PRIVACY POLICY – www.eurovinil.it and www.service.eurovinil.it
Dear User,
This privacy policy is provided by Eurovinil S.r.l. in accordance with Regulation 679/2016 (GDPR) on personal data protection to describe the methods of processing the personal data of users who browse this website.
While browsing the website www.eurovinil.it and www.service.eurovinil.it (“Website”), information about users may be collected that constitutes personal data under the GDPR. This privacy policy applies exclusively to the Website and does not cover any external sites that the user may access through links available on this Website.
DATA CONTROLLER
The data controller under current legislation is:
Eurovinil S.r.l. – VAT No. 01117410538, with its registered office at Via Genova, 5 – I-58100 Grosseto, Italy.
Email: eurovinil.spa@pec.it
DATA PROCESSOR
The web hosting provider (Kreita S.r.l.s, Via Salvio Giuliano 5 – 20146 Milan, VAT No. 12192670961) is appointed as the data processor, processing data on behalf of the data controller. As the web hosting provider is located within the European Economic Area, it complies with European regulations.
TYPES OF DATA PROCESSED
Browsing Data
The computer systems and software procedures that enable this website to function acquire, during their normal operation, certain personal data, the transmission of which is implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified individuals but, by its nature, could allow users to be identified through processing and association with data held by third parties. This category of data includes the domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server’s response (successful, error, etc.), and other parameters related to the user’s operating system and IT environment. This data is used solely to obtain anonymous statistical information on the use of the site and to check its correct functioning.
For security purposes (e.g., anti-spam filters, firewalls, virus detection), automatically recorded data may include personal data such as the IP address, which could be used, in compliance with current laws, to block attempts to damage the website, cause harm to other users, or carry out activities that are harmful or constitute a crime. Such data is never used for user identification or profiling but solely for the protection of the website and its users.
Additionally, the data controller informs you that the data you provide is processed through computerized tools and procedures for the following purposes:
- Managing and improving website navigation (see also Cookie Policy);
- Responding to explicit requests made through the contact form on the “Contact” page;
- Technical management of navigation (see also Cookie Policy).
Certain data may be processed exclusively for technical/IT management purposes by the data controller’s technological partners. In any case, the data will never be disclosed.
The data you provide may be accessed exclusively by the data controller’s personnel and collaborators and, if applicable, by companies (web hosting providers) that process data on behalf of the controller, solely to fulfill the requested activities.
Data Provided by the User
This refers to data voluntarily provided by the user when requesting information through the contact form on the “Contact” page. Specifically, the following categories of personal data may be processed:
- Name;
- Surname;
- Email address;
- Phone number;
- Message (i.e., the content of the message filled out by the user when making the contact request).
METHODS OF PROCESSING
Personal data is processed with automated and non-automated tools for the time strictly necessary to achieve the purposes for which it was collected (see data retention period below). The personal data provided by users may be accessed by employees and collaborators who provide ancillary or instrumental services for the company’s activities, appointed as data processors under Article 28 of the GDPR. Data will not be disclosed to third parties, except in cases of requests from judicial or public security authorities. Data collected will never be disseminated.
DATA RETENTION PERIOD
Customer data will be retained for the time strictly necessary to achieve the purposes for which it was collected. System-acquired data (Art. 4, lett. B)) will be retained for a maximum of 31 days from the time of acquisition.
PLACE OF DATA PROCESSING
The data collected by the website is processed at the data controller’s headquarters and at the web hosting provider’s data center. The web hosting provider (Kreita S.r.l.s, Via Salvio Giuliano 5 – 20146 Milan, VAT No. 12192670961), which acts as the data processor on behalf of the data controller, is located within the European Economic Area and complies with European regulations.
RIGHTS OF DATA SUBJECTS
Data subjects have the right to:
- Request and obtain information regarding the processing of personal data and a copy of such personal data; for data processed with automated systems, it is possible to request the transfer to another data controller.
- Request and obtain modification and/or correction of inaccurate or incomplete personal data.
- Request and obtain the deletion and/or restriction of processing of personal data when such data is not necessary or no longer necessary for the purposes described above.
- Request and obtain the cessation of any processing of personal data for direct marketing purposes.
Pursuant to Regulation 679/2016, users have the right to lodge complaints with the Data Protection Authority.
Requests can be sent via email to: eurovinil.spa@pec.it