This page describes how to manage the site with reference to the processing of personal data of users who consult it, pursuant to Legislative Decree 196/2003 (Privacy Code) and EU Regulation 679/2016 (GDPR).
- Nature of processed data
- Navigation / use data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This is information that is not collected to be associated with identified interested parties, but which by its very nature could allow users to be identified through processing and association with data held by third parties.
This category of data includes IP addresses or domain names of the computers used by users connecting to the site, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the response status given by the server (success, error, etc.) and other parameters related to the operating system and the user’s computer environment.
- Data provided voluntarily by the user
The optional, explicit and voluntary sending of e-mails to the addresses indicated on this site entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message.
- Purpose of data processing
The navigation / use data, described in the previous point 1, are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site.
Personal data provided spontaneously by users who consult the site will be processed for the following purposes:
- Contact the user
- Statistics visits to the site
- Allow registration and access to the reserved area of the site and all its features
- Interaction with social networks and external platforms
- Legal basis of data processing
Personal data provided spontaneously by users and the technical information strictly necessary to provide the service (navigation data / use), will be processed as necessary to pursue the legitimate interest of Rhea Vendors Group S.p.A. to the publication and management of its website, as well as to improve performances and contents.
- Methods of data processing and data retention period
Data processing will be carried out either manually or with the aid of IT and telematic means. The data will be stored both in paper files and in electronic files for the time strictly necessary to achieve the purposes referred to in paragraph 2 and in any case, following the exhaustion of such purposes, up to a maximum of 2 years.
Specific security measures are implemented to prevent data loss, illicit or incorrect use and unauthorized access.
- Obligation or power to provide data
Apart from that specified for navigation data, the user is free to provide personal data requested by the various services on the site. Failure to provide such data may make it impossible to obtain what has been requested.
- Data communication and dissemination
Personal data collected from the website are not subject to general dissemination.
These data may be processed, for the purposes referred to in point 2, by the persons in charge of data processing and information systems, as well as by the persons in charge of the website technical management.
- Rights of the interested parties
The privacy legislation (articles 12-22 of EU Regulation 679/2016) guarantees the right to be informed about the processing of data concerning you, and the right to access the data at any time and request the update, integration and correction. If the conditions provided for by the law are met, the data subject may also claim the right to cancel data, limit their processing, data portability, opposition to processing, and not be subjected to decisions based solely on automated processing.
If the processing of personal data is based on the consent of the person concerned, he / she has the right to revoke the consent given.
For exercising your rights, as well as for more detailed information about the subjects or categories of subjects to whom the data are communicated, the interested party can contact at the following email address: firstname.lastname@example.org
If the interested party believes his/her rights are infringed, he/she can protect himself/herself by filing a claim to the National Data Protection Authority.
- Data Controller and Data Processors
The Data Controller is Rhea Vendors Group S.p.A., Via Valleggio 2/bis, 22110 Como (CO).
The updated list of Data Processors is kept at the registered office of the Data Controller.