INFORMATION ON THE PROCESSING OF PERSONAL DATA
of users who consult our website pursuant to Article 13 of Regulation (EU) 2016/679
WHY THIS INFORMATION
Pursuant to Regulation (EU) 2016/679 (hereinafter “Regulation”), this page describes the methods for processing the personal data of users who consult the websites of our company Campus L’Infinito srl. accessible electronically at the following addresses:
This information does not concern other sites, pages or online services accessible via hypertext links that may be published on the sites but referring to resources outside the domain of the company Campus L’Infinito s.r.l. .
HOLDER OF THE TREATMENT
Campus L’Infinito s.r.l., Via Passero Solitario, 28 – 62019 – Recanati (MC) Italy – P.Iva 03049130549, Tel .: +39 071 7575943 – email firstname.lastname@example.org
RESPONSIBLE FOR TREATMENT FOR THE WEBSITE
Campus L’Infinito s.r.l. , Via Passero Solitario, 28 – 62019 – Recanati (MC) Italy – P.Iva 03049130549, Tel .: +39 071 7575943 – email email@example.com
LEGAL BASIS OF THE PROCESSING
The Owner processes Personal Data relating to the User if one of the following conditions exists:
- The User has given consent for one or more specific purposes; Note: in some jurisdictions the Data Controller may be authorized to process Personal Data without the User’s consent or another of the legal bases specified below, as long as the User does not object (“opt-out”) to such treatment. However, this is not applicable if the processing of Personal Data is governed by European legislation on the protection of Personal Data;
- The processing is necessary for the execution of a contract with the User and / or for the execution of pre-contractual measures;
- The processing is necessary to fulfill a legal obligation to which the Data Controller is subject;
- The processing is necessary for the performance of a task of public interest or for the exercise of public authority vested in the Owner;
- The processing is necessary for the pursuit of the legitimate interest of the Data Controller or third parties.7
However, it is always possible to ask the Data Controller to clarify the concrete legal basis of each treatment and in particular to specify whether the treatment is based on the law, provided for by a contract or necessary to conclude a contract.
TYPES OF DATA PROCESSED AND PURPOSE OF THE TREATMENT
The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses or domain names of the computers and terminals used by users, the URI / URL (Uniform Resource Identifier / Locator) addresses of the requested resources, the time of the request, the method used in submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment. These data, necessary for the use of web services, are also processed for the purpose of: obtaining statistical information on the use of the services (most visited pages, number of visitors by time or day, geographical areas of origin, etc.) and to check the correct functioning of the services offered. The navigation data do not persist for more than seven days and are deleted immediately after their aggregation (except for any need to ascertain crimes by the judicial authorities).
Data communicated by the user
The optional, explicit and voluntary sending of messages to the contact addresses of the Data Controller, as well as the compilation and forwarding of the forms present on the Data Controller’s sites, entail the acquisition of the sender’s contact data, necessary to reply, as well as of all the personal data included in the communications. Specific information will be published on the pages of the Owner’s sites prepared for the provision of certain services. The site contains various user data collection forms. Each form is designed to allow the user to access specific services.
The data connected to the “Contact us”, “Guestbook” and / or “Newsletter” forms may also be processed by the staff of the company that takes care of the maintenance of the technological part of the site, at the company’s headquarters and / or by consulting the archived data. on your server. Users are asked to pay particular attention to the provision of consent, remembering that any consent given may always and at any time be revoked by the same users, using the Controller’s e-mail box, indicating in the subject of the email “Ref . Privacy “.
Cookies and other tracking systems
Technical session and navigation cookies:
This website uses session cookies to carry out activities that are strictly necessary for its functioning.
Cookies are information installed in the browser when you visit a website or use a social network with your PC, tablet or smartphone. Each Cookie contains various information that assist the Owner in providing the service based on the purposes described. Cookies can remain in the system for the duration of a session (i.e. when the browser is closed) or for an extended period of time. Some of the installation purposes may require the User’s consent.
Cookies are not used for user profiling, nor are other tracking methods used.
Instead, session cookies (non-persistent) are used strictly limited to what is necessary for the safe and efficient navigation of the sites. The storage of session cookies in terminals or browsers is under the user’s control, where on the servers, at the end of the HTTPS sessions, information relating to cookies remains recorded in the service logs, with storage times not exceeding 1 day per equal to other navigation data. The acceptance of the cookie banner has a duration of 1 year.
Third party cookies:
Statistics. The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to keep track of User behavior. By way of example, the following are mentioned:
– Google Analytics (Google Inc.). Web analysis service provided by Google Inc. (“Google”). Google uses the Personal Data collected for the purpose of tracking and examining the use of this website, compiling reports and sharing them with other services developed by Google. Google may use the Personal Data to contextualize and personalize the advertisements of its own advertising network.
– Google AdWords (Google Inc.). Google AdWords conversion tracking is a statistics service provided by Google Inc. that connects data from the Google AdWords ad network with actions performed within this website.
– Personal data collected: Cookies and Usage data; Place of processing: 1600 Amphitheater Parkway Mountain View – CA94043 USA; privacy legislation; revocation
Widget. These services allow you to view content hosted on external platforms directly from the pages of this website and interact with them. In the event that a service of this type is installed, it is possible that, even if the Users do not use the service, it collects traffic data relating to the pages in which it is installed.
The site may also use some “social plugins” for sharing and communicating content: their use is optional. When you use one of the plugins, the site will get in touch, through your browser, with the servers where the social sharing services called up are managed, communicating the data that the user intends to publish and share through their social profile ( of which he remains the only responsible) and informing them (the servers) of the pages that the user has visited.
