SECTION 1- INTRODUCTION
A.U.ESSE S.r.l. (hereinafter also the “Company” or the “Owner”), for years has considered the protection of personal data of fundamental importance, ensuring that the processing of personal data, carried out in any way, both automated and manual, takes place in full compliance with the safeguards and rights recognized by Regulation (EU) 2016/679 (hereinafter also the “Regulation”), relating to the protection of individuals with regard to the processing of personal data, as well as the free movement of such data (hereinafter referred to as the “Regulation”) and further applicable rules on the protection of personal data.
This document sets out the methods and purposes of the processing of your personal data carried out in the context of the relationship with A.U.ESSE S.r.l., as well as any other information required by law, including information about your rights and their exercise.
It is understood that, unless otherwise specified and regulated by a specific privacy policy made pursuant to Article 13 of the EU Regulation 2016/679 (later also only “Regulation”)this Privacy Policy shall also be understood as a document intended to provide specific indications referred to in Articles 13 and 14 of the Regulation to those who interact, with the data controller through the services offered by the latter.
SECTION 2 – THE CONTROLLER
A.U.ESSE S.r.l. plays the role of data controller (later also only the “Data Controller”) according to the relevant definition contained in Article 4 in point 7) of the Regulation, “the natural or legal person, public authority, service or other body which, individually or together with others, determines the purposes and means of processing personal data” for the processing of personal data for the purposes specified in the following section 4.
This Privacy Policy is also published in the “Privacy” section of the www.auesse.com website (hereinafter also the “Site”) and may be consulted by interested parties at any time.
SECTION 3 – TYPE OF DATA PROCESSED AND PURPOSES OF PROCESSING RELATING TO NAVIGATION ON THE WEBSITE
The Site offers information and, sometimes, interactive content. When browsing the Site, you can then acquire information about the user, in the following ways:
Navigation data
The computer systems and software procedures responsible for the operation of the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes IP addresses, the type of browser used, the operating system, the domain name and the addresses of websites from which access or exit was made, information on the pages visited by users within the site, the time of access, the permanence on the single page, the analysis of internal path and other parameters relative to the operating system and the computer environment of the user.
These technical/IT data are collected and used exclusively in an aggregated and non-identifying manner and could be used to ascertain liability in the event of hypothetical computer crimes against the site.
Data provided voluntarily by the visitor
These are all those personal data freely released by the visitor on the Site, for example, to register and/ or access a private area, request information about a certain product or service through a form, or write to an e-mail address. The processing of such personal data will be carried out on the basis of all the information contained in the specific information provided pursuant to Articles 13 and 14 of the Regulation by the Data Controller when providing personal data when registering as requested in the appropriate form.
The data may be processed for profiling and tracking purposes and collected by cookies. The processing of such personal data will be conducted on the basis of what is indicated in the cookie policy on the Site in the specific section Cookie Policy.
SECTION 4 – DETAILS OF DATA PROCESSING
The processing of personal data is carried out mainly using electronic procedures and media for the time strictly necessary, in accordance with Article 5 of the Regulation.
Personal data will be processed by the Data Controller only to the extent necessary for the pursuit of the purpose for which they were collected. In particular, personal data will be processed for a period of time equal to the minimum necessary, as indicated by Recital 39 of the Regulation, that is, until the termination of the contractual relations between the data subject and the data controller, subject to a further retention period that may be imposed by law as also provided for in Recital 65 of the Regulation.
SECTION 5 – RIGHTS OF DATA SUBJECTS
As provided for in Article 15 of the Regulation, the interested party can access their personal data, ask for their rectification and updating, if incomplete or erroneous, ask for their cancellation if the collection took place in violation of a law or regulation, as well as opposing processing for legitimate and specific reasons.
