Privacy Policy
Information pursuant to Art. 13 of Regulation (EU) 2016/679 - Privacy Policy
With this document (‘Information Notice’) the Data Controller, as defined below, wishes to inform you of the purposes and methods of the processing of your personal data and of your rights under Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (‘GDPR’). This Policy may be supplemented by the Data Controller where any additional services requested by you involve further processing.
Data Controller
EFFE TRE SRL with registered office in Via Mutilati ed Invalidi del Lavoro, 5 25045 Castegnato (Brescia), Italy; Email: dataprotection@effetreitaly.com; VAT/CF: 04473770982;
Types of data processed
The processing activities carried out are aimed at acquiring the following personal data:
- Behavioural data: Navigation logs;
- Common data: Personal data.
Categories of data subjects
The processing activities performed are aimed at the following categories of data subjects: Web users.
Purposes of the processing and condition for lawful processing
1. SITE - Navigation Data
To obtain anonymous statistical information on use, to check the correct functioning of the site, to ascertain responsibility in the event of hypothetical computer crimes against the Data Controller.
Condition of lawfulness of processing: Legitimate interest - Art. 6, c.1, let. f. GDPR
Purposes of processing: 1) Analysis of data in order to carry out the development and maintenance of the website; 2) Ascertainment of liability in the event of potential computer crimes to the detriment of the site and/or the Data Subjects; 3) Statistical, anonymous analysis of site use.
Nature of conferment:
Compulsory - Failure to provide data will make it impossible for the company to provide the web service provided.
Personal data retention period:
Data are retained for 30 days.
Method of Processing:
The processing is carried out using IT tools.
2. SITE - Requests from the Site
Requests made by data subjects via the Data Controller's website.
Condition of lawfulness of Processing: Execution of Contract - Art. 6, c.1, let. b. GDPR
Purpose of processing: 1) Sending of requests via web platform tools.
Nature of conferment:
Optional - Failure to provide data will make it impossible for the Data Controller to respond to the data subject's requests.
Personal data retention period:
Processing of the request.
Method of Processing:
The processing is carried out by computerised means.
3. IT Systems Management
Your personal data will be used, for the legitimate interest of the Data Controller, for the management of IT systems.
Condition of lawfulness of processing: Legitimate Interest - Art. 6, c.1, let. f. GDPR
Purposes of processing: 1) Management of IT systems, including infrastructure management, business continuity and IT security.
Nature of conferment:
Mandatory - Opposition to the processing may result in the Data Controller being unable to perform the contract with the Data Subject/Customer.
Personal data storage period:
Your personal information is kept for the duration of the contractual relationship and after the end of the contractual relationship for the period of time necessary to ensure the exercise or defence of rights.
Method of Processing:
The processing is carried out by computerised means.
4. Google Fonts
Your personal data will be used to improve the usability of the Controller's website contents by using the Google Fonts service. All Google fonts allow pages to load faster, they are automatically optimised for the web resulting in a reduction of the volume of data transmitted to the user's clients and improving the quality of use of the content of the Owner's website or applications. The use of Google Fonts is safe and prevents distortion of the display of text on the Owner's site or application Google Fonts supports all popular browsers and works reliably on most modern mobile operating systems.
Condition of lawfulness of processing: Legitimate interest - Art. 6, c.1, let. f. GDPR
Purpose of processing: 1) Use of CSS files, which determine the style and quality of the content of the site/app, provided by the Google Font service.
Nature of conferment:
Mandatory - Opposition to the processing may result in the Data Controller being unable to ensure the best consultation of the content on the site/app.
Personal data storage period:
The manner in which the data is collected and stored can be found at https://policies.google.com/privacy
Methods of Processing:
The Google Font service is provided by Google in its capacity of Autonomous Controller. The use of Google Fonts does not require registration or authentication with Google systems. No cookies are stored in the browser. The files (CSS, fonts) are provided to the browser via Google's domains fonts.googleapis.com and fonts.gstatic.com. The CSS and fonts provided are completely separate from all other Google services. For further information, please refer to Google's privacy policy https://policies.google.com/privacy.
Data transfer outside the EU
Personal data is processed exclusively within the European Union
Recipients of the processing
- Data Processor: Effe Tre (RdT); Construction, assistance, programming of robotic systems; Vacuum system; Presence terminal supplier; Server maintenance; Virtual switchboard;
- Designated Person Responsible for Processing: Employee;
Rights of the data subject - complaint to the supervisory authority
In relation to the processing operations described in this Policy, as a data subject you may, under the conditions provided by the GDPR, exercise the rights set out in Articles 15 to 22 of the GDPR and, in particular, the following rights
- right of access: right to obtain confirmation as to whether or not personal data relating to you are being processed and, if so, to obtain access to your personal data;
- right of rectification: the right to obtain, without undue delay, the rectification of inaccurate personal data concerning you and/or the integration of incomplete personal data
- the right to erasure (right to be forgotten): the right to obtain, without undue delay, the deletion of personal data concerning you. The right to erasure does not apply to the extent that the processing is necessary for the performance of a legal obligation or the performance of a task carried out in the public interest or for the establishment, exercise or defence of legal claims;
- right to restriction of processing - Article 18 GDPR: right to obtain restriction of processing, when: (a) the data subject disputes the accuracy of the personal data; (b) the processing is unlawful and the data subject objects to the erasure of the personal data and requests instead that its use be restricted ; (c) the personal data is necessary for the establishment, exercise or defence of a legal claim; (d) the data subject has objected to the processing pending verification as to whether the legitimate grounds of the data controller prevail over those of the data subject.
- right to restriction of processing: right to obtain restriction of processing;
- right to data portability: the right to receive, in a structured, commonly used and machine-readable format, personal data concerning you and to provide them to another Data Controller;
- right to object: right to object to the processing of personal data concerning you on grounds relating to your particular situation and in any case to the use of your data for marketing purposes.
Where a processing is based on consent, you may revoke this (withdrawal of consent) You may also revoke the consent you have given at any time and as easily as you gave it without affecting the lawfulness of the processing based on the consent given before revocation.
You also have the right not to be subject to a decision based solely on automated processing, including profiling, which has a legal effect or significantly affects you. However, we may take an automated decision if it is necessary for entering into or performing a contract with us, if it is authorised by an Italian or European Union law or if you have given your consent.
In any case, you have the possibility to contest the decision, express your opinion about it and ask for the intervention of a person who can review it.
You may, at any time, lodge a complaint with the Data Protection Authority: http://www.garanteprivacy.it.
The above-mentioned rights may be exercised vis-à-vis the Data Controller by contacting the references described above.
Version no. 2 of 13-11-2024
