DISCLOSURE PURSUANT TO THE NEW REGULATION FOR THE PROTECTION OF PERSONAL DATA (Regulation No. 679/2016)
This Application site collects some Personal Data from its Users.
Dear Sir / Madam, We wish to inform you that the EU Reg. 2016/679 ("European Regulation on the protection of personal data") provides for the protection of people and other subjects and respect for the processing of personal data.
According to the Articles 13 and 14, therefore, we provide to inform you with some information on the processing of some of your data.
RIGHTS OF THE INTERESTED PARTY
Article 15 (right of access), 16 (right of rectification) of EU Reg. 2016/679 The interested party has the right to obtain from the data controller confirmation that it is or is not undergoing the processing of personal data concerning him and in this case, to obtain access to personal data and the following information: a) the purposes of the processing;
b) the categories of personal data that we are talking to;
c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if recipients of third countries or international organizations;
d) the retention period of the personal data provided or, if not possible, the criteria used to determine this period;
e) the existence of the right of the interested party to request the data controller to rectify or delete personal data or limit the processing of personal data concerning him or to oppose their treatment;
f) the right to lodge a complaint with a supervisory authority;
h) the existence of an automated decision-making process, including profiling and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the data subject.
Without prejudice to any other action in administrative or judicial, the interested party may lodge a complaint to the competent supervisory authority on the Italian territory (Authority for the protection of personal data) or the one who is carrying out its duties and exercising its powers in the Member State where the GDPR violation took place.
Right pursuant to art. 17 of EU Reg. 2016/679 - right to cancellation ("right to be forgotten")
The data subject has the right to obtain from the data controller the cancellation of personal data concerning him without undue delay and the data controller is obliged to cancel the personal data without undue delay if one of the following reasons exists:
a) personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;
(b) the data subject revokes the consent on which the processing is based in accordance with Article 6 (1) (a) or Article 9 (2) (a) and whether there is no other legal basis for the processing ;
(c) the data subject opposes the processing pursuant to Article 21 (1) and there is no legitimate overriding reason to proceed with the processing, or opposes the processing pursuant to Article 21 (2);
d) personal data have been processed unlawfully;
e) personal data must be deleted to fulfill a legal obligation under Union or Member State law to which the controller is subject;
f) personal data have been collected in relation to the information society service offer referred to in Article 8, paragraph 1 of EU Reg. 2016/679
Right referred to in art. 18 Right of limitation of treatment
The interested party has the right to obtain from the data controller the limitation of processing when one of the following hypotheses occurs:
a) the interested party disputes the accuracy of personal data for the period necessary for the data controller to verify the accuracy of such personal data;
b) the processing is illegal and the interested party opposes the cancellation of personal data and asks instead that its use is limited;
c) although the data controller no longer needs it for processing purposes, personal data are necessary for the data subject to verify, exercise or defend a right in court;
d) the interested party has opposed the treatment pursuant to article 21, paragraph 1, Reg EU 2016/679 pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.
PROTECTION OF RIGHTS
The articles 11 and 12 of the "New Regulation" regulate in general the procedures for the exercise of all the rights arising from the data subject. The Community Legislator has laid down the obligation - burdening on the holder - to respond regularly in written form to the requests of the interested party, also through electronic tools that facilitate the accessibility. The information requested may be granted to the interested party in oral form only if the same is required to make an explicit request The interested party to assert his rights may also refer to the judicial authority or the Guarantor, in case of failure to satisfy his requests to the data controller.
Response times for the exercise of rights
The deadline for responding to the data subject by the Data Controller is, for all rights (including the right of access), 1 month, extendable untill 3 months in cases of particular complexity; the holder must in any case give feedback to the interested party within 1 month from the request, even in case of refusal.
The Data Controller, in the event of a data breach, must implement two different actions:
• notification of the violation to the Control Authority within 72 hours of the fact
• reporting to the interested party (without unjustified delay).
Revocation of consent to treatment
For reasons relating to the particular situation of the interested party, the same may oppose at any time the processing of their personal data if it is based on legitimate interest or if it takes place for commercial promotion, sending the request to the Owner at [...]
The interested party has the right to cancel his / her personal data if there is no legitimate overriding reason for the Data Controller than the one giving rise to the request, and in any case in case the Data Subject opposes the processing for commercial promotion activities.
Here is the link to consult the entire European regulation on privacy in Italian. European Regulation on privacy 679/2016 on May 25th, this regulation also came into force in Italy to regulate the relationship that public and private bodies, professionals, establish with people: citizens, customers, workers. We are obliged to process the personal data of our users in full compliance with the law.
The first principle of GDPR n. 679/2016 is the accountability that is the responsibility of the Data Controller and of all the components of its organization in data management. For this purpose we have appointed a Data Protection Officer. Below is the table with our internal references on data processing.
