1. Introduction
Idormibene Srl, (Tax Code and VAT no. 01642570517), with registered office in Marciano della Chiana (AR), Via Cassia 23 (hereafter "Data Controller") is constantly committed to protecting the online privacy of its users.
This document was drafted pursuant to art. 13 of Regulation EU 2016/679 (hereafter "Regulation") in order to inform you of our privacy policy, so that you may understand how your personal information is managed when you use our site www.idormibene.it (hereafter "Site") and, where appropriate, provide express and informed consent to the processing of your personal data, as well as to ensure the protection and security in the processing of personal data of each visitor, including in relation to internet access made abroad, in accordance with the provisions of this Privacy Policy.
Please note that this Privacy Policy is applicable exclusively to the website www.idormibene.it and does not refer to any other websites that may be consulted by the user during his/her browsing by clicking on links and/or banners present on the website.
2. Data controller pursuant to the General Data Protection
Idormibene Srl
Via Cassia 23, 52047 Marciano della Chiana (AR), Italy
3. Type of data processed and processing purposes related to browsing the Website
We inform you that, after you have browsed the Site, Idormibene Srl will process personal data, which may be made up of an identifier such as the name, an identification number, an Online ID (hereafter only “Personal Data”). For example, the name, address, user name, e-mail address and telephone number, or even the IP address of the device used, navigation preferences or information about the user's lifestyle or his/her hobbies and interests may be subject to processing. Your Personal Data may be collected because they are voluntarily provided by you (for example when you send an e-mail) or simply by analysing your behaviour on the Site. The following Personal Data re processed through the Site:
- Navigation data
The computer systems and software procedures used to operate the Site acquire, during their normal operation, some Personal Data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and associations with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users who connect to the Site, the addresses in URI (Uniform Resource Identifier) of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters related to the operating system and the user's computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct functioning, and to identify anomalies and/or abuses. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site or third parties.
- Data provided voluntarily by the visitor
These are all personal data freely provided by the visitor on the Site, for example, to request information on a particular product or service, write to an e-mail address or directly call the Data Controller. The processing of such personal data will be carried out on the basis of all the information contained in the specific information provided pursuant to articles 13 and 14 of the Regulation at the time of the transfer of personal data. In some and further cases personal data may be processed for profiling purposes collected by cookies. The processing of such personal data will be carried out on the basis of what is indicated within each cookie policy present on each Website in the specific Cookies Policy section.
4. Purpose of the processing
Idormibene Srl will use your Personal Data, collected through the Site, for the following purposes:
i.to fulfil any obligations under applicable laws, regulations or EU legislation or to satisfy requests from authorities ("Compliance");
ii.to send business communications via e-mail about products, unless expressly refused to receive such communications ("Soft Spam");
iii. for the prevention of fraud committed through the use of the Site and the services offered by the Data Controller and to allow the Data Controller to protect themselves in court ("Abuse/Fraud");
5. Legal basis and mandatory or optional nature of the processing
The following legal bases are used by Idormibene Srl to process your Personal Data, according to the purposes indicated in the previous Point 4:
- Compliance: the processing of your Personal Data for this purpose (Point 4.i.) is necessary so that Idormibene Srl may fulfil any legal obligations or satisfy requests from the authorities. This processing is based on art. 6(1)(c) of the Regulation ("[..] processing is necessary for compliance with a legal obligation to which the controller is subject"). The processing of your Personal Data for this purpose is, in fact, necessary for compliance with legal obligations to which Idormibene Srl is subject. Said processing could involve the storage and communication of your Personal Data to Authorities for accounting or tax obligations or obligations of a different kind.
- Soft Spam:the processing of your Personal Data for this purpose (Point represents legitimate processing in accordance with the current applicable legislation on the protection of Personal Data, which does not require your consent. You may object to the processing of your Personal Data for this purpose both during the request of the products and services available on the Site and on subsequent communications by the Data Controller by writing to the addresses indicated in the "Contact" section of this information notice, as well as by using the link at the bottom of each of the communications sent by email.
- Abuse/Fraud: the processing for this purpose is based on art. 6(1)(f) of the Regulation ("processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party"); the Personal Data collected for this purpose will be used to prevent and/or identify any fraudulent activity or abuse in the use of the Site and the Services and allow Idormibene Srl to protect itself in court.
6. Means and duration of data processing
The processing of personal data is performed mainly using electronic procedures and supports for the time strictly necessary, in accordance with Article 5 of the Regulation.
