Informativa sulla Privacy

(All regulatory references are based on Italian laws or, where specified, on the laws of the European community)

INFORMATION ON THE PROCESSING OF PERSONAL DATA OF USERS WHO CONSULT THE WEBSITE OF THE COMPANY REBELLATO GRAZIANO S.A.S PURSUANT TO ART. 13 OF EU REGULATION NO. 679 OF 2016

1 – WHY THIS INFORMATION.

Pursuant to EU Regulation No. 679 of 2016 (GDPR) this page describes the methods of processing of personal data of Users (identified or identifiable natural persons and, therefore, subjects “concerned” under the Regulation) who consult the website of the Company Rebellato Graziano S.a.s accessible by electronic means at http://www.rebellatograziano.it

The information contained in this informative report is only provided for the Rebellato Graziano S.a.s. website and does not concern, therefore, other sites, pages or online services that may be reached through hypertext links published on the site but referring to resources outside the Firm’s domain.

Without prejudice to further information in use at the firm (e.g. for Clients, Suppliers, Collaborators) this information is also intended to apply to personal data supplied to the firm via email addresses info@rebellatograziano.it, amministrazione@rebellatograziano.it or other company addresses.

2 – DATA CONTROLLER

The data controller is the company Rebellato Graziano S.a.s. (P.I. 02207330289, with head office in Castelfranco Veneto (TV), Via Della Borsa n. 9, Tel 0423.491836, e-mail info@rebellatograziano.it

3 – TYPES OF DATA PROCESSED

– Navigation data .

The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data of Users whose transmission is implicit in the use of Internet communication protocols. Every time a User accesses this site and every time he/she calls up a content, the access data are stored by us (and also by the Data Processor, provider of web platform development and maintenance services) in the form of protocol files, and each protocol file consists of: the website from which our page was called up; the User’s IP address; the date and time of access; the client’s request; the http response code; the amount of data transmitted; the browser and operating system used. The personal data of the Users collected during their navigation on the site therefore include the IP addresses or domain names of the computers and terminals used by the Users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the User’s computer environment.

– Data provided by the User .

Only the personal data necessary to provide the service requested by the User, such as the User’s first and last name, company name, and e-mail address, will be requested.

Contacts – Request information: the User of the website of the company Rebellato Graziano S.a.s. has the possibility of transmitting (by completing and submitting the form on the site at the link http://www.rebellatograziano.it) their personal data: the sending of this data involves the subsequent acquisition, by the company, of the sender’s address, necessary to respond to requests, as well as other personal data provided at the time of the request or included in subsequent communications.

– Cookies and other tracking systems

Only the personal data necessary to provide the service requested by the User, such as the name and surname of the User, the company name and e-mail address, will be requested.

Contacts – Request information: the User of the website of the company Rebellato Graziano S.a.s. has the possibility of transmitting (by filling in and submitting the form on the site at the link http://www.rebellatograziano.it) his/her own personal data: the sending of this data entails the subsequent acquisition by the company of the sender’s address, which is necessary to respond to requests, as well as other personal data provided at the time of the request or included in subsequent communications.

– Cookies and other tracking systems

The http://www.rebellatograziano.it website does not use cookies for profiling Users, nor does it employ any other tracking methods. Instead, technical cookies are used, i.e. small text files saved locally in the temporary memory of the User’s browser – and therefore in his computer – to improve the experience of using the site. For more information about our cookies and third party cookies hosted on our site please see the here cookie policy available.

4 – PURPOSE OF DATA PROCESSING AND LEGAL BASIS.

– Navigation data: We process the protocol files and the data contained therein in order to:

a) allow the Users to use the web services

(legal basis as per letter b of paragraph 1 of art 6 EU Reg 679/2016)

b) obtain statistical information on the use of the services (most visited pages, number of visitors per time slot or per day, geographical areas of origin, etc.) as well as to check the proper functioning of the site and protect our systems, for example by identifying possible attacks

(legal basis as per letter f of paragraph 1 of art 6 EU Reg 679/2016)

– Data disclosed by the User: with regard to the personal data voluntarily and explicitly provided by Users of the website these may be processed in order to:

(c) to be able to process and provide a response to the User’s requests sent by filling in and sending the form referred to in the link http://www.rebellatograziano.it.

In this case, the legal basis of the processing is given by the will to execute a measure requested by the User (letter b of paragraph 1 of art. 6 EU Reg 679/2016).

– Cookies and other tracking systems. The legal basis for processing is given by consent: by closing the banner, scrolling down the page where it is present or clicking any of its elements you consent to their use. With regard to the purpose of the processing of cookies, we refer to more information available in the cookie policy here available.

5 – OPTIONAL NATURE OF DATA SUBMISSION.

