Pursuant to the articles. 13 and 14 of Regulation (EU) 2016/679 (“the Regulation” or “GDPR”), we wish to inform users regarding the methods and purposes of the processing of personal data of those who interact with our website.

The information is not to be considered valid for other websites that may be consulted via links on the websites in the domain of the owner, who is not to be considered in any way responsible for the websites of third parties.

Data controller

The Data Controller of the personal data collected through this site is Nove Alpi S.r.l., with registered office in Pistoia, Via di S. Pierino Casa Al Vescovo n. 1, VAT number. 01008240473, telephone number: 0573.986467, e-mail address: info@novealpi.it

Data Protection Officer (DPO)

The data protection officer of Nove Alpi S.r.l. can be reached at the email address dpo@andrianispa.com or by contacting the Data Controller’s office.

Purpose of the processing, legal basis, nature of the provision

For the purposes expressed in this information, only non-particular personal data will be processed.

Personal data will be processed in compliance with the conditions of lawfulness pursuant to art. 6 of the Regulation, for:

• allow navigation on this website and the technical management of connections to it

The computer systems responsible for the operation of the websites acquire, during their normal operation and only for the duration of the connection, some personal data whose transmission is implicit in the use of internet communication protocols. This is information that is not collected to be associated with identified data subjects, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified. For example, this category of data includes: IP addresses or the names of the computers used by users who connect to the websites, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the characteristics of the browser used for navigation, the size of the window in which the browser runs on the device used, and other parameters relating to the operating system and the user’s IT environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the sites and to check their correct functioning, and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the sites.

Legal basis of the processing: the legitimate interest of the Data Controller (art. 6 paragraph 1 letter f of the GDPR).

The data requested for the purposes indicated are necessary to allow navigation on the site.

• follow up on requests for information or contact, the download of information material on our products and other types of requests made by customers/users regarding the services/products offered by the Owner

The voluntary sending of e-mails to the e-mail addresses indicated on the website, also through the specific data collection form, involves the subsequent acquisition of the sender’s e-mail address or telephone number, necessary to follow up on requests, as well as any other personal data included in the text of the message, as well as the fax number if you wish to use this communication tool. This also applies to the management of complaints forwarded by users and feedback to them, as well as for the protection of the Data Controller’s rights also in court.

Legal basis of the processing: execution of a contract of which the data subject is a party or the execution of pre-contractual measures adopted at the request of the same (art. 6 paragraph 1 letter b of the GDPR) and legitimate interest of the Data Controller for complaints and judgments (art. 6 paragraph 1 letter f of the GDPR).

The data requested for the purposes indicated are necessary to be able to follow up on the requests of the data subject. Any failure to provide data has the sole effect of making it impossible to send and/or receive and/or respond to the interested data subject.

 

Data processing methods

The processing will be carried out with manual, IT and telematic tools in compliance with the regulations in force and the principles of correctness, lawfulness, transparency, relevance, completeness and non-excess, accuracy and with organization and processing logic strictly related to the purposes pursued and in any case in so as to guarantee the security, integrity and confidentiality of the data processed, in compliance with the organisational, physical and logical measures envisaged by the provisions in force.

 

Data retention period

In compliance with the provisions of the art. 5 paragraph 1 letter. e) of EU Regulation 2016/679, the personal data collected will be stored in a form that allows the identification of the data subjects for a period of time not exceeding the achievement of the purposes for which the personal data are processed. The storage of personal data provided depends on the purpose of the processing:

– browsing this website, see the cookies policy;

– for contact and information requests, 1 year; for complaints, the data will be stored for a longer period, depending on the type of problem encountered and the customer’s needs (and in any case for a maximum period of 3 years).

Once these terms have expired, the data will be deleted or transformed into anonymous form, unless their further conservation is necessary to fulfill legal obligations or to fulfill orders given by Public Authorities and/or Supervisory Bodies.

 

Nature of the provision of data

The user is free to provide their personal data. Failure to provide data may make it impossible to obtain what is requested or to use the web services of the Data Controller.

 

Data recipients or categories of recipients

For the pursuit of the purposes described, or in the event that this is indispensable or required by legal provisions or by authorities with the power to impose it, the Data Controller reserves the right to communicate the data to recipients belonging to the following categories:

• subjects who carry out IT maintenance or similar services;
• subjects who provide services for the management of the information system used by the Data Controller and the telecommunications networks, including e-mail, newsletters and website management;
• suppliers who carry out certain activities on our behalf such as, for example, mail, transport and delivery activities;
• external parties who support the Data Controller in the administration of the information system and telecommunications networks (including web platforms);
• to third party suppliers of IT services and/or data management software;
• Supervisory and control authorities and bodies and, in general, public or private entities with public-related functions (e.g. Prefecture, Police Headquarters, Judicial Authority, in any case only to the extent that the conditions established by the applicable legislation exist) ;
• other companies of the group of which the Data Controller is part, or in any case parent, controlled or associated companies, pursuant to art. 2359 of the Civil Code;
• professional firms or companies in the context of assistance and consultancy relationships.

 

Transfer of data outside EU countries

Personal data will be processed in EU countries.

Data dissemination

The user’s data will not be disclosed.

 

Rights of the data subject

The articles 15, 16, 17, 18, 20, 21 of the GDPR grant the data subject the exercise of specific rights which may be exercised against the Data Controller.

In particular, as an data subject, you may, under the conditions established by the GDPR, exercise the following rights:

• right of access: right to obtain confirmation as to whether or not personal data concerning you is being processed and, if so, obtain access to your personal data, including a copy of the same;
• right of rectification: right to obtain the rectification of inaccurate personal data concerning you and/or the integration of incomplete personal data;
• right to cancellation (right to be forgotten): right to obtain the cancellation of personal data concerning you, if they are no longer necessary for the purposes pursued by the Data Controller, in the event of revocation of consent (and there is no other legal basis for the processing) or your opposition to the processing, in case of unlawful processing, or if there is a legal obligation to erase.

The right to erasure does not apply to the extent that processing is necessary for the fulfillment of a legal obligation or for the performance of a task carried out in the public interest or for the establishment, exercise or defense of a right in court;

• right to limit processing: right to obtain the limitation of processing, when: a) the data subject contests the accuracy of the personal data; b) the processing is unlawful and the data subject opposes the deletion of the personal data and instead requests that their use be limited; c) the personal data are necessary for the data subject to ascertain, exercise or defend a right in court;
• right to data portability: right to receive, in a structured format, commonly used and readable by an automatic device, the personal data concerning you provided to the Data Controller and the right to transmit them to another data controller without impediments, if the processing is based on consent and is carried out by automated means;
• right to object: right to object, at any time, to processing if personal data is processed for purposes other than those for which you have consented to the processing.

Pursuant to art. 77 of the Regulation, you are granted the right to lodge a complaint with a supervisory authority, in particular in the Member State in which you habitually reside, work or in the place where the alleged violation occurred.

This Privacy Policy was updated in May 2024.

The Data Controller

Nove Alpi S.r.l.