PRIVACY POLICY
I. Notices and Minor Protection
II. Reference rules and legal basis of processing.
III- Nature of processed data.
(a).- Common personal data, identification data.
(b).- Technical processing.
(c).- Cookies.
(d).- Special categories of personal data
IV.- Type of conferment, data sources.
IV.1.- Data to be conferred.
IV.1.2.- Data sources.
V. Purposes of processing.
VI.- Processing mode of personal data.
VI.1.- Data security and storage.
VI.1.2 - Profiling. Automated decisional process.
VII.- Data recipients and transfers abroad.
VII.1.- Data controllers and processors.
VII.2.- Data disclosure (to determined external individuals).
VII.3.- Transfer of personal data abroad.
VII.4.- Data disclosure (to undetermined external individuals).
VIII.- Data subject rights.
IX.- Revocation of consent. Privacy questions. Access and Reply.
X. - Data Controller.
XI. - Personal Data Protection Supervisor.
XI.1.- Data Processors
Privacy Policy.
Information on personal data protection.
Art. 13 of EU Reg.679, of 27 April 2016
Under Article 13 of the “EU Regulation 2016/679 on the protection of natural persons with regard to the Processing of Personal Data, and on the free movement of such data” (hereinafter “GDPR”), Ing. Claudio Baldi S.r.l. (hereinafter “Baldi S.r.l.” or “Controller”) with registered office in Viale Cavallotti, 13 - 60035 - Jesi - (AN), acting as Data Controller, has the obligation to provide information on the processing of personal data to the users who connect to baldipat.it domain (regardless of the purpose of the connection). This document is the “Privacy Policy” (subject to any future update) of this site. For the purposes of this policy, subject to the definitions given in Article 4 of the GDPR:
Baldipat.it domain: it is the domain that can be reached through the world wide web service of the Internet, at http://www.baldipat.com/ and is composed of data, applications, technological resources, human resources, organizational rules and procedures for the acquisition, storage, processing, exchange, retrieval and transmission of the information.
Collection points: areas in the baldipat.it domain that are used for the collection of personal data.
I. Notices and Minor Protection
The principles of lawfulness, correctness and transparency shall apply to the processing of the personal data. The personal data shall be collected for determined, explicit, legitimate purposes (restriction of purposes) and shall be suitable, pertinent and restricted for the purposes for which it was processed (data minimization). It shall be always updated and correct and stored for a period of time not longer than necessary for the purpose of executing the Contract, subject to the fulfillment of the legal and tax obligations that may require a longer storage period of time (restriction of storage).The personal data shall be processed adopting all suitable safety measures in order to guarantee its integrity, confidentiality and unavailability for unauthorized third-parties. Should it not be expressly indicated, the conferment of personal data through the collection points on the site is reserved to major subjects.
II. Reference rules and legal basis of data processing.
The processing operations that will be described in detail below have their legal basis in the rules that govern your right to the protection of your personal data, your right to confidentiality, and finally in the rules that allow you to express or revoke, at any time, your consent to the processing operations, i.e.:
• the General Regulation UE 679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, and on the free movement of such data;
• the consent given in compliance with the provisions of law in force (Art. 6 paragraph a) GDPR);
• the performance of contractual obligations undertaken by Baldi S.r.l. in your favor upon the request of Services (Art. 6 paragraph b) GDPR);
• the performance of obligations or orders to be complied with by the Controller in view of laws or orders by the Authorities (Art. 6 paragraph c) GDPR).
III- Nature of processed data.
III.1.- The optional, explicit and voluntary transmission of electronic mail to the addresses
indicated in this site shall result in the successive acquisition of the sender’s address which is necessary to reply to requests, and of all other personal data included in the message. Specific summary information policies shall be progressively reported or displayed on the pages of the site dedicated to particular on-demand services. In any case - wherever provided for by the law - you shall be asked from time to time to give your consent to the processing of your personal data.
III.2.- Exclusively after your consent, if necessary, the following categories of personal data shall be or might be processed.
(a).- Common personal data, identification data.
Such as for example name and surname, year of birth, sex, address, city, province, e-mail address, telephone number, post code.
(b).- Technical processing.
