Information on the processing of personal data
Pursuant to art. 13 of Legislative Decree 196/2003 (hereinafter, the “Privacy Code”) and art. 13 of EU Regulation 2016/679 of 27 April 2016 (“Regulation”, the Regulation and the Privacy Code are collectively referred to as “Applicable Regulations”), we wish to provide, as data controllers, appropriate information about the basic elements of the processing we perform.
Lighthin srl (hereinafter, the “Holder”) takes the utmost account of the right to privacy and protection of personal data as guaranteed by the Applicable Law.
- By sending a registered letter with return receipt to the registered office of the Holder (Via G. Macaggi, 23/A/1 – 16121 Genoa – Italy);
- By sending an e-mail to firstname.lastname@example.org
2. TYPE OF DATA PROCESSED BY THE HOLDER
The website offers informative and sometimes interactive content. During the navigation of the site Lighthin S.r.l. can, therefore, acquire information about the visitor, in the following ways:
- Navigation data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes: IP addresses, the type of browser used, the operating system, the domain name and the addresses of the websites from which the access was made, information on the pages visited by users within the site, the time of access, the stay on the individual page, the analysis of internal path and other parameters relating to the operating system and computer environment of the user.
- Further categories of data
This is all the personal data provided by the visitor through the site, for example, by registering and/or accessing a reserved area and/or a service and/or participating in one of the initiatives launched by Lighthin S.r.l., by writing to an e-mail address of Lighthin S.r.l. to request information or by calling our telephone numbers.
3. PURPOSE OF THE TREATMENT
3.1. Any personal data collected by the Holder for the purpose of concluding or executing the contract, will be processed lawfully by the Holder pursuant to art. 6 of the Regulation exclusively for the following purposes of processing:
b) Administrative-accounting purposes, i.e. to carry out activities of an organisational, administrative, financial and accounting nature, such as internal organisational activities and activities functional to the fulfilment of contractual and pre-contractual obligations, including any phase of protection of the Holder’s rights;
c) Obligations of the law, or to fulfil obligations provided for by law, by an authority, by a regulation or by European legislation.
3.2. The provision of personal data for the purposes of processing indicated above is optional but necessary, as failure to provide the same could make it impossible for the Holder to establish, or execute the contractual relationship. The provision of data is mandatory when it responds to specific provisions of law.
4. METHODS OF PROCESSING AND STORAGE TIMES OF DATA
The Holder will process personal data using manual and computer tools, with logic strictly related to the purposes themselves and, in any case, to ensure the security and confidentiality of the data.
Personal data will be kept for the time strictly necessary to carry out the primary purposes described in paragraph 1 above, or in any case as necessary for the civil protection of the interests of both data subjects and the Holder.
5. SCOPE OF COMMUNICATION AND DISSEMINATION OF DATA
The personal data may be disclosed to the employees and/or collaborators of the Holder in charge of managing the contractual relations. These subjects, who are formally appointed by the Holder to process personal data exclusively for the purposes indicated in this statement and in compliance with the provisions of the Applicable Law.
Your personal data may also be disclosed to third parties who may process personal data on behalf of the Holder as “External Data Processors” or as independent data controllers, such as, for example:
- service providers (such as administrative, IT, postal services, credit recovery companies, etc.);
- consultants (such as accountants, auditing firms, lawyers, etc.);
- companies of the same group, associated companies;
- banks and financial institutions;
- Public authorities and bodies.
The Holder informs you that he/she has the right to obtain a list of any data processors appointed by the Holder, by making a request to the Holder in the manner indicated in paragraph 4 below.
6. RIGHTS OF THE INTERESTED PARTIES
IThe rights guaranteed by the Applicable Law may be exercised by contacting the Holder in the following ways:
- By sending a registered letter with return receipt to the registered office of the Holder (Via G. Macaggi, 23/A/1 – 16121 Genoa);
- By sending an e-mail to email@example.com
Pursuant to the Applicable Law, the Holder informs you that he/she has the right to be informed of (i) the origin of the personal data; (ii) the purposes and methods of the processing; (iii) the logic applied in the event of processing carried out with the aid of electronic means; (iv) the identification data concerning the data controller and the data processors; (v) the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as data processors or persons in charge of the processing.
In addition, you have the right to obtain:
a) access, updating, rectification or, when interested, integration of the data;
b) the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;
c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.
In addition, you have:
a) the right to revoke consent at any time, if the processing is based on your consent;
b) where applicable, the right to data portability (the right to receive all personal data concerning you in a structured, commonly used and machine-readable format), the right to restrict the processing of personal data and the right to erasure (‘right to be forgotten’);
c) the right to object, in whole or in part, on legitimate grounds, to the processing of personal data concerning you, even if pertinent to the purpose of collection.
d) if you considers that the processing of personal data carried out by the Holder violates the Regulations, the right to lodge a complaint with a supervisory authority (in the Member State in which he/she habitually resides, in the one in which you works or in the one in which the alleged violation occurred). The Italian supervisory authority is the Guarantor for the protection of personal data, with headquarters in Piazza di Monte Citorio n. 121, 00186 – Rome (http://www.garanteprivacy.it/).
The Holder is not responsible for the updating of all links that can be viewed in this Information, so whenever a link is not working and/or updated, you acknowledge and agree that you must always refer to the document and/or section of the websites referred to by that link.