INFORMATION ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ARTICLE 13 OF
REGULATION (EU) 2016/679 FOR USERS CONSULTING THE WEBSITE
Following consultation of this website, personal data may be processed by personnel authorised by the Data Controller.
This information does not concern other websites, pages or online services reachable via hypertext links that may be found here referring to resources outside the Data Controller's domain.
DATA CONTROLLER
The Data Controller is ENDLESS
S.R.L. SOCIETÀ BENEFIT based in Genoa, P.zza della vittoria 11A/1B –
tax code/VAT number 02659760991 – PEC endlessbcorp@legalmail.it
LEGAL BASIS FOR PROCESSING
The personal data indicated on this page are processed by the Data Controller with the optional consent of the User and on the legitimate interest of the Data Controller pursuant to Article 6, paragraph 1, letters a) and f).
TYPES OF DATA PROCESSED AND PURPOSES OF PROCESSING
- Navigation data
The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes IP addresses or domain names of computers and terminals
used by users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given
by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment.
This data, necessary for the use of web services, is also processed for the purpose of:
i) obtaining statistical information on the use of services (most visited pages, number of
visitors per hour or day, geographical areas of origin,
etc.);
ii) checking the correct functioning of the services offered.
Navigation data does not persist for more than seven days (except for any need to ascertain crimes
by the judicial authority).
- Data provided by the user
The optional, explicit and voluntary sending of messages to contact addresses in free form or through the "forms" on the Data Controller's website, private messages sent by users to institutional profiles/pages on social media (where this possibility is provided), as well as the compilation and submission of forms on the websites, involves the acquisition of the sender's contact data, necessary to respond, as well as all personal data included in the communications that will be stored for the time strictly necessary for the response and for the user's expressed need.
- Data processed by the managers of the Social Media platforms used by the Organisation
The Organisation processes personal data provided by Data Subjects during the use of Social Media platforms where the organisation has created its own profiles for the purpose of promoting its activities.
Regarding the methods of such processing, it will occur according to the policies in use on the platforms used. Data shared by users through private messages sent directly to the channel managers will be processed by the Managers of these platforms according to their respective published privacy policies and by the Organisation according to this policy, in order to respond to the requests made and in any case in compliance with current regulations on the protection of personal data.
Below are the official institutional profiles of the Data Controller on social media and instant messaging services: Example, Facebook, Linked In, Instagram.
- Cookies and other tracking systems:
Cookies are short text strings that are sent from the site's server to the user/visitor's browser and are automatically saved on the user/visitor's PC.
Almost all browsers are set to accept cookies, however the user/visitor can independently change their browser configuration and block cookies.
The cookie policy applied to this website is available via cookie settings.
RECIPIENTS OF THE DATA
The personal data collected are processed by the Data Controller's personnel, who act on the basis of specific instructions provided regarding the purposes and methods of the processing itself.
However, the aforementioned data may also be intended for third parties other than the Data Controller for the performance of certain data processing activities on behalf of the Data Controller expressly designated as data processors, pursuant to Article 28 of the Regulation.
These subjects will be indicated upon request.
RIGHTS OF DATA SUBJECTS
Data subjects have the right to obtain from the Data Controller, in the cases provided for, access to their personal data and the rectification or erasure thereof or the restriction of processing concerning them or to object to processing (Articles 15 et seq. of EU Regulation 679/2016 - GDPR), as well as the right to withdraw consent to the processing of personal data at any time.
To exercise these rights, a specific request must be addressed to the Data Protection Officer at the Data Controller, whose contact details are provided above.
RIGHT TO COMPLAIN
Data subjects who believe that the processing of personal data relating to them is carried out in violation of the provisions of EU Regulation 679/2016 - GDPR have the right to lodge a complaint with the Privacy Guarantor, as provided for in Article 77 of EU Regulation 679/2016 - GDPR, or to take appropriate legal action (Article 79 of EU Regulation 679/2016 - GDPR).