To exclude this possibility, you can avoid sharing content by using the social share buttons. For further details regarding the use and collection of data through the following plugins and to know how the data collected and transmitted in this way are processed (and for what purposes), please consult the privacy and legal information issued by the Owners of the services in question.
How can I control cookies?
Through browser preferences, the User has the ability to manage preferences relating to Cookies directly within their browser and prevent third parties from installing them. It is important to note that by disabling all or some cookies, the functioning of this site could be compromised.
Your browser or device may contain settings that allow you to choose whether to set cookies and delete them. For more information on these control options, see your browser or device help materials.
- Digital Advertising Alliance
- Digital Advertising Alliance of Canada
- European Interactive Digital Advertising Alliance
The payment management services allow this website to process payments by credit card, bank transfer or other tools. The data used for payment are acquired directly by the requested payment service provider without being processed in any way by this website. Some of these services may also allow the scheduled sending of messages to the User, such as emails containing invoices or notifications regarding payment.
These services allow this Application to monitor the use and behavior of its components, to allow for the improvement of performance and functionality, maintenance or troubleshooting.
RIGHTS OF THE INTERESTED PARTY
In your capacity as an interested party, at any time you can exercise your rights towards the Data Controller, pursuant to art. 15 of the GDPR:
the. obtain confirmation of the existence or not of personal data concerning you, even if not yet registered, and their communication in an intelligible form;
- obtain the indication: a) of the origin of personal data; b) the purposes and methods of the processing; c) of the logic applied in case of processing carried out with the aid of electronic tools; d) the identity of the owner, managers and designated representative pursuant to art. 3, paragraph 1, GDPR; e) the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the State, managers or agents;
iii. obtain: a) updating, rectification or, when interested, integration of data; b) the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including data which need not be kept for the purposes for which the data were collected or subsequently processed; c) the attestation that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment is proves impossible or involves the use of means that are manifestly disproportionate to the protected right;
- object, in whole or in part: a) for legitimate reasons to the processing of personal data concerning you, even if pertinent to the purpose of the collection; b) to the processing of personal data concerning you for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication, through the use of automated call systems without the intervention of an operator by e-mail and / or through traditional marketing methods by telephone and / or paper mail. It should be noted that the right of opposition of the interested party, set out in point b) above, for direct marketing purposes through automated methods extends to traditional ones and that in any case the possibility remains for the interested party to exercise the right of opposition also only partially.
Therefore, the interested party can decide to receive only communications using traditional methods or only automated communications or neither of the two types of communication.
Where applicable, you also have the rights referred to in Articles. 16-21 GDPR:
- Right of rectification (Article 16);
- Right to cancellation – Right to be forgotten (Article 17);
- Right to limitation of treatment (Article 18);
- Obligation to notify in case of rectification or cancellation of personal data or limitation of processing (Article 19);
- Right to data portability (Article 20);
- Right to object (Article 21);
- Revoke, at any time, the consent to the processing of their Personal data previously expressed;
- Submit a complaint to the Guarantor Authority.
RESPONSIBILITY OF THE DATA CONTROLLER
- Facilitate the protection of personal data already in the design phase of all processing activities = PRIVACY BY DESIGN
- Adopt safety measures, evaluating in advance the risks generated in the treatment process
- Ensure transparency on data flows and processing activities
- Acting promptly in the event of a breach (also known as a data breach)
- Adapt to establish roles and responsibilities in each processing activity
For any further information, and to assert the rights recognized by the European Regulation, you can contact the Data Controller which for all legal purposes is Campus L’Infinito s.r.l. , Via Passero Solitario, 28 – 62019 – Recanati (MC) Italy – P.Iva 03049130549, Tel .: +39 071 7575943 – email: firstname.lastname@example.org
METHOD FOR THE EXERCISE OF RIGHTS BY THE INTERESTED PARTIES
The methods of exercising the rights by the interested parties are established, in general, in the articles 11 and 12 of the regulation. The deadline for replying to the interested party is, for all rights (including the right of access), 1 month, which can be extended up to 3 months in particularly complex cases; the owner must in any case give a reply to the interested party within 1 month of the request, even in the event of refusal.
It is up to the owner to evaluate the complexity of the reply to the interested party and establish the amount of any contribution to be requested from the interested party, but only if the requests are manifestly unfounded or excessive (even repetitive) (Article 12.5), unlike the provisions of art. 9, paragraph 5, and 10, paragraphs 7 and 8, of the Code, or if more “copies” of personal data are requested in the case of the right of access (Article 15, paragraph 3); in the latter case, the owner must take into account the administrative costs incurred. As a rule, feedback to the interested party must be in written form, including through electronic tools that facilitate accessibility; it can be given orally only if so requested by the interested party (Article 12, paragraph 1; see also Article 15, paragraph 3).
The exercise of rights is, in principle, free for the interested party, but there may be exceptions. The owner has the right to request information necessary to identify the data subject, and the latter has the duty to provide it, according to suitable methods (see, in particular, art. 11, paragraph 2 and art. 12, paragraph 6).
RIGHT OF COMPLAINT
Interested parties who believe that the processing of personal data referred to them through this site is in violation of the provisions of the Regulation have the right to lodge a complaint with the Guarantor, as required by art. 77 of the Regulation itself, or to take the appropriate judicial offices (Article 79 of the Regulation).
CHANGES TO THE POLICY