The party that collects and processes the Personal Data in the capacity of Data Controller (hereinafter “Data Controller”) is Imagina di Francesca Serri & C. sas , with registered office in Viale Giacomo Leopardi, 14, Camerino (MC), Italia, , Tax Code and VAT number IT 01115460436.
Methods of the processing
When processing Personal Data that can either directly or indirectly identify the Data Subject, we strive to uphold the principle of strict necessity. For this reason, we have configured the Website in such a way as to ensure that the use of the Personal Data is minimised and to limit the processing of the same which enables the Data Subject to be identified, only processing them in case of necessity or upon the request of the authorities and/or police forces (such as, for example, in the case of data regarding traffic and your visit to the Website or your IP address).
Your Personal data will be processed using automated tools and only for the time necessary in order to fulfil the purposes for which they have been collected. They will be processed in compliance with the principle of necessity and proportionality, and we will refraining from processing the Personal Data in cases where the operations can be performed using anonymous data or other methods.
We have implemented specific security measures to prevent the loss of the Personal Data as well as any unlawful or inappropriate uses of and unauthorised accesses to the same. However, please note that to ensure the security of your data, your device must be fitted with tools such as constantly updated anti-virus software, and that the provider of your internet connection must guarantee the secure transmission of the data by implementing firewalls, anti-spam filters and other similar protections.
Type of Data
The IT systems and software procedures in place to ensure that the Website runs smoothly acquire, during their normal functioning, certain personal data which are implicitly sent when the Internet communication protocols are used. This information is not collected to be associated with identified Data Subjects, but instead consists of information which, by its very nature, when processed and associated with data held by third parties, could lead to the identification of the users. This data category includes the IP addresses or domain names of the computers used by those who connect to the Website, the URIs (Uniform Resource Identifiers) of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response provided by the server (successful, error, etc.) and other parameters relative to the user’s operating system and IT environment. These data are used for the following purposes:
to obtain anonymous statistic information about the use of the Website and to check that it is working properly;
for the technical administration of the Website;
to ascertain any liability in case of alleged computer crimes committed to the detriment of the Website.
These data are stored for no more than seven days.
Data provided voluntarily
In certain sections of the Website, you may be asked to provide personal data. In this case you will be provided with the specific notice issued pursuant to Article 13 of the GDPR regarding the processing of your personal data in relation to the individual purposes pursued.
Apart from the terms set forth applicable to browsing data, the conferral of data for any additional processing purposes is optional. However, the failure to provide these data may make it impossible for said additional processing purposes to be fulfilled.
You have the right (articles 15 to 22 of the GDPR) to access your personal data and correct them if they are inaccurate, erase them, or restrict their processing. You also have the right to data portability, if subject to automated processing based on your consent or contractual terms, as well as to object to processing for direct marketing purposes or reasons related to your particular situation. You also have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You also have the right to lodge a complaint with your Data Protection Agency.
For further details, please refer to the notices provided for particular services.
To exercise your rights you can send a written request, addressed to the Data Controller, to the following email address firstname.lastname@example.org.