PRIVACY POLICY
pursuant to and for the purposes of Articles 13 and 14 of Regulation (EU) 2016/679 on the processing of personal data
These policy guidelines refer to how personal data is used by the Data Controller and by duly appointed Data-Processing Operators through the website www.aglatech14.com and the pages referred to therein.
In compliance with Articles 13 and 14 of Regulation (EU) 2016/679 on the processing of personal data (hereinafter also referred to simply as the ‘GDPR’), we hereby provide you, as ‘data subjects’, with the necessary information regarding the purposes and methods for processing your personal data, as well as the scope of communication and dissemination thereof.
By visiting the website, using its services or interacting with the Company, users implicitly confirm that they understand the terms of this Privacy Policy and consent to the Company processing their data.
If you do not agree to the terms of this Privacy Policy, please do not visit or otherwise use the website, or send any personal data.
- Collecting information
Most sections of the website do not require any form of registration, allowing visitors to access and consult same without being identified. However, other sections of the website (e.g. contact forms to request more information) may require the user to provide their personal data in order to use specific functions. In this case, failure to provide the required personal data (e.g. name, surname and e-mail address) makes it impossible for Aglatech14 S.r.l. to respond to the requests received.
Aglatech14 S.r.l. processes any personal data collected for specific, limited purposes, and informs the user in this regard at the time of requesting the information.
(a) Passive collection of information: Cookies
While browsing this website, certain user details may be collected passively (e.g. the IP address, which the user does not provide voluntarily) by means of various tools and technologies, such as Internet protocol addresses, cookies, internet tags and the collection of browsing data.
Please read the Cookie Policy for detailed information on this and other technologies used by the website. The Cookie Policy also contains information on how to disable cookies and monitoring technologies when the user does not allow their use.
(b) Types of data collected:
The Company may collect and use various types of personal data, depending on the specific purposes pursued, as described below:
– Personal information, such as name, surname and address;
– Contact details, such as e-mail address, landline number and/or mobile phone number.
2. Processing purposes
Data is processed to allow users to interact fully with all the content published on the website.
While browsing, for example, users may:
- fully browse the various sections of the Data Controller’s website;
- be kept up-to-date on the various activities organised by the Data Controller;
- access the Data Controller’s social media channels through links.
Furthermore, by browsing the website, users may perform additional, specific activities, for example they may:
- contact the Data Controller directly to request and receive information and quotes (in accordance with specific methods and privacy policies);
- subscribe to our newsletter (in accordance with specific methods and privacy policies);
- submit an application (in accordance with specific methods and privacy policies);
As mentioned, for each of these additional, specific activities, which involve the user interacting with the Data Controller in a structured manner, the user will be referred (by link) to the corresponding Privacy Policy.
3. Data processing methods
Personal data voluntarily provided by customers is processed pursuant to Article 5 of the GDPR. Personal data will be processed lawfully and fairly, will not be excessive in relation to the purposes set forth in point no. 2 (for specific information on the processing of the personal data of users for activities requiring a more structured interaction between the latter and the Data Controller, please refer to the applicable Privacy Policy), and will be stored for 24 months from the data’s registration or from the last request sent by the user (in any case, from the most recent of the two), unless a longer term is imposed by tax and administrative regulations, and unless the data is anonymised under current legislation, without being excessive in relation to the purposes set forth in said legislation.
Personal data will be processed on magnetic or electronic media and/or in writing by duly appointed persons in charge of customer management and maintenance of the IT system.
After processing, the data will be stored and retained in accordance with the law.
If consent is revoked, the data will be deleted within 3 months of the request, without prejudice to any specific legal obligations on the storage of accounting, tax and administrative records.
Processing is carried out by means of the operations or set of operations set forth in Article 4, par. 2 of the GDPR and more precisely: the collection, recording, organisation, storage, consultation, elaboration, alteration, selection, retrieval, comparison, use, interconnection, blocking, communication, dissemination, erasure or destruction of data, even if not recorded in a database.
These operations will be carried out both electronically and in hard copy, based on logic that is fully in line with the purposes pursued.
Data processing is carried out by the Data Controller and/or by Data Processors, as well as by duly authorised Data-Processing Operators, acting on the basis of specific instructions provided regarding the purposes and methods of processing.
The list of Data Processors is available on request from the Data Controller.
4. Nature of data provision – Refusal to provide data – Legal basis for processing
The provision and processing of data for the purposes set out in point no. 2 above is optional and carried out in accordance with Article 6, par. 1, letter (b) of the GDPR (performance of contractual or pre-contractual obligations).
In the various sections that require specific content for activities involving (as specified above) a more structured interaction between the Data Controller and the user, informed processing may be preceded by the request for specific consent pursuant to Article 6, par. 1, letter (a) of the GDPR.
In any case, the only data collected for processing is essential data enabling the user to browse the websites, and such data will only be stored for the time of browsing or for a different period of time specific to the execution of a given activity (for more information on browsing, please refer to the ‘cookie policy’). The data processed while browsing or while executing another activity is the data needed to provide the requested service to the user.
The data subject’s refusal to provide said personal data makes it impossible to fulfil the activities set forth in point no. 2.
5. Scope of data communication
Your data, forming the subject of the processing, will not be disclosed to third parties.
However, it may be communicated to Data Processors and Data-Processing Operators duly authorised by the Data Controller, as well as to persons delegated to carry out the activities needed to provide the services requested.
6. Scope of data dissemination
Personal data is not subject to dissemination.
7.Use of the website by minors
The website is aimed at the general public, but its services are intended for persons aged 18 or over. Therefore, the Company requests that minors refrain from registering and/or making online purchases, and from providing their personal data through the website. If the Company becomes aware that it has collected the data of a minor, it will delete it promptly.
8. Sensitive data
Aglatech14 S.r.l. asks users not to transmit or disclose sensitive personal data (e.g. health information) via the website.
9. Data transfer abroad
Personal data may be transferred to Data Controllers residing in the European Union, within the scope of the purposes set forth in point no. 2, if said transfer is functional to the provision of the services offered by the Data Controller. Moreover, in the event of transferring data to third countries, for example due to the use of cloud platforms and/or to the storage of data, said data will be processed in accordance with the provisions of Article 44 et seq. of the GDPR.
10. Rights of the Data Subject
Pursuant to Articles 15, 16 and 17 et seq. of the GDPR, you can assert your rights by contacting the Data Controller. In particular, you can obtain from the Data Controller:
- confirmation of the existence or otherwise of your personal data and its provision in intelligible form;
- information on the origin of the data;
- information on the purposes and methods of processing;
- information on the logic applied to the processing;
- information on the identification details of the Controller and of the persons to whom the data may be communicated;
- updating, rectification and integration of data;
- erasure, transformation into anonymous form or blocking of data processed in breach of the law.
The data subject may object, on legitimate grounds, to the processing of data concerning them, even if pertinent to the purpose of collection, and is also entitled to obtain data portability under Article 20 of the GDPR. In order to exercise the aforementioned rights, you may contact the Data Controller and/or Data Processor by e-mail at the following address.
11. Data Controller
The Data Controller is Aglatech14 S.r.l. (Tax ID No. 08699190966), in the person of its legal representative pro tempore, with registered office in Milan (20123 – MI), Via Carducci 26, e-mail: privacy@aglatech14.it.