Pursuant to articles 13 and 14 of the Regulation (EU) 2016/679
Last update date: 27 September 2019
With this document, Industria Chimica Reggiana – ICR S.p.A., with registered office in Reggio Emilia (Italy), via M. Gasparini n. 7, Tax Code and VAT No. 00140910357, in the person of the current legal representative,owner of www.icrgladiator.com (from now on, “Site”), inform the data subject (User) that his personal data relating to navigation within the Site, with direct access from the homepage or through sub-pages, as well as related to the services offered, will be treated with utmost care and with appropriate means to guarantee security. These information – subject to provisions of Articles 13 and 14 of Regulation (EU) 2016/679 on the protection of personal data (also “General Data Protection Regulation” – GDPR) and to Legislative Decree 196/2003 (“Code regarding the protection of personal data”) – are not to be considered valid for other and external websites that can be consulted through the links present on the Site.
1. DATA CONTROLLER.
The data controller is Industria Chimica Reggiana – ICR S.p.A., with registered office in Reggio Emilia (Italy), via M. Gasparini n. 7, Tax Code and VAT number 00140910357. The data controller can also be contacted at: email@example.com.
2. DATA PROTECTION OFFICER.
The Data Protection Officer (DPO), appointed by the data controller, can be contacted at: firstname.lastname@example.org.
3. PURPOSES OF DATA PROCESSING.
The processing of User data is aimed at:
- allowing correct navigation on this Site;
- concluding and executing the sale of goods offered on the Site;
- allowing registration on the Site and use of services reserved for registered users;
- performing aggregate and anonymous statistical analysis of navigation and users;
- receiving, managing and answering,by e-mail and/or phone, requests made by e-mail and/or phone;
- complying with all the legal obligations to which the data controller is subject;
- establishing, exercising or defending legal claims.
4. LEGAL BASIS OF DATA PROCESSING.
The processing of your personal data is lawful, as:
- necessary for the execution of the contract of which you are a part, or for the execution of pre-contractual measures adopted upon your request, to: allow the correct navigation on the Site; conclude and execute the sale of goods offered on the Site; allow registration on the Site and use of services reserved for registered users; check the requests made by e-mail and/or telephone;
- necessary to comply with legal obligations to which the data controller is subject;
- necessary for the pursuit of the legitimate interest of the data controller, for the completion of aggregate and anonymous statistical analysis of navigation and users, aimed at a possible improvement of the Site and the understanding of how the data controller is searched on the Internet, and for the establishment, exercise and defence of legal claims.
5. CATEGORIES AND SOURCES OF PERSONAL DATA CONCERNED.
Industria Chimica Reggiana – I.C.R. S.p.A. does not process personal data relating to minors who are under the age of 18. With access to the Site, the registration of a user account, the use of the services offered or the purchase of goods, the User expressly declares to be over 18 years old.
5.1. Data deriving from User’s navigation.
These data, through the normal functioning of the Site, are acquired and transmitted implicitly in the use of Internet communication protocols. This is information that is not collected to be associated with identified data subjects, but, by its very nature, through processing with data held by third parties, could allow Users to be identified.
This category of data includes the IP addresses or domain names of the computers used by the Users who connect to the Site, the addresses in the Uniform Resource Identifier (URI) of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server and other parameters relating to the operating system and the user’s IT environment.
These data are used for the sole purpose of obtaining anonymous and aggregate statistical information on the use of the Site and to check its correct functioning, and permanently reside on third party server (hosting provider). The data could also be used to ascertain responsibility in the event of any malicious actions committed on or through the Site.
These data processing and association activities, however, are not carried out by the data controller, and are only used to check the correct functioning and are automatically deleted after processing.
5.3. Data provided voluntarily by the User.
These data are provided by the User, during the voluntary interaction with the Site, in order to use the services offered on the Site, purchase the products sold on the Site, request information, receive assistance or for any personal purpose.
In particular, it is:
- personal data necessary to conclude and execute the sale of goods on the Site, such as: name and surname, e-mail address, shipping address, billing address, telephone and payment data; other optional data are: reference company, VAT number, recipient code and billing address;
- personal data of third parties, if provided voluntarily by the User who decides, for example, to purchase a good to be delivered to a friend, or to make a gift; in such cases, Industria Chimica Reggiana – I.C.R. S.p.A. will deliver to this third party the privacy information at the time of the first communication;
- personal data provided voluntarily in the event of contact by e-mail and/or telephone to request information, receive assistance or for any personal purpose;
- data necessary for the registration of a user account on the Site, such as: name and surname, e-mail address, password and your date of birth; information are also collected on the accesses of each registered User to the reserved area of the Site.
