Privacy Notice
In compliance with national law (Legislative Decree 30 June 2003, No. 196 — Personal Data Protection Code) and EU law (Regulation (EU) 2016/679 — GDPR), as amended, this website respects and protects the privacy of visitors and users, making every reasonable and proportionate effort not to infringe users’ rights.
This privacy policy applies exclusively to the website’s online activities and is valid for visitors/users of the site. It does not apply to information that may be collected through channels other than this website.
The purpose of this privacy notice is to provide maximum transparency regarding the information the site collects and how it is used.
Legal basis for processing
This site processes data on the basis of consent. By using or viewing this site, visitors and users expressly approve this privacy notice and consent to the processing of their personal data in relation to the methods and purposes described below, including any disclosure to third parties where necessary to provide a service.
Providing data—and therefore consenting to the collection and processing of data—is optional. The user may refuse consent and may withdraw consent at any time by sending an email to: info@asgic.it.
However, refusing consent may make it impossible to provide certain services and could compromise the browsing experience on the site.
As of 25 May 2018 (the GDPR effective date), some data are processed on the basis of the controller’s legitimate interests.
Data collected and purposes
Like all websites, this site uses log files in which information collected automatically during users’ visits is stored. The information collected may include:
– Internet Protocol (IP) address;
– browser type and parameters of the device used to connect to the site;
– name of the Internet Service Provider (ISP);
– date and time of visit;
– referring and exit web page;
– country of origin;
– number of clicks, where applicable.
Data and information are collected for the following purposes:
– exclusively in aggregated and anonymous form, to verify the correct functioning of the site. None of this information is linked to the natural person (user) of the site and in no way permits identification (from 25 May 2018 this information is processed on the basis of the controller’s legitimate interests);
– for security purposes (anti-spam filters, firewalls, malware detection). The data recorded automatically may include personal data such as the IP address, which may be used, in accordance with applicable laws, to block attempts to damage the site or cause harm to other users, or otherwise harmful or criminal activities. Such data are never used to identify or profile the user, nor cross-referenced with other data, nor provided to third parties, but used only to protect the site and its users (from 25 May 2018 this information is processed on the basis of the controller’s legitimate interests);
– to communicate data to third parties that perform functions necessary or instrumental to the operation of the service, such as managing comments on the site.
Where the site allows the insertion of comments, or in the case of specific services requested by the user (via the Contact section), the site automatically detects and records certain personal identification data of the user, including the email address and nickname. Such data are deemed to be voluntarily provided by the user at the time the service is delivered and are processed on the basis of consent.
By entering a comment or other information, the user expressly accepts this privacy notice and, in particular, consents to the content entered being freely viewable by other visitors.
The data received will be used exclusively for the provision of the requested service and only for the time necessary to provide that service.
Information that users of the site decide to make public through the services and tools provided is supplied knowingly and voluntarily by the user, releasing this site from any liability for any violations of the law. It is the user’s responsibility to verify that they have permission to enter personal data of third parties or content protected by national and international regulations.
If comments are managed through an external service, the policies of that service apply.
The data collected by the site during its operation are used exclusively for the purposes indicated above and retained for the time strictly necessary to carry out the activities described. In any case, the personal data collected by the site will never be provided to third parties for any reason, unless there is a legitimate request by the judicial authority and only in the cases provided by law.
However, data may be provided to third parties if this is necessary to provide a specific service requested by the user (e.g., comment management), or to perform security checks or optimize the site.
Security measures
This site processes users’ data lawfully and fairly, adopting appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of data. Processing is carried out using computer and/or telematic tools, with organizational methods and logic strictly related to the purposes indicated.
In particular, the site’s management software is constantly updated and regularly scanned to check for viruses and harmful code.
In addition to the controller, in some cases categories of persons involved in the organization of the site (administrative, sales, marketing, legal, system administrators) or external parties (such as third-party technical service providers, postal carriers, hosting providers, IT companies, communication agencies) may have access to the data.
Users’ rights
Pursuant to Regulation (EU) 2016/679 (GDPR) and Article 7 of Legislative Decree 30 June 2003, No. 196, the user may, in the manner and within the limits provided by current legislation, exercise the following rights:
– object, in whole or in part, for legitimate reasons, to the processing of personal data concerning them for the purpose of sending advertising material or of direct selling or for carrying out market research or commercial communication;
– request confirmation of the existence of personal data concerning them (right of access);
– know the origin of the data;
– receive intelligible communication of the data;
– obtain information about the logic, methods, and purposes of processing;
– request updating, rectification, integration, deletion, transformation into anonymous form, blocking of data processed in violation of the law, including data no longer necessary for the purposes for which they were collected;
– in cases of processing based on consent, receive—at the sole cost of any support—the data they provided to the controller, in a structured format readable by a data-processing device and in a format commonly used by an electronic device;
– the right to lodge a complaint with the Supervisory Authority (Italian Data Protection Authority);
– and, more generally, exercise all rights recognized by applicable legal provisions.
Where data are processed on the basis of legitimate interests, the rights of data subjects are in any case guaranteed (except for the right to portability, which is not provided for by the rules), in particular the right to object to processing, which may be exercised by sending a request to the data controller.
Requests must be addressed to the Data Controller.
Data Controller
The data controller under applicable law is the administrator of the ASGIC website.