Information on the protection of personal data

In compliance with the provisions of Article 13 of the EU Regulation 2016/679 Gi.Di.A srl, in its capacity as Data Controller, in the person of its pro-tempore legal representative, informs you of the purposes and methods of the processing of personal data collected, their scope of communication and dissemination, as well as the nature of their provision.

The IP addresses or domain names of the computers used by users connecting to the Site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), other parameters relating to the operating system, the type of data processed, the type of data processed, the type of data stored, the type of data transmitted, the type of data processed, the type of data stored, the type of data processed. ), other parameters relating to the operating system and the user’s computer environment, information relating to the user’s behaviour on the Site, the pages that have been visited or searched, in order to select and make specific announcements to the user of the Site, and data relating to the user’s browsing behaviour on the Site using, for example, cookies. In the processing of personal data that may, directly or indirectly, identify you, we try to respect a principle of strict necessity. For this reason, we have configured the Site in such a way that the use of personal data is kept to a minimum and in such a way as to limit the processing of personal data that can identify you only in the event of necessity or at the request of the authorities and the police (such as, for example, for data relating to traffic and your stay on the Site or your IP address) or for the purposes of ascertaining liability in the event of hypothetical computer crimes against the Site.
In some sections of the Site, certain personal data will be requested. The data collected and processed will be used to respond to any requests you may make.

Your personal data will be processed by automated means in accordance with the principle of necessity and proportionality, avoiding the processing of personal data where operations can be carried out by using anonymous data or by other means. We have adopted specific security measures to prevent the loss of personal data, unlawful or incorrect use and unauthorised access, but please note that it is essential for the security of your data that your device is equipped with tools such as constantly updated antivirus software and that the provider providing the Internet connection guarantees the secure transmission of data through firewalls, spam filters and similar measures.

The data may be communicated to third parties for the performance of activities functional to the structure, such as those of maintenance and management of the site and, more generally, by all employees, including those of Third Parties (suppliers of services, infrastructures, information technology and the like) who are involved in the management and supervision of the same and duly appointed as data processors. In this case, use by third parties will take place in full compliance with the principle of fairness and lawfulness. The transfer of data to non-EU countries is not envisaged. Otherwise, it will be communicated to the data subjects pursuant to Article 13(1)(f) of European Regulation 2016/679, in accordance with the requirements of the Regulation itself. The data will not be subject to dissemination.

Rights under Articles 15, 16, 17 18, 20, 21 and 22 of the EU Regulation 2016/679
We inform you that as a data subject, in addition to the right to lodge a complaint with a Supervisory Authority, you also have the rights listed below, which you may assert by making a written request to the Data Controller as indicated in point 1.
Art. 15 – Right of access
Art. 16 – Right of rectification
Art. 17 – Right to erasure (right to be forgotten)
Art. 18 – Right to restriction of processing
Art. 19 – Obligation to notify in case of rectification or erasure of personal data or restriction of processing
Art. 20 – Right to data portability
Art. 21 – Right to object
Art. 22 – Right not to be subject to automated decision-making, including profiling

To exercise the rights provided for in Articles 15 et seq. of European Regulation 2016/679, you must write to the email address privacy@gidia.it, for the attention of the Data Controller.

Titolare del trattamento è Gi.Di.A srl, con Sede Legale in Via Giosuè Carducci, 8 – 20814 – Varedo (MB).
La lista aggiornata dei responsabili esterni ai trattamenti potrà essere consultata presentando richiesta scritta al Titolare del trattamento sopra citato.

The Data Controller is Gi.Di.A srl, with registered office in Via Giosuè Carducci, 8 – 20814 – Varedo (MB).
The updated list of external data processors may be consulted by submitting a written request to the aforementioned Data Controller.

The conferment of your data, the object of the processing, is optional. The legal basis for the processing of your personal data is legitimate interest.
For any processing of your personal data falling within the specifications set out in Art. 6 of Regulation 2016/679, you will be asked for your explicit consent for each type of processing of your personal data, in accordance with the regulations in force.

The legal basis for the processing of your personal data is legitimate interest.
For any processing of your personal data falling within the specifications set out in Art. 7 of EU Regulation 2016/679, you will be asked for explicit consent for each individual type of processing of your personal data, in accordance with the legislation in force.