INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ARTICLE 13 OF REGULATION (EU) 2016/679
WHY DO WE PROVIDE THIS INFORMATION?
L.B. Servizi per le Aziende SRL is committed to protecting and respecting your privacy. Pursuant to EU Regulation 2016/679 (hereinafter the “Regulation”), the contents of this privacy notice describe the methods for processing personal data that the website collects during browsing or that are provided directly by the User.This information does not concern other websites, pages or online services accessible via hypertext links that may be published on the site but refer to resources external to the domain www.lbservizi.it.Your data will be collected to allow us to carry out the activities for which we have been contacted
WHO IS THE DATA CONTROLLER?
he Data Controller is L.B. SERVIZI PER LE AZIENDE SRL, with registered office at Via Gabriele Paleotti, 43 – 00168 Rome (RM), VAT number 06261440728 (hereinafter the “Data Controller”).The processing of personal data will be carried out directly by the Data Controller within its own organizational structure.Users who provide personal data may contact the Data Controller, for the exercise of their rights at the following email addresss:
pr*****@*******zi.it
Users may contact the DPO (Data Protection Officer) at the following address: dp*@*******zi.it. The appointed DPO team will respond to your requests as soon as possible and, in any case, within the time limits estabilished by applicable law.
WHAT IS THE LEGAL BASIS FOR THE PROCESSING?
It is appropriate to explain in clear and simple terms what is meant by “legal basis”.Personal data cannot be used by just anyone, but only by the legitimate owner.However, there are cases in which the legal system allows processing by additional parties, for example when the User/visitor decides to request information throught our website and contacts us via the relevant section by providing their personal data.Such data will subsequently be used to fulfill the specific request made by the User.After reading this privacy Policy, the User is free to decide whether or not to provide the personal data requested in the available forms.Such data are necessary for the provision of the requested service; therefore, if the data are not provided, the requested service cannot be delivered and the related opportunities cannot be accessed.
The legal basis for the processing is therefore the reason identified by the legal system as Legitimate Interest, which allows the processing of personal data.
THE DATA CONTROLLER PROCESSES THE USER’S PERSONAL DATA WHEN AT LEAST ONE OF THE FOLLOWING CONDITIONS APPLIES:
- The User has given consent for one or more specific purposes
- The processing is necessary to comply with a legal obligation to which the Data Controller is subject;
- The processing is necessary for the purposes of the Legitimate Interest pursued by the Data Controller or by third parties..
The User may, in any case, request the Data Controller specify the concrete legal basis for each processing activity, using the contact details indicated above.
WHICH DATA ARE PROCESSED AND BY WHAT METHODS ?
The data we collect are processed in full compliance with applicable laws on the protection of personal data and exclusively for the purposes indicated in this Privacy Policy, using procedures and methods designed to ensure the confidentiality, integrity and availability of the information provided by users.
User data are collected to enable the website to provide its services, as well as for the following purposes:
- contacting the User;
- managing and sending messages to email addresses;
- Statistics analysis
The types of personal data used for the purposes referred to above are:
Browsing data
The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.These are pieces of information that are not collected in order to be associated with identified individuals, but which,by their very nature, could, through processing and association with data held by third parties, allow users to be identified.This category of data includes IP addresses or domain names of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response provided by the server (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment.These data are used solely for the purpose of obtaining anonymous statistical information on the use of the site to check its correct functioning.Access log data containing IP addresses are stored on the server hosting for a period of 3 (three) months.Web server log data may be used, in cases provided for by law, to ascertain responsability in the event of alleged computer crimes against the site.The systems hosting the site are protected by a firewall system and are replicated to ensure proper data preservation and availability.The Google Analytics tracking code is installed. Data are recorded by Google Analytics service and are stored on Google’s servers for a standard period of 26 (twenty‑six) months.
For the same reason, we may obtain information about users’ general use of the Internet by means of cookie file stored on the device.Cookies help us to improve the site and to provide better, more targeted content.For further information on our use of cookies on the site, please refer to our Cookie Policy (DOC_008).
