Privacy Policy

Information concerning the processing of personal data, in accordance with article 13 of Legislative Decree no. 196/2003

In accordance with D. Lgs. 30th June 2003, No. 196 and subsequent changes, we hereby supply you with all due information concerning the purposes and methods for your personal and sensitive data processing in our possession. This information is not valid for other websites which might be visited through links contained in all the websites of the data controller’s domain name. The data controller shall not be considered responsible for third parties’ websites. This privacy policy is given pursuant to  art. 13 Legislative Decree n. 196/2003 – Italian Privacy Code    and is inspired also from Recommendation n. 2/2001 adopted by Data Protection European Authorities on 17th May 2001, in order to identify minimum requirements for online personal data collection, and in particular, methods of data processing, terms and nature of underwriting, and also in reference to European Directive 2002/58/CE, updated with Directive 2009/136/CE related to Cookies and in accordance with Italian D.P.A. Main Decisions 08.05.2014 about cookies. 

1. DATA CONTROLLER, pursuant to Article 28 of Italian Data Protection Code is ALMA S.r.l. with legal headquarter in Giussano (MB) – via Virgilio n. 9, in the person of its legal representative.

DATA PROCESSOR, pursuant to Article 29 of Italian Data Protection Code is, among the others, the appointed person in charge. To know the name of the appointed Data Processors, the data controller may be directly asked for at the legal headquarter of ALMA S.r.l.

2. CATEGORIES OF PROCESSED DATA

Personal data and identification data. Personal data shall mean any information related to a natural person that is or can be identified, even indirectly, by reference to any other information, including a personal identification number. Identification data shall mean personal data allowing a subject to be identified directly (for example, name, surname, date of birth, address, e-mail address, telephone number, etc.).

Navigation dataThe computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols. These pieces of information are not collected to be associated with identified interested parties, but, through elaborations and associations with data held by third parties, due to their own nature, may allow the user’s identification.This data category shall including IP addresses or computers’ domain names used by users who surf the present website, the URI-mapped addresses (URI stands for Uniform Resource Identifier) of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the reply given by the server (successful, error, and so on) and other parameters related to the operating system and to the computing environment of the user. These data are exclusively used in order to obtain anonymous statistics related to the use of the website and to control the correct functioning. These data are immediately deleted after processing.

Judgment defense.  The User’s Personal Data may be used by the Data Processor for legal defense in judgment or in the preparatory phases of the judgment, in order to defense Data Processor’s rights in case of improper use of this website or to solve matters related to an improper use of services provided by the Data Processor.
The data could be used to determine the responsibility in case of computer crimes against the website.

Maintenance. The User’s Personal Data may be treated with additional methods and objectives related to system maintenance.

Data voluntarily provided by the user. Sending explicit voluntary and optional e-mails to the addresses listed on the present website entails the subsequent acquisition of the sender e-mail address, necessary to reply to the user’s request, and also of any other personal data.

Data of minors. Minors are not allowed to provide Personal Data. The Data Controller will in no way be responsible for any false declaration, which might be supplied by a minor and, in any case, once the mendacity of that declaration is assessed, he will immediately delete any kind of Personal Data or material in his/her possession. The Data Controller is to inform the parental authority or the legal guardian about the requests regarding the data of minors, pursuant to articles 7, 8, 9 and 10 of the Italian Privacy Code.

Data of third parties. If you provide us Personal Data of third parties (e.g. relatives or other people), you have to assure that such third parties have been previously informed and have agreed, if necessary, on Personal Data processing in accordance with this privacy policy.

Specific policies

Specific policies related to specific matters may be presented in the various pages of the present website, in connection with particular services or processing of data provided by the user. 

Cookies

The specific policy regarding cookies is available at the following link: cookies policy.

3. PURPOSES OF DATA PROCESSING FOR WHICH YOU GRANT CONSENT WHEN REQUIRED (ARTICLE 23 D. LGS. 196/03.)

Voluntarily-provided personal and sensible data shall be processed for the following purposes, unless otherwise notified:

– surfing on this website;

– potential sending of requests for information by filling in the special form for data collection in the area “Contacts”;

– any accounting or administration activity. In accordance with the Personal Data Protection Policy, data are processed for accounting or administration purposes as long as they are related to organization, administration, financial and accounting activities, regardless of the nature of the processed data. In particular, the following activities are related to the above mentioned ones: those linked to internal organization activities, those which are necessary to carry out contract or pre-contract obligations, those linked to information activities.

4. METHODS OF DATA PROCESSING – DATA RETENTION

The Personal Data processing will be carried out by electronic, automated and / or manual instruments, with methods and tools to ensure maximum security and confidentiality, by persons authorized to do so in compliance with the requirements of Art. 31 and following of D. Lgs 196/03. Personal Data will be kept for a period not exceeding the purposes for which the data were collected and subsequently processed.

5. COMMUNICATION AND DATA DIFFUSION

The personal data to be processed will be treated confidentially, and will not be diffused. Your data may be shared with companies contractually involved with ALMA S.r.l., abroad within the European Community, pursuant to Legislative Decree No. 196/2003, article 42, in order to comply with contractual obligations or related purposes. 
Your data may be transferred outside the European Union pursuant to Article 43 and 44 lett b) of D. Lgs. 196/2003.
Furthermore, these data may be disclosed to the following third parties:

– entities that provide services for the management of the information system used by ALMA S.r.l. and the telecommunication networks, including e-mail service;

– firms or companies which provide assistance and advice;

– competent authorities who enforce the law and/or regulations promulgated by public bodies, on request.

The above mentioned entities shall act as Data Processor or may perform their tasks fully independently, as if they were the Data Controller. The list of the appointed Data Processors is constantly updated and is available at ALMA S.r.l.

6. NATURE OF UNDERWRITING AND CONSEQUENCES IF THE USER FAILS TO REPLY 

With exception of what above specified concerning navigation data, the user is free to provide personal data. 
The provision of personal data is necessary to get the services requested (e.g. asking for information and been replied by ALMA S.r.l. and getting the services offered by the Data Controller). In case you do not provide personal data, you may not ask to be contacted by or ask for information and/or been replied by ALMA S.r.l.  

7. RIGHT TO ACCESS PERSONAL DATA AND OTHER RIGHTS

You can exercise your rights according to articles 7, 8, 9 and 10 of Legislative Decree no. 196 of 30th June 2003, by contacting the Data Controller, or the appointed Data Processor, by getting in touch with ALMA S.r.l., with its legal headquarter in Giussano – Via Virgilio 9, dialing 0039 0362860171. You have the right, at any time, to obtain confirmation of the existence of your data and ask for their content and origin, verify their accuracy or request their integration or updating, or correction (Article 7 of the Italian Data Protection Code). For the purposes of this Article you can ask the cancellation, the transformation into anonymous form or the arrest of the personal data processed in contravention of the law and you can oppose for legitimate reasons to their treatment. In case you contact the Data Controller, you are required to provide your e-mail address, name, address or phone number, in order to allow the Data Controller to manage your request.

8. CHANGES TO THE PRIVACY STATEMENT

The Data Controller reserves the right to modify, update, add or remove portions of the current Privacy Policy at his discretion and at any time. We encourage you to periodically review this page for the latest information on our privacy practices. To make this review easier for you, our privacy statement shows the date of publication on the website and updating. Using the website, after the changes post, will mean silent acceptation of the privacy policy.

Last updated: 21.07.2017