Privacy policy

Why this notice

This page describes how the site is managed with regard to the processing of personal data of users who consult it. As a result of consulting this site, data relating to identified or identifiable persons may be processed.

This information is provided in accordance with Article 13 of Regulation (EU) 2016/679 (GDPR 2016/679), to those who interact with the web services of www.csasrl.it for the protection of personal data, accessible electronically from the address:

www.csasrl.it

The information is provided only for the website of CSA S.r.l. and not also for other websites that may be consulted by the user through links.

The information is also inspired by Recommendation No. 2/2001, which the European Data Protection Authorities, meeting in the Group established by Article 29 of Directive No. 95/46/EC, adopted on May 17, 2001, to identify certain minimum requirements for the collection of personal data online, and, in particular, the manner, timing and nature of the information that data controllers must provide to users when they connect to web pages, regardless of the purposes of the connection.

Type of data processed

Navigation data

The computer systems and software procedures used to operate these websites acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) notation addresses of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the user’s operating system and computer environment.

These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site: except for this possibility, at present the data on web contacts do not persist for more than seven days.

Data voluntarily provided by the user

CSA S.r.l. will process personal data that the user provides when registering, requesting a specific service or otherwise as part of the relationship with the csasrl.it portal.

Such data may include:

• identifying and contact data (first name, last name, residence/domicile address, city, VAT number, e-mail address, phone number etc.).

The provision of personal data is a necessary requirement for the provision and subsequent enjoyment of the Services requested. Failure to provide certain data (personal details, e-mail address, etc.) therefore, may result in the Owner being unable to provide the Services requested.

CSA S.r.l., will indicate from time to time, also through its own forms on the csasrl.it portal, the data whose conferment is strictly necessary for the use of the Services and the additional data whose conferment is instead necessary only for the purpose of enriching its user experience within the Services themselves.

Owner, controller and DPO

The Data Controller is CSA S.r.l., in the person of the legal representative pro tempore. The list of External Data Processors is constantly updated and can be consulted at the company’s registered office.

Purposes of the processing for which the data are intended

The personal data you provide will be used for the following purposes:

1. For the execution of the contract or otherwise to provide Services requested by the user on the csasrl.it portal:

   Provide product information services;

   Manage contact operations through the “contact” area of the website;

   Manage proper navigation on the portal www.csasrl.it;

   Sending communications regarding the services offered, newsletters and personalized news, containing promotional material and initiatives of its own activities and services by automated means (electronic mail).

Nature of conferment

The provision of data is mandatory with regard to the purposes in (a) and (b): any refusal will determine the impossibility for CSA S.r.l. to proceed with the full provision of the services offered.

Consent for the purpose in point c) is optional and will only result in the failure to send advertising messages or newsletters, without prejudice to the provision of the service offered.

Mode of treatment

All personal data are processed mainly through electronic means and methods, however, processing through paper means is not excluded a priori.

Data will be kept in a form that allows the identification of data subjects only for as long as is strictly necessary to achieve the purposes for which the data were originally collected and, in any case, within the limits of the law.

In order to ensure that personal data is always accurate, up-to-date, complete and relevant, we invite users and other interested parties to keep their data updated through the specific functions of the sites and applications connected to the csasrl.it portal , or to report any changes that have occurred to the following e-mail address: amministrazione@csasrl.it.

Personal data will be processed only as long as necessary in relation to the purposes described above.

Security measures will be employed to ensure the confidentiality of the data subject to whom such data relate and to prevent undue access by third parties or unauthorized personnel.

Place of data processing

Processing related to the web services of this site takes place at the registered and operational office of CSA S.r.l. and is handled only by specifically appointed personnel; the data is also processed in any other place where the parties involved in the processing are located. In particular, all data pertaining to the website, as well as its back-up copies, are stored at servers hosted in data centers within the European Union and in compliance with current EU regulations.

For more information, contact the Holder.

Times of data processing

Data are processed for as long as necessary to carry out the service requested by the user, or required by the purposes described in this document, and the user can always request the interruption of the processing or deletion of the data.

Disclosure of data to third parties

No data will be subject to dissemination. Where disclosure to third party suppliers, consultants or partners should be necessary for needs related to the provision of the Services, it will be the responsibility of the Owner to provide for the appointment of the latter as data processors pursuant to Article 28 of the Regulations, by virtue of their demonstrated capacity, experience and reliability.

Data subjects may at any time request the full list of data processors appointed by CSA S.r.l. from time to time by sending a request to the Data Controller at the following e-mail address: amministrazione@csasrl.it

It is understood that users’ personal data may be freely disclosed to third parties, such as police forces or other public administrations, whenever this is permitted by law or required by an order or measure of a competent authority. These parties will process the data as autonomous data controllers.

Ownership of cookie processing

Since the installation of Cookies and other tracking systems operated by third parties through the services used within this site cannot be technically controlled by the Owner, any specific reference to Cookies and tracking systems installed by third parties is to be considered indicative.

Given the objective complexity related to the identification of Cookie-based technologies and their very close integration with the functioning of the web, the user is invited to contact the Owner should he or she wish to receive any in-depth information regarding the use of Cookies themselves and any use of the same – for example by third parties – made through this site.

Rights of the data subject

At any time, you may exercise, pursuant to Articles 15-22 of GDPR 2016/679, the right to:

• Request confirmation of the existence or non-existence of their personal data;
• Obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be disclosed, and, when possible, the retention period;
• Obtain rectification and deletion of data;
• Obtain restriction of processing;
• Obtain portability of data, i.e., receive them from a data controller, in a structured, commonly used, machine-readable format, and transmit them to another data controller without hindrance;
• To object to the processing at any time and also in the case of processing for direct marketing purposes;
• Object to automated decision-making related to natural persons, including profiling.