Data voluntarily provided by the User
The option, explicit, and voluntary submission of an email address on this website entails the subsequent acquisition of the sender’s address, which is necessary to respond to requests, as well as any other personal data included in the message.No data sent to email addresses or submitted throught the forms are saved on the servers where the website is hosted.Such data are stored on servers under the control of LB Servizi per le Aziende SRL, located within Italian territory, at the company’s own data center and at an external data center.Specific summary privacy notices may be provided or progressively displayed on the website pages dedicated to particular on- request services and within the relevant data collection fields.Personal data are processed using automated tools for the time strictly necessary to achieve the purposes for which they were collected.Specific security measures are observed to prevent data loss, unlawful or improper use and unauthorized access.Data subjects have the right at any time to obtain confirmation as to whether or not personal data concerning them exist and to be informed of their content and origin, to verify their accuracy, or to request their integration, updating, or rectification (Article 18 of the Regulation) using the contacts details previously provided.
Pursuant to the same article, data subjects also have the right to request the deletion, anonymization, or blocking of data processed in violation of the law, as well as to object in any case, for legitimate reasons, to their processing, on the basis of the rights that will be illustrated below.
DETAILS ON THE PROCESSING OF USERS’ PERSONAL DATA
Contact forms
By completing the forms available on the website with their personal data, Users consent to their use for the purpose of responding to requests for information.Specifically, by ticking the relevant box or by submitting the form,Users give their consent to the processing of the data providedin order to fulfill the related request.
Are personal data transferred outside the EU?
Where personal data are transferred outside the European Union for technical and operational purpuses and in order to ensure a high level of service continuity, the Data Controller guarantees that such transfers will be carried out in a way that does not prejudice the level of protection of individuals ensured by applicable legislation and in particular by Regulation (EU) 2016/679 (GDPR)
To whom are the data disclosed?
The personal data provided may be disclosed to duly appointed recipients who will process the data as data processors and/or authorized persons.The Data Controller does not disclose any of the data subjects’ to third parties without their consent, except where required by law. Inany case, the dissemination of the personal data processed is excluded. The complete list of data processors, joint controllers, and persons authorized to process personal data may be requested by sending a specific request to one of the two email addresses indicated above or by contacting the Data Controller through ordinary means.
What are the rights of the Website User?
The User who has provided personal data, pursuant to the principle of transparency, has the right to:
• Withdraw the consent previously given;
• Obtain from the Data Controller confirmation as to whether or not personal data concerning them exist;
• Obtain communication of the data in a clear and intelligible form;
• Obtain information regarding:
— the updating, rectification and/or integration, where there is an interest, of the data provided;
— the erasure, anonymization or blocking of data processed in violation of the law, including data whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;
— confirmation that the operations of updating, rectification and erasure of the data, as referred to the points above, have been brought to the attention, including as regard their content, of those to whom the data has been dislosed, except where this requirement proves impossible or involves a manifestly disproportionate effort in relation to the right been protected;
— the restriction of the processing of the data provided.
SUBMIT A COMPLAINT TO THE NATIONAL SUPERVISORY AUTHORITY
IThe deadline for responding to the User, with regard to all exercisable rights, is (1) one month, which may be extended up to three (3) months in cases of particular complexity.The Data Controller is neverless required to provide the User with a written response within one (1) month, even in the event of refusal, in a concise, transparent and easily accessible form, using clear and plain language.
The exercise of rights may involve the payment of a fee by the User, corresponding to the difficulties encountered by the Data Controller in fulfilling the requests, in relation to the resources available.These rights may be limited by European Union or national laws or regulations when the exercise of such rights could result in an actual and concrete prejudice.
ADDITIONS, UPDATES AND AMENDMENTS TO THIS PRIVACY NOTICE
The Data Controller reserves the right to periodically amend, supplement, or update this Privacy Notice in compliance with applicable law or with measures adopted by the Italian Data Protection Authority in its capacity as Supervisory Authority.
Such amendments or additions will be brought to the attention of the data subjects.Users are invited to review the Privacy Policy regularly in order to verify the updated notice and decide whether to continue using the services offered. This Privacy Notice applies to data collected through the website www.lbservizi.it, owned by L.B. SERVIZI PER LE AZIENDE SRL, in its capacity as Data Controller