Processing shall also apply to the IP number and the type of browser used by you for connection to baldipat.it domain (non-identification data), which are automatically recorded by the logic device used to protect and control the accesses to the domain (LOG FILES). Such personal data shall be exclusively used to control the network traffic to the baldipat.it domain. This information is not collected in order to be associated to identified data subjects, but for their intrinsic nature it may allow to identify the users through processing and association with data held by third parties. This data is only used to obtain anonymous statistical information on the use of the site and to control its correct operation and is erased immediately after processing. The data may be used to ascertain responsibilities in case of alleged IT crimes against the site: subject to said possibility, under present conditions, the data on the Web contacts is not kept for more than seven days.
(c).- Cookies.
Moreover, Baldi S.r.l. performs the processing and the analysis of the data relevant to the pages of the baldipat.it domain visited by you, which are collected by means of cookies files, in anonymous form. By using these technologies (which allow to understand your navigation preferences, analyzing the areas of the baldipat.it domain you have already visited), Baldi S.r.l. can customize its services according to your needs without making unnecessary recording operations. (A cookie is composed of a set of data sent to the browser by a Web site. The aforementioned data can also be stored in the computer by means of an anonymous tag that identifies the computer, but not the user. Some pages use the cookies sent by Baldi S.r.l. or by third parties, as well as other technologies to offer a better navigation of the Web site. The browser can be set in such a way to receive a notice prior to the reception of a cookie, thus offering the possibility to accept or refuse the cookie. Cookies can be completely disabled. After disabling the cookies, some Web sites may not operate correctly).
For more information on the use of cookies at http://www.baldipat.it/ please refer to the Cookies Policy that is available here.
(d).- Special categories of personal data.
If special categories of personal data are collected by means of the Baldi S.r.l. Domain, under art. 9 EU Reg. 679/2016, you shall informed in advance and shall have the possibility to give your consent as provided for by the law.
IV.- Nature of conferment, data sources.
The conferment of your personal data is not mandatory but it is necessary, and therefore mandatory, in some cases in order to enjoy the services and functions of the site.
IV.1.- Data to be conferred.
IV.1.1.- The conferment of some personal data is necessary, and therefore mandatory, to execute your specific requests. You shall be always free not to provide your personal data, but in such a case it may be impossible for the Controller to satisfy your requests, meet your requirements or allow you use all the functions available in the site. - This identification data shall be processed both with electronic and paper supports and shall be kept by Baldi S.r.l. exclusively for the time necessary. When such a time period has elapsed, the identification personal data shall be automatically erased.
IV.1.2.- Data sources.
We shall collect your personal data, directly from you, through your interactions with the site http://www.baldipat.it/.
V. Purpose of data processing.
In addition to the processing that is necessary with regard to the obligations of law, rules, or that arise from orders of the Authorities, Baldi S.r.l. shall carry out, exclusively with your consent, if necessary, the operations that are needed to enjoy the services and functionalities of the site http://www.baldipat.it/ and the services indicated therein.
VI.- Personal data processing modes.
With regard to all the purposes indicated in the previous paragraphs, your personal data shall be processed with electronic or paper tools and IT procedures in order to customize the services offered to you by Baldi S.r.l..The processing of data shall be performed in such a way to guarantee the logical and physical security and confidentiality of such data and may be carried out with manual, electronic and computerized tools that are suitable for storing, transmitting or sharing the data. The logic principles of the data processing shall be strictly related with the pursued purposes.
VI.1.- Data security and storage.
VI.1.1.- Your personal data shall be kept within the European Union and the relevant security policies are reviewed in compliance with the Best Practices on this matter
VI.1.2 - Profiling. Automated decisional process.
In addition to what is necessary for us to carry out the performance that allow you to use the services offered on the site, subject to the conditions contained in our cookie policy, we do not carry out profiling operations with regard to the data collected through this Internet site.
VII.- Data recipients and transfers abroad.
VII.1.- Data controllers and processors.
The personal data mentioned in this policy can be disclosed to the following individuals, acting as processors or data protection officers:
• inside Baldi S.r.l., qualified employees, each of them limitedly to his or her knowledge and functions and based on the tasks assigned and the instructions given.
