- art. 13 of 2016/679 EU regulation;
- recommendation n. 2/2001 of the Group Art. 29 concerning the minimum requirements for online data collection in the EU;
- directive 2009/136 / EC, amending Directive 2002/58 / EC (e-Privacy Directive), concerning the processing of personal data and the protection of privacy in the electronic communications sector.
This disclosure describes the methods of management of only Group Exprivia’s official website managed by Exprivia S.p.A., as parent company, and not of the other external websites that users can reach via links. Additional information may be provided in specific sections.
The processing of personal data collected in the formats relating to the “Newsletter”, Contact us and Candidature sections are governed by specific information, available in those sections of the website.
Site access does not require the user/visitor to enter any personal data.
1. TYPE OF DATA PROCESSED AND PURPOSES OF PROCESSING
1.1. Processing objective
The personal data of users/visitors is processed for the sole purpose of allowing users to browse the website. The personal data of users may also be used to fulfil legal obligations.
1.2. Data supplied voluntarily by the user
The voluntary and explicit transmission of e-mail to the addresses indicated in the different channels for accessing this site involves the subsequent acquisition of the address and the data of the sender/user, needed to respond to the requests generated, as well as any other personal data inserted by the latter. The personal data supplied by users will only be communicated to authorised third parties where the communication is necessary for fulfilling the requests of said users.
1.3 Navigation data
The computer systems and the “software” procedures used to operate this website, acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
These data are not collected to be associated with identified users, but they could, through processing and association with data held by third parties, made only after explicit request of the Judicial Authority, allow users to be identified.
This category of data includes the IP addresses or the domain names of the computers used by users connecting to the website, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters related to the operating system and the user’s computer environment.
These data constitute the register of links. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning. The register of links is then kept at the disposal of the Judicial Authority and exhibited only upon explicit request.
A cookie is a text file sent by a website to the web browser of the user’s computer. The browser saves the information and retransmits it to the site server when the browser accesses that website again.
A cookie generally contains the name of the web domain (site IP address) from which the cookie has come, the “lifetime” of the cookie (i.e. an indication of the moment the cookie expires) and a numerical code, usually a randomly generated unique number.
1.4.1 Technical cookies
The website http://www.exprivia.it exclusively uses the following technical first party cookies (for more details see the Provision of the Italian Data Protection Authority no. 229 of 8 May 2014).
|JSESSIONID||Session||Until the browser is closed||keep the http session ID|
|DATABASE_INDICIZZATO||Functionality||1 year||of a technical nature for the functionality of the content database|
|GUEST_LANGUAGE_ID||Functionality||1 year||contains the user’s language|
|COOKIE_SUPPORT||Functionality||1 year||indicates if the browser supports cookies or not|
These cookies do not allow the acquisition of the user’s personal identification data.
1.4.2 Analytical cookies
The pages of the website use Google Analytics cookies, which provide aggregate and anonymous statistical data on visits made. Non-exhaustive examples of statistical data provided by Google Analytics are:
- Percentages of visitors per country
- Percentages of visitors for time slots
- Percentages of visits for web pages of the site
The following links are provided for further information or for the relative deactivation:
- Google Analytics reference page on data protection;
- To deactivate Google Analytics click here.
1.4.3 Browser management of cookies
It is possible to delete existing cookies and block the installation of new cookies also via the browser settings.
Users/visitors can decide each time whether to accept cookies or not, they can also configure their browser to generate a warning each time a cookie is stored. The most popular browsers have the possibility of blocking cookies by third parties and accepting only those of the website.
The procedure for managing cookies is different for each browser. The instructions for the most widely used browsers are reported below.
To learn how to manage cookies through this browser’s settings: https://policies.google.com/technologies/managing?hl=it.
To learn how to activate private browsing: https://support.google.com/chrome/answer/95464?hl=it.
To learn how to delete cookies, block them also selectively, receive alerts on your settings relating to cookies: https://support.google.com/chrome/answer/95647?hl=it.
To learn how to manage, delete, block and select cookies through the settings of this browser: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies#ie=ie-11-win-7.
To learn how to manage cookies through this browser’s settings: https://support.mozilla.org/it/kb/Gestione%20dei%20cookie.
To learn how to manage the privacy settings panel and restrict the tracking of your web activities: https://support.mozilla.org/it/kb/Impostazioni%20di%20Firefox%20-%20pannello%20Privacy.
To learn how to enable and disable cookies: https://support.mozilla.org/it/kb/Attivare%20e%20disattivare%20i%20cookie.
To learn how to delete cookies: https://support.mozilla.org/it/kb/Eliminare%20i%20cookie.
To learn how to block cookies: https://support.mozilla.org/it/kb/Bloccare%20i%20cookie.
