POLICY ACCORDING TO THE ARTICLE 13 OF THE EUROPEAN REGULATION 2016/679
The Holder of the processing of personal data
According to the article 13 of the European Regulation 2016/679 (GDPR), Intrauma S.p.A., with its registered office in via Genova 19, 10098 Rivoli (Turin), is the Holder of the processing of Your personal data. The Holder informs You that the data You gave in relation to the existing juridical relationships (user/interested person) will be the object of processing respecting the above mentioned provisions. This processing will occur in a legitimate way and according to principles of the article 5 of the European Regulation 2016/679. Other communications can be known later, also verbally.
The updated list of the processing is held at the registered office of the Organization.
Data as the subject of the processing
The article 4 of the European Regulation 2016/679 defines “personal data” any information about an individual person identified or identifiable (“interested person”). It is identifiable the individual person who can be identified, directly or indirectly, with a particular reference to an identifier such as the name, an identification number, data about the location, an online identifier or to one or more features of his/her physical, physiological, genetic, psychic, economic, cultural or social identity. The “processing of personal data” can be intended as any transaction or set of transactions, carried out with or without the help of automatized processes and applied to personal data or sets of personal data, such as the collecting, the registration, the organization, the structure, the conservation, the adaptation or change, the extraction, the consultation, the use, the communication through transmission, diffusion or any available form, the comparison or interconnection, the limitation, the cancellation or destruction. In detail, it deals with data You gave voluntarily for executing the existing juridical relationships with the Holder of the processing of personal data.
Added to this are the web surfing data, the IT systems and software procedures used to operate this website, which could acquire, during their normal operation, Your personal data, whose transmission is implicit in using the protocols of Internet communication. However, this information is not collected to be associated with identified data subjects, but due to its nature it could, through processing and associations with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers utilized by users connecting to the site, the addresses in the Uniform Resource Identifier (URI) of the requested resources, time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the response status given by the server (success, error, etc.) and others parameters related to the operating system and the users’ computer environment. These data are used only to obtain anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site or requests by the authorities..
Purposes of the treatment
Intrauma S.p.A. processes Your personal data for the following purposes:
1. to respond to Your requests for information, as well as to provide products, services or assistance requested by filling in the appropriate form on the Contact page of this website;
2. to properly fulfil obligations arising from an existing contract or pre-contractual activities upon Your request.
3. to comply with legal obligations and regulations.
4. marketing purposes, to send promotional newsletters, commercial or advertising communications or events organized by the Owner or related to his business.
For the above mentioned purposes, the processed personal data are name, surname and email, as well as any other information You may deem appropriate to communicate to the Holder by filling in the Subject and Message fields.
Duration of the treatment
Personal data relating to purposes 1, 2, and 3 will be kept for all time necessary to achieve the above mentioned purposes of processing and for a maximum of 10 (ten) years. After this period of time, the data will be deleted. Data processed for administrative and accounting purposes will however be kept, in compliance with legal obligations.
Personal data relating to purpose 4 will be kept for a maximum of 2 (two) years.
Nature and legal basis of the provision of data
Providing Your personal data is optional. However, in order to respond to your requests, the conferment becomes mandatory and is based on your request. Any refusal would prevent Intrauma from achieving the above mentioned purposes from 1 to 3 (for example, responding to Your requests for information). Regarding the purpose 4, the conferment is entirely optional and based on consent.
Modalities of the processing of personal data
The data will be processed and stored only for the above mentioned purposes through the use of media both papery and informatic, introduced in appropriate databases and processed with instruments suitable to ensure the integrity, the safety and confidential nature of the same data, according to what is provided by the European Regulation 2016/679. All the appropriate technical and organizational measures will be taken to guarantee a level of data protection in compliance with the provisions of the European Regulation 2016/679. Access will be allowed only to people authorized in writing for the processing of personal data. They may be communicated and/or collected also to/from third parties (as in cases of data acquisition from processing centres or other companies). The same will be opportunely indicated responsible for the processing of personal data and will be involved in the fulfilments required from the existing juridical relationship, as well as from specific legal obligations.
According to the measure of the Privacy Guarantee 8th May 2014, nr. 229, two macro-categories of cookies are identified: “technical” and “profiling”.
