INFORMATION ON THE PROCESSING OF PERSONAL DATA AND CONNECTED TO NAVIGATION AND THE USE OF COOKIES
Identity and contact details of the process Controller
COMACCHIO S.p.a., hereinafter also “Comacchio” or “Controller”, with registered office in via Callata 24/b) 31011 RIESE PIO (TV), and available at the e-mail address privacy@comacchio.com, at the certified e-mail address (PEC) comacchiosrl@legalmail.it or on phone number 0423 7585.
Purpose and legal basis
| Purpose | Description |
|---|---|
| A. | To check how the service works thus enabling navigation: During normal operations, the computer systems and software procedures operating this website acquire certain personal data transferred implicitly when using Internet communication protocols. This data category includes, for example: the IP addresses or domain names of computers and terminals used by the users to connect to the website; the URI/ URI (Uniform Resource Identifier) addresses of resources requested; the time the request was made; the method used to submit the request to the server; the size of the file obtained in response; the numerical code indicating the state of the response given by the server (successful, error, etc.) and other parameters related to the user’s operating system and computer environment. |
| B. | Statistics: information is acquired to understand how the visitor interacts with the website in order to obtain statistics. |
| C. | Profiling: visitor tracking information is acquired to outline a profile based on the interests shown during navigation and thus to present adverts in line with the preferences detected. |
| D. | Respond to the communications obtained through the contact data published: when the visitor contacts the Controller through one of the contact details published on the website, information transmitted spontaneously is collected in order to process and answer the request. |
| E. | Defence purposes: The Controller may need to process personal data to manage any disputes and out-of-court or legal litigation. |
| Purposes | Legal basis (common data) |
|---|---|
| A. | Execution of the agreement |
| B. | Consent |
| C. | Consent |
| D. |
Performance of pre-contractual measures; Legitimate interest of the Controller and to respond to requests received. |
| E. | Legitimate interest of the Controller to ascertain, exercise or defend a right. |
Storage period
| Purposes | Storage time |
|---|---|
| A. | Please refer to what is said in the Cookie section |
| B. | Please refer to what is said in the Cookie section |
| C. | Please refer to what is said in the Cookie section |
| D. | Time needed to satisfy the requests received and subsequent interactions. |
| E. | 10 years from the final resolution of the dispute. |
Nature of data provision and the consequences of a refusal
| Purposes | Nature | Consequences |
|---|---|---|
| A. | Needed | Inability to enter and use the website. |
| B. | Optional | Impossibility for the Controller to process for statistics purposes. |
| C. | Optional | Impossibility for the Controller to analyse in order to understand the visitor’s preferences and for the latter to receive ads in line with interests shown. |
| D. | Needed | Impossible to receive the information requested. |
| E. | Needed | Impossible to manage the dispute. |
Area of communication
All the data collected and processed can be communicated to internal parties authorised to process data for their respective jobs, and to the following external party categories, related to the processing purposes:
| Purposes | External recipient categories |
|---|---|
| A. | Subjects other than the Controller indicated in the “Cookie” section |
| B. | Subjects other than the Controller indicated in the “Cookie” section |
| C. | Subjects other than the Controller indicated in the “Cookie” section |
| D. | Agents, commercial consultants. |
| E. | Legal firms; Legal authorities. |
Seeing that the data are also processed using computer tools, they could also be visible to parties performing assistance/maintenance on those systems.
Transfer of data to a third country or an international organisation
The Controller sends personal data to the Countries and at the conditions summed up below:
| Purposes | Country | Legality of the transfer |
|---|---|---|
| A. | Please refer to what is said in the Cookie section | |
| B. | Please refer to what is said in the Cookie section | |
| C. | Please refer to what is said in the Cookie section | |
| D. | / | / |
| E. | / | / |
Rights of the data subjects
The subjects the personal data refer to are acknowledged the following rights:
| Right | Description |
|---|---|
| Access | they can know whether their personal data are being processed and, if so, have access to them and request a copy. |
| Rectification | they may ask for the personal data to be updated, corrected (if incorrect) and integrated if not complete. |
| Erasure | they may have the personal data erased in certain situations (for more information contact the Controller). |
| Restriction | they may ask for their data to be marked, in order to restrict any further processing, in certain situations (for more information contact the Controller). |
| Object | they may object to the processing of their personal data, for reasons connected to a specific situation, when processing is based on legitimate interest or is needed to perform a task of public interest or connected to exercising the public powers that the Controller is assigned. |
| Portability | they can receive the personal data supplied to the Controller in a structured form and transmit them to another process controller if the processing is based on consent or contract and is performed by automated means. |
| Revoke consent | they may revoke consent for purposes that required it, without prejudice to the legality of processing performed until that moment. |
The rights effectively exercisable for the processing actions performed are:
| Purposes | Access | Rectification | Erasure | Restriction | Objection | Portability | Revoke consent |
|---|---|---|---|---|---|---|---|
| A. | X | X | X | X | X | ||
| B. | X | X | X | X | X | X | X |
| C. | X | X | X | X | X | X | X |
| D. | X | X | X | X | X | ||
| E. | X | X | X | X | X |
To exercise the above rights, they may use the form available at the following link https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1089924 and send it to the following address: privacy@comacchio.com. The data subject may ask the same contact number for more details on the above information (e.g. test balancing legitimate interest or a list of the data processors).
A complaint may be lodged with a supervising Authority: for Italy, Authority for the Protection of Personal Data (www.garanteprivacy.it).