User information pursuant to Articles 13 and 14 of Regulation (EU) of the European Parliament and of the Council of 27 April 2016 n. 679 (the "GDPR")
Italweber S.p.A., with registered office in Via Enrico Fermi 40/42, 20057 Assago (MI), telephone +39 02.939.771, e-mail info@italweber.it, in its capacity as data controller (hereinafter, the "Company" or the "Data Controller"), provides information on the processing of personal data collected from users who consult the website, accessible electronically at the following www.italweber.it address (the "Website").
The personal data of the user of the Website (hereinafter, the "User") are collected directly from the same and are processed in compliance with the provisions of the GDPR, the applicable legislation from time to time, as well as in accordance with this policy according to principles of correctness, lawfulness, transparency and protection of confidentiality.
1. WHAT TYPES OF PERSONAL DATA DOES THE COMPANY PROCESS?
1.1. Browsing data and technical cookies
The procedures and computer systems set up for the Website acquire, during their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols, to allow the User to browse the Website or provide the service requested by the User himself.
The Company uses only technical cookies without which the consultation of the Website or some operations could not be carried out or would be more complex and/or less secure.
Technical cookies are installed directly by the Data Controller; since they are used for purposes strictly necessary for browsing the Website, for their use (storage in the device) the prior consent of the User who accesses the Website itself is not required.
1.2. Data processed following a request for contact or information by the User
The User, through the Website, may request the Company to be contacted to receive information regarding the rental and/or purchase of the Fund's properties promoted through the Website. In this case, the personal data provided voluntarily by the User (also by filling in the specific form on the Website) and transmitted to the Data Controller concern: name and surname, telephone number, e-mail address.
The personal data referred to in paragraphs 1.1 to 1.2 above are collectively referred to as "Personal Data".
2. FOR WHAT PURPOSES ARE PERSONAL DATA PROCESSED? WHAT IS THE LEGAL BASIS FOR THE PROCESSING?
Personal Data are processed for the purposes indicated below.
- Browsing data (paragraph 1.1): the performance of activities necessary to check the correct functioning of the services offered and allow the User to consult the Website in a safe and efficient manner;
- Personal Data (paragraph 1.2): to meet specific requests from the User on the rental and/or purchase of properties owned by the Fund, promoted through the Website; the legal basis for the processing is in the execution of pre-contractual and contractual measures adopted at the request of the data subject (art. 6, lett. (b) of the GDPR);
- all categories of Personal Data (paragraph 1): (i) fulfilment of obligations under the applicable legislation from time to time; (ii) the ascertainment of any offences by the judicial authority; the legal basis of the processing is the fulfilment of a legal obligation to which the Data Controller is subject (Article 6, letter c) of the GDPR);
- all categories of Personal Data (paragraph 1): (i) the exercise, where necessary, of the rights of the Data Controller, for example the right of defence in court; the legal basis of the processing is in the pursuit of the legitimate interest of the Data Controller aimed at protecting its rights or its right of defense (art. 6, lett. (f) of the GDPR).
3. WHO HAS ACCESS TO YOUR PERSONAL DATA? DATA RECIPIENTS
In carrying out its activities and for the pursuit of the purposes set out in paragraph 2 above, the User's Personal Data may be communicated to:
- judicial and/or supervisory authorities, supervisory authorities, in the event of their request;
- IT service providers in favor of the Company;
- companies belonging to the Group of the Data Controller.
Personal Data is processed by:
- the employees and/or collaborators of the Data Controller, who operate on the basis of the instructions provided by the latter. The system administrator may also have access to Personal Data during the performance of his duties. The name of the aforementioned subjects can be requested from the Data Controller, by contacting info@italweber.it;
- the data processors appointed for this purpose by the Data Controller. The list of data processors appointed by the Company can be requested at the following e-mail address: info@italweber.it.
4. WHERE IS THE DATA PROCESSED? IS PERSONAL DATA TRANSFERRED ABROAD?
[The processing of Personal Data is carried out by the Data Controller mainly in Italy on the servers of the Data Controller and/or of the third party companies appointed [and/or appointed as data processors]. In relation to the purposes referred to in paragraph 2 above, Personal Data may be transferred to third parties in Europe [and outside the EU. The list of the latter countries is available from the Data Controller and can be requested in the manner indicated in paragraph 9 below]
5. WHAT IS THE DATA RETENTION PERIOD?
Personal data will be stored according to the following criteria:
- for the purposes referred to in letter a) of paragraph 2 above, for a period of time not exceeding 365 days from the User's consultation of the Website , unless otherwise necessary for regulatory compliance;
- for the purposes referred to in letter b) of paragraph 2 above, for a period of time not exceeding 365 days from the last request for information sent by the User to the Company in relation to the properties promoted through the Website, except for a different period necessary for regulatory compliance;
- for the purpose referred to in letter c) of paragraph 2 above, for a period of time not exceeding that necessary for the fulfilment of regulatory obligations and/or the ascertainment of any offences;
- for the purpose of legitimate interest referred to in letter d) of paragraph 2 above, for a period of time necessary to pursue the legitimate interest of the Data Controller aimed at protecting its rights or its right of defense from the collection of Personal Data.
6. HOW WILL THE DATA BE PROCESSED?
The processing of personal data will be carried out using electronic and/or telematic tools with logics strictly related to the purposes referred to in paragraph 2 above, and, in any case, in such a way as to guarantee the security and confidentiality of the data.
7. WHAT RIGHTS DO YOU HAVE IN RELATION TO YOUR PERSONAL DATA?
With regard to their Personal Data, the User, at any time, may exercise the rights provided for by art. 15 to 22 of the GDPR in the manner and within the terms established therein.
In particular, the User has the right to:
- ask the Data Controller for access, rectification, erasure of Personal Data ("right to be forgotten") concerning him/her or the limitation of the processing of such data;
- object to the processing of Personal Data;
- obtain the portability of Personal Data;
- revoke the consent requested by the Data Controller and the User at any time, without prejudice to the lawfulness of the processing based on the consent given before the revocation.
8. SUBMISSION OF COMPLAINTS
In relation to any type of data processed by the Data Controller, without prejudice to the User's right to appeal in any other jurisdiction, if he/she believes that the processing of his/her Personal Data has taken place or is taking place in violation of the GDPR and the applicable regulatory provisions from time to time, the User has the right to lodge a complaint with the Data Protection Authority in accordance with the proceduresis indicated on the www.garanteprivacy.it website.
9. METHODS OF EXERCISING RIGHTS. HOW TO CONTACT THE DATA CONTROLLER
The User may at any time exercise the rights referred to in paragraph 7 above by sending a communication to the following address: info@italweber.it or to the address of the Company's registered office, Via Enrico Fermi 40/42, 20057 Assago (MI).
10. NATURE OF THE PROVISION
With reference to the purposes highlighted in paragraph 2 above:
- in letter a), the provision of Personal Data is necessary in order to allow the User to consult the Website effectively;
- in letter b), the provision of Personal Data is optional; the absence of data prevents the User from receiving information on properties for rent and/or sale;
- in letter c), the provision of Personal Data is mandatory for the Data Controller to comply with legal obligations;
- in letter d), the provision of Personal Data is mandatory and the User may object to it in the manner referred to in paragraph 9 above, without prejudice to the Company's right to assert any overriding interest or to defend its rights in legal proceedings.