Technical cookies are used only to transmit a communication over an electronic communications network, or to the extent strictly necessary for the provider of an information society service explicitly requested by the subscriber or the user to provide this service. People don’t use them for further purposes and they are usually installed directly by the Holder or administrator of the website. They can be divided into (i) web surfing or session cookies, which guarantee the normal web surfing and use of the website (allowing, for example, to make a purchase or authenticate to access restricted areas); (ii) analytics cookies, assimilated to technical ones when used directly by the administrator of site to collect information, in an assembled form, on the number of users and how they visit the site; (iii) functionality cookies, which allow users to browse according to a series of selected criteria (for example, the language, products selected for the purchase) in order to improve the service provided. For installing these cookies, the users’ prior consent is not required, while the obligation to give information pursuant to the article 13 of the European Regulation 2016/679 is provided.
Profiling cookies are designated to create user profiles and are used to send advertising messages in relation with the preferences expressed by the same in the context of web surfing. Due to the particular invasiveness that such devices may have in the users’ private sphere, the user must be adequately informed about their use and express their valid consent.
Each domain, or its portion, which is visited with the browser, can set cookies. Since a typical Internet page, for example that of an online newspaper, contains objects coming from different domains and each of them can set cookies, it is normal to host hundreds of cookies in the browser. The purpose is to record, but also, sometimes, to trace information about use experience, moving from one page to another of the site keeping the user authenticated, saving some users’ preferences already entered (username, password, etc.), tracing the users’ tastes and preferences allowing to manage the presence or absence of targeted marketing initiatives. If there are restrictions on their use, this will certainly affect the users’status during the consultation. Blocking or removing them from the browser cache could cause an incomplete use of the services offered from the web application.
The www.intrauma.com website uses only technical cookies that are necessary and functional for the distribution of the same.
The website www.intrauma.com DOES NOT use first or third part cookies that allow to collect visitors’ information (profiling), keywords used in order to visit the site, visited websites or data of other nature.
Communication to third parties and/or dissemination of data
For purposes referred to the numbers from 1 to 6, the Organization informs You that Your data could be transmitted to external parties, appointed in writing, if this is necessary to fulfil an obligation provided by the law, to perform obligations arising from a contract You are/will part of, as well as to fulfil Your specific requests.
The recipients of the communications about personal data of the interested part are also identifiable also in the following categories of recipients:
- supervisory bodies, judicial authorities, bodies, professionals, companies, public administrations or other structures designed for executing treatments related to the fulfilment of administrative, accounting and management obligations in relation with the ordinary performance of the Holder’s economic activity (legal obligations);
- banks, financial institutes, freelancers, professional studies and advisors to whom the communication of data is necessary for executing the Holder’s activity and, in particular, in relation with the fulfilment of contractual obligations assumed towards the interested party (contractual obligations);
The collected data will not be disseminated in any way.
Intention to transfer data abroad
The data will be transmitted exclusively in Italy and within the European Union.
Rights according to the European Regulation 2016/679
The interested party may, every time, exercise the rights referred to in art. 7, par. 3, and to the articles 15 and following of the European Regulation 2016/679:
- the right of access to personal data;
- the right to obtain the correction or cancellation of personal data or the limitation of processing;
- the right to oppose the processing;
- the right to the versatility of data;
- the right to revoke the consent, where it is provided (the revocation of consent does not prejudice the lawfulness of processing based on the consent granted before the revocation);
- the right to propose a complaint to the control authority (Privacy Guarantee).
Holder’s extreme details about the processing of personal data
The interested part can exercise the above mentioned rights, phoning at the number +39.011.95.39.496, sending a fax to the number + 39. 011.958.83.85 or an email to the address firstname.lastname@example.org.
The Holder of the processing of personal data is Intrauma S.p.A., with its registered office in Via Genova 19, 10098 Rivoli (Turin). External responsible people’s list will be maintained updated and it will be sent to the interested part upon a specific request.
Further information about the processing of personal data can be verbally transmitted, when data are collected.
According to the articles 6 and 7 of the European Regulation 2016/679, as well as according to what is provided by the Measure nr. 229 of 8th May 2014 issued by the Guarantee for the protection of personal data, in this page the Holder of the processing of personal data, Intrauma S.p.A., its registered office is in Via Genova 19 – 10098 Rivoli (Turin) gives users of the website https://www.intrauma.com/ information about cookies used and/or proposed for the storing.
