Information on the processing of personal data

1. INTRODUCTION

Pursuant to art. 13 of Legislative Decree 196/2003 (hereinafter, the “Privacy Code”) and art. 13 of EU Regulation 2016/679 of 27 April 2016 (“Regulation”, the Regulation and the Privacy Code are collectively referred to as “Applicable Regulations”), we wish to provide, as data controllers, appropriate information about the basic elements of the processing we perform.

Lighthin srl (hereinafter, the “Holder”) takes the utmost account of the right to privacy and protection of personal data as guaranteed by the Applicable Law.

For any information in relation to this privacy policy, you can contact the Holder at any time, among other things, using the following methods:

  • By sending a registered letter with return receipt to the registered office of the Holder (Via G. Macaggi, 23/A/1 – 16121 Genoa – Italy);
  • By sending an e-mail to led@lighthin.eu

2. TYPE OF DATA PROCESSED BY THE HOLDER

The website offers informative and sometimes interactive content. During the navigation of the site Lighthin S.r.l. can, therefore, acquire information about the visitor, in the following ways:

  • Navigation data
    The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes: IP addresses, the type of browser used, the operating system, the domain name and the addresses of the websites from which the access was made, information on the pages visited by users within the site, the time of access, the stay on the individual page, the analysis of internal path and other parameters relating to the operating system and computer environment of the user.
  • Further categories of data
    This is all the personal data provided by the visitor through the site, for example, by registering and/or accessing a reserved area and/or a service and/or participating in one of the initiatives launched by Lighthin S.r.l., by writing to an e-mail address of Lighthin S.r.l. to request information or by calling our telephone numbers.

3. PURPOSE OF THE TREATMENT

3.1. Any personal data collected by the Holder for the purpose of concluding or executing the contract, will be processed lawfully by the Holder pursuant to art. 6 of the Regulation exclusively for the following purposes of processing:

a) Contractual obligations, exclusively for purposes related to the existing contractual relationship and its execution. The personal data collected by the Holder for the purposes of any establishment and / or execution of the contractual relationship include: name and surname, email address, telephone number, and all personal information that may be voluntarily provided to the Holder. Without prejudice to what is provided elsewhere in this privacy policy, under no circumstances will the Holder make your personal data accessible to third parties;
b) Administrative-accounting purposes, i.e. to carry out activities of an organisational, administrative, financial and accounting nature, such as internal organisational activities and activities functional to the fulfilment of contractual and pre-contractual obligations, including any phase of protection of the Holder’s rights;
c) Obligations of the law, or to fulfil obligations provided for by law, by an authority, by a regulation or by European legislation.

3.2. The provision of personal data for the purposes of processing indicated above is optional but necessary, as failure to provide the same could make it impossible for the Holder to establish, or execute the contractual relationship. The provision of data is mandatory when it responds to specific provisions of law.

4. METHODS OF PROCESSING AND STORAGE TIMES OF DATA

The Holder will process personal data using manual and computer tools, with logic strictly related to the purposes themselves and, in any case, to ensure the security and confidentiality of the data.

Personal data will be kept for the time strictly necessary to carry out the primary purposes described in paragraph 1 above, or in any case as necessary for the civil protection of the interests of both data subjects and the Holder.

5. SCOPE OF COMMUNICATION AND DISSEMINATION OF DATA

The personal data may be disclosed to the employees and/or collaborators of the Holder in charge of managing the contractual relations. These subjects, who are formally appointed by the Holder to process personal data exclusively for the purposes indicated in this statement and in compliance with the provisions of the Applicable Law.

Your personal data may also be disclosed to third parties who may process personal data on behalf of the Holder as “External Data Processors” or as independent data controllers, such as, for example:

  • service providers (such as administrative, IT, postal services, credit recovery companies, etc.);
  • consultants (such as accountants, auditing firms, lawyers, etc.);
  • companies of the same group, associated companies;
  • banks and financial institutions;
  • Public authorities and bodies.

The Holder informs you that he/she has the right to obtain a list of any data processors appointed by the Holder, by making a request to the Holder in the manner indicated in paragraph 4 below.

6. RIGHTS OF THE INTERESTED PARTIES

IThe rights guaranteed by the Applicable Law may be exercised by contacting the Holder in the following ways:

  • By sending a registered letter with return receipt to the registered office of the Holder (Via G. Macaggi, 23/A/1 – 16121 Genoa);
  • By sending an e-mail to led@lighthin.eu

Pursuant to the Applicable Law, the Holder informs you that he/she has the right to be informed of (i) the origin of the personal data; (ii) the purposes and methods of the processing; (iii) the logic applied in the event of processing carried out with the aid of electronic means; (iv) the identification data concerning the data controller and the data processors; (v) the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as data processors or persons in charge of the processing.

In addition, you have the right to obtain:
a) access, updating, rectification or, when interested, integration of the data;
b) the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;
c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.

In addition, you have:
a) the right to revoke consent at any time, if the processing is based on your consent;
b) where applicable, the right to data portability (the right to receive all personal data concerning you in a structured, commonly used and machine-readable format), the right to restrict the processing of personal data and the right to erasure (‘right to be forgotten’);
c) the right to object, in whole or in part, on legitimate grounds, to the processing of personal data concerning you, even if pertinent to the purpose of collection.
d) if you considers that the processing of personal data carried out by the Holder violates the Regulations, the right to lodge a complaint with a supervisory authority (in the Member State in which he/she habitually resides, in the one in which you works or in the one in which the alleged violation occurred). The Italian supervisory authority is the Guarantor for the protection of personal data, with headquarters in Piazza di Monte Citorio n. 121, 00186 – Rome (http://www.garanteprivacy.it/).

The Holder is not responsible for the updating of all links that can be viewed in this Information, so whenever a link is not working and/or updated, you acknowledge and agree that you must always refer to the document and/or section of the websites referred to by that link.