PRIVACY POLICY

INTRODUCTION

This policy explains how your personal information obtained by using our website (www. novavetro.it) is managed, illustrating the methods and purposes of collecting, using and processing the information, under articles 13 and 14, EU Reg. 2016/679 (the GDPR).

DATA CONTROLLER

The Data Controller is Nova Vetro s.r.l., based in San Severino Marche (MC), Via Ferrante Ferranti n. 35, Zona Ind.le Taccoli.

LEGITIMACY OF PROVIDING DATA

Nova Vetro s.r.l. declines any responsibility if the Data Subject confers data that is incorrect, untruthful, or relates to third parties when not legal and expressly authorised with consent to its processing. The Data Subject takes full responsibility for this.

CATEGORIES OF DATA PROCESSED

This site makes use of technical and analytical cookies. To learn more you can consult the extended cookie policy via this link.

To enable access to and use of the site’s reserved area, by duly authorized subjects, we also process the following personal data: name, surname, email address, login credentials, browsing data (system log, ip address), additional data that may be uploaded or entered by the Data Subject.

PURPOSE AND LEGAL BASIS OF PROCESSING

The above personal data will be processed for:

a. TECHNICAL COOKIES:
To ensure the site works properly.
This is mandatory and is based on the legitimate interests of the Data Controller for the site to function correctly and regularly (Art. 6, 1 (f) GDPR).

b. ANALYTICAL COOKIES:
Statistical analysis of aggregated and anonymized site visitors.
This processing is based on the consent of the Data Subject (Art. 6, 1 (a) GDPR), given with the first, or subsequent access to the website.
The Data Subject may withdraw their consent at any time without prejudice to the lawfulness of the processing before the withdrawal. The procedure to withdraw consent is in the section “Rights of the data subject”.
Providing data is optional and any withdrawal of consent by the data subject will make it impossible to analyse the data.

c. RESERVED AREA:
Access to sections of the site by people who have special relationships with the Data Controller (e.g. agents) and authorized by him.
This processing is based on the consent of the Data Subject (Art. 6, 1(a) GDPR).
The Data Subject may withdraw their consent at any time without prejudice to the lawfulness of the processing before the withdrawal. The procedure to withdraw consent is in the section “Rights of the data subject”.
Providing this data is necessary to access the reserved area of the site and its features. Any withdrawal of consent by the data subject will make it impossible to access the reserved area.

DATA RETENTION

Personal data will be kept for the following periods:

  1. Cookie: see cookie policy.
  2. Reserved area: validity period of the login, as agreed between the Data Controller and the data subject, but no longer than the underlying relationship (e.g. agency contract) between them.

DATA COMMUNICATION

Personal data may be disclosed, in addition to Public Administration and Legal Authorities, in compliance with legal obligations and administrative or judicial measures, to external subjects, duly responsible for processing (Art. 28 GDPR), who process the same on behalf of Nova Vetro s.r.l.
The data processed through our website may be communicated to:

  • technical experts and software houses who assist the owner including for development, maintenance and care of the website;
  • companies providing the hosting service and other IT tools and third-party services used to operate the website.

Data processing takes place within the European Union.
If, for logistical and operational purposes related to the hosting service, personal data are transferred to non-EU countries, the latter must be the subject of an adequacy decision by the EU Commission or provide adequate guarantees pursuant to Article 46 GDPR.
Disseminating personal data subject to processing is not anticipated.

SECURITY MEASURES

Personal data will be subject to paper and computer processing. To this end, all appropriate procedures will be adopted to protect the confidentiality, integrity and availability of information in compliance with current rules.

RIGHTS OF THE DATA SUBJECT

As per Articles 13-21 of the GDPR, the Data Subject may at any time exercise the following rights against Nova Vetro s.r.l.:

  • right to withdraw consent to processing data (see section “Purpose of processing and legal basis”);
  • right of access (the Data Subject has the right to confirm the processing, as well as information on the data processed and to receive a copy of the data);
  • right of rectification (the Data Subject may request their personal data is updated or corrected);
  • right to erase data (“right to be forgotten”) the Data Subject may request deletion of their personal data, under the conditions in Art. 17 GDPR);
  • right to transfer (under the conditions in Art. 20 GDPR, the Data Subject has the right to receive their data in a structured format, readable by an automatic device in common use and, where technically feasible, to have it transferred without obstacles to another owner);
  • limit processing (the Data Subject may request limited processing of their data, as per Art. 18 GDPR. Such data may be processed by the Data Controller for storage, with the consent of the Data Subject or to protect the rights of themself or others in court or for reasons of public interest);
  • right of objection (the Data Subject, when personal data are processed for public interest or the legitimate interest of the Data Controller, may object to processing for reasons related to their particular situation. An objection for direct marketing purposes does not need any justification);
  • right to complain to the Guarantor Authority (www.garanteprivacy.it).

EXERCISING RIGHTS

To exercise these rights, the Interested Party must send a written request to Nova Vetro s.r.l. via:

MODIFYING THIS PRIVACY POLICY

Nova Vetro s.r.l. reserves the right to make changes to this privacy policy at any time giving adequate information to Users, who may revoke consent for processing the related personal data.

Last updated: May 18, 2021.