Privacy Policy, full version for web site users

Information on the treatment of the personal data art. 13-14 European regulation 2016/679

Updated on 15/05/2018

Data Controller.

According to the law and to the European regulation, the Data Controller is:

ILSA SPA
divisione DESCO

Via Ferrovia, 31 Z.I.
31020 CASTELLO ROGANZUOLO DI SAN FIOR (TV)
Tel: 0438/4905
Fax: 0438/400791
P.I.: 02061090268

in the person of its present legal representative.
We inform you that the aforementioned legislation provides for the protection of the user imposed for the processing of personal data and that this treatment will be based on principles of correctness, lawfulness, transparency and protection of your privacy and your rights in compliance with the provisions of Regulation 679/2016 and Legislative Decree No 196/2003 679/2016 and Legislative Decree No 196/2003.

Concerned Subjects.

Users of the website www.desconet.it

Type of processed data:

• Navigation data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with a single user, but by their very nature could, through processing and associations with data held by third parties, allow users to be identified. This category of data includes, for example:

• IP addresses or domain names of computers and other devices used by users who connect to the site;
• addresses in URI (Uniform Resource Identifier) notation of the requested resources and any time indications of the same;
• parameters relating to the operating system and the user's IT environment;
• starting or landing pages;
• Navigation index and identification behaviour when viewing site pages;

These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning (see the paragraph on cookies). The data could be used by the competent authorities to ascertain responsibility in case of hypothetical computer crimes against the site. Cookie
Please read the specific cookies policy used by this website available in the following sections or at the following URL: www.desconet.it

• Personal data provided voluntarily by the user:

the optional, explicit and voluntary sending of e-mails to the addresses indicated on this site and / or the compilation of forms on the same involves the subsequent acquisition of the sender's personal data (by way of example, name, surname, e-mail address). Specific summary information is available on the pages that provide the services and the forms themselves.

• Newsletter subscription.

In the event that the user has given voluntary consent to send promotional communications either by filling in and confirming the appropriate registration box or when registering on the Website, the user authorizes the sending of communications and professional information according to the conditions and frequency defined by the seller. Minimum common data required in this case are as follows: email, name and surname. It is the user's right to withdraw the registration at any time by sending an email to the email address below. ILSA SPA- Divisione DESCO will document and confirm by email the successful removal of the user's position from the newsletter lists.

• Data provided under the "Contact" form

When browsing the Site, users may, on their own initiative and will, fill out a form to ask the website owner general information. The requested data appear to be of common type (name, surname, company name, email address). Before confirming and sending the contact request, the user must have read and confirmed this privacy policy, and provide in a second step, his consent to the storage of the above data for the duration required to process the request. Failure to confirm this consent will not allow the contact request to be sent, thus preventing the request from being processed. The user has the option to consent to the sending of news or marketing material. This consent will not affect the contact request.

• Special or sensitive Personal Data

In every area and service on the website, even in the registered users reserved area, it is never required to enter data belonging to this category.

Purpose of processing.

Purpose of processing: in particular, your data will be processed for the following purposes related to the implementation of obligations related to legislative or contractual obligations:

• purposes necessary to ascertain, exercise or defend a right in court or whenever the jurisdictional authorities exercise their jurisdictional functions;
• advanced web browsing or personalized content management;
• purposes related to the execution of a contract of which you are a part or to the execution of pre-contractual measures taken on your request (e.g.: contact request via the Contact form, etc.);
• purposes of statistical research / analysis of aggregated or anonymous data, without the possibility of identifying the user, aimed at measuring the functioning of the website, measuring traffic and evaluating usability and interest.

The processing of functional data for the fulfilment of these obligations is necessary for a proper management of the relationship and their conferment is mandatory to implement the purposes indicated above. The Data Controller also states that any non-communication, or incorrect communication, of one of the mandatory information may cause the Data Controller's inability to guarantee the adequacy of the processing itself.

Methods of treatment.

Your personal data may be processed as follows:

• by electronic calculators using software systems managed by third parties;
• by electronic calculators using software systems managed or programmed directly;

The temporary processing of data occurs in Anonymous Form.
The processing is carried out in accordance with modalities established by Article 6, 32 of the GDPR and through the adoption of the appropriate security measures.

