Introduction
Gestioni S.r.l., tax code VAT number 03953540980, with registered office in Via del Sostegno 60 - 25124 Brescia (BS) and operational unit Via Brescia 31 - 36040 Torri di Quartesolo (VI), in the person of the legal representative, as Data Controller, informs you to pursuant to Legislative Decree 30.6.2003 n. 196 and subsequent amendments and art. 13 EU Regulation no. 2016/679 of the following:
Definitions and legal references
Personal Data (or Data)
Any information relating to a natural person, identified or identifiable, even indirectly, by reference to any other information, including a personal identification number, constitutes personal data.
Usage Data
This is the information collected automatically by this Application (or by third-party applications that this Application uses), including: the IP addresses or domain names of the computers used by the User who connects with this Application, the addresses in URI (Uniform Resource Identifier) notation, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc. ) the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal connotations of the visit (for example the time spent on each page) and the details of the itinerary followed within the Application, with particular reference to the sequence of pages consulted, to the parameters relating to the operating system and the IT environment of the User.
User
The individual who uses this Application, who must coincide with or be authorized by the interested party and whose Personal Data are being processed.
Interested
The natural or legal person to whom the Personal Data refers.
Data Processor (or Manager)
The natural person, legal person, public administration and any other body, association or organization that processes personal data on behalf of the data controller.
Data Controller (or Owner)
The natural person, legal person, public administration and any other body, association or organization which is responsible, even jointly with another owner, for decisions regarding the purposes, means and methods of processing personal data and the tools used, including the security profile, in relation to the operation and use of this Application. The Data Controller, unless otherwise specified, is the owner of this Application.
This Application
The hardware or software tool through which the Personal Data of Users are collected.
Cookies
Cookies are small text strings sent to the user's computer when they visit a website that they store, and sometimes keep track of information relating to the use of the Site by the user
Legal references
Notice to European Users: this privacy statement has been prepared in fulfillment of the obligations set out in articles 13 and following EU Reg. GDPR 679/2016 as well as the provisions of Directive 2002/58 / EC, as updated by Directive 2009/136 / EC, on the subject of Cookies.
This privacy policy applies exclusively to this Application.
Availability of the information.
The Data Controller provides the possibility to consult this information: a) every time it collects the personal data of Customers; b) each time an express request is made; c) by consulting this website.
Purpose of data processing.
Your personal data are processed for the following Service purposes:
To manage and maintain the website;
Manage your contact request after completing the appropriate form;
Fulfill the pre-contractual, contractual and tax obligations deriving from existing relationships with you;
Fulfill the obligations established by law, by a regulation, by community legislation or by an order of the Authority;
Prevent or discover fraudulent activity or abuse harmful to the website;
Exercise the rights of the owner, for example the right to defense in court.
This site processes data based on consent. By using or consulting this site, visitors and users explicitly approve this privacy statement and consent to the processing of their personal data in relation to the methods and purposes described, including any disclosure to third parties if necessary for the provision of a service.
Some data, on the other hand, may be processed on the basis of the user's legitimate interest in using the contents published on the Data Controller's websites and their proper administration and management, including the security and proper functioning of the site.
Processing methods
The processing of your personal data is carried out by means of the operations indicated in the Privacy Code and subsequent amendments. and art. 4 n. 2) GDPR and more precisely: collection, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Your personal data are subjected to both paper and electronic and automated processing.
The Data Controller will process personal data for the time necessary to fulfill the aforementioned purposes and in any case for no more than 10 years from the termination of the relationship for the Service Purposes.
Access to data
Your data may be made accessible for the aforementioned purposes:
To employees and collaborators of the Data Controller, in their capacity as persons in charge and / or internal managers of the processing and / or system administrators;
To third-party companies (for example, providers for the management and maintenance of the website, suppliers, credit institutions, professional firms, etc.) who carry out outsourced activities on behalf of the Data Controller, in their capacity as external data processors.
Companies that perform functions strictly connected and instrumental to the operation - including technical - of the services of Gestioni S.r.l. such as for example suppliers that provide archiving, administrative, payment and billing services that provide technical components for the provision of some service features
administrative and judicial bodies and authorities by virtue of legal obligations.
Data communication
Without your express consent, the Data Controller may still communicate your data to Supervisory Bodies, Judicial Authorities as well as to all other subjects to whom communication is required by law for the accomplishment of the aforementioned purposes. Your information will not be disseminated.
Data transferThe management and storage of personal data will take place on servers located within the European Union of the Data Controller and / or third-party companies appointed and duly appointed as Data Processors. Currently our servers are located in Italy. In any case, it is understood that the Data Controller, if necessary, will have the right to move the location of the servers to Italy and / or the European Union and / or non-EU countries. In this case, the Data Controller ensures from now on that the transfer of data outside the EU will take place in compliance with the applicable legal provisions by stipulating, if necessary, agreements that guarantee an adequate level of protection and / or adopting the standard contractual clauses provided for by European Commission.
Nature of the provision of data and consequences of refusing to respond
The provision of data for the purposes indicated above is necessary to guarantee the Services requested by you.
Data retention
The storage of personal data will take place in paper and / or electronic / computer form and for the time strictly necessary to fulfill the purposes outlined above in compliance with your privacy and current regulations.
For analysis purposes aimed at developing and improving the service, the user's personal data may be kept for 36 months for security and prevention reasons.
Invoices, accounting documents and transaction data are kept for 10 years in accordance with the law (including tax obligations).
In the case of exercising the right to be forgotten through a request for express cancellation of personal data processed by the owner, we remind you that such data will be kept, in a protected form and with limited access, only for the purpose of ascertaining and suppressing crimes, for a period not exceeding 12 months from the date of the request and subsequently they will be securely deleted or anonymised irreversibly.
Data relating to telematic traffic, excluding the contents of communications, will be kept for a period not exceeding 6 years from the date of communication, pursuant to art. 24 of Law no. 167/2017, which transposed the EU Directive 2017/541 on anti-terrorism.
If you do not exercise any active action (for example navigation, searches and / or any other way of using the service) on http://gestionibs.it/ for a period of 27 months, you will be classified as an inactive user and your personal data will be deleted. .
Rights of the interested party
In your capacity as an interested party, you have the right to:
1) to obtain from the Data Controller confirmation of the existence or otherwise of personal data concerning him and has the right to have them made available;
2) to have knowledge of the origin of the data, the purposes and methods of treatment, the identity of the owner, the internal delegates to whom the data may be communicated and the external data processors;
3) to request access to personal data and the correction or cancellation of the same or the limitation of the processing concerning him;
4) to data portability, where possible;
5) to revoke any consent given;
6) to exercise the right to lodge a complaint with a supervisory authority;
7) to oppose the processing of data for legitimate reasons.
How to exercise rights
You can exercise your rights at any time by sending a registered letter Gestioni S.r.l., tax code and VAT number 03953540980, with registered office in Via del Sostegno 60 - 25124 Brescia (BS) and operational unit Via Brescia 31 - 36040 Torri di Quartesolo (VI), in the person of the legal representative, email: This email address is being protected from spambots. You need JavaScript enabled to view it., pec : This email address is being protected from spambots. You need JavaScript enabled to view it.
Changes to this Notice
This information may be subject to changes. It is therefore advisable to check this information regularly and refer to the most updated version.