This page describes how to manage this website with reference to the processing of the personal data of users who consult it. Data processing is carried out in compliance with the criteria set out in the European regulation on the protection of personal data, Reg. 2016/679 / EU and any other national legislative text, provision or authorization of the competent Authority connected to it. According to the indicated legislation, the treatment must be based on principles of correctness, lawfulness and transparency and protection of your privacy and your rights.
The information is provided only for this site and not for other websites that may be consulted by the user via links. Personal data is collected for the following services:
a) allow navigation on the website;
b) respond to your requests for information regarding the products offered for sale by the Data Controller.
HOLDER OF THE PROCESSING OF PERSONAL DATA
the company Bioalleva S.r.l., in the person of its pro tempore legal representative, with registered office in Via Rodolfo Spineta, 1374 – 37050 Vallese di Oppeano (VR); tel .: 0458980943, e-mail: email@example.com
PLACE OF DATA PROCESSING, COMMUNICATION AND DIFFUSION
The treatments connected to the web services of this site take place at the aforementioned headquarters of the Company and are handled by internal staff or, if necessary, by appointed external personnel (eg for maintenance and updating of IT systems).
On the other hand, no data deriving from the web service is disclosed.
They may be disclosed to third parties, duly appointed, only if this is necessary for this purpose for the performance of the service.
The Data Controller also informs that it does not resort to fully automated decision-making processes, including profiling, to achieve the purposes set out in this information.
PURPOSE AND LEGAL BASIS OF THE PROCESSING
The personal data provided by users who submit requests for information regarding products and purchases will be used only to perform the requested service.
The legal bases of data processing are:
1) art. 6.1 lett. f) G.D.P.R. “Legitimate interest of the Data Controller”, consisting in allowing the use of the “contact us” service and art. 6.1 lett. a) G.D.P.R. “The consent of the data subject”.
2) art. 6.1 lett. b) G.D.P.R. “Execution of pre-contractual and contractual measures in place with the data subject” for viewing the company’s products and services.
TYPE OF DATA PROCESSED
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment.
This type of data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site. For these data, limited to the aforementioned purpose, it is not necessary to request explicit consent.
Data provided voluntarily by the user
These are the identification data necessary for user registration, for entering the specific request. The insertion takes place by filling in the form of the specific sections, it involves the subsequent acquisition of the information. Processing is necessary for the aforementioned purposes and is optional; failure to acquire the required data will make it impossible to provide the service.
TRANSFER OF DATA TO EXTRA EU COUNTRIES
The Data Controller does not transfer (and does not keep) personal data collected from the website in third countries outside the E.U.
The Data Controller will process personal data for the time necessary to fulfill the aforementioned purposes and in any case for no later than the terms established by Italian law for the storage of data for billing. The contact data may be deleted following your exercise of the right of cancellation even immediately.
RIGHTS OF THE INTERESTED PARTIES
Pursuant to art. 15 – 22 G.D.P.R., the interested party has the right to ask the data controller to access your personal data or to correct or cancel them or limit their processing, or have the right to oppose their processing, as well as the right to request the portability of the data.
The request can be made by e-mail or fax or registered letter with the subject: “request by the interested party” specifying in the request the right that the interested party wishes to exercise (cancellation, rectification, portability, oblivion), together with a valid e-mail / pec address to which the reply is to be delivered.
The data controller or anyone appointed by the same, will proceed to satisfy the request within 30 days from the date of receipt. If the response is complex, the time could be extended to a further 30 days, subject to timely communication to the interested party.
If he deems it appropriate to assert his rights, he has the right to lodge a complaint with the competent supervisory authority, corresponding to the Guarantor for the protection of personal data, based in Piazza Venezia, 11 – 00187 Rome, e-mail: firstname.lastname@example.org