PRIVACY POLICY

In compliance with the obligations deriving from national legislation (Legislative Decree 30 June 2003 n. 196, Code regarding the protection of personal data, as updated by Legislative Decree 101/2018) and community legislation (European Regulation 2016/679, GDPR) and subsequent amendments, this site respects and protects the privacy of visitors and users, making every possible and proportionate effort not to damage the rights of users.

This privacy policy applies exclusively to the online activities of this site and is valid for visitors / users of the site.

The purpose of the privacy policy is to provide maximum transparency regarding the information that the site collects and how it uses it.

​

COLLECTED DATA

This site collects and processes Personal Data, as defined by the GDPR, independently or through third parties, or provided voluntarily by the user, including:

Internet protocol (IP) address; Type of browser and parameters of the device used to connect to the site; Name of the internet service provider (ISP); Date and time of the visit; Web page of origin of the visitor (referral) and exit; Possibly the number of clicks. Cookies and Usage Data, collected through automatic processes;

The aforementioned information is processed in an automated form and collected in an exclusively aggregated and pseudonymised form in order to verify the correct functioning of the site and for security reasons; such information will be treated on the basis of the legitimate interests of the owner.

For security purposes (spam filters, firewalls, virus detection), the automatically recorded data may possibly also include personal data such as the IP address, which could be used, in accordance with applicable laws, in order to block attempts to damage the site itself or to cause damage to other users, or in any case harmful activities or constituting a crime. These data are never used for the identification or profiling of the user, but only for the purpose of protecting the site and its users; such information is treated on the basis of the legitimate interests of the owner.

Personal data, personal data ("contacts" section) - the latter released voluntarily by the user and not decisive on the functioning of the site.

Any use of Cookies - or of other tracking tools - by this Site or by the owners of third party services used by this Application, unless otherwise specified, is intended to provide the Service requested by the User, in addition to further purposes described in this document and in the Cookie Policy, to which reference is made.

The User assumes responsibility for the Personal Data of third parties obtained, published or shared through this Application and guarantees to have the right to communicate or disseminate them, freeing the Owner from any liability to third parties.

METHOD OF TREATMENT

The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data. The processing is carried out using IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases, other internal parties involved, or external subjects (such as third party technical service providers, hosting providers, IT companies, communication agencies) appointed as Data Processors by the Data Controller may have access to the Data.

PLACE OF TREATMENT

The data collected from the site are processed by the Data Controller and are handled only by technical personnel authorized to process or appointed as external data processor in accordance with art. 28 EU Reg. 2016/679. The server hosting the site is located in Italy.

This site may share some of the data collected with services located outside the European Union area, always in compliance with the rights and guarantees provided for by current legislation, pursuant to Articles 44 and ss. of EU Reg. 2016/679.

STORAGE PERIOD

The Data are processed and stored for the time required by the purposes for which they were collected.
The Personal Data collected for purposes related to the execution of the service requested by the User will be kept until the execution of this service is completed. With regard to any Personal Data collected for purposes based on the User's consent, the Data Controller may keep the Personal Data longer until such consent is revoked.

Furthermore, the Data Controller may be obliged to keep Personal Data for a longer period in compliance with a legal obligation or by order of an authority. At the end of the retention period, the Personal Data will be deleted. Therefore, at the end of this term the right of access, cancellation, rectification and the right to data portability can no longer be exercised.

PURPOSE OF THE PROCESSING OF COLLECTED DATA

User data is collected for the following purposes:

• Monitor the infrastructure;

• Contact the User in case of contact requests from her;

SECURITY MEASURES

This site processes user data in a lawful and correct manner, adopting appropriate security measures to prevent unauthorized access, disclosure, modification or unauthorized destruction of data. The processing is carried out using IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated. In addition to the owner, in some cases, categories of employees involved in the organization of the site or external parties (such as third party technical service providers, hosting providers, IT companies, communication agencies) may have access to the data.

​

USER RIGHTS

With regard to the personal data themselves, the interested party can exercise the rights provided for in Articles 15 and ss. GDPR and precisely:

Right of access (Article 15) - consists in obtaining from the Data Controller confirmation that the processing of personal data concerning him is in progress and in this case, obtaining access to the same data and certain information (explicit in the aforementioned article) regarding the data in question. Right of rectification (Article 16) - It consists in giving the interested party the possibility to modify their data if they are inaccurate. Right of cancellation (Article 17) - Possibility for the interested party to cancel their data held by the owner when, for example, consent to the processing is revoked or the pursued purpose is reached or when it is illegal. Obviously, it will not always be possible to fulfill the cancellation request. This happens for example when the data are used to fulfill a legal obligation or are necessary for the defense of a right in court. Right of Opposition (Article 21) - The possibility of opposing the processing must be guaranteed when the legal basis is the legitimate interest or the execution of a task of public interest. This right also has its limits as there may be cases in which the legitimate interest of the owner prevails over that of the interested party, it will be essential to make the right balance, or the processing is necessary for a task of public interest or the assessment, defense or exercise of a right before a judge. Right to portability (Article 20) - provides that, in the event that a processing is based on a contract or on consent, in the event of a request, the data subject is provided with his personal data in a structured and readable format by an automatic device (json , xml, csv), this right applies only to data provided spontaneously and not to those inferred or derived.

Right of revocation (Article 7) - In the event of signing any form of consent to the processing requested by the Data Controller, please note that the interested party can revoke it at any time, without prejudice to the mandatory obligations provided for by the legislation in force at the time of the request. of revocation, by contacting the Data Controller at the addresses indicated, at the address above, or by email, specifying the subject of your request, the right you intend to exercise and attaching a photocopy of an identity document certifying the legitimacy of the request .

The interested party has the right to lodge a complaint with the competent supervisory authority in the Member State in which he habitually resides or works or in the State in which the alleged violation has occurred.

All the aforementioned rights may be exercised by sending a specific request to the Data Controller through the contact channels indicated in this information.

Data controller and data protection officer

The Data Controller is LYNX S.R.L. having its registered office in Viale Giuseppe Verdi, 56 - 34074 Monfalcone (GO), to which you can contact by writing to the following e-mail address: info@gruppolynx.it, or by calling 0481.412525.

​

Last updated: 04/05/2022​