EXTREME IDENTIFICATION OF THE OWNER, RESPONSIBLE DATA PROCESSING
Name of the data controller:
Confezioni Tessuti e Pelli di Tommaso Altieri
Via dell'aia 33/a
Name of the Responsible Protection of the treatment
Confezioni Tessuti e Pelli di Tommaso Altieri
Telephone number: 0825520224
Below is a series of information on the data collected and used through this website with reference to cookies.
INFORMATION ON COOKIES
Cookies are short fragments of text (letters and / or numbers) that allow to the web server to store on the client (the browser) information to be reused during the same visit to the site (session cookies) or later, even after days (persistent cookies). Cookies are stored, according to user preferences, by the single browser on the specific device used (computer, tablet, smartphone).
Similar technologies, such as, for example, web beacons, transparent GIFs and all forms of local storage introduced with HTML5, are used to gather information on user behavior and use of his services. In the following of this document we will refer to cookies and all similar technologies simply by using the term "cookies".
Types of cookies
Strictly necessary cookies.
These cookies are essential for the proper functioning of the sites [...] and are used to manage the login and access to the reserved functions of the site. The duration of cookies is strictly limited to the work session (closed the browser are deleted).
Analysis and performance cookies.
These cookies are used to collect and analyze the traffic and use of the site anonymously. These cookies, even without identifying the user, allow, for example, to detect if the same user Reconnect at different times. They also allow you to monitor the system and improve its performance and usability. The deactivation of these cookies can be performed without any loss of functionality.
By visiting a website you may receive cookies from both the visited site ("owners") and from sites managed by other organizations ("third parties"). A notable example is represented by the presence of "social plugins" for Facebook, Twitter, Google+ and LinkedIn. These are parts of the page visited generated directly by the aforementioned sites and integrated into the page of the host site. The most common use of social plugins is aimed at sharing content on social networks. The presence of these plugins involves the transmission of cookies to and from all sites managed by third parties. The management of information collected by "third parties" is governed by the relevant information to which reference is made. To ensure greater transparency and convenience, the following are the web addresses of the various information and how to manage cookies.
Facebook information: https://www.facebook.com/help/cookies/ Facebook (configuration): log in to your account. Privacy section. Twitter information: https://support.twitter.com/articles/20170514 Twitter (configuration): https://twitter.com/settings/security Informative Linkedin: https://www.linkedin.com/legal/cookie-policy Linkedin (configuration): https://www.linkedin.com/settings/ Google+ information: http://www.google.it/intl/it/policies/technologies/cookies/ Google+ (configuration): http://www.google.it/intl/it/policies/technologies/managing/ Google Analytics: http://www.google.com/policies/privacy/ YouTube: http://www.google.com/policies/privacy/
The site www.altiericonfezioni.com also includes certain components transmitted by Google Analytics, a web traffic analysis service provided by Google, Inc. ("Google"). Also in this case these are third-party cookies collected and managed anonymously to monitor and improve the performance of the host site (performance cookies). Google Analytics uses "cookies" to collect and anonymously analyze information on the use of websites [...] (including the user's IP address). This information is collected by Google Analytics, which processes it in order to draw up reports for the operators [...] concerning the activities on the websites themselves. This site does not use (and does not allow third parties to use) the Google analysis tool to monitor or collect personal identification information. Google does not associate the IP address with any other data held by Google nor does it attempt to link an IP address with the identity of a user. Google may also communicate this information to third parties where required by law or where such third parties process the information on Google's behalf.
For more information, please refer to the link below: https://www.google.it/policies/privacy/partners/ The user can selectively disable the action of Google Analytics by installing on his browser the opt-out component provided by Google. To disable the action of Google Analytics, please refer to the link below: https://tools.google.com/dlpage/gaoptout
Duration of cookies
Some cookies (session cookies) remain active only until the browser is closed or when the logout command is executed. Other cookies "survive" when the browser is closed and are also available in subsequent visits by the user. These cookies are called persistent and their duration is set by the server when they are created. In some cases a deadline is set, in other cases the duration is unlimited. However, browsing the pages of the website [...], you can interact with sites managed by third parties that can create or modify permanent and profiling cookies.
The user can decide whether or not to accept cookies using the settings of the own browser. Attention: the total or partial disabling of technical cookies can compromise the use of the site features reserved for registered users. On the contrary, the usability of public content is also possible by completely disabling cookies. The disabling of "third-party" cookies does not affect the navigability in any way. The setting can be defined specifically for different websites and web applications. In addition, the best browsers allow you to define different settings for cookies "owners" and those of "third parties". As an example, in Firefox, through the menu Tools-> Options -> Privacy, it is possible to access a control panel where it is possible define whether or not to accept the different types of cookies and proceed with their removal. Chrome: https://support.google.com/chrome/answer/95647?hl=en Firefox: https://support.mozilla.org/it/kb/Gestione%20dei%20cookie Internet Explorer: http://windows.microsoft.com/it-it/windows7/how-to-manage-cookies-in-internetexplorer-9 Opera: http://help.opera.com/Windows/10.00/it/cookies.html Safari: http://support.apple.com/kb/HT1677?viewlocale=it_IT