Privacy Policy

In compliance with the requirements of national legislation (Legislative Decree No. 196 of 30 June 2003, Personal Data Protection Code) and European legislation (European General Data Protection Regulation No. 679/2016, GDPR), as amended, this website respects and protects the privacy of its visitors and users. This privacy policy applies exclusively to the online activities of this website and is valid for both visitors and users. It does not apply to information collected through channels other than this website. The purpose of this privacy notice is to provide maximum transparency regarding the information collected by the website and how it is used.

Legal basis

This website processes personal data on the basis of consent. By using or browsing the website, visitors and users expressly acknowledge this privacy policy and consent to the processing of their personal data for the purposes and in accordance with the methods described below, including any disclosure to third parties where strictly necessary to provide a service. Providing personal data, and therefore consenting to its collection and processing, is optional. Users may withhold their consent and withdraw it at any time by writing to g.cordaro@exe-engineering.com. However, withholding consent may make it impossible to provide certain services and may impair the browsing experience. As of 25 May 2018, the date on which the GDPR entered into force, this website processes certain data on the basis of the data controller’s legitimate interests.

Data collected and purposes

Like all websites, this website uses log files that store information collected automatically during user visits. The information collected may include:

• Internet Protocol (IP) address;
• browser type and settings;
• Internet Service Provider (ISP) name;
• date and time of the visit;
• the web page from which the visitor arrived (referral page) and the exit page;
• number of clicks.

This information is processed automatically and collected exclusively in aggregated form to verify that the website is functioning correctly and for security purposes. As of 25 May 2018, this information is processed on the basis of the data controller’s legitimate interests.

For security purposes, including anti-spam filtering, firewalls and virus detection, automatically recorded data may also include personal data such as IP addresses. In accordance with applicable law, these may be used to block attempts to damage the website, harm other users, or engage in other harmful or criminal activities. Such data are never used to identify or profile users, but solely to protect the website and its users. As of 25 May 2018, this information is processed on the basis of the data controller’s legitimate interests.

If the website allows users to post comments, or if users request specific services, certain identifying information, including email addresses, is automatically collected and recorded. Such data are considered to have been voluntarily provided by the user when requesting the service. By posting a comment or submitting other information, users expressly accept this privacy policy and, in particular, consent to the content they submit being freely disclosed, including to third parties.

The data received will be used exclusively to provide the requested service and only for as long as necessary to deliver it. Any information that users choose to make public through the services and tools provided by the website is submitted knowingly and voluntarily, releasing this website from any liability for possible violations of the law. Users are responsible for ensuring that they have permission to submit personal data relating to third parties or content protected by national and international laws.

Data collected by the website during its operation are used exclusively for the purposes stated above and retained only for the period strictly necessary to carry out the specified activities. Under no circumstances will the data collected be disclosed to third parties, for any reason, unless disclosure is required by a lawful request from a judicial authority and in the cases provided for by law. Data used for security purposes, such as blocking attempts to damage the website, are retained for 7 days.

Security measures

We process users’ data lawfully and fairly, adopting appropriate security measures to prevent unauthorised access, disclosure, alteration or destruction of data. Data processing is carried out using IT and/or electronic tools, with organisational methods and procedures strictly related to the stated purposes.

In addition to the data controller, certain categories of authorised personnel involved in the organisation of the website may have access to the data in specific cases, including administrative, sales, marketing and legal staff, as well as system administrators. External parties may also have access, such as third-party technical service providers, postal and courier services, hosting providers, IT companies and communication agencies.

User rights

Under European Regulation No. 679/2016 (GDPR) and national legislation, users may exercise the following rights, in accordance with the procedures and limitations established by applicable law:

• request confirmation as to whether personal data concerning them are being processed (right of access);
• find out the origin of such data;
• receive the data in an intelligible form;
• obtain information about the logic, methods and purposes of the processing;
• request the updating, rectification, completion or erasure of data, their transformation into anonymous form, or the restriction of data processed unlawfully, including data that are no longer necessary for the purposes for which they were collected;
• where processing is based on consent, receive the personal data they have provided to the data controller, at no cost other than any applicable media costs, in a structured, machine-readable format commonly used by electronic devices;
• lodge a complaint with the supervisory authority (the Italian Data Protection Authority);
• exercise any other rights granted to them under applicable legislation.

Requests must be addressed to the data controller by writing to g.cordaro@exe-engineering.com. Where data are processed on the basis of legitimate interests, the rights of data subjects are still guaranteed, except for the right to data portability, which is not provided for in such cases. In particular, users have the right to object to the processing of their personal data by submitting a request to the data controller.

Place of processing

Data collected by the website are processed at the data controller’s premises and at the hosting provider’s data centre. The web hosting provider, IperDada Pro, acts as a data processor, processing data on behalf of the data controller. It is located within the European Economic Area (EEA) and operates in compliance with European regulations.

Requests must be addressed to the data controller. Where data are processed on the basis of legitimate interests, the rights of data subjects are still guaranteed, except for the right to data portability, which is not provided for in such cases. In particular, users have the right to object to the processing of their personal data by submitting a request to the data controller.

Data controller

The data controller, as defined by applicable law, is Gianni Cordaro, who can be contacted by email at g.cordaro@exe-engineering.com.

Updates

This privacy policy was last updated on 24 May 2018.