INFORMATION ON THE PROCESSING OF PERSONAL DATA
Pursuant to art. 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (in short “GDPR”)
Dear Customers,
Since 25 May 2018, the above-mentioned GDPR has become fully effective and applicable, a regulation that aims to make the behavior of companies more transparent with respect to the information regarding natural persons (data subjects) that are used by companies for the provision of the requested services.
In compliance with current European and Italian legislation, our Company ensures that the protection is guaranteed and the confidentiality and integrity of your personal data is maintained. To this end, we have adopted specific organizational and security measures with reference to the collection, use, storage and deletion of personal information provided to us by interested parties… namely by you.
We invite you to read this brief information, containing useful information on how we process your personal data, on the reasons why we ask you to provide them to us and on how you can exercise the rights recognized to you by current legislation.
2. Data controllers
To carry out some processing activities (such as the management of payment transactions with electronic methods, the management of tax obligations related to invoicing, the storage of data on servers) we use external parties, specifically identified and appointed as Data Processors, who guarantee - in compliance with the contract signed by each of them with the Data Controller - that the data processing is carried out in compliance with the instructions received, ensuring the protection of the rights of the interested parties and the protection of their personal data.
1. Data controller
The data controller is the company HPROFIT SRL, VIA BOSCOFANGONE SNC – NOLA (NA) 80035, 09580891217, which you can contact to exercise the rights recognized by the GDPR at the following addresses: E-mail: info@hprofit.it – PEC: .
The company has designed and developed an integrated search and consultation service, with remote access (the “Service”), through a specific online software platform that allows searches within the database and viewing of the results (the “Software Platform”), of multimedia thematic dictionaries; the Service is managed and provided through the website www.viewco.it (the “Site”).
3. What personal data are collected and processed?
The personal data that the Company uses are mostly common data; in particular, we collect and process directly your data strictly necessary for the execution of the contract for which they are requested / provided and / or for the fulfillment of legal obligations (in tax matters), as well as for the provision of the Service under the terms and conditions of use established. By way of example, the data we process include:
-
name and surname, tax code, company name;
-
personal contact details (address, telephone number, e-mail address);
-
payment data for the service (credit or debit card number, name of the cardholder, expiry date and CVV code);
-
access credentials (“user id” and “password”), of a strictly confidential nature, associated with the dedicated personal account created to be able to use the service;
-
data whose transmission is implicit in the use of internet communication protocols (IP addresses, domain names of computers used by Users and Users who navigate the site or addresses in URI – Uniform Resource Identifier notation), acquired by the computer systems and e-commerce platforms used to operate the Site and the connected software Platform;
-
account information that allows the customization of the Service, in order to improve its usability by Users and Users;
-
information relating to the use of the Service (number and duration of accesses, applications used, searches performed).
4. Why do we process personal data?
We collect and manage your data for the sole purpose of allowing you to use, through registration and the creation of a user account for access to the Site, the Service covered by the contract.
In detail, your personal data are processed exclusively for the following purposes:
pursuit of a legitimate interest of the Company;
execution of the contract for the provision of the requested service;
electronic receipt of payment for the service (1);
accounting registration of the service provided / payment received and fulfillment of the related tax obligations;
customer database management;
sending service communications;
carrying out statistical activities, proportionate to the purposes pursued and in compliance with the fundamental rights and interests of Users;
customization and improvement of the Service, for the benefit of Users and Users.
1. NB When payment is made by credit card (or prepaid card), the operation is managed by an external service provider.
5. On what basis do we carry out the treatments?
The different treatments indicated above, depending on the type of data to which they refer and the purposes to which they tend:
-
they are necessary to execute the contract signed with the Company;
-
they are necessary to pursue a legitimate interest of the Company (as Data Controller);
-
they are necessary to allow compliance with the legal obligations to which the Company is subject, including those relating to tax matters;
-
are based on the prior consent freely expressed by the Customer.
6. Are you required to provide us with the requested personal data?
You are not obliged to provide your personal data; however, they are strictly necessary to execute the contract concerning the Service you request from us; therefore, where they are not provided, the Company will not be able to execute the contract.
As regards, instead, the data referred to in letters f) and g), it is specified that making available the processing of such data by the Company is optional and that the processing is subject to your consent; however, in the event of refusal of consent to the processing, we specify - declining any responsibility in this regard - that the functionality of the Site and, therefore, the provision of the Service could be subject to some limitations.