To learn how to disable only third party cookies: https://support.mozilla.org/it/kb/Disattivare%20i%20cookie%20di%20terze%20parti.
To learn how to manage cookies through this browser’s settings: http://supporto.teletu.it/assistenza-tecnica/configurazioni/browser-internet/safari/gestione-cookie/.
To learn how to manage cookies through this browser’s settings: http://help.opera.com/Windows/10.00/it/cookies.html.
1.4.4 Social Plug In
Our web pages may contain social network plug-ins. If you access one of our web pages with a similar plug-in, the internet browser connects directly to the social network and the plug-in is displayed on the screen thanks to the connection with the browser.
1.4.5 Link and other websites
Browsing the Exprivia website allows you to access, through links to other websites operated by third parties. These sites may collect personal information about the interested party. Exprivia does not control the sites that are managed by these subjects and can not be held responsible for the conduct of the same.
2. PROCESSING METHODS AND DATA RETENTION
Personal data are processed using automated tools (e.g. using electronic procedures and media) and/or manually (e.g. on paper) for the time strictly necessary to achieve the purposes for which the data was collected and, in any case, in compliance with the applicable legislation. Specific security measures are observed to prevent the loss of data, unlawful or incorrect use and unauthorized access.
No automated decision-making and no form of profiling will be applied to the data collected.
Once this deadline has elapsed, the data will be deleted or transformed into an anonymous form, unless their further storage is necessary to fulfill legal obligations or to comply with orders issued by public authorities.
3. OPTIONAL NATURE OF THE PROVISION OF DATA
The provision of personal data by users/visitors for the purposes described in the previous paragraph (1.2) is optional. Failure to provide data may make it impossible to browse certain sections of the site.
4. DATA CONTROLLER, RESPONSIBLE FOR DATA PROTECTION (DPO) AND PERSONS IN CHARGE OF PROCESSING
The data controller of the personal data relating to identified or identifiable persons who have consulted this site, is Exprivia S.p.A. with registered office in via A. Olivetti, 11- Molfetta (BA).
Exprivia S.p.A. has appointed a Data Protection Officer in accordance with articles 37 ss. of EU Regulation 2016/679 which can be contacted at the following e-mail address: DPO_ExpriviaSpa@exprivia.com.
Processing connected to the web services of this site are handled exclusively by technical personnel, appointed, authorized and instructed to the correct processing of personal data that, under no circumstances, will be disseminated.
5. COMMUNICATION AND/OR DISSEMINATION OF DATA
Unless stated in point 1.2, the personal data provided by the user will not be disclosed to third parties or disseminated and will not be transferred to third countries (non-EU).
6. DATA ADDRESSEES
For the pursuit of the purposes described, or in the event that this is indispensable or required by law or by authorities with the power to impose it, the Data controller reserves the right to communicate the data to recipients belonging to the following categories:
- the Data Protection Officer, where external, to follow up the privacy requests of netizens;
- Supervisory authorities and, in general, subjects, public or private, with functions of public relevance (eg: Prefecture Police Headquarters, Judicial Authorities, in any case only within the limits in which the conditions established by applicable law are met);
- other companies of the group to which the Holder is a member, or in any case controlling companies, subsidiaries or associates, pursuant to art. 2359 c.c;
- professional studies or companies in the context of assistance and consultancy relationships;
- subjects that carry out checks, audits and certification of the activities carried out by the Data controller.
7. RIGHTS OF DATA SUBJECTS
The “interested parties”, ie the natural persons to whom the data refer, have the right, at any time, to access the information concerning you and request its updating, rectification and integration, as well as the cancellation, transformation into anonymous form or blocking, the limitation of processing and the portability of data, as well as to oppose in any case in whole or in part to the processing, for legitimate reasons, to their treatment in accordance with articles 15 to 22 of EU Regulation 2016 / 679.
Moreover, the interested parties, if the processing of their data is based on consent, may at any time revoke it. The withdrawal of consent does not affect previous treatments. We remind you that the interested party can always oppose the treatment for promotional purposes.
The portability consists in the right of the interested party to receive, in a structured format, commonly used and readable by automatic device, the personal data provided to the Data Controller, as well as the transmission of the same to another data controller, at any time, also to the cessation of the relationships eventually entertained with the Data controller.
The processing of personal data carried out for IT security purposes or for defensive purposes are among the treatments for the legitimate interest of the Controller, in this case the interested party can only oppose for reasons related to his particular situation that the Data Controller will assess without prejudice execution of the defensive purposes.
For any information regarding the processing of data, as well as for the exercise of the rights referred to in articles 15-22 of EU Regulation 2016/679, users can send an email to the address: DPO_ExpriviaSpa@exprivia.com.
Furthermore, the interested parties have the right to contact the Garante per la protezione dei dati personali or to another authority to propose a complaint about the processing of their personal data.