INFORMATION FOR THE PROCESSING OF PERSONAL DATA COLLECTED DURING USER NAVIGATION ON INSTITUTIONAL PORTALS


1. Introduction

Pursuant to art. 13 of European Regulation no. 679/2016 and art. 122 of Legislative Decree 196/2003, Elsa S.r.l., as data controller, is required to provide you with information regarding the use of your personal data. This document describes the rules for managing the CONTROLLER's websites, with specific reference to the processing of the personal data of browsers who consult it.

This document does not refer to the processing of personal data provided by users who submit requests through the site: this data is in fact managed in compliance with another specific information published in the "Privacy" section of the website , made in accordance with current legislation.

Elsa S.r.l. undertakes to respect and protect your confidentiality by processing the personal data provided by you in compliance with the legal provisions designed to guarantee the security, accuracy, updating and relevance of the data with respect to the stated purposes.


2. Identity and contact details of the controller

The data controller is Elsa S.r.l., Località La Petrizia SS 106, 88050, Sellia Marina (Catanzaro) - Italy, Tel: (+39) 0961 962854, email: privacy@elsasrl.com.


3. The Personal Data Protection Officer

The Data Controller is not obliged to appoint a Data Protection Officer pursuant to art. 37 of the Regulation.


4. Data processors

Elsa S.r.l. may use third parties for the performance of activities and related processing of personal data of which it retains ownership. In accordance with the provisions of the legislation, these third parties ensure levels of experience, capacity and reliability such as to ensure compliance with the current provisions on processing, including the data security profile.

Documented instructions are formalised containing tasks and duties for these third parties with the designation of the same as "Data Processors". These are subject to periodic checks in order to verify the maintenance of the levels of guarantee, recorded when the initial assignment was granted.


5. Individuals authorised to process
Your personal data is processed by internal personnel previously authorised and designated as data processors, who are given appropriate instructions regarding measures, precautions, modus operandi, all aimed at the concrete protection of your personal data.


6. Purpose and legal basis of the processing
The personal data provided by users is used solely for the purpose of performing the web services present on the website and for possibly receiving informative material (annual reports, acts and measures, etc.). The data will be communicated to third parties only to perform the maintenance operations of the website.

6.1 Types of data processed and purposes of processing
Th computer systems and software procedures used to operate the websites acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and IT environment.

This data, necessary for the use of web services, is also processed for the purpose of:

  • obtaining statistical information on the use of the services (most visited pages, number of visitors per time slot or per day, geographical areas of origin, etc.)

  • check the correct functioning of the services offered.

The data may be used to ascertain responsibility in the event of hypothetical computer crimes against the site: except for this eventuality, the data on web contacts persists for a period not exceeding that necessary for the purposes for which it is collected and subsequently processed.

6.2 Data communicated by the user
This policy does not concern data collected by sending optional, explicit and voluntary e-mail messages to the addresses indicated on the websites of the Region or by optional, explicit and voluntary registration through special web forms on our websites: the processing of this type of data is carried out in accordance with what is reported in the specific policies published in the "Privacy" section.


7. Cookie policy

Cookies are small text files that can be used by websites to make a user's experience more efficient. The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission.
This site uses different types of cookies. Some cookies are placed by third party services that appear on our pages. You can at any time change or withdraw your consent from the Cookie Declaration on our website.

8. Recipients of personal data

Your personal data is not subject to communication or dissemination


9. Place of data processing

The processing related to the web services of this site takes place at Elsa S.r.l., Località La Petrizia SS 106, 88050, Sellia Marina (Catanzaro) - Italy 


10. Retention period

Your data is kept for a period not exceeding that necessary for the pursuit of the aforementioned purposes. To this end, even through periodic checks, the strict relevance, non-excess and indispensability of the data is constantly verified with respect to the relationship, service or assignment in progress, to be established or terminated, also with reference to the data you provide on your own initiative. Data that, even after verification, results in excess or irrelevant or not indispensable is not used, except for the possible retention, in accordance with the law, of the deed or document that contains it.


11. Your rights

As a data subject, you are entitled to:

  • access to personal data;

  • obtain the rectification or cancellation of the same or the limitation of the processing;

  • object to the processing;

  • lodge a complaint with the Data Protection Authority


12. Provision of data

The provision of your data is optional, but necessary for the purposes indicated above. Failure to provide it will make it impossible to respond to your requests.




INFORMATION FOR THE PROCESSING OF PERSONAL DATA PROVIDED BY USERS THROUGH E-MAIL MESSAGES OR BY FILLING OUT FORMS

1. Introduction

Pursuant to art. 13 of European Regulation no. 679/2016, Elsa S.r.l., as data controller, is required to provide you with information regarding the use of your personal data through e-mail or by filling up a registration and contact form present on the portal.


2. Identity and contact details of the controller

The data controller is Elsa S.r.l. with registered office in Località La Petrizia SS 106, 88050, Sellia Marina (Catanzaro) - Italy 


3. The Personal Data Protection Officer

The Data Controller is not obliged to appoint a Data Protection Officer pursuant to art. 37 of the Regulation.


4. Data processors

Elsa S.r.l. may use third parties for the performance of activities and related processing of personal data of which it retains ownership. In accordance with the provisions of the legislation, these third parties ensure levels of experience, capacity and reliability such as to ensure compliance with the current provisions on processing, including the data security profile.

Documented instructions are formalised containing tasks and duties for these third parties with the designation of the same as "Data Processors". These are subject to periodic checks in order to verify the maintenance of the levels of guarantee, recorded when the initial assignment was granted.


5. Persons authorised to process

Your personal data is processed by internal personnel previously authorised and designated as data processors, who are given appropriate instructions regarding measures, precautions, modus operandi, all aimed at the concrete protection of your personal data.


6. Purpose and legal basis of the processing

The personal data indicated on this page is processed for the following purpose: to respond to your requests. The personal data provided by users is lawfully processed to implement pre-contractual measures or contractual obligations (art. 6 par. 1 lett. b) of Regulation 679/2016), requested by the users themselves (request sent by filling out the form) and therefore does not require their consent. 


7. Recipients of personal data

Your personal data is not subject to communication or dissemination.


8. Transfer of personal data to non-EU countries

Your personal data is not transferred outside the European Union.


9. Place of data processing

The processing connected to the web services of this site takes place at the Offices of Elsa S.r.l.

The information systems are allocated at Elsa S.r.l., Località La Petrizia SS 106, 88050, Sellia Marina (Catanzaro) - Italy 


10. Retention period

Your data is kept for a period not exceeding that necessary for the pursuit of the aforementioned purposes. To this end, even through periodic checks, the strict relevance, non-excess and indispensability of the data is constantly verified with respect to the relationship, service or assignment in progress, to be established or terminated, also with reference to the data you provide on your own initiative. Data that, even after verification, results in excess or irrelevant or not indispensable is not used, except for the possible retention, in accordance with the law, of the deed or document that contains it.


11. Your rights

As a data subject, you are entitled to:

  • access to personal data;

  • obtain the rectification or cancellation of the same or the limitation of the processing;

  • object to the processing;

  • lodge a complaint with the Data Protection Authority


12. Provision of data

The provision of your data is optional, but necessary for the purposes indicated above. Failure to provide it will make it impossible to respond to your requests.