Consent may be revoked at any time, upon simple request addressed to the Company.
7. How are your data processed?
Il trattamento dei dati consiste nella raccolta, registrazione, organizzazione, consultazione, elaborazione, conservazione, comunicazione, cancellazione.
Il trattamento viene effettuato su supporti sia informatici che cartacei, nonché attraverso mezzi telematici (e-mail): conserviamo la documentazione rilevante (contenente dati personali) in formato digitale, mediante archiviazione in apposite folder sul server interno aziendale, e in formato cartaceo, mediante archiviazione dei documenti (contratti di licenza d’uso aventi ad oggetto il Servizio) in faldoni contenuti in luoghi non accessibili al pubblico.
Inoltre, organizziamo i dati mediante compilazione di appositi registri (fogli excel), tenuti in formato digitale, con modalità tali da non consentire l’immediata identificazione degli interessati mediante univoco riferimento agli stessi di tutte le informazioni che li riguardano.
Tutti i dati personali forniti mediante la procedura di registrazione e la creazione dell’account utente per l’accesso al Sito procedure sono registrati su database elettronici installati su server in cloud gestiti dalla Società HPROFIT S.R.L. (Responsabile del trattamento) i cui data center sono fisicamente situati in Europa.
Non raccogliamo i Vostri dati per effettuare attività di marketing diretto; effettuiamo attività di analisi statistica con esclusivo riferimento ai dati di cui al precedente par. 2, lettere f) e g).
Trattiamo i Vostri dati mediante i nostri computer aziendali: è consentito un limitato accesso ai dati da remoto, esclusivamente per consentire la gestione del Servizio da parte di soggetti che non operano presso gli uffici centrali della Società (bensì in forma delocalizzata), in ogni caso attraverso connessioni internet sicure. È escluso l’accesso ai dati mediante l’utilizzo di dispositivi mobili (smartphone, tablet), o di computer diversi da quelli aziendali, o mediante connessioni internet ubicate in locali pubblici o aperti al pubblico.
Ad eccezione delle categorie di dati lettere e), f) e g) – rispetto al trattamento dei quali vengono utilizzati sistemi / processi automatici – i Vostri dati personali sono sempre trattati attraverso l’intervento umano.
Cookie Law
Un “cookie” è una piccola quantità di dati che vengono inviati al browser dell’utente da un server Web e che vengono successivamente memorizzati sul disco fisso del suo computer.
Il Sito utilizza dei cookie per agevolare la navigazione sul Sito, memorizzando e talvolta tenendo traccia dei dati relativi agli Utenti e Utilizzatori, ai fini strettamente necessari al funzionamento delle applicazioni di sistema connesse al funzionamento del Sito stesso e alla consultazione delle Opere (c.d. “Cookie applicativi”). Il Sito utilizza altresì il codice e i log “Google Analytics” (2) per le statistiche.I cookie utilizzati consentono, in particolare alla Società e al Sito di:
-
accedere alle informazioni dei diversi account in modo da offrire un servizio personalizzato migliore (tale cookie viene impostato quando l’utente si registra e modificato nel corso delle visite dello stesso al Sito);
-
analizzare il numero di accessi al Sito, la durata degli stessi e le funzioni utilizzate (ad ogni browser che accede viene inviato un solo cookie, utilizzato per quantificare l’uso ripetuto dei servizi).
Non verranno mai rilevati e memorizzati attraverso i cookie dati personali quali, ad esempio, nome, cognome, indirizzo e-mail o numero di telefono.
I cookie possono essere disattivati (3) ma, laddove venisse effettuata tale scelta, non potremmo svolgere le attività sopra indicate e, quindi, il Servizio reso in favore degli Utenti e Utilizzatori ne risentirebbe.
Per ulteriori informazioni sui cookie è possibile consultare le FAQ del Garante per la protezione dei dati personali.
2. Google Analytics è un servizio di analisi web fornito da Google Inc. (“Google”). Google Analytics utilizza i dati personali raccolti allo scopo di tracciare ed esaminare l’utilizzo dello spazio on-line su cui opera il Sito, raccogliendo e analizzando in forma anonima le informazioni (compreso l’indirizzo IP) sui comportamenti degli Utenti e Utilizzatori. Il Sito non utilizza (e non consente a terzi di utilizzare) lo strumento di analisi di Google per monitorare o per raccogliere informazioni personali di identificazione: Google Analytics, pertanto, non associa l’indirizzo IP a nessun altro dato posseduto da Google né cerca di collegare un indirizzo IP con l’identità di un utente.