In particular, we list below all the rights that can be exercised, at any time, against the data controller and/or the joint data controllers:
Right of access: the right, pursuant to Article 15, paragraph 1 of the Regulation, to obtain from the data controller confirmation that personal data are being processed or not and in this case, to obtain access to such personal data and the following information: a) the purposes of the processing; b) the categories of personal data concerned; c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if recipients of third countries or international organisations; d) where possible, the envisaged retention period for personal data or, if not possible, the criteria used to determine that period; e) the existence of the data subject’s right to ask the data controller to rectify or delete personal data or to restrict the processing of personal data concerning him or her or to object to their processing; f) the right to lodge a complaint with a supervisory authority; g) where personal data are not collected from the data subject, all available information on their origin; h) the existence of an automated decision-making process; including the profiling referred to in Article 22, paragraphs 1 and 4 of the Regulation and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the data subject.
All this information can be found in the information that will always be made available to the interested party.
Right of rectification: The right to obtain the rectification of personal data that are inaccurate, taking into account the purposes of the processing, moreover, it is possible to obtain the integration of personal data that are incomplete, also by providing a supplementary declaration.
Right to erasure: right to obtain, the erasure of personal data without undue delay, and the data controller will be obliged to delete your personal data, if there is even one of the following reasons: a) personal data are no longer necessary for the purposes for which they were collected or otherwise processed; b) you revoked the consent on which the processing of your personal data is based and there is no other legal basis for their processing; c) the data subject has opposed the processing pursuant to Article 21, paragraph 1 or 2 of the Regulation and there is no longer any overriding legitimate reason to proceed with the processing of personal data; d) personal data have been processed unlawfully; e) it is necessary to delete personal data in order to comply with a legal obligation under a Community or national law. In some cases, as provided by Article 17, paragraph 3 of the Regulation, the data controller is entitled not to provide for the cancellation of your personal data if their processing is necessary, for example, for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest, for purposes of archiving in the public interest, for scientific or historical research or for statistical purposes, for the establishment, exercise or defense of legal claims.
Right to restriction of processing: right to obtain restriction of processing where one of the following applies: a) You have contested the accuracy of your personal data (the limitation will continue for as long as is necessary for the controller to verify the accuracy of such personal data); b) the processing is unlawful but has opposed the deletion of his personal data and has requested that its use be limited; c) although the data controller no longer needs it for the purposes of processing, the personal data are used for the purpose of establishing, exercising or defending a right in court; d) has opposed the processing pursuant to Article 21, paragraph 1 of the Regulation and is awaiting verification of the possible prevalence of the legitimate reasons of the data controller with respect to its own. In the event of restriction of processing, personal data will be processed, except for storage, only with consent or for verification, the exercise or defense of a right in court or to protect the rights of another natural or legal person or on grounds of the relevant public interest.
Right to data portability: right to request at any time and receive all personal data processed by the data controller and/or the joint data controllers in a structured format, of common and legible use, or request its transmission to another data controller without hindrance. In this case, the data subject will provide us with all the exact details of the new data controller to whom he intends to transfer his personal data by providing us with written permission.
Right to object: pursuant to Article 21, paragraph 2 of the Regulation and as also confirmed by Recital 70, you can object, at any time, to the processing of your personal data if they are processed for direct marketing purposes, including profiling to the extent that it is related to such direct marketing.
Right to lodge a complaint with the Supervisory Authority: without prejudice to the right to appeal to any other administrative or judicial body, if it is considered that the processing of personal data conducted by the data controller and/or the joint data controllers is in breach of the Regulation and/or applicable law, it is possible to lodge a complaint with the Data Protection Authority Competent personnel.
To exercise all the rights identified above, simply contact the Data Controller and/or the joint data controllers in the following ways:
- writing to A.U.ESSE S.r.l., based in Albairate (MI), Via Per Castelletto, 23;
- by sending an e-mail to auesse@auesse.it.
SECTION 6 – CHANGES TO PRIVACY POLICY
This Privacy Policy is applicable to the Site since its publication and complements and supplements the privacy policies published therein.
The possible entry into force of new industry regulations, as well as the constant examination and updating of the general conditions of use of the Site, may entail the need to vary these modalities. It is therefore possible that this Privacy Policy may change over time and therefore we invite each user to consult this page periodically.
It is understood that any change in the privacy policies made during the collection of personal data will be communicated to each data subject by the Data Controller in the manner identified by the latter.