Personal Data Protection Policy
For the purposes of EU Regulation no. 2016/679 concerning the protection of natural persons with respect to the processing of their personal data, this document aims to inform visitors to this website that the personal data they provide and are acquired here will be subject to processing in compliance with the provisions prescribed by the aforesaid Regulation and in accordance with the rights and obligations resulting therefrom. Please read the document carefully.
This website can be visited anonymously.
The Data Controller of this website is ISCRA SERVIZI ASSOCIATI S.R.L. Via Cesarea 2/4 16121 Genova P.IVA/CF 03085900102, which can be contacted on the number: +39 0100995060 or at the e-mail address: firstname.lastname@example.org.
Types of data collected
Through this website, and always with the free explicit consent of the data subject, some personal data may be collected that are directly entered on the form by the data subject. The data collected will never be shared with third parties for commercial purposes.
Source of personal data
Personal data are data that may allow a person to be identified, such as the person’s name and surname, e-mail address, postal address and IP address. On this website, personal data are collected for certain specific requirements.
The personal data that ISCRA SERVIZI ASSOCIATI S.R.L. acquires are directly provided by the data subject at the time of filling in this form.
Data-processing Purposes and legal basis
The processing of personal data, collected and stored in connection with the compilation of this form, has as its legal basis the prior consent of the data subject and is carried out for the following purposes: answering requests for information submitted via the form, providing assistance and support services, carrying out the subscription to our newsletter, sending communication about training, informative and commercial notices, and manage commercial profiling activities.
However, such data may be transmitted to third parties in cases provided for by the law, i.e.:
- With the consent of the data subject;
- To providers of Web services who allow Iscra Servizi Associati to manage this website, carry out its activities and serve its customers and users (for example, by sending newsletters or personalised communication), provided that they undertake to keep them confidential;
- Upon request of competent authorities to fulfil any legal obligations or protect the rights, interests or security of Iscra Servizi Associati or of others.
Data recipients and disclosure
All personal data collected through this website have never been and will never be sold, exchanged or otherwise transferred to third parties.
Nevertheless, such data may be transmitted to third parties in cases provided for by the law and with the consent of the data subject, within the limits relevant to the specified purposes of processing.
Personal data may therefore be communicated to our partners, consultancy firms and private companies appointed as Data Managers by the Data Controller.
Procedure and data storage period
The data collected will be stored for a period of time not exceeding that required to achieve the purposes for which the data are processed (“storage limitation principle”, Art. 5 of the GDPR) or in relation to deadlines established by the law. Regular checks are made of the obsolescence of stored data in relation to the purposes for which they were collected.
All data are stored in spaces that are only accessible to the Data Controller. Normal security measures have been taken to prevent any loss or unauthorised access to data.
In the event of violation, users will be informed by e-mail within seven working days.
In any case, false e-mail addresses or misleading subjects will never be used, nor will advertising messages be sent.
If there is no legitimate business requirement for personal data processing, they will be deleted, anonymised or stored securely and made inaccessible for any further processing until they can be deleted.
Rights of data subjects
In compliance with the General Data Protection Regulation (GDPR), all data subjects may exercise their prescribed rights regarding their personal data held by Iscra Servizi Associati S.r.l. as follows:
- Access (Art.15 of EU Regulation no. 2016/679);
- Rectification (Art.16 of EU Regulation no. 2016/679);
- Erasure (Art.17 of EU Regulation no. 2016/679);
- Restriction (Art.18 of EU Regulation no. 2016/679);
- Data Portability: the data subject has the right to obtain, from the Data Controller, data in a structured, commonly used machine-readable format to transmit such data to another data controller without hindrance (Art. 20 of EU Regulation no. 2016/679);
- Objection to data processing (Art. 21 of EU Regulation no. 2016/679);
- Withdrawal of consent to processing, without detriment to the lawfulness of processing based on the consent acquired before withdrawal (Art. 7, para. 3 of EU Regulation no. 2016/679);
- Filing a complaint with the Data Protection Commissioner to Protect personal data (Art. 51 of EU Regulation no. 2016/679).