3. Per la disattivazione o l’attivazione dei cookie sono disponibili le seguenti guide per i principali browser utilizzati: Chrome,Internet Explorer,Firefox,Safari,Android,iPhone,iPad.
8. To whom do we communicate the data?
The data is processed exclusively by the Data Controller, by the Data Processors identified and specifically appointed and by the Company's staff who manage the Site, the software Platform and the related assistance services, expressly authorised to process it; the data is never transferred to third parties based or operating in countries outside the European Union, other than Google Inc. - limited to the functionality of Google Analytics - which however is based in a country (USA) that guarantees an adequate level of protection (being included in the so-called Privacyshield List https://www.privacyshield.gov/welcome).
Furthermore, the data, upon express request, within the limits and for the purposes established by law, may be communicated or in any case made available / accessible to Public Authorities (for example, postal police, tax administration, judicial authority).
9. How long are personal data stored?
I dati personali raccolti di cui alle lettere a), b) e c) del precedente par. 2 vengono conservati per il tempo richiesto dalla legge (con riferimento all’esatta esecuzione del contratto, anche ai sensi dell’art. 2946 cod. civ.), nonché ai fini dell’adempimento degli obblighi in materia fiscale; al termine del periodo in questione – e comunque, decorsi 10 anni dalla raccolta presso gli interessati – i dati personali vengono cancellati con modalità tali da assicurare che non vengano dispersi o diffusi, neanche accidentalmente, a terzi.
I dati personali di cui alla lettera d) del precedente par. 2 vengono conservati per tutta la durata del Servizio e per il periodo di 12 mesi successivi alla cessazione: quindi vengono cancellati. I dati personali di cui alle lettere e), f) e g) del precedente par. 2 vengono conservati per il periodo massimo di 26 mesi dalla loro acquisizione e poi cancellati automaticamente da Google Inc.
10. What are your rights?
The GDPR recognizes the interested parties, and we are committed to ensuring compliance and full, legitimate exercise, of the following rights:
Right to access and obtain a copy of personal data (art. 15)
Data subjects have the right to request confirmation that we are processing any of their personal data. If so, they may have access to their personal data and certain information about the processing of their personal data. In some cases, they may request that the Company provide them with an electronic copy of the personal data being processed.
Right to rectification of your personal data (art. 16)
In the event that the personal data in our possession is incomplete or incorrect, interested parties have the possibility to ask us to update such data or to correct it.
Right to restriction and erasure of data (art. 18 and 17)
In some circumstances, data subjects have the right to request a limitation of the processing of their personal data and/or the deletion of the same. They have the right to submit this request at any time and the Company will evaluate the possibility of accepting the same; however, this right must be balanced with legal rights or obligations arising from the execution of the contract and/or the fulfillment of legal obligations: for which reason the Company may have to retain the data in question. Otherwise, the Company will immediately follow up on the request of the data subjects, also giving notice to the Data Controller(s) (so that they in turn proceed with the deletion of the data).
Right to portability (art. 20)
The interested parties have the right to request and receive free of charge (except for the reimbursement of expenses, for example in the case of data provided on compact discs and shipped), data in a structured and machine-readable format in a commonly used format (“structured, commonly used and machine-readable format”), as well as to transmit personal data from one Data Controller to another “without obstacles”.
Right to lodge a complaint with the Privacy Guarantor (art. 77)
If they believe that the processing of their data is in violation of the provisions of the GDPR, without prejudice to the right to contact the competent civil or administrative judicial authorities, the interested parties may contact and lodge a complaint with the Authority for the protection of personal data, as far as it is competent.
CONSENT TO THE PROCESSING OF PERSONAL DATA
Having read the Information on the processing of personal data above, being aware of the type of data and the methods of processing, with reference to the provision of the Service requested by me and the rights to which I am entitled, by signing this form I, the undersigned, with exclusive reference to the categories of data referred to in paragraph 2, letter f) and g) of the Information above,
I give my consent to the processing, carried out via cookies, consisting in the access and processing of information from different accounts in order to offer a better personalized service (this cookie is set when the user registers and modified during the user's visits to the Site);
I give my consent to the processing, carried out via cookies, consisting in accessing information for the purpose of analyzing the number of accesses to the Site, their duration and the functions used (only one cookie is sent to each browser that accesses, used to quantify the repeated use of the services).