Privacy Policy according to article 13 of European Regulation UE/2016/679 concerning personal data protection

INFORMATION AND CONSENT ON THE PROCESSING OF PERSONAL DATA
(Privacy Policy according to article 13 of European Regulation UE/2016/679 concerning personal data protection)

In this page we describe how personal details of users and visitors of www.cires.it are used in relation to article 13 of European Regulation UE/2016/679. This privacy Policy is not valid for websites that can be reached through links in this website.

PLACE AT WHICH DATA WILL BE PROCESSED

Treatment connected to the web services of this site takes place at the company headquarters and is catered to by the technical staff of the office in charge of data processing, or by persons entrusted with occasional maintenance operations. Elaboration can take place at external companies that collect data relative to access and navigation within the website in order to allow operation of the systems and sections that require user identification and uses the information collected for the technical administration of the website and for any statistical analyses of the website itself.

Personal data supplied by users who send requests for informative material (catalogues, answers to questions, contact requests) are used for the sole purpose of performing the service or the requested task and are communicated to third parties only if necessary for that purpose (for example, shipment of the above-mentioned material).

TYPES OF DATA PROCESSED

Web surfing data

The information systems and software procedures implemented for the operation of this website may acquire, during the course of their normal execution, personal data, the transmission of which is implied in the use of the Internet communication protocols. Such information is not collected in order to be associated with identified data subjects; however, due to its nature, such information could permit the identification of users, through processing operations and associations with data held by third parties. This category of data includes IP addresses or domain names of the computers used by users who access the website, URI (Uniform Resource Identifier) notation addresses of the resources requested, the time at which the request is submitted, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the state of the reply given by the server (sent, error, etc.), and other parameters relating to the user’s operating system and information environment. This data is only used to retrieve anonymous statistical information on the use of the website and to control that it works properly. Such data will therefore be deleted immediately after being processed. Such data may be used to ascertain any liability in the case of any alleged computer crimes to the detriment of the website. Except in the case of an alleged computer crime, for the time being data concerning the access to the website shall be kept for no more than seven days.

Data voluntarily supplied by the user

The optional, express, and voluntary sending of electronic mail to the email addresses specified on this website shall imply the subsequent acquisition of the sender’s email address, which is necessary for a reply to any request, as well as the acquisition of other personal data, if any, contained in the email.

Specific concise information concerning personal data shall be cited or visualized in the web pages dedicated to particular services on request and, where necessary, express consensus requests are also present.

OPTIONAL SUPPLY OF DATA

Apart from what has been specified above with regard to the Web surfing data, the user shall be free to supply his/her personal data in contact or other forms. If the user does not supply his/her personal data, it may be impossible for him/her to obtain the requested information.

DATA PROCESSING PROCEDURES

Personal data is processed either in paper format, IT format or by automated means for as long as is strictly necessary to achieve the objectives for which such data has been collected. Specific security measures are observed in order to prevent loss of data, illicit or incorrect use and unauthorized access.

SITE SECURITY MEASURES

Specific security measures have been adopted for the management of this website, aimed to guarantee a safe access and protect the information held in the website from accidental risks of loss and destruction. The software antivirus utilized in the management of the website is updated periodically in order to avoid data loss due to the action of computer viruses. We also remind you that, although the website guarantees the adoption of special antivirus systems for its site, and points out that by law, users should also provide their work stations with special antivirus systems to prevent and scan virus attacks.

YOUR RIGHTS

The subjects to whom the personal data refer, pursuant to art. from 15 to 22 of EU Regulation EU / 2016/679, have the right at any time to know the content and origin, verify its accuracy or request to integrate, update, or rectify them. The subjects to whom the personal data refer also have the right to request cancellation, transformation into anonymous form or blocking of data processed in violation of the law, and to oppose in any case, for legitimate reasons, to their treatment.

Requests related to articles from 15 to 22 of EU Regulation EU / 2016/679 must be sent to: Cires S.p.A.via Carlotti, 42 – 55016 Porcari (LU)

DATA of PROTECTION OFFICER

Cires S.p.A.via Carlotti, 42 – 55016 Porcari (LU) – qualita@cires.it