1. Data Controller and Data Protection Officer
The controller of the personal data processing is NOVALUX SRL (Tax Code and VAT 00536541204) with registered office in VIA MARZABOTTO, 2 LOC.TA’ FUNO, 40050 ARGELATO (BO) e-mail firstname.lastname@example.org (hereinafter the "controller").
The company has not appointed a Data Protection Officer.
2. Information collected from the Site:
- Navigation data:
During their normal operation, the IT systems and software procedures used to operate this site acquire some personal data whose transmission is implicit in the use of internet communication protocols.
These data, necessary for the use of web services, are also processed for the purpose of:
• obtain statistical information on the use of the services
• check the correct functioning of the services offered.
b) communicated by the user
- Data communicated by the user:
The optional, explicit and voluntary sending of data through the various compilation forms on the site that involve the acquisition of the sender's contact data, necessary to fulfill contact requests, services, possible assignment of credentials for personal areas.
c) through cookies
3. Type of personal data, purpose, legal basis and storage times
Personal data requested and provided are used to allow the access to the site and to use the following services:
Type of service: access to the private area / download
Type of personal data collected: personal data, access credentials, contacts
Purpose: To allow access to material exclusively dedicated to registered subjects;
Legal basis: contract execution
Storage times: up to the request for cancellation from the personal area/fulfilment of the contract and subsequent civil obligations;
Type of service: contact area for products / services
Type of personal data collected: personal data, contact data (for example: e-mail, telephone numbers ..)
Purpose: to acquire, by filling in the appropriate form, the references of the users of the site to satisfy requests for information / commercial contact
Legal basis: contract execution
Retention times: fulfilment of the contract and subsequent civil obligations;
Type of service: work with us;
Type of personal data collected: personal data, contact data (for example: e-mail, telephone numbers ..), professional / work details, possible membership to protected categories.
Purpose: Possible establishment of a working collaboration;
Legal basis: potential execution of a contract
Storage times: from 12 months to 24 months
Type of service: newsletter service;
Type of personal data collected: personal data, e-mail contact.
Purpose: to contact the subscribers by sending a periodic newsletter related to the activities of the company;
Legal basis: consent
Storage times: 24 months or until revocation of consent
The data processing for the aforementioned purposes will be carried out in accordance with the Privacy Regulation and all the specific sector regulations.
The data provided will be processed mainly with IT tools under the authority of the Data Controller, by subjects specifically appointed, authorized and instructed to process in accordance with articles 28 and 29 of the Privacy Regulation. We inform you that suitable security measures are also observed pursuant to articles 5 and 32 of the Privacy Regulation to prevent the loss of data, illicit or incorrect use and unauthorized access.
4. Mandatory or optional nature of the consent for the provision of data
The provision of data is optional but in the event of failure to provide it, it will not be possible to take advantage of some services provided by our site
5. In which frame we can transmit data
Data may be communicated, within the EU, in full compliance with the provisions of the Privacy Regulation, to the following subjects:
(1) to the financial, administration and / or other public authorities, if this is required by law or at their request;
(2) to the structures, subjects and external companies used by the Data Controller to carry out instrumental or consequent activities for the execution of the Site Services
The information automatically collected from the Site may also be transferred to third-party cloud servers also located outside the EU, if such processing is necessary for the execution of the site's services. The legal basis of this treatment is, therefore, art. 49, paragraph 1, lett. b of the Privacy Regulation.
6. Security measures
Through the Website, data are processed in compliance with the applicable law and using adequate security measures in compliance with the legislation in force, also pursuant to art. 5 and 32 of the Privacy Regulation.
In this regard, it is confirmed, among other things, the adoption of appropriate security measures to prevent unauthorized access, theft, disclosure, modification or unauthorized destruction of the data processed.
We remind you that at any time you can exercise the rights referred to in articles 15 and following of the Privacy Regulation, by sending a written communication to the Controller, with the aim of obtaining:
- confirmation of the existence or not of personal data with indication of its origin, verify its accuracy or request its update, correction, integration;
- access, deletion of data or limitation of processing;
- the transformation into anonymous form or the blocking of data processed in violation of the law.
You may also object to the processing of personal data previously provided.
With reference to the Newsletter, it should be noted that any cancellation request can be made explicit through the use of a special link / button.