Site Privacy Policy: www.stamperiabosatra.it

Described in this Privacy Policy are the methods of processing of personal data of users (hereinafter, for brevity, the "DataSubjects") who consult the site referred to athttps://www.stamperiabosatra.it//(hereinafter, for brevity, the "Site"). The information referred to in Article 13 of the Regulation (EU) 2016/679 (henceforth, the "GDPR") and the "Personal Data Protection Code" i.e. Legislative Decree 196/2003, as novated by Legislative Decree 101/18, is made in this Privacy Policy to those who interact with online services provided through the Site (henceforth, the "Services").

This disclosure is made only with reference to the Site.

THE DATA CONTROLLER

Consultation of the Site involves the release of information and Personal Data, of the Interested Parties. The Data Controller is: Stamperia Bosatra srl - Via per Valduggia, 7, 13011 Borgosesia VC (henceforth the "Data Controller").

NAVIGATION DATA

The computer systems and software procedures used to operate the Site acquire, in the course of their normal operation, some personal data of the Interested Parties who visit it (hereinafter, for brevity, the "Personal Data"), the transmission of which is implicit in the use of Internet communication protocols. The Personal Data referred to in Article 2.1. is information that is not collected in order to be associated with specific Data Subjects, but which, by its very nature, could, through processing and association with data held by third parties, allow the identification of such Data Subjects. This category of Personal Data includes the IP addresses or domain names of the computers used by the Interested Parties connecting to the Site, the URI (Uniform Resource Identifier) notation addresses of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment.

The Personal Data referred to in art. 2.1. are used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct functioning and are kept for the time periods defined by the reference legislation, and in particular art. 5 paragraph 1 letter e) of the GDPR. The Personal Data referred to in art. 2.1. could be used to ascertain responsibility in case of hypothetical computer crimes against the Site.

The special data referred to in Article 9, Paragraph 1 of the GDPR cannot be processed without the express consent given by the Data Subject.

PURPOSE OF PROCESSING

Personal data such as unique IP address may possibly be collected for site navigation and statistical purposes, there are no other means of collection or forms of sharing. The Site was created to provide information to surfers about the structure of the firm and how it operates

LEGAL BASIS FOR PROCESSING

The legal basis for the processing of Personal Data for the purposes referred to in letter a, is Article 6.1.b) of the GDPR, as the processing is necessary for the provision of Services or for the response to requests from the Data Subject. The provision of Personal Data for these purposes is optional, but failure to provide it would result in the inability to activate the Services provided by the Site. The legal basis related to the purpose under b, is Article 6.1.c) of the GDPR, as the data provided is required by legal obligation.

DATA RETENTION

Personal Data are stored within the European Union in order to comply with the related purposes indicated above. The processing will be carried out in automated and manual form, with methods and tools designed to ensure maximum security and confidentiality, by persons specifically appointed for this purpose. In compliance with the provisions of Article 5 paragraph 1 letter e) of the GDPR, the Personal Data collected will be stored in a form that allows the identification of the Data Subjects for a period of time not exceeding the achievement of the purposes for which the Personal Data are processed. The retention of the Personal Data provided depends on the purpose of the processing.

Personal Data will be kept for as long as is strictly necessary to achieve those same purposes in accordance with the principles of minimization and limitation of storage under Article 5.1.e) of the GDPR.

MODE OF TREATMENT

Personal Data will be processed by means of computerized/telematic tools and for purposes related and/or instrumental to online services or for simple navigation on the Site, as established by the Italian legislation in force; in particular:

1. To make possible the delivery of the Service;
2. To make possible the execution of obligations under the law.

Personal Data will be processed by means of tools and/or methods designed to ensure the confidentiality and security of such Personal Data.

Possible Data Processors will be appointed, upon the Holder's conferral of external assignments (for the performance of which it is necessary to share the Personal Data of the Data Subjects), from among those who present sufficient guarantees to put in place adequate technical and organizational measures so that the processing meets the requirements of the GDPR and guarantees the protection of the Data Subject's rights, and upon the Data Processor's signing of the appropriate contract/addendum to the professional assignment containing the requirements and specifications of the processing itself.

RIGHTS OF INTERESTED PARTIES

The Interested Party has the right at any time to obtain confirmation of the existence or non-existence of the same data and to know its content and origin, verify its accuracy or request its integration or updating, or rectification ex art. 15 of the GDPR.

Pursuant to the same Article 15, you have the right to request the deletion, transformation into anonymous form or blocking of Personal Data processed in violation of the law, as well as to object in any case, for legitimate reasons, to their processing. Requests should be addressed to the Data Controller at its headquarters.

The Data Subject has the right to request from the Data Controller access to the Personal Data concerning him/her, as well as rectification, erasure, restriction, objection to their processing and portability of the same, when processed in an automated way on the basis of consent or for the performance of the contract.

The Data Subject has the right to revoke consent at any time without affecting the lawfulness of the processing based on the consent given before revocation.

The Data Subject has the right to lodge a complaint with the Data Protection Authority under Article 77 of the GDPR.

WAYS OF EXERCISING RIGHTS UNDER ART. 12 OF THE GDPR

The Data Subject may at any time exercise the rights identified in Art. 15 and, where applicable, Art.16-21 of the GDPR, by sending:

• a registered letter with return receipt at the registered office of the Holder located in Via per Valduggia, 7 - 13011 Borgosesia (VC)
• by writing to the e-mail address info@stamperiabosatra.it