• outside Baldi S.r.l., third party subjects who are specifically appointed as Processors - who are used by Baldi S.r.l. for miscellaneous services and exclusively for the purpose of executing these services - each of them limitedly to his or her knowledge and functions and based on the tasks assigned and the instructions given.
VII.2.- Data disclosure (to determined external individuals).
For the ordinary managerial, accounting and administrative activities, Baldi S.r.l. may disclose your personal data, after acquiring your consent as established by the law, if required to do so, in compliance with the security measures, to third party suppliers of services for the only purpose of executing the performance required by you, such as: post service companies, legal firms and notary offices, consultants, also in associated form, other service companies, as well as other individuals in compliance with the obligations of law (such as insurance companies, police forces, judicial authorities, etc.).The list of the individuals that may be the recipients of the personal data is available at the registered office of the Data Controller.
VII.3.- Transfer of personal data abroad.
Baldi S.r.l. does not transfer personal data abroad on its own initiative, except in the cases in which it is necessary to execute your requests. However, some third parties, acting as service providers, may have their servers physically installed abroad (as in the case of email providers). In any case, the transfer of data abroad shall exclusively take place in compliance with Art. 44 and following articles of the Gen. Reg. UE 679/2016.
VII.4.- Data disclosure (to undetermined external individuals).
Your personal data shall not be disseminated in any case.
VIII.- Data subject rights.
Articles 15 to 22 of the GDPR grant the exercise of specific rights to the data subject. Article 15 of the GDPR recognizes the right to access your personal data and obtain a copy of it. The right to obtain a copy of the data must not impair the rights and the freedoms of the others. With the access request, the data subject is entitled to obtain a confirmation from Baldi S.r.l. about the fact that his or her personal data is being processed and to be informed about the purposes and the categories of data that are being processed, the third party subjects to which the data is disclosed and whether the data is transferred to a non-European country with suitable warranties. Moreover, the data subject is entitled to receive information about the period of time in which his or her personal data is stored and to ask to amend any inaccurate data or integrate any incomplete data, erasure (right to be forgotten) at the conditions indicated in art. 17 of the GDPR, the restriction of processing, the revocation of consent, data portability and the right to oppose the processing for direct marketing purposes at any time without having to provide a justification. The rights may be exercised by sending an email to Baldi S.r.l. address or by means of ordinary mail to the address indicated below. The Controller may have the need to identify the data subject by requesting a copy of his or her identity document. Should he or she believe that the processing of his or her personal data breaches the provisions of the GDPR or of the internal rules on the protection of the personal data, the data subject shall be entitled to file a claim to the Supervisor for the Protection of Personal Data with office in Rome, under art. 77 GDPR and/or take a legal action. To exercise these rights, or to obtain any other information with regard to said rights or, more generally, to the processing of his or her personal rights, the requests may be submitted by e-mail to the following address: privacy@baldipat.it and by ordinary mail to Ing. Claudio Baldi S.r.l., Viale Cavallotti, 13 - 60035 - Jesi - (AN).
IX.- Revocation of consent, Privacy questions, Access and Reply.
If you have any questions or if you want to get more information on the processing of your personal data, or if you want to exercise the rights as established in Article VIII above, you can send an e-mail to the administrator of Ing. Claudio Baldi S.r.l. Web Site, at privacy@baldipat.it.You can also use the same address to contact us and ask questions on the management of the information by Ing. Claudio Baldi S.r.l. Before Ing. Claudio Baldi S.r.l. provides or modifies any information, it may be necessary to check your identity and answer to some questions. We will reply as soon as possible.
X. - Data Controller.
The Data Controller is Ing. Claudio Baldi S.r.l. with registered office in Viale Cavallotti, 13 - 60035 - Jesi - (AN).
XI. Supervisor of Personal Data Protection.
Ing. Claudio Baldi S.r.l. has not designated the Data Protection Officer, not being obliged to do so under Art. 37 of Reg. UE 679/2016.
XI.1.- Processors.
The complete list of Processors is available at the registered office. This mandatory information is subject to update according to any changes that may occur in the applicable provisions of law.
5/22/2019 3:49:11 PM