Information pursuant to art. 13 of Legislative Decree 196/03 – Code regarding the protection of personal data and art. 13 and 14 of EU Reg. 679/16 in force and in application from 25/05/2018 for the website https://artenet.it/
Owner of the treatment
Data Controller Manfredi Faldi, Via Metastasio, 6 – 50124 Florence, Owner contact email: firstname.lastname@example.org – The owner guarantees compliance with the legislation on the protection of personal data and the protection of the person, and informs that the personal data provided by the interested parties through the various collection channels, directly or indirectly managed by the Data Controller, or acquired from third parties in compliance with legal conditions, will be treated in a lawful, relevant and correct manner, in compliance with the principles established by Legislative Decree 196/2003 and by EU Reg. 679/16.
Type of data processed
The collection and consequent processing of data are carried out by the Data Owner through its portal https://artenet.it in compliance with the current security measures and provisions of the Laws for the processing of personal data.
Navigation data: The computer systems and software procedures used to operate these sites automatically acquire, during normal operation, some personal data which are then implicitly transmitted in the use of Internet communication protocols. This is information which by its nature could, through associations and processing with data held by third parties, allow users / visitors to be identified (e.g. IP address, domain names of computers used by users / visitors who connect to the site, etc.).
These data are used for the sole purpose of obtaining statistical information and to check the correct functioning of the sites. They are usually deleted immediately after processing. They can be used to ascertain responsibility in the event of damage to sites or offenses perpetrated through the network.
Data transferred by the user: If users / visitors connecting to these sites or through any other form of written or verbal communication, send their personal data to access certain services, or, to make requests via e-mail, this data will be acquired by the Data Controller; such data will be used exclusively to respond to the request, or for the provision of the service in accordance with this Policy.
The personal data expressly provided by users / visitors will be disclosed to third parties only if the communication is necessary to comply with the requests of the users / visitors themselves.
Filling out the “registration”, “contact us”, “newsletter” pages or sending requests in any way, involves the acquisition of data in the systems memory. The information is protected by an authentication system and can only be reached by those in possession of the credentials. Requests for information via e-mail involve storing the user’s e-mail address, which is necessary to respond to the sender’s requests. The data stored in the message is included.
Purpose of the processing
The processing of personal data and telephone and telematic numbers is essential to satisfy the requests of users, visitors, customers. The conferment is therefore mandatory, as it is not possible, in case of failure to give consent or revocation of the same, to start the processing (legitimate interest).
It is necessary to highlight that any incorrect or insufficient communication of the requested data may result in the total or partial impossibility of executing the requests of the interested party and the possible mismatch of the results of the processing with respect to the agreements made or to the obligations imposed by regulations. In particular, the processing of personal data will be aimed at providing services, in favor of users / visitors / customers, related to the stipulation and execution of the contract for the purchase of materials, publications, contents.
In order to ensure the satisfaction of users / visitors / customers and to meet their expectations, the processing is also aimed at the optimal management of production and stocks of the various materials, through the statistical processing of the collected data. The processing, with the specific consent of the interested party, may also be carried out for direct marketing campaigns, for participation in games, competitions or prize operations, for the provision of customer protection services and other operations directly or indirectly attributable to marketing activities.
The provision of these last data, however, is not mandatory. Any refusal to process / revoke consent does not affect the establishment / continuation of the main relationship.
The processing is carried out through automated tools (eg using electronic procedures and media) and / or manually for the time strictly necessary to achieve the purposes for which the data were collected and, in any case, in compliance with the current regulations in force.
Communication and promulgation
The data processed are exclusively of a common nature and are not intended for promulgation. The Data Controller does not require and has no interest in detecting and processing data that can be qualified as sensitive or judicial. The data must be disclosed to third parties in the fulfillment of obligations deriving from laws or regulations (institutions, law enforcement agencies, judicial authorities, etc.) or for activities directly or indirectly related to the relationship established. The processing will also be carried out after the end of the main relationship, in compliance with the regulatory provisions governing the conservation of deeds and documents, and, where expressly authorized, to allow the establishment of future relationships and to guarantee the historicization of data, also in interest of the customer and in any case they will be verified annually. Within the organization of the Owner, the data of the interested party may be processed by the various organizational functions.
Consent art. 23 of Legislative Decree 196/03 and art. 7 of EU Reg. 679/16
Rights of interested parties
The subjects to whom the personal data refer have the right at any time to obtain confirmation of the existence of such data and to know its content and origin, verify its accuracy or request its integration or updating, or rectification, oblivion, portability (Article 7 of Legislative Decree 196/03 and Articles 12 to 22 of EU Reg 679/16), as well as the right to request cancellation, transformation into anonymous form or block of data processed in violation of the law, as well as to oppose in any case, for legitimate reasons, to their processing. You can exercise the rights referred to above 196/03 by contacting the data controller by sending an email to the address email@example.com