PRIVACY POLICY
Data Controller
In accordance with Article 13 of the European Regulation no. 2016/679 (hereinafter also GDPR), the company Arcaplus S.r.l., as the data controller of personal data, represented by its legal representative, with its registered office at C.ne Clodia, 80 – 00195 Rome, email [email protected], PEC [email protected], hereby informs you that the personal data provided may be processed by the company, directly or through third parties, not only to fulfill contractual obligations but also to comply with legal requirements, regulations, or EU laws.
Data processing refers to any operation or set of operations, whether or not by automated means, applied to personal data or sets of personal data, including collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, communication by transmission, dissemination, or any other form of provision, comparison, or interconnection, restriction, erasure, or destruction. Data processing will be carried out using suitable tools to ensure their security and confidentiality and may also be performed using automated tools for storing, managing, and transmitting the data.
Types of Data Collected
This website collects the following personal data autonomously or through third parties: name, surname, email, phone number.
Personal data provided voluntarily by the user or, in the case of data collected automatically during the use of the website, unless otherwise specified, are considered mandatory.
Data collected for usage purposes refer to information that computer systems and software procedures involved in the operation of the website acquire during their normal operation and whose transmission is implicit in the use of Internet communication protocols. However, in the event of the user's refusal to provide the required mandatory data, the service may not be possible.
It will be at the discretion of the user to provide or not provide optional data without affecting the availability or operation of the service.
The possible use of Cookies or other tracking tools by this website and third-party service providers, unless otherwise specified, is intended to provide the service requested by the user as well as other purposes described in this information and/or in the Cookie Policy.
Data Processing Methods
The data controller declares that appropriate security measures are in place to prevent and prohibit unauthorized access, disclosure, alteration, and destruction of personal data.
Processing is carried out electronically and/or telematically, using organizational and logic procedures strictly related to the stated purposes.
In some cases, in addition to the data controller, other parties involved in the organization of Arcaplus S.r.l. may have access to the data, such as, for example:
- Employees and/or collaborators of the data controller, in their capacity as authorized persons/appointees for processing, specifically designated for this purpose;
- Third-party companies or other entities (e.g., technical service providers, IT service providers, banks, professional firms, etc.) that carry out outsourced activities on behalf of the data controller, in their capacity as External Data Processors pursuant to GDPR
(the list of external data processors can be requested from the data controller).
Legal Basis for Data Processing
In some cases, the data controller may process personal data without the express consent of the user or other legal bases, until the user's opposition, where necessary:
- For the execution of a contract with the user or for pre-contractual measures;
- To prevent or detect fraudulent activities or harmful abuses to the website;
- To pursue the legitimate interests of the Data Controller;
- For the performance of a task carried out in the public interest;
- To carry out aggregate statistical analyses anonymously, especially with regard to browsing data, in order to ensure and improve the operation of the website.
It should be noted that it is possible to request clarification from the Data Controller regarding the concrete legal basis for each processing at any time.
Location of Data Processing
The voluntarily provided data are processed at the operational offices of the data controller, and it is possible that they may also be processed by third parties and external data processors appointed pursuant to Article [specify article number] of GDPR, if necessary for the provision of a specific service. Personal data provided will not be transferred abroad.
Retention Period
Personal data are processed and retained for the time strictly necessary for the purposes for which they were collected:
- Those collected for purposes related to the execution of a contract between the data controller and the user will be retained until the execution of the contract is completed, or for a subsequent period if required by legal obligations;
- Those collected for purposes related to the legitimate interests of the data controller will be retained until such interests are satisfied. The user can obtain information by contacting the data controller directly at the address indicated in this privacy policy.
When processing is based on the user's consent, the data controller may retain the data longer until such consent is revoked.
It should be noted that the data controller may be required to retain data for a longer period in compliance with a legal obligation or at the request of an authority.
Purposes of Data Processing
User data are collected to allow the data controller to provide its services, as well as for the following purposes: contact form on the website, Google Analytics with anonymized IP, etc.
The user can obtain detailed information about the purposes of processing and the relevant data for each purpose by contacting the data controller directly.
Types of Data Processed and Purpose of Processing
Navigation Data: The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data, the transmission of which is implicit in the use of Internet communication protocols. These are information that is not collected to be associated with identified individuals, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes, by way of example and not exhaustively, IP addresses or domain names of computers used by users who connect to the site, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the user's operating system and computer environment.
Arcaplus S.r.l. uses this data solely for the purpose of obtaining anonymous statistical information about the use of the site and for checking its correct operation.
This data is kept for the time strictly necessary and in accordance with current legal provisions.
Data Provided Voluntarily by the User: Customers/users/visitors, by connecting to this website, may send their personal data to access certain services or to make requests via email. This involves Arcaplus S.r.l. acquiring the sender's email address and/or other relevant data. The voluntary registration on the website, if required for obtaining specific services, will be preceded by specific information progressively displayed on the appropriate pages of the site, and consent will be requested when necessary.
Your Rights
With regard to the processing of your data, it is noted that you may exercise the rights granted to you by the GDPR, as indicated in Articles 15 to 22, specifically the right to:
- Request access to your personal data and information about them, which consists of the right to receive a copy of the personal data being processed;
- Correct inaccurate data or complete incomplete data;
- Request the deletion of personal data concerning you (in cases specified in Article 17, paragraph 1 of the GDPR and subject to the exceptions provided for in paragraph 3 of the same article);
- Restrict the processing of the personal data provided (in cases specified in Article 18, paragraph 1 of the GDPR);
- Request and obtain, in cases
where the legal basis for processing is a contract or consent, and it is carried out by automated means, personal data in a structured and machine-readable format, also for the purpose of transmitting this data to another data controller (the so-called right to data portability);
- Object at any time to the processing of personal data in certain situations;
- Withdraw consent to the processing of data at any time, limited to cases where processing is based on consent for one or more specific purposes. However, processing based on consent carried out before its revocation remains lawful;
- Lodge a complaint with the Data Protection Authority.
You may exercise the above rights by sending a request to the following email address: [email protected], PEC [email protected], addressed to the attention of the administration and the legal representative. Those who believe that the processing of personal data related to them carried out through this website violates the provisions of the Regulation have the right to lodge a complaint with the Authority, as provided for in Article 77 of the Regulation itself, or to take legal action (Article 79 of the Regulation).