To exercise one or more of these rights, please contact the Data Controller directly by e-mail, telephone (contact details can be found under “Data Controller”) or send a written notice by Certified e-mail to the address; email@example.com. In addition, the data subject may also file a complaint to a supervisory authority.
Mandatory or optional data provision
The provision of data is optional for some fields and mandatory for others (marked with an asterisk): failure to provide mandatory data means that the form will NOT be submitted.
Giving consent to personal data processing by ticking the appropriate box is optional but necessary in order to proceed with submitting the form.
Data processing procedure
Personal data provided will be subject to processing operations in compliance with the aforesaid regulations and the obligations of confidentiality that rule the Data Controller’s activities. Data will be processed both by means of IT tools and in printed form, as well as by any other suitable means, in compliance with the appropriate technical and organisational security measures prescribed by the GDPR.
No user personal data is purposely acquired by this website.
The use of so-called session cookies is strictly limited to the transmission of session identifiers, which consist of random numbers generated by the server to enable the secure and efficient browsing of the website.
Session cookies used on this website prevent the use of other computer techniques which potentially compromise user privacy during browsing and do not allow the acquisition of information which could identify the user.
The use of permanent cookies is strictly limited to the acquisition of data for statistical purposes.
The Iscra Servizi Associati srl website also includes components sent from Google Analytics, a web traffic analysis service provided by Google, Inc. (“Google”). These third-party cookies are collected and managed anonymously in order to monitor and improve the performance of the website (performance cookie).
Google Analytics uses “cookies” to collect and anonymously analyses the behavior of website visitors (the information includes the visitor’s IP address). This information is collected and processed by Google Analytics in order to prepare reports to be submitted to the website administrators. This site does not use (and does not allow third parties to use) Google Analytics service to monitor or collect personally identifiable information. Google does not associate a visitor’s IP address with other data held by Google Inc. nor does it seek to link an IP address to the visitor’s identity. Google may also transfer this information to third parties where required by law or if third parties process the aforementioned information on Google’s behalf.
For further information visit the following link:
Google Analytics can be selectively disabled by the user by installing the opt-out browser add-on provided by Google. To disable Google Analytics, see the link below:
Some cookies (session cookies) remain active only until the browser is closed or the session is terminated by the user. Other cookies are more “permanent” and remain available for future visits even if the browser is closed.
These cookies are called persistent cookies. Their expiration is set by the server upon creation. In some cases, the duration is fixed. In others, it is unlimited.
The user can decide whether or not to accept cookies via their browser settings.
Warning: the total or partial disabling of cookies may compromise site use functionality.
Disabling “third-party” cookies does not affect the browsing experience in any way.
The setting can be defined specifically for different websites and web applications. Furthermore, the best browsers allow for different “proprietary” or “third party” cookies settings.
For example, under the Tools -> Options -> Privacy menu in Firefox you can access a control panel and specify whether or not you want to accept certain cookies or remove them.
Internet Explorer: http://windows.microsoft.com/it-it/windows7/how-to-manage-cookies-in-int…
When visiting a website, the user may receive cookies from the website visited (“first-party”) or from websites operated by other organizations (“third parties”). A notable example is the presence of “social plugins” for Facebook, Twitter, Google+ and LinkedIn. These are web page elements generated directly by the websites and integrated into the pages of the host website. The most common use of social plugins is aimed at sharing content on social networks.
These plugins require cookies to be sent to and from all websites operated by third parties. The information collected by “third parties” shall be governed by the relevant informative material, to which you should refer if needed. In order to ensure greater transparency and convenience, the following list provides websites with information about the various cookies policies.
Facebook policy: https://www.facebook.com/help/cookies/
Facebook (settings): access your account. Privacy section.
Twitter policy: https://support.twitter.com/articles/20170514
Twitter (settings): https://twitter.com/settings/security
LinkedIn policy: https://www.linkedin.com/legal/cookie-policy
LinkedIn (settings): https://www.linkedin.com/settings/
Google+ policy: http://www.google.it/intl/it/policies/technologies/cookies/
Google+ (settings): http://www.google.it/intl/it/policies/technologies/managing/