Communication of personal data:

The collection of personal data acquired in anonymous form through the use of cookies for the operation of the website is documented in the cookie policy available directly at the link at the bottom of the website pages (footer). Your personal data, voluntarily entered on this web site will be processed and managed for the purposes and performance of the services necessary for the correct management of your request, with guarantee of protection of the rights of the interested party. Your data will be processed only by personnel expressly authorized by the Data Controller and, in particular, by the following categories of employees within the company:

• Marketing department;
• Human resources;
• Technical Office.

In the event that personal data require the completion of a service that involves the sending of electronic, informative, promotional communications, in accordance with the conditions and authorizations issued by the interested party, the company may use external services of third parties specialized in management of the service itself. In this case, the Data Controller has the responsibility of exactly specifying the terms of the service and has to request consent under the terms of this regulation.

• Contact request form

Personal data voluntarily inserted on the contact form and sent with specific consent, are the minimum required for the accurate management of the request and belong to the category of mandatory data. The user will specify his request directly in the corresponding field (field notes).

• Download of information material

PDF documents concerning professional services, news and events, general and legal information can be downloaded from the pages of the website. These documents may contain personal data that have been explicitly authorized by the interested parties. In case of third parties’ documents, please refer to their own privacy policies and authorizations.

• Other data requests

Further to this policy, any other service advised on this website, which may require user’s personal data, will be object of specific data treatment information.

Disclosure of personal data:

Your personal data will not be disclosed in any way.

Retention period.

Please note that, in compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 of the GDPR, the retention period of your personal data is:

• established for a period of time not exceeding the services provided.
• According to the to the terms of the law provided for the specific treatment needed.

Cookies management:

For more details see the extensive information on the management of cookies shown in the footer on the homepage: www.ilsaspa.com
If you have any doubts or concerns about the use of cookies, you can block or disable them by activating the configuration on your browser which will allow you to refuse the installation of all cookies or some of them. For an overview of the action modes for the most common browsers, you can visit www.cookiepedia.co.uk
Targeted ads from Advertising Companies can be blocked. This option interrupts the use and collection of some data by these companies not influencing the cookie setting. For more information or individual opt-out please visit www.youronlinechoices.eu/ .

Data subject’s rights:

You have the right to obtain from the Data Controller the erasure (right to be forgotten), the limitation, the update, the modification, the portability, the opposition to the processing of your personal data, as well as in general you can exercise all rights provided from articles 15, 16, 17, 18, 19, 20, 21, 22 of the GDPR.
1. The interested party has the right to obtain confirmation of the existence or not of personal data concerning him / her, even if not yet registered, and their communication in intelligible form.
2. The interested party has the right to obtain the indication:

1. of the origin of personal data;
2. of the purposes and methods of treatment;
3. of the logic applied in case of treatment carried out with the aid of electronic instruments;
4. of the identifying details of the Data Controller, of the responsible and of the designated representative according to article 5, paragraph 2;
5. the subjects or the categories of subjects to whom the personal data may be communicated or who can learn about them as managers, agents or appointed representative in the territory of the State.

3. The interested party has the right to obtain:

1. updating, rectification or, when interested, integration of data;
2. the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;
3. the certification that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfilment is impossible or involves a use of means manifestly disproportionate to the protected right;
4. data portability.

4. The interested party has the right to object, in whole or in part:

1. on legitimate grounds, to the processing of personal data, even though they are relevant to the purpose of the collection;
2. to the processing of personal data for the purpose of advertising or direct sales or for carrying out market research or commercial communication.

Right of complaint:

The data subject has the right to lodge a complaint with the competent supervisory authority and to appeal to the competent courts of the Member States in accordance with Article 79. Competent authority: www.garanteprivacy.it

Profiling

For the purposes and types of data collected from this website, the absence of an automated decision-making process, including the profiling referred to in Article 22, paragraphs 1 and 4, is confirmed.

Further information

For any further need, request for information or clarification, please contact our office directly at the telephone numbers and / or email addresses below (footer area).