The data voluntarily and expressly communicated by Users for one or more of the purposes referred to in point 4 letter c, are provided by Users on an absolutely optional basis. The lack of communication of the aforementioned data will have, as the only consequence, the impossibility to pursue the specific purpose (response of the company to the requests of the Users).

6 – DATA STORAGE.

– Navigation data: navigation data do not persist for more than seven days and are deleted immediately after their aggregation (except for the possible need to ascertain crimes by the judicial authorities).

– Data communicated by the User: with regard to personal data provided voluntarily and explicitly by Users of the website processed

a) to be able to process and provide answers to User requests sent by filling in and sending the form at http://www.rebellatograziano.it in which case the data will be kept for as long as necessary to provide the requested service; it will then be kept for a further period of ten years (starting from the request or from the possible subsequent establishment of a contractual relationship between the Data Controller and the Data Subject), without prejudice to further storage of the data if this is necessary to fulfil a legal obligation or to ascertain, exercise or defend a right in court;

b) Cookies and other tracking systems: the memorization of session cookies in the terminals or in the browsers is under the User’s control; on the servers, at the end of the HTTP sessions, information related to the cookies remain recorded in the logs of the services, with a conservation time in any case not exceeding seven days like the other navigation data.

For further information please refer to the cookie policy here available.

7 – RECIPIENTS OF THE DATA

a) Responsibility

The recipient of the data collected following consultation of the site http://www.rebellatograziano.it is the subject designated by the company, pursuant to art. 28 of the Regulation, as the Data Processor, namely the provider of web platform development and maintenance services.

An updated list of any other Responsible subjects can be requested from the company; the selected Data Processors have committed to put in place adequate technical and organizational measures so that the processing meets the requirements of Reg EU 679/2016 and ensures the protection of the User’s personal data; the Processors have also committed, with a specific and signed letter of appointment to fulfill all the specific obligations under Art. 28 EU Reg 679/2016 and to act, pursuant to art 29 of the same Regulation, under the authority of the Data Controller and subject to his instructions, as well as to notify the Data Controller (pursuant to the second paragraph of art 33 EU Reg 679/2016) of any breaches of the User’s personal data.

b) Persons in charge

The personal data collected are also processed by the personnel of the company who act on the basis of specific instructions provided with regard to the purposes and methods of the processing itself (so-called “persons in charge” or “persons authorized to process the data”).

8 – TRANSFER OF DATA ABROAD

If the Data Controller, in order to provide the service, deems it necessary to transfer the personal data subject to processing outside the EU (by “transfer outside the territory of the European Union” we also mean the use of services, for example, hosting, cloud and storage, based on the saving of data in systems located in non-EU countries), the Data Controller undertakes to adopt guarantees to make the transfer safe and to ensure that the processing complies with the requirements of the Regulation despite being carried out outside the EU (adequacy decisions, contractual clauses, consent…).

<9 - RIGHTS OF DATA SUBJECTS Interested parties have the right to obtain from the Firm, in the cases provided for, access to their personal data and the rectification or cancellation of the same or the limitation of the processing that concerns them or to oppose the processing (art. 15 et seq. of the Regulation). The request can be made by contacting the company at one of its addresses indicated above. It is also recalled that the interested parties who believe that the processing of personal data relating to them and carried out through this site is in violation of the provisions of the Regulation have the right to complain to the Guarantor, as provided for in art. 77 of the Regulation itself, or to take appropriate legal action (art. 79 of the Regulation). 10 – COMMUNICATION OF SENSITIVE (PARTICULAR) DATA .

The company invites the users not to communicate information that may fall within the categories of personal data c.d. particulars referred to in art. 9 of the GDPR (eg. data relating to racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, sexual orientation, biometric data or data concerning the state of health).

11 – COMMUNICATION OF DATA RELATED TO THIRD PARTIES.

In the event that personal data of third parties are communicated to the Firm, the User shall act as autonomous data controller and shall assume all obligations and responsibilities under the law and undertake to indemnify the Firm against any dispute, claim or request for compensation for damages that it may receive from third parties whose personal data have been processed in violation of the applicable data protection laws. In any case, if the User provides personal data of third parties, he/she guarantees from now on that this particular hypothesis of treatment is based on the prior knowledge of the informative report and on the prior consent of the third party to the treatment of the information concerning him/her.

12 – UPDATE PRIVACY POLICY

This company reserves the right to modify and/or update the content of this Privacy Policy, in part or in full, for example as a result of changes in applicable legislation.

The changes made to this Privacy Policy will be binding as soon as they are published on the site and the company therefore invites Users to regularly visit this section to view the most recent and updated version of the Privacy Policy in order to be always informed about the processing of their data.

Last update of this Privacy Policy: 25/06/2021