With reference to EU Regulation 2016/679 - General Data Protection Regulation (GDPR)
Preamble
Dear user of the Ar-tre S.r.l. website, this document is intended to help you understand what data we collect as part of our professional activity, how we use them, how they are updated, what your rights are as a web customer, and the tools available to you to keep track of your data at all times.
Ar-tre S.r.l. is aware of the importance of the protection of the confidentiality of personal data and – considering that the Internet is potentially a great tool for the exchange and circulation of information – intends to make every effort to comply with rules of conduct that are in line with the EU Regulation 2016/679 (GDPR), as it already did in relation to Legislative Decree No. 196 of 30 June 2003 (Code on the Protection of Personal Data), and that guarantee a safe, controlled and confidential navigation on the network. In light of the above, users of the website www.ar-tre are invited and advised to carefully read this document, which governs, in general, the rules with which Ar-tre S.r.l. complies in collecting and processing personal data in order to always provide a satisfactory service to its customers and users and, in particular, the manner and purpose of the processing of personal data supplied by users when browsing our site.
This Privacy Policy applies only to the online activities of this site and applies to visitors/users of the site. It does not apply to information collected through channels other than this website (e.g., through external websites accessed by the user through links). The purpose of the Privacy Policy is to provide maximum transparency regarding what information the site collects and how it uses it.
How do we process your data?
Ar-tre S.r.l. collects certain personal data from users (such as first name, last name, email address, phone number, etc.) voluntarily provided by them during the email inquiry phase. These data are used to respond to users' requests or perform services they have requested.
Why do we process your data?
Personal data provided by users are used for the sole purpose of providing the requested service or activity.
Other data of a technical (and non-personal) nature are collected for security and statistical purposes, are processed in automated form and collected in aggregate form only to verify the proper functioning of the site, improve the relevance of the results provided, and obtain anonymous statistical information on the use of the site and its accesses. These data will not, in any case, be disclosed to third parties, nor will they be disseminated.
For security purposes (spam filters, firewalls, virus detection), automatically recorded data may possibly also include data such as IP address, which could be used, in accordance with relevant laws, to block attempts to damage the site or to harm other users, or otherwise harmful or criminal activities. These data are never used for user identification or profiling, but only for the purpose of protecting the site and its users.
What kind of information do we collect?
Personal data
The personal data collected are only those that you communicate to us while filling out the information request form; for example: first and last name, residential address, email address, phone number, etc.
The processing carried out concerns only common data. The presence of any data that qualify as "special" (according to Article 9 of the GDPR) such as, for example, data related to religion, health status, ethnicity or sexual orientation, will result in the immediate destruction of the relevant message, announcement or communication that may have been provided by the visitor.
Technical navigation data
The technical data collected could be as follows:
- internet protocol (IP) address;
- browser type and parameters of the device used to connect to the site;
- Internet service provider (ISP) name;
- date and time of the visit;
- visitor's source (referral) and exit web pages;
- possibly, the number of clicks;
- any information on the downloading of documentation from the site.
How long do we keep your data?
Regarding your personal data spontaneously transmitted, the controller will take care of their storage for the time necessary for the verification and evaluation of the information provided, for the purpose of exchanging information, contacts or services requested. Once the purpose is fulfilled, the data will be deleted within 2 years after completion of the service.
Technical data used for security purposes are kept for 30 days while technical data used for statistical purposes are kept for unlimited time.
Where do we process your data?
The data collected on the website are processed at the headquarters of Ar-tre S.r.l. and at the web hosting datacenter where the site is hosted, and are handled only by technical personnel authorized to process them, or by any authorized providers of occasional maintenance operations (site developers).
No data from the web service is disseminated except as expressly provided by law.
Who processes your data?
In addition to the controller, in some cases, categories of authorized parties involved in the provision of the requested service (administrative, sales, marketing, legal, system administrators) or external parties, also duly authorized by the controller (such as agents, retailers, third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the data.
Are you obliged to give your data?
No. The site is accessible to users without the need to provide their personal information. However, some parts of the site may be accessible only to registered users.
In case of failure to provide data, we could not fulfill your requests for information.
In any case, the provision of data and any consent is on an optional, explicit and voluntary basis.
Users may withhold consent and may revoke a consent already given at any time in the following ways:
In the case of data collected through electronic correspondence generated by a contact form, it will be necessary to send an email requesting explicit deletion of your data.
It is not possible to request the deletion of technical navigation data collected anonymously because they cannot be precisely related to the user with whom they are associated (by definition, they are not considered "personal data").
Withholding consent may result in the inability to deliver certain services and the site experience may be compromised.
How are your data processed?
Personal data are processed by automated means.
Specific security measures are taken to prevent data loss, illegal or incorrect use, and unauthorized access. However, there is always a slight possibility of risk that an unauthorized third party may intercept the Internet transmission. Therefore, we advise you to use caution when transmitting personal data via the Internet and weigh the benefits and risks.
Could your data be transferred outside the European Community?
This site may share some of the data collected with services located outside the European Union area. Specifically with Google, Facebook, Twitter, Pinterest, and Microsoft (LinkedIn) via social plugins and the Google Analytics service. The transfer is authorized under specific decisions of the European Union and the Data Protection Authority, in particular Decision 1250/2016 (Privacy Shield), so no further consent is needed. The companies mentioned above confirm that they adhere to the Privacy Shield.
What rights do you have to protect your data?
Pursuant to European Regulation 2016/679 (GDPR) and national legislation, the user may, in the manner and within the limits provided by the current legislation, exercise the following rights:
- request confirmation of the existence of personal data concerning him/her (right of access);
- know the origin of such data;
- receive intelligible communication thereof;
- obtain information about the logic, methods and purposes of processing;
- request the updating, rectification, integration, cancellation, transformation into anonymous form, and blocking of data processed in violation of the law, including data no longer necessary to achieve the purposes for which they were collected;
- in cases of consent-based processing, receive, paying only the cost of any support, your data provided to the data controller, in structured, machine-readable form and in a format commonly used by an electronic device;
- the right to file a complaint with the national Supervisory Authority (http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4535524);
- as well as, more generally, to exercise all the rights granted to him/her by the current legal provisions.
Who is the Data Controller?
The Data Controller is Ar-tre S.r.l., located in Viale Europa, 10, Z.I. del Camol - Tamai di Brugnera (PN).
Privacy questions
If you have any questions or concerns regarding Ar-tre S.r.l.'s Privacy Policy or the processing of your data, or if you wish to exercise your rights, please contact us: ar-tre@ar-tre.it
