCANTI S.p.A. in order to receive commercial or promotional communications, however called, with both digital and paper communications. In every communication the person concerned is reminded that they can revoke their consent at any time and without formality. The data are deleted at the request of the person concerned.
5.3.1 Cookie
The processing operations connected with the cookies of the web services referred to in the website ww.zaccantispa.it are carried out at the registered office of ZACCANTI S.p.A., with the exception of explicit exceptions, and are only handled by Struchel S.p.A. technical personnel in charge of processing. Struchel S.a.s , Via Paolo Fabbri n° 1/4, 40138, Bologna, Email: info@struchel.com , guarantees ZACCANTI S.p.A., to the extent of its competence, the observance of the regulations in force. The data will be processed and stored within EU countries.
6. CHANGES TO PRIVACY POLICY
This Privacy Policy may be modified, also as a result of legislative or regulatory changes, technological developments and the provision of new services or changes to those already provided. We therefore invite all interested parties to periodically review the Privacy Policy of ZACCANTI S.p.A.
7. RIGHTS OF THOSE CONCERNED
An identifiable person (or person concerned) is one who can be identified, directly or indirectly, with particular reference to an identifier such as name, an identification number, location data, an online identifier or one or more elements characteristic of his physical, physiological, genetic, psychic, economic, cultural or social identity (art. 4, paragraph 1, GDPR. 2016/679). Each interested party has the right, at any time, to obtain confirmation of the existence or otherwise of such data and to know its content and origin, verify its accuracy or request its integration, updating or rectification (article 12 GDPR 2016/679). According to the same article, you have the right to request cancellation, transformation into anonymous form or blocking of data processed in violation of the law, as well as to oppose in any case, for legitimate reasons, their processing. At the bottom of this privacy policy you will find the entire art. 12 GDPR 2016/679.
Requests should be addressed:
- by e-mail, to the address: info@zaccantispa.it ; or
- by mail, to ZACCANTI S.p.A., via B. Marker No 1, 40141, BOLOGNA.
Article 12
Transparent information, communications and modalities for the exercise of the rights of the data subject.
The controller shall take appropriate measures to provide the data subject with all the information referred to in Articles 13 and 14 and the communications referred to in Articles 15 to 22 and Article 34 relating to the processing in a concise, transparent, intelligible and easily accessible form, in simple and clear language, in particular in the case of information specifically intended for minors. The information shall be provided in writing or by other means, including, where appropriate, by electronic means. If requested by the data subject, the information may be provided orally, provided that proof of the identity of the data subject can be furnished by other means.
The data controller shall facilitate the exercise of the rights of the data subject in accordance with Articles 15 to 22. In the cases referred to in Article 11(2), the controller may not refuse to comply with the data subject’s request to exercise his rights under Articles 15 to 22, unless the controller proves that he is unable to identify the data subject. The data controller shall provide the data subject with information on the action taken in respect of a request pursuant to Articles 15 to 22 without undue delay and, in any event, at the latest within one month of receipt of the request. This period may be extended by two months, if necessary, taking into account the complexity and the number of requests. The data controller shall inform the data subject of such extension, and of the reasons for the delay, within one month of receipt of the request. If the data subject submits the request by electronic means, the information shall, where possible, be provided by electronic means, unless otherwise specified by the data subject.
If the controller does not comply with the data subject’s request, they shall inform the data subject without delay, and at the latest within one month of receipt of the request, of the reasons for non-compliance and of the possibility of lodging a complaint with a supervisory authority and of seeking a judicial remedy. The information provided pursuant to Articles 13 and 14 and any communications and actions taken pursuant to Articles 15 to 22 and Article 34 shall be free of charge. If the data subject’s requests are manifestly unfounded or excessive, in particular because of their repetitive nature, the data controller may:
a) charge a reasonable fee taking into account the administrative costs of providing the information or communication or taking the action requested; or
b) refuse to comply with the request.
The burden of proving that the request is manifestly unfounded or excessive shall lie with the data controller.
Without prejudice to Article 11, where the controller has reasonable doubts as to the identity of the natural person making the request referred to in Articles 15 to 21, he may request further information necessary to confirm the identity of the data subject.
The information to be provided to data subjects in accordance with Articles 13 and 14 may be provided in combination with standardised icons in order to give an overview of the intended processing in an easily visible, intelligible and clearly legible manner. If presented electronically, the icons are readable by an automatic device.
The Commission shall be empowered to adopt delegated acts in accordance with Article 92 concerning the establishment of the information to be presented in the form of an icon and the procedures for providing standardised icons.