What are cookies
Cookies are small text files that the sites visited by users send to their devices. These files are stored inside them to be then transmitted again, at a later time, to the same sites of origin on the occasion, perhaps, of a next visit. Cookies can be stored inside the user’s device directly from the website that the latter visits (first part site) or from a different website, so-called “third part site”: each website may include elements (images, maps, sounds, specific links to webpages of other domains, etc.) that may reside and/or bring users to link available on server different from those that supply the first part site. Thanks to storing of the cookies, the user can personalize the use of some contents of the website with the backup of his own preferred settings. For example, it is possible to set up a cookie for the user’s recognition registered on the site without he has to proceed, on the occasion of a new visit, to a new authentication.
Taxonomy proposed by the Guarantee
(Reference Individuation of the modes simplified for the policy and acquisition of the consent for using cookies – 8th May 2014).
The Guarantee for the protection of personal data in the Measure nr. 229 of 8th May 2014 proposes a taxonomy that identifies two categories of cookies according to two possible purposes of treatment:
- Technical cookies
- Profiling cookies
They are cookies necessary to web surfing and/or to provide a service to the user. People don’t use them for further purposes and they are usually installed directly by the Holder of website. Without the recourse to these cookies, some transactions can’t be carried out or they would be more complicated and/or less safe, for example home banking activities (visualization of the bank statement, money transfers, payment of bills, etc.), for which cookies, that allow to carry out and maintain the user’s identification to the extent of the section, are necessary.
They are cookies used to mark out the user’s web surfing inside the network and to create profiles according to tastes, habits, choices, etc. Advertising messages connected to the preferences already expressed by the same user in the online web surfing can be transmitted to the user’s device.
User’s consent for installing cookies on the device
The expression of consent to the storing of cookies depends on purposes for which the same cookies are used, and from these purposes it depends if it deals with “technical cookies” or “profiling cookies”. For installing technical cookies any consent is required, whereas, for cookies of third parties it is necessary to supply a suitable policy (ex article 12 European Regulation 2016/679). Only about profiling cookies, the same can be installed on the user’s device only if he has expressed his own free, voluntary, specific and unequivocal consent after having been properly informed.
The Guarantee (with reference to Measure nr. 229 of 8th May 2014) has stated exactly that these cookies can be assimilated to technical cookies only if they are used to optimize the site and directly by the Holder of the same website (then not by a third part), who can collect information in an assembled form about the number of users and how they visit the website. To these conditions, for analytic cookies the same rules, about policy and consent, provided for technical cookies, are valid.
Cookies installed on this site
Cookie name: PHPSESSID
Purpose: The cookie PHPSESSID is a cookie native of PHP and it allows websites to store data on condition of the section. In the website it is used to determine a user session and to communicate the data on the condition through a temporary cookie, commonly named cookie section. Since the cookie PHPSESSID doesn’t have a temporal expiry, it disappears when the client closes. Cookie generated in order to mark out the acquired consent.
Type: technical cookie
Duration: closing of the browser
Other information: 1 year
Acquisition of consent to the storing of cookies
To mark out the acquired consent, the Holder of the website makes use of a suitable technical cookie, a not particularly invasive system and it doesn’t require a further consent. With this “documentation”, it isn’t necessary that the short policy is reintroduced when the user visits the site for the second time, without prejudice to the possibility for users to deny the consent and/or to modify, every time and in an easy way, his own options, for example through the access to the extended policy, that may be available from each page of the site.
Provision of the data
With an exception for technical cookies strictly necessary for the normal web surfing, the provision of data is referred to the interested person’s will who decides to browse the site after having read the short policy contained in the suitable banner. The interested person can avoid the installation of cookies through the functions available on the own browser or interrupting the web surfing.
How to disable the storing of cookies through settings of the browser
It is possible to deny the consent for installing any cookie on the user’s device selecting the suitable setting of the own browser: the web surfing without tracing of own activities will be however available in all its practical aspects. Below the links informing users how to disable cookies for the most used browsers:
Last updating of the document 24/09/2018