Information on the processing of personal data of users of the website https://www.bbdeisogni.it

The following information ("the Information") is provided, pursuant to art. 13 of EU Reg. 2016/679 (“GDPR”), in order to illustrate the purposes and methods of processing personal data relating to users who access the website www.bbdeisogni.it (“the Site”).

This Information only concerns the processing of personal data referring to users of the Site ("the interested parties"), and does not concern the processing of personal data carried out when visiting pages and websites accessible through any links present in the Site. In addition to this Information, the Data Controller may provide more specific information with reference to certain treatments that are carried out through some modules contained in the Site.

Data controller

The data controller of the personal data of users who access the Site is Marco Panichi, strada Casacagnano 40, Roccafluvione – 63093 (AP). ("the Owner"); the contact details for contacting the Data Controller ("Contact details") are as follows: no. tel. 329 6213831, email: This email address is being protected from spambots. You need JavaScript enabled to view it. .

Type of data processed and purpose of the processing

When the user visits the Site, the following may be processed:

  1. data relating to navigation of the Site, detected and collected by the Data Controller through the use of software applications necessary to guarantee the ordinary functionality of the Site.

The processing of such information (such as the Internet Protocol address, the domain names of the computers and devices used by users, the browser used, the Uniform Resource Identifier and other data which, by providing information on the device and connection used to visit the Website, can indirectly allow the identification of the interested party), it is essential to allow the correct functioning of the Website and is therefore necessary to allow users to use the services offered.

Failure to provide it by the interested party prevents you from browsing the Site and using the services offered through it.

The technical parameters of the Site have been configured in such a way as to minimize the collection and use of user identification data.

  1. personal data provided voluntarily by the Data Subjects by entering personal information in the forms on the Site, sending e-mails or communications to the addresses of the Data Controller on the Site and using the features offered by the Site.

These personal data are processed for the purpose of sending disclosure communications relating to the activities carried out by the Data Controller, limited to the contact details of the interested party.

These operations are carried out only with consent, expressed by entering your e-mail address in the appropriate form. The interested party may revoke the consent given at any time, using the appropriate function at the bottom of each e-mail received or by contacting the contact details indicated in this Information.

These processing operations concern the e-mail address of the applicant, as well as the additional information communicated to the Data Controller through the contacts made available on the site.

The provision of such data is optional, but necessary so that the Data Controller can provide a response to the requests sent and to offer the requested service.

Personal data will be processed purely with automated tools (e.g. management software) and residually with non-automated means (e.g. paper archives) chosen so as to ensure the security of the data, by persons operating under the authority directly from the Data Controller and who have been duly authorized and instructed in this regard.

  1. data such as the Internet Protocol (IP) address and the technical specifications of the browser used for browsing, which are collected and communicated by the Owner to Google Ireland Ltd. for the purpose of increasing the visibility of the Owner's image.

Limited to the operations now indicated, the data controller is also Google Ireland Ltd., Republic of Ireland (EU) which the interested party may contact to exercise their rights in relation to them.

This processing is carried out in pursuit of the legitimate interest of the Owner, Google Analytics helps the Owner to understand how the website is used. Information relating to your use of the website, including your IP address, may be transmitted to and stored on Google servers. We use this information to compile reports and improve the site. The data collects information anonymously, including the number of visitors to the site, where the visitors come from and the pages they visited

Personal data will be processed purely with automated tools (e.g. management software) and residually with non-automated means (e.g. paper archives) chosen in such a way as to ensure the security of the data themselves, by people operating under the authority directly from the Data Controller and who have been duly authorized and instructed in this regard.

Personal data retention period

The personal data processed for the purposes referred to in point A) will be kept for the time necessary to allow navigation of the Site and in any case no later than 7 days from collection, without prejudice to the possible need for further conservation for the purpose of ascertaining crimes from part of the public authorities or for the purposes of ascertaining, exercising or defending in court a right or legitimate interest of the Data Controller.

