POLICY ON THE PROCESSING OF PERSONAL DATA BELONGING TO PROSPECTS PURSUANT TO ARTICLE 13 OF REGULATION (EU) 2016/679 (“REGULATION”)

 

Schoch & Co. S.r.l. hereby provides you with information regarding the processing of your personal data relative to the navigation of this website (hereinafter referred to as the “Website”).

This policy has been produced pursuant to Art. 13 of Regulation (EU) 2016/679 (hereinafter referred to as the “Regulation”) and Art. 122 of Italian Legislative Decree 196/2003 as amended (hereinafter referred to as the “Privacy Code”).

1. Identity and contact details of the data controller

The data controller is Schoch & Co. s.r.l., with registered offices in via Cav. G. Radici 4 Colzate (BG) e-mail privacy@itemagroup.com (hereinafter referred to as the “Data Controller”).

2. Categories of personal data

a. Navigation data

The Company processes common personal data relating to the Website’s telematic traffic. Consequently, during standard operation, the computer systems and software procedures used to operate the website acquire certain forms of personal information, the transmission of which is implicit in the use of internet communication protocols. This category of information includes: IP addresses or the domain names of computers and terminals used by users, URI/URL (Uniform Resource Identifier/Locator) addresses for the requested resources, the time of the request, the method used to make the request to the server, the size of the file received in response, the numerical code indicating the status of the response provided by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s computing environment.

These data, which are necessary in order to use the web services, are also processed in order to:

• obtain statistical information regarding the use of services (most visited pages, number of visitors per time period or per day, geographical area of origin, etc.).
• control the correct functioning of the services offered.

Navigation data is held for no longer than seven days (save for requirements concerning the investigation of crimes by Judicial Authorities).

b. Data provided voluntarily by the user

The provision of personal data is necessary in order to be able to access certain services (e.g., newsletter subscription); please refer to the specific policy provided at the time of collection.

c. Information processed via cookies

The Website uses cookies and/or other tracking tools for which reference is made to the specific cookie policy.

3. Purpose and legal basis for processing and period of data storage

Navigation data is necessary in order to implement computer and telematic protocols.

In addition, there are other forms of data required for the provision of the relative service; therefore, failure to provide said data will result in the impossibility of being able to use the service requested.

The personal data are processed by the Company with both digital and paper methods and in respect of the principles specified by the Regulation and are protected with technical and organisational measures that are adequate in guaranteeing their integrity and confidentiality.

4. Nature of provision and methods of processing

The data may also be processed on behalf of the Data Controller by third parties, designated as Data Processors pursuant to Article 28 of the Regulation, such as natural persons and/or legal entities carrying out activities functional to the purposes indicated above, for example the company in charge of managing and maintaining the Website.

The data may be communicated to autonomous data controllers, such as authorities and supervisory and control bodies entitled to request/receive the data.

Furthermore, the data are processed by employees of the Company working within sectors of the organisation charged with the fulfilment of the purposes indicated above, who are expressly authorised for processing and have received appropriate operating instructions.

5. Data recipients

In relation to the data processing described herein, you may exercise the rights provided by the Regulation, including the right to:

• receive confirmation of the processing of personal data and to access the data (right to access).
• update, modify and/or integrate the personal data (right to rectification).
• request the erasure of the data in the cases provided for by article 17 of the Regulation (right to be forgotten).
• obtain the restriction of processing of the data in the cases provided for by article 18 of the Regulation (right to restriction of processing).
• object to the processing of the data carried out on the basis of the legitimate interest of the Data Controller at any time, in a manner that is facilitated and free of charge, for reasons related to the particular case (right to object).
• to receive the data in a structured, commonly used, machine-readable and interoperable format, and, if technically possible, to transmit it to another controller without hindrance, in the event that processing is based on consent or contract and is carried out with automated tools (right to data portability).

To exercise these rights, you may contact the Company at any time, sending your request by email to the following address privacy@itemagroup.com or by registered letter with return receipt addressed to Itema Group Data Protection Committee to the following address: via Cav. G. Radici n. 4, Colzate (BG), 24020 – Italy. 

You have the right to lodge a complaint with the Data Protection Authority or a supervisory authority in the Member State in which you habitually reside or work, or in the State in which the alleged infringement has taken place.