The following describes how to manage the site in relation to the processing of personal data of users who use it.
This notice is given pursuant to art. 13 del GDPR 679/2016 – regarding the protection of personal data, to those who interact with the web services of Codd & Date, accessible electronically from the address: http://www.codd-date.it corresponding to the homepage of the official website of the company as well as for services accessible via mobile media (smartphones, tablets, etc.)
The information applies only to that and not to other Web sites accessed via links.
The information is based on Recommendation n. 2/2001 that the European authorities for the protection of personal data gathered by the Group established. 29 of the Directive n. 95/46 / EC, adopted on 17 May 2001 to establish minimum requirements for the collection of personal data online, and, in particular, the manner, timing and nature of the information that data controllers must provide to users when they connect to web pages, regardless of the purpose of the link.
The information is also inspired by the app’s statement (Notice of the Garante della Privacy of 6.5 and 10.9 – 2014 as well as the Privacy Notice of the 9th of December 2014 of the Privacy Commissioner of Canada – Association of the 23 World Authorities on Privacy)
Following consultation of this site may be processed data on persons identified or identifiable.
The “owner” of their treatment is Codd&Date with headquarters in 20121 – Milan, Via Milazzo 10.
PLACE WHERE DATA IS PROCESSED
The processing operations related to the web-based services that are made available via this website are carried out at the aforementioned office of the Garante exclusively by technical staff in charge of said processing, or else by persons tasked with such maintenance activities as may be necessary from time to time.
No data resulting from web-based services is either communicated or disseminated.
The personal information provided by users who request dispatch of any informative material is used only to perform the service or assistance requested and are disclosed to third parties only if this is strictly necessary for this purpose and in any case in compliance with the provisions of Art. 20 GDPR 2016/679 and the Guidelines of 13 December 2016 of Art. 29 GDPR Working Party.
In any case, the preservation of these and other data communicated to
CODD & DATE or that CODD & DATE will acquire will be respected, if required, the time required by the national legislation in force or according to specific business needs.
TYPES OF DATA
The information systems and software procedures relied upon to operate this web site acquire personal data as part of their standard functioning; the transmission of such data is an inherent feature of Internet communication protocols.
Such information is not collected in order to relate it to identified data subjects, however it might allow user identification per se after being processed and matched with data held by third parties.
This category of data includes the addresses of the tools used by the users who activate or the aforementioned services, the addresses in notation of the requested resources, the time of the request, the method used for submitting a given request to the server, returned file size, a numerical code relating to server response status (successfully performed, error, etc.), and other parameters related to the user’s operating system and computer environment.
These data are only used to extract anonymous statistical information on website use as well as to check its functioning; they are erased immediately after being processed. The data might be used to establish liability in case computer crimes are committed against the website; except for this circumstance, any data on web contacts is currently retained for no longer than seven days.
Data provided voluntarily by users
Sending e-mail messages to the addresses mentioned on this website, which is done on the basis of a freely chosen, explicit, and voluntary option, entails acquisition of the sender’s address, which is necessary in order to reply to any request, as well as of such additional personal data as is contained in the message(s).
No personal user data is acquired from the site.
No cookies are used to transmit personal information, nor are so-called persistent cookies or user tracking systems implemented.
Use of the so-called session cookies – which are not stored permanently on the user’s computer and disappear upon closing the browser – is exclusively limited to the transmission of session ID’s – consisting of server-generated casual numbers – as necessary to allow secure, effective navigation.
The so-called session cookies used by this website make it unnecessary to implement other computer techniques that are potentially detrimental to the confidentiality of user navigation, whilst they do not allow acquiring the user’s personal identification data.
OPTIONAL DATA PROVISION
Subject to the specifications made with regard to navigation data, users are free to provide the personal data either to be entered in the application forms submitted to the Office or referred to in contacting the Office to request delivery of information materials and other communications.
Failure to provide such data may entail the failure to be provided with the items requested.
For completeness’ sake, it should be pointed out that in some cases – which are not the subject of the standard management of this website – our Authority may request information pursuant to art 157 del D.Lgs. n. 196/2003 e artt. 82 e 83 GDPR 2016/679 with a view to supervising the processing of personal data. In these cases it is mandatory to comply under penalty of administrative penalties.
Personal data is processed with automated means for no longer than is necessary to achieve the purposes for which it has been collected.
Specific security measures are implemented to prevent the data from being lost, used unlawfully and/or inappropriately, and accessed without authorisation.
DATA SUBJECTS’ RIGHTS
Data subjects are entitled at any time to obtain confirmation of the existence of personal data concerning them and be informed of their contents and origin, verify their accuracy, or else request that such data be supplemented, updated or rectified (artt.7 e 13-22 GDPR 2016/679).
The above Section also provides for the right to request erasure, anonymisation or blocking of any data that is processed in breach of the law as well as to object in all cases, on legitimate grounds, to processing of the data.
Requests should be addressed to the company Codd&Date.