Personal data will be processed by the data controller only to the extent that is necessary for the pursuit of the main purpose. In particular, personal data will be processed for the minimum required period of time, as indicated in Recital 39 of the Regulation, that is until the termination of the contractual relations between the data subject and the data controller, except for a further retention period that may be imposed by law as also provided for by Recital 65 of the Regulation.
7. Recipients of personal data
The personal data may be disclosed in compliance with a legal obligation, regulation or community legislation.
The personal data may be disclosed to public authorities and public administrations for the performance of institutional functions.
The personal data may also be communicated to subjects who supply the goods and services offered by the Data Controller, to subjects carrying out transport or shipping activities, to law and consultancy firms, to persons responsible for keeping accounts or for revising the financial statements.
Finally, the personal data may be disclosed to the subjects which the Data Controller uses for promotional, advertising, marketing and communication activities, where you have given your consent to the processing of personal data in relation to the related purposes.
The personal data will not be disseminated and therefore will not be disclosed to the public or to an indefinite number of subjects.
The personal data will not be transferred outside the EU.
8. Redirect to external sites
The Website may use the so-called social plug-in. Social plug-ins are special tools that allow you to incorporate the features of the social network directly within the Website (for example the "like" function of Facebook). All social plug-ins on the Website are marked by the respective logo owned by the social network platform.
When you visit a Website page and you interact with the plug-in (for example by clicking the "like" button) or you decide to leave a comment, the corresponding information is transmitted directly from the browser to the social network platform and stored by the latter. For information on the purposes, type and methods of collection, processing, use and storage of personal data by the social network platform, as well as for the ways in which to exercise your rights, please consult the privacy policy of the individual social network.
9. Connection to/from third-party sites
You can connect through specific links to other third-party websites from the Website. In this regard, Idormibene Srl cannot be held responsible for the possible management of personal data by third-party websites and for the management of authentication credentials provided by third parties.
10. Rights of the data subjects
As provided by Article 15 of the Regulation, the data subject can access their personal data, request their correction and updating, if incomplete or erroneous, request their erasure if the collection occurred in violation of a law or regulation, as well as object to the Processing for legitimate and specific reasons. In particular, all the rights that can be exercised, at any time, towards the data controller and/or joint data controllers are mentioned below:
a. Right of access: the right, in accordance with Article 15, paragraph 1 of the Regulation, to obtain from the data controller confirmation that personal data is being processed and in this case, to obtain access to these personal data and the information indicated in the aforementioned article
b. Right of rectification: right to obtain, pursuant to Article 16 of the Regulation, the correction of personal data that are incorrect, without undue delay. Taking into account the purposes of the processing, the data subject has the right to obtain the completion of incomplete personal data, also by providing an additional declaration.
c. Right to erasure ("right to be forgotten"): the right to obtain, according to article 17, paragraph 1 of the Regulation, the erasure of personal data without undue delay. The data controller will be obliged to erase your personal data, without undue delay, even if only one of the reasons mentioned in the aforementioned article apples
d. Right to restriction of processing: the data subject has the right to obtain the restriction of the processing, in accordance with Article 18 of the Regulation, in case one of the hypotheses, identified in said article, exists
e. Right to data portability: right to request at any time and to receive, in accordance with Article 20, paragraph 1 of the Regulation, all personal data processed by the data controller and/or joint data controllers in a structured, commonly used and legible format, and also the right to send such data to another data controller without impediment by the data controller who provided them, as established by the aforementioned article.
f. Right to object: pursuant to article 21, paragraph 1, of the Regulation, the data subject has the right to object at any time, for reasons connected with his/her particular situation, to the processing of personal data concerning him/her, as established by said article.
g. Right to lodge a complaint with the supervisory authority: without prejudice to the right to seek any other administrative or jurisdictional recourse, if it is considered that the processing of personal data carried out by the data controller and/or joint data controllers is in violation of the Regulation and/or applicable rules and regulations, a complaint may be lodged with the competent Data Protection Authority.
11. Contact
To exercise all the rights as identified above, simply contact the data controller in the following ways:
by sending an e-mail to the mailbox info@idormibene.it
call the phone number +39 0575.842219
12. Amendments to the Privacy Policy
This Privacy Policy is applicable to the Idormibene Srl Website from its publication. The entry into force of new sector regulations could entail the need to amend these methods. It is therefore possible that this Privacy Policy is subject to amendment over time and we therefore invite each user to periodically consult this page.