INFORMATION AND REQUEST FOR CONSENT PURSUANT TO AND FOR THE PURPOSES OF ART. 13 OF EU REGULATION NO. 2016/679 (GDPR) UPDATED WITH THE NEW GUIDELINES OF THE PRIVACY GUARANTOR PUBLISHED IN THE G.U. 163/2021, IN FORCE FROM 10 JANUARY 2022, RELATING TO THE PROTECTION OF THE PROCESSING OF PERSONAL DATA

This section describes the methods of management of the website lecameredivirgilio.com  in reference to the processing of personal data of users who consult it. The data processing is carried out in compliance with the criteria set out in the European regulation on the protection of personal data, reg. 2016/679/EU updated with the new guidelines of the privacy guarantor published in the official gazette 163/2021 and any other national legislative text, provision or authorization of the competent Authority connected to the same. According to the legislation indicated, the processing must be based on the principles of correctness, lawfulness and transparency and protection of your privacy and your rights.

The information is provided only for this site and not for other websites that may be consulted by the user via links contained therein.

The purpose of this document is to provide information on the methods, times and nature of the information that the data controllers must provide to users when connecting to the web pages of this site regardless of the purposes of the connection itself, according to Italian and European legislation.

The information may undergo changes due to the introduction of new regulations in this regard, the user is therefore invited to periodically check this page.
If the user is under 16 years of age, pursuant to art. 8, c. 1 EU regulation 2016/679, he/she must legitimize his/her consent through the authorization of his/her parents or legal guardians.

1 - Data Controller
1. The data controller is the natural or legal person, public authority, service or other body which, individually or together with others, determines the purposes and means of the processing of personal data. It also deals with security profiles.

2. In relation to this website, the data controller is Le Camere di Virgilio, with registered office in Strada Tononi, 61 - 46040 Monzambano MN  and for any clarification or exercise of the user's rights, you can contact him at the following email address lecameredivirgilio@virgilio.it.

2 - Place of data processing
1. The processing connected to the web services of this site takes place at the aforementioned headquarters of the Company (see point data controller) and is handled by the Company's staff and/or by external persons in charge of maintenance and updating operations duly appointed. No data deriving from the web service is communicated or disseminated.

2. The User's Personal Data may be transferred to a country other than the one in which the User is located. To obtain further information on the place of processing, the User can refer to the section relating to the details on the processing of Personal Data.

3 - Data retention period
The Data are processed and stored for the time required by the purposes for which they were collected and for a maximum period of 10 years thereafter, unless cancellation is requested according to the methods set out in point 4.

Therefore:
1. Personal Data collected for purposes related to the performance of a contract between the Owner and the User will be retained until the performance of such contract is completed.

2. Personal Data collected for purposes attributable to the legitimate interest of the Owner will be retained until such interest is satisfied. The User can obtain further information regarding the legitimate interest pursued by the Owner in the relevant sections of this document or by contacting the Owner.

When the processing is based on the User's consent, the Owner may retain Personal Data for a longer period until such consent is revoked. Furthermore, the Owner may be obliged to retain Personal Data for a longer period when required to do so by law or by order of an authority.

At the end of the retention period, Personal Data will be deleted. Therefore, at the expiration of such period, the right of access, deletion erasure, rectification and the right to data portability can no longer be exercised.

4 - Data processing methods
The Data Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data. 

The processing is carried out using computer and/or telematic tools, with organizational methods and with logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases, other parties involved in the company organization (administrative, commercial, marketing, legal, system administrators) and/or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communications agencies) may have access to the Data, also appointed, if necessary, as Data Processors by the Data Controller.

The updated list of Processors can always be requested from the Data Controller.

5 - Purpose of data processing
The personal data provided by users browsing the website or collected through the compilation of contact forms, will be processed in order to carry out the requested service.

The processing relating to the subscription to the newsletter has the purpose sending informative and promotional communications in relation to its own initiatives and/or those of controlled and/or associated companies.
Users may unsubscribe from the newsletter free of charge at any time by sending an email to the address indicated on the site. 

6 - Types of data processed
- Navigation data. The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested users, but by its very nature could, through processing and association with data held by third parties, allow them to be identified.

This category of data includes IP addresses or domain names of computers used by users who connect to the site, URI (Uniform Resource Identifier) ​​addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment.

This data, on this site is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site. For this data, and limited to the aforementioned purpose, it is not necessary to request consent.

- Data provided voluntarily by the user. The optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site or filling in the form of the specific sections with the mandatory and optional fields, involves the subsequent acquisition of the information and the sender's address, necessary to respond to requests for services and/or information. For this data and limited to the aforementioned purpose, it is not necessary to request consent.  

7 - Rights of interested parties 
Users have the rights set out in articles. 15-21 European Regulation 2016/679, updated with the new guidelines of the privacy guarantor published in the Official Journal 163/2021,  in force from 10 January 2022 (right to rectification, right to be forgotten, right to limit processing, right to data portability, right to object). Specifically:

- The right of access: to obtain confirmation or not of personal data concerning him and to obtain access to such data and to specific information (e.g. purposes of the processing, categories of data in question, recipients to whom the data will be communicated);

- The right of rectification: to obtain the rectification of inaccurate data concerning him without unjustified delay. In this case the obligation arises on the part of the title holder the controller of the processing to communicate the rectification to all recipients to whom the data have been transmitted, unless this involves a disproportionate effort;

- The right to erasure: to obtain the erasure of data concerning him or her without undue delay. The controller has the obligation to erase them in certain cases (e.g. if the personal data are no longer necessary in relation to the purposes for which they were collected; if the data subject withdraws consent; if they must be erased due to a legal obligation) and to communicate the erasure to all recipients to whom the data have been transmitted, unless this involves a disproportionate effort;

- The right to restriction of processing: you can order the data controller to restrict the processing of data, for example to only retain it and exclude any other use, in certain cases (e.g. if the processing is unlawful and the data subject opposes the erasure of the data; if the data subject contests the accuracy of the data, within the period for verifying the accuracy). In this case, the data controller is obliged to communicate the restriction of processing to all recipients to whom the data have been transmitted, unless this involves a disproportionate effort;

- The right to data portability: obtain the return of the personal data provided and transmit them to others or request transmission from one controller to another, can be done provided that is technically feasible;

- The right to object: to object at any time to processing for purposes of public interest or legitimate interest; for marketing purposes; for scientific, historical or statistical research purposes.

Interested parties may lodge a complaint with the Guarantor Authority if necessary, or simply contact it to obtain information relating to the exercise of their rights recognized by the legislation cited in question.