PRIVACY POLICY
IVG Colbachini S.p.A. understands the importance of personal data protection. We are committed to respecting the privacy of users, treating private data with caution and confidentiality, and not using them for purposes other than those specified below.
The purpose of this policy is to describe how our website treats the personal information of those consulting it.
This is an information notice - pursuant to article 13 of EU Regulation 679/2016 - addressed to those who browse the IVG Colbachini S.p.A. website and its services at the www.ivgspa.it address.
This policy may be amended or updated at any time by IVG Colbachini S.p.A.
The information is provided only for this site and not for other websites that may be consulted by the user through links except those indicated above.
Data Controller
The Data Controller is: IVG Colbachini S.p.A., Via Fossona, 132 - 35030 Cervarese S. Croce (PD) REA number PD – 160628 and VAT number (IT) 00957910284; hereafter IVG.
Type of data
IVG informs the website users that the data will be used exclusively for the purposes specified below. The data processed are browsing data and data provided voluntarily by the user.
1. Browsing data
The computer systems procedures used to operate the website obtain essential data necessary for the correct functioning of the platform. The transmission of some information is implicit in the protocols of internet connection and browsing systems
We also acquire information related to the browser session and some generic data related to the user’s device. All acquired data are anonymous and are not referable to a specific user or for profiling purposes.
2. Data provided voluntarily by the user
In order to access certain services of the website (contact form, request for product information, subscription to the newsletter, access to the reserved area), the user must voluntarily provide IVG different types of data.
Purposes, legal bases and nature of conferment
IVG will process the Data collected by this application in relation to the purposes and according to the legal bases listed below:
a) purposes related to the use of the services offered by the site (site navigation) for which the legal basis is the legitimate interest of the interested party (Article 6, paragraph 1, letter f) GDPR);
b) activities related and necessary for managing relations with customers and potential collaborators (contact requests and product information) for which the legal basis is the execution of a contract which the interested party is a part of or the execution of pre-contractual measures taken upon the request of the interested party (Article 6, paragraph 1, letter b) GDPR);
c) marketing activities aimed at market research, economic analysis and statistics by creating a user profile, using automated tools, in order to understand purchasing habits for which the legal basis is the consent expressed by the interested party (Article 6, paragraph 1, letter a) GDPR);
d) activities aimed at sending commercial communications, also in line with your preferences, by sending advertising / informative / promotional material, through the use of newsletters, or also in relation to programs and promotions, even online, for communications, development and maintenance of business relationships for which ones the legal basis is the consent expressed by the interested party (Article 6, paragraph 1, letter a) GDPR);
e) publishing images of special projects created by IVG and shared by customers through the dedicated form for which the legal basis is the consent expressed by the interested party (Article 6, paragraph 1, letter a) GDPR);
f) activities aimed at sending commercial communications related to services similar to those of previous sales between the parties through the use of newsletters or other systems that do not require consent, c.d. Soft-spam, (Article 130, paragraph 4, Legislative Decree 196/2003), for which the legal basis is the legitimate interest of the interested party (Article 6, paragraph 1, letter f) GDPR).
For the purposes referred to in points a) and b) the conferment is mandatory, the data is collected without your express consent, otherwise the Data Controller cannot proceed with the execution of the contract, the conclusion of pre-contract negotiations or the provision of services offered by this site. For the purposes referred to in paragraph c), d) and e) the conferment is optional and in case of failure to provide conferment, the Data Controller cannot proceed for these specific purposes without having obtained your prior and explicit consent. For the purposes referred to the point f) the conferment is optional, in the absence of your explicit consent, the Data Controller may proceed with the sending of communications as long as you do not object to such processing
It is always possible to ask the Data Controller to clarify the concrete legal basis of each treatment and in particular to specify whether the treatment is based on the law, foreseen by a contract, legitimate interest or necessary to conclude a contract. The User can obtain further information regarding the legitimate interest pursued by the Data Controller by contacting him at the e-mail address: privacy@ivgspa.it.
Modality of data treatment
The treatment of data will be carried out, also through the help of third-party platforms, pursuant to Art. 4 n. 2) of the GDPR, through the following operations: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation, and destruction of data.