The personal data processed for the purposes referred to in point B) are kept for the time strictly necessary to achieve the purposes for which they were collected; as regards the sending of newsletters for informational and promotional purposes of the activities carried out by the Data Controller, the contact data are processed until the interested party revokes consent.

Categories of recipients of personal data and transfers to third countries

The personal data of the interested parties may be communicated:

  • to information technology (IT) service providers, such as support for the management and maintenance of the Site, web hosting and e-mail;
  • to the Data Controller's collaborators in charge of dealing with the Site and providing feedback to the requests made;
  • to public authorities, such as the police forces and judicial offices, if this is required by law or by a legitimate provision.

Where the conditions established by the GDPR are met, the Data Controller will stipulate specific contracts with those recipients, among those indicated above, who receive the communication of personal data so that they can process them on his behalf ("Data Processors"), aimed at ensuring that the operations carried out take place in strict compliance with the instructions given by the Data Controller and that adequate technical and organizational measures are implemented to safeguard the security of the personal data processed. Your personal data will not be transferred to countries outside the European Economic Area ("Third Countries") or international organisations.

The rights of the interested parties

The interested party can exercise, at any time and free of charge, the rights indicated by the articles 15 et seq. of the GDPR by contacting the Data Controller at the contact details. In particular, the user, as an interested party and within the limits set by the GDPR, can exercise:

  • the right of access, i.e. the right to obtain confirmation as to the existence or not of a treatment concerning one's personal data, as well as the right to receive any information relating to the same treatment and a copy of the personal data processed;
  • the right to rectification, i.e. the right to obtain the rectification or integration of one's personal data being processed, if they are inaccurate or incomplete with respect to the purposes of the processing;
  • the right to cancellation (so-called "right to be forgotten"), i.e. the right to obtain the cancellation of personal data being processed, in the cases provided for by art. 17 of the GDPR;
  • the right to limitation of treatment, i.e. the right to obtain limitation of the processing of personal data, upon occurrence of the conditions provided for by art. 18 of the GDPR;
  • the right to portability, i.e. the right to receive personal data concerning the interested party and which he has provided in a structured format, commonly used and readable by an automatic device, and to obtain direct transmission of the same to a different data controller, where technically feasible;
  • the right to object, i.e. the right to object, at any time for reasons related to your particular situation, to the processing of data concerning the interested party based on the condition of lawfulness of legitimate interest or the execution of a task in the public interest or the exercise of public powers, unless there are legitimate reasons for the Data Controller to continue processing which prevail over the interests, rights and freedoms of the interested party or for the assessment, exercise or defense of a right in court judicial;
  • the right to lodge a complaint with a Supervisory Authority, such as the Guarantor for the Protection of Personal Data, with offices in Piazza Venezia 11 – 00187, Rome (RM), Italy (IT), E-mail: garante@gpdp. it, PEC: This email address is being protected from spambots. You need JavaScript enabled to view it..

These rights may be exercised free of charge by sending a written communication to the Data Controller at the contact details. However, in the event of manifestly unfounded or excessive requests, also due to their repetitiveness, the Data Controller could charge a reasonable fee based on the administrative costs incurred to manage the request, or deny satisfaction.

Responsible for the treatment

Web hosting (Aruba S.p.A. - Via San Clemente, 53 - 24036 Ponte San Pietro (BG) P.IVA 01573850516), is appointed data processor, processing the data on behalf of the owner. Aruba S.p.A. is located in the European Economic Area and acts in compliance with European standards (privacy policy of Aruba S.p.A.). Google is appointed data controller, processing data on behalf of the owner (Google Analytics).

Information changes

Over time, the Data Controller may make changes to this Information, also in order to guarantee its updating or improve its clarity; in this case, the Data Controller will promptly inform the users of the Site, using the most effective and appropriate tools for this purpose.

 

Last modified: August 29, 2023