PRIVACY INFORMATION PURSUANT TO ART. 13 GDPR (eu) 679/2016

This page describes the ways in which this site manages the processing of the personal data of users who consult it. This information is provided in accordance with current legislation on personal data for users who interact with the services of this site in the framework of EU Regulation 2016/679.The information is provided only for this site and not for other websites that may be consulted by the user through our links.

DATA CONTROLLER

Data relating to identified or identifiable persons may be processed following consultation of the site. The Data Controller is Studio Colombo Altamura Pometto, with offices in Piazza San Fedele, n. 4 20121 Milan.

PLACE OF DATA PROCESSING

The processing connected to web services is only handled by technical staff of the processing office, or by persons tasked with occasional maintenance operations. No data deriving from the web service are communicated or disseminated.

PURPOSE OF THE DATA PROCESSING AND LEGAL BASIS OF THE PROCESSING

The personal data provided by users who submit requests are used for the sole purpose of responding to such requests or performing the service or provision requested, and are disclosed to third parties only if deemed necessary for this purpose. The legal basis for this processing is the need to respond to the requests of the interested parties or carry out activities provided for by the agreements defined with the interested parties. With the express consent of the user, the data may be used for commercial communication activities. The legal basis of this processing is the freely expressed consent of the interested party.

Apart from these scenarios, users’ browsing data are only kept for the time strictly necessary to manage the processing activities within the limits established by law.

TYPE OF DATA PROCESSED

Navigation Data

During their normal operation the computer systems and software procedures used to operate the site acquire certain personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment. They are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning, and are deleted after processing. The data could be used to ascertain responsibility in the event of hypothetical cyber crimes against the site.

Cookies

A cookie is a textual element that is downloaded to the hard disk of a computer only after authorisation. Cookies have the function of streamlining the analysis of web traffic, or of signalling when a specific site is visited, and they allow web applications to send information to individual users. No personal user data are acquired by the site in this way. Cookies are not used to transmit information of a personal nature, nor are so-called persistent cookies or systems for tracking users of any kind used. The use of so-called session cookies is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to allow safe and efficient exploration of the site. The so-called session cookies used on the site avoids the use of other IT techniques that are potentially detrimental to the confidentiality of users’ browsing and do not allow the acquisition of the user’s personal identification data.

Data provided voluntarily by the user

The optional, explicit and voluntary sending of e-mails to the addresses indicated on the site entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message. Specific summary information will be progressively reported or displayed on the pages of the site set up for particular services on request.

OPTIONAL PROVISION OF DATA

Apart from what is specified for navigation data, the user is free to provide personal data to request the services offered by the Data Controller. Failure to provide them may make it impossible to obtain what is requested.

RIGHTS OF THE INTERESTED PARTIES

Within the limits and under the conditions provided for by law, the Data Controller is obliged to respond to the requests of the interested party regarding personal data concerning him. In particular, based on current legislation.

PROCESSING METHODS AND DURATION OF DATA STORAGE

Personal data are processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected and will be deleted at the end of this period, with the exception of data that must be kept for legal obligations or to assert a right in a court of law.

Specific security measures are taken to prevent data loss, illicit or incorrect use and unauthorised access.

The processing is carried out using IT and/or computerised tools, with organisational methods and logic strictly related to the purposes indicated. In some cases other subjects in addition to the Data Controller involved in the organisation of this Application (administrative, commercial, marketing, legal, system administrators) or external subjects (such as third party technical service providers) may have access to the Data even, if necessary, Data Processors assigned by the Owner. The updated list of Processors can always be requested from the Data Controller.

The interested party has the right to obtain from the Data Controller confirmation as to whether or not personal data concerning him are being processed and, in this case, to obtain access to personal data and the following information:

• The purposes of the processing;
• The categories of personal data in question;
• The recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if they are recipients in other countries or international organisations;
• When possible, the retention period of the personal data provided or, if not possible, the criteria used to determine this period;
• The existence of the interested party’s right to ask the Data Controller to correct or delete personal data, limit the processing of personal data concerning him, or to oppose the processing;
• The right to lodge a complaint with a supervisory authority;
• If the data are not collected from the interested party, all available information on their origin;
• The existence of an automated decision-making process, including profiling.

The interested party has the right to obtain the correction of inaccurate personal data concerning him from the Data Controller without undue delay. Taking into account the purposes of the processing, the interested party also has the right to obtain the integration of incomplete personal data by providing a supplementary declaration.

The interested party has the right to obtain the deletion of personal data concerning him from the Data Controller without undue delay, and the Data Controller is obliged to delete personal data without undue delay within the limits and in the cases provided for by current legislation. The Data Controller communicates any corrections or cancellations or limitations of processing to each of the recipients to whom the personal data have been transmitted, within the limits and in the forms provided for by current legislation.

The interested party has the right to obtain the limitation of the processing from the Data Controller, and has the right to receive the personal data concerning him provided in a structured format that is commonly used and readable by an electronic device. He has the right to transmit such data to another Data Controller without impediments by the Data Controller to whom he provided them.

To exercise the rights listed above, the interested party must submit a request using the following methods of contact:

requests must be sent by e-mail to the Data Controller at the following address privacy@captax.it, where the data protection officer designated by the Data Controller may be contacted, or by ordinary mail to the following address: Studio Colombo Altamura Pometto, Piazza San.Fedele n. 4, 20121 Milano.

Last modified: 01/06/2022