6. DATA PROCESSING MODE.
The processing of your personal data is carried out, using methods strictly necessary to meet the aforementioned purposes, by means of some or the set of operations indicated in art. 4, n. 2) of the Regulation (EU) 2016/679 2016/679: collection, registration, organization, structuring, storage, consultation, processing, adaptation, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. The operations may be carried out with or without the aid of electronic, telematic or automated means, however in compliance with the provisions of art. 32 of the Regulation (EU) 2016/679.
7. DATA PROVISION.
The provision of personal data by the User, although not a legal obligation, is a necessary requirement for:
- the correct navigation on this Site;
- purchase goods offered on the Site;
- register on the Site and use the services reserved for registered users;
- receive, manage and check, by e-mail and/or phone, requests made by e-mail and/or phone;
therefore, the missed conferment involves the impossibility to fulfill the aforementioned purposes.
In any case, by giving personal data to the data controller, or to his authorized persons, for any of the purposes listed above, the data controller may process such data to fulfill legal obligations and pursue their legitimate analytical processing interests aggregated and anonymous browsing and user statistics and protection of one’s own right in court or before judicial authorities.
8. DATA CONSERVATION.
The User’s personal data will be processed and stored for the entire period necessary for the fulfillment of the aforementioned purposes and, in particular:
- the data collected to conclude and execute contracts for the purchase of goods on the Site are kept until the conclusion of the contract and the administrative and accounting formalities, while the billing data are kept for ten years from the invoice date;
- the data relating to the payment of commercial transactions relating to the purchase of goods on the Site are kept until the payment is certified and the relative administrative and accounting formalities are concluded following the expiry of the right of withdrawal and the terms applied for the payment of the payment;
- the data collected for the registration of the user account are kept until the cancellation of such account;
- the data collected for the use of any services offered on the Site are stored until the termination or conclusion of the use of the service;
- the data collected to receive, manage and check, by e-mail and/or phone, requests made by e-mail and/or phone are kept until the request is finished;
- the data collected for the fulfillment of legal obligations are kept for the necessary time required by law or regulation;
- the data collected for the defense of rights with legal claims are kept until the limitation period of the right to be enforced or, where a claim has been initiated, until its final conclusion.
9. DATA COMMUNICATION.
The User’s personal data may be disclosed to, or become aware of, for the purposes listed above and to provide, improve, protect and promote our services:
- subjects authorized to treatment, that is collaborators and/or employees of the data controller;
- data processors, and their authorized subjects, such as, by way of non-exhaustive example: accountants, consultants, service providers, IT service providers or their assistance, and related technical staff, any collaborators, in charge of occasional maintenance operations, all adequately trained in the protection of confidentiality;
- judicial or administrative authorities, for the fulfillment of legal obligations;
- subjects who process data in execution of specific legal obligations.
The User’s personal data are not subject to any fully automated decision-making process, including profiling.
11. TRANSFER OF DATA TO THIRD COUNTRIES.
Personal data are not transferred to third countries with respect to the European Union.
12. RIGHTS OF THE DATA SUBJECT.
Pursuant to articles 15-18 and 20-21 of Regulation (EU) 2016/679, the User has the right to obtain:
a) confirmation of the existence or not of personal data concerning them, even if not yet registered, and their communication in an intelligible form;
– of the origin of personal data;
– of the purposes and methods of processing;
– the logic applied in case of treatment carried out with the ’Auxiliary I of electronic instruments;
– of the identification details of the owner and any responsible parties;
– the subjects or the categories of subjects to whom the personal data may be communicated or who can learn about them as managers or agents;
c) updating, rectification or, when interested, the integration of data;
d) cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;
e) attestation that the operations referred to in c) and d) have been brought to knowledge, also as regards their content, of those to whom the data have been communicated or distributed, except in the case where this proves impossible o involves a manifestly disproportionate use of resources with respect to the protected right.
The User has the right to object, in whole or in part:
a) for legitimate reasons, to the processing of personal data concerning him, even if pertinent to the purpose of the collection;
b) to the processing of personal data concerning him for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication.
You have the right to withdraw, at any time, the consent given in relation to the processing activities of which it represents the legal basis, without affecting the lawfulness of the processing based on consent given before the revocation.
The User has the right to data portability, namely to receive personal data concerning him in a structured format, in common and automatically readable by automatic device, and the right to transmit this data to another data controller without hindrance. The User also has the right to lodge a complaint with a supervisory authority (in Italy, the Authority for the Protection of Personal Data: www.garanteprivacy.it; for other Countries, please visit: edpb.europa.eu/about-edpb/board/members_en).
The User can exercise his rights with a written request sent to the data controller, at the addresses indicated above.
The User data subject must check periodically any changes posted on Site.