Privacy Policy

INFORMATION REGARDING THE PROCESSING OF PERSONAL DATA

This notice is provided in accordance with Article 13 of EU Regulation 2016/679 (GDPR) to users interacting with the website of Eurogielle srl, accessible online at: https://eurogielle.it/, corresponding to the homepage of the site.

This notice describes the management methods of the company’s official website only and does not cover external websites that may be accessed by the user via links.

Additional information may be provided through different access channels, divided according to the topics covered. Other notices may be provided within the Site regarding specific services.

Data Controller: Eurogielle srl Località Smergoncino, 11 – 45011 Adria (RO)

Contact details: privacy@eurogielle.it

Once the above retention periods have expired, the data will be destroyed, deleted, or anonymized, in accordance with technical deletion and backup procedures.

Types of Data Processed and Collection Methods

Browsing Data – Log Files

Users can access the site without being required to provide any personal data. The computer systems and software applications dedicated to the operation of this website collect, during their normal operation, certain data (the transmission of which is implicit in the use of Internet communication protocols) that are not associated with directly identifiable users. Collected data include the IP addresses of users connecting to the site, addresses in URI (Uniform Resource Identifier) notation of requested resources, request time, and the numerical code indicating the server response status (success, error, etc.).

These are technical/informational data that do not provide personal user information and are not collected to be associated with identified individuals. They are collected and used in an aggregated and anonymous manner for the purposes of verifying proper site functionality, monitoring site security, improving service quality, providing statistics on site usage, and determining liability in the event of hypothetical cybercrimes against the site.

Data Voluntarily Provided by the User

The voluntary and explicit sending of emails to the addresses indicated in the different access channels of this site entails the subsequent acquisition of the sender’s/user’s address and data necessary to respond to the requests and/or provide the requested service. However, such processing will be carried out in accordance with the principles of fairness, lawfulness, transparency, and data confidentiality protection as stated in the GDPR. In any case, before activating a specific service, appropriate notice will be provided and, where necessary, consent to the processing of personal data will be obtained. Such consent may be revoked at any time, making it impossible to use the respective service.

Failure to provide consent or its revocation does not have any consequences, except for the inability to use the Site and/or obtain the requested service or more detailed information on the Company’s activities.

In any case, the processing of personal data may be carried out, if necessary, for the pursuit of a legitimate interest of the Data Controller or in compliance with a legal obligation. Specifically, obtaining consent for processing related to browsing data and logs is not necessary as the data is processed under a legitimate interest (Recital 47 of the GDPR).

Data Provision

Apart from what is specified for browsing data, the provision of personal data by the data subject for certain purposes described in the previous section is considered optional. Failure to provide such data may result in the inability to use certain services provided by the site.

Data Processing Methods

Personal data is processed using automated tools for the time strictly necessary to achieve the purposes for which it was collected, in compliance with the principles of lawfulness, purpose limitation, and data minimization, in accordance with Article 5 of the GDPR and within the legally mandated timeframes. Specific security measures are observed to prevent data loss, unlawful or incorrect use, and unauthorized access.

Data Communication and/or Dissemination

Your data will not be disclosed but may be communicated to companies contractually bound to the company, in compliance with and within the limits of the GDPR. Personal data is stored on servers located within the European Union. However, the Data Controller may, if necessary, transfer the servers outside the EU. In such cases, the Data Controller ensures that any data transfer outside the EU will comply with applicable legal provisions, subject to the signing of standard contractual clauses established by the European Commission, and the user will be informed.

Data may be communicated to third parties belonging to the following categories:

• Entities providing IT system management services used by the company and telecommunication networks (including email);
• Firms or companies providing assistance and consulting services;
• Competent authorities for legal compliance and/or obligations imposed by public bodies upon request.

Entities belonging to the above categories act as Data Processors or operate as independent Data Controllers. The updated list of Data Processors is available at the company’s registered office. Any further communication or dissemination will occur only with the explicit consent of the user.

Possible Existence of Automated Decision-Making Processes

The Data Controller informs the data subject that this site does not use automated decision-making processes, including profiling systems.

Minors

This Site and the Data Controller’s services are not intended for minors under 16 years of age, and the Data Controller does not knowingly collect personal information from minors. If information about minors is inadvertently collected, the Data Controller will promptly delete it upon user request.

Data Subject Rights

Data subjects have the right to obtain information from the Company regarding the processing of their personal data by emailing: privacy@eurogielle.it

• Right of Access: Users can request access to the data we hold about them.
• Right to Rectification: Users can request the correction or updating of inaccurate or incomplete data.
• Right to Erasure: Users can request the deletion of their data, which will be processed within 30 days.
• Right to Restriction: Users can request the limitation of data processing.
• Right to Data Portability: Users can request their data in a structured, commonly used, and machine-readable format for transfer to third parties.
• Right to Object: Users can unsubscribe at any time from specific uses of their data (newsletters, automated emails, etc.).
• Right to Lodge a Complaint: If users believe their rights have been violated, they may lodge a complaint with the competent authority at garanteprivacy.it or via email at urp@gpdp.it.