The data will be submitted to both paper and electronic and / or automated processing.
Communications relating to marketing activities may take place through the use of traditional methods (e.g., paper mail, phone calls with operator), automated (e.g., phone calls without operator) and similar (e.g. fax, e-mail, SMS, newsletter).
Document Retention
The data, starting from their receipt / update, will be kept for a reasonable period with respect to the purposes of the treatment described above. Specifically for the purposes referred to by the letters:
a) Strictly for the time necessary for the execution of this purpose
b) 10 years from the end of the commercial relationship (contractual or pre-contractual) or for the time indicated by the applicable regulations.
c) no more than 24 months for the purpose of profiling and no more than 12 months for analysis of the behaviour referred to the purchase details or in any case until revocation of consent by the interested party if earlier than those terms. The lawfulness of the treatment remains valid in the period of validity of the same consent. After this period the data may be used by the Data Controller for statistical purposes or market research only anonymously and as aggregated data. In case of revocation IVG S.p.A. will not proceed with any further treatment.
d) until revocation of consent by the interested party, without prejudice to the lawfulness of the treatment in the period of validity of the same consent. In case of revocation IVG S.p.A. will not proceed to make any further communication.
e) until revocation of consent by the interested party, without prejudice to the lawfulness of the treatment in the period of validity of the same consent. In case of revocation IVG S.p.A. will not proceed with any further processing for this specific purpose.
f) until your objection to this treatment. The interested party may, at any time and for free, stop receiving these communications by writing to privacy@ivgspa.it, without prejudice to the lawfulness of the treatment in the period before the communication. In case of revocation IVG S.p.A. will not proceed to make any further communication.
Communication and data transfer
The data being processed will not be released; it may be communicated, for the purposes indicated in this information document, to third parties, including business partners, consultants and freelancers, banks and credit institutions, insurance companies, financial companies, factoring, leasing, services, management and credit recovery, auditors, debt collection companies, public bodies, auditing or supervisory bodies, to fulfil obligations deriving from the law, regulations, community regulations or for aspects concerning the management and execution of the legal relationship with you, or occurred with you.
The data will be processed by the following subjects:
• Employees of companies that operate as persons authorized to process data according to the tasks performed and adequately educated.
• External responsible parties according to Article 28 of the GDPR
The list of persons responsible for processing personal data is available at IVG’s registered office.
For all purposes indicated in this document, the data may also be communicated abroad, inside and outside the European Union, in compliance with the rights and guarantees provided by the current legislation, depending on verification that the country in question guarantees an "adequate" level of protection in accordance with the provisions of the GDPR.
Rights of the interested party
It should be noted that in the quality of interested parties, at any time you may request:
a) access to personal data,
b) their correction in case of inaccuracy,
c) cancellation,
d) the limitation of treatment,
e) the right to oppose the processing of data where the conditions are met,
f) the right to data portability, i.e. to receive the personal data provided in a structured format that is commonly and automatically readable by an automatic device.
For what is not expressly provided for by the provisions referred to here, we refer entirely to the legislation on Privacy and specifically to articles. 15, 16, 17, 18, 20 and 21 of the GDPR.
The request by the interested party can be made by mail or fax or registered mail with the subject: "request by the interested party" specifying in the request the right that the interested party wants to exercise (cancellation, rectification, portability, oblivion, etc..), together with a valid e-mail address / pec to which the reply should be sent. The Data Controller or, an individual appointed, will proceed to satisfy the request within 30 days from the date of receipt. If the answer is complex, the time could be extended by a further 30 days, but this must be communicated to the interested party. If the user considers proper to assert his rights, he has the right to address a complaint to the competent supervisory authority, corresponding to the Guarantor for the Protection of Personal Data, located in Piazza Venezia 11, Rome.
Withdrawal of consent
The consent given may at any time be revoked, without prejudice to the lawfulness of the processing based on the consent given prior to the revocation and the further processing of the same data based on different legal bases with respect to the consent itself, such as fulfilment of contractual obligations and by law
For further information on this information or on any privacy topic, or in case you wish to exercise your rights or withdraw your consent, you can write to privacy@ivgspa.it.