PRIVACY POLICY 

 

This information describes the management methods of the site in relation to the processing of personal data of users who consult it, as well as the processing practices of the data transmitted by the interested party to the Data Controller via this site. This information is provided pursuant to art. 13 EU Regulation 2016/679 – General Data Protection Regulation (“Regulation”) to those who interact with the web services of the company alcostricot Holding srl, Via Larga, 8 – 20122 Milan (Italy), accessible electronically starting from 'address:www.alcostricotholding.com. According to the rules of the Regulation, the processing carried out by alcostricot Holding srl will be based on the principles of lawfulness, correctness, transparency, limitation of purposes and conservation, data minimization, accuracy, integrity and confidentiality. The information is provided only for the site in question and not for other websites that may be consulted by the user via links.

 

Data Controller and Personal Data Protection Officer

Following consultation of this site, or voluntary registration on it, data may be processed, including sensitive data or data suitable for revealing the state of health, relating to identified or identifiable persons. The “owner” of their processing is alcostricot Holding srl, Via Larga, 8 – 20122 Milan (Italy), email info@alcostricot.com, cf/PI 09409200962. The Personal Data Protection Officer can be reached at the following address:info@alcostricot.com

 

Personal data subject to processing

Following navigation of the Site, we inform the user that alcostricot Holding will process his personal data, which may consist of an identifier such as his name, an online identifier or one or more elements characteristic of his physical, economic, cultural or social identity suitable to make the interested party identified or identifiable (hereinafter also simply "personal data").

 

Treatment methods

Personal data are processed, including with automated and electronic tools, for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access, including the secure https protocol for some reserved parts of the site and applications and protections from unauthorized access to servers and other computers in use. The personal data provided by users who register or send requests for informative material (bulletins, newsletters, answers to questions, etc.) are used for the sole purpose of carrying out the service or provision requested and are communicated to unnamed third parties in charge or responsible by the Data Controller only if this is necessary for this purpose (subject to the consent of the interested party).

 

Types of data processed

Browsing data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning (see also the paragraph on Cookies). The data could be used by the competent authorities to ascertain responsibility in case of hypothetical computer crimes against the site. Personal data provided voluntarily by the user may also be processed.

 

Cookies

Cookies are text files that are stored on your computer and read remotely by our servers or by third-party servers we use. The use of permanent technical cookies or session cookies (i.e. which are not permanently stored on the user's computer and disappear when the browser is closed) is strictly limited to the technical provision of the service requested by the user and the transmission of identifiers session numbers (consisting of random numbers generated by the server) necessary to allow safe and efficient exploration of the site and its applications. The technical cookies used on this site avoid the use of other IT techniques that are potentially detrimental to the privacy of users' browsing. This website also uses, with the user's prior consent (except for cookies that are strictly necessary on a technical or purely statistical level with aggregate data), some systems - cookies, beacons - which analyze user navigation to create statistics on visits or to improve the content offering and, if necessary, position targeted advertising on web pages. The systems currently used are IntelligenceFocus and Google Analytics, the latter a web analysis service provided by Google, Inc. ("Google"). Google Analytics, like other systems, uses "cookies". The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and Internet usage. Google may also transfer this information to third parties where this is required by law or where such third parties process the aforementioned information on behalf of Google. Google will not associate your IP address with any other data held by Google. No other use of cookies is made for the transmission of information of a personal nature, nor are other persistent cookies of any kind used, or systems for tracking users. We remind you that you can set your internet browser software (e.g. Firefox, Internet Explorer, Safari, Chrome) in such a way as not to accept cookies, even technical ones, by activating so-called anonymous browsing, and in this case no data will be processed through these systems.

​

Social plugins

“Social buttons” are visible on the site to allow the user to use social network registration information.

 

Optional provision of data other than navigation data

Apart from what is specified for navigation data, the user is free to provide personal data contained in the registration/registration forms (some with specific and separate request for consent for processing that requires it). The optional, explicit and voluntary sending of e-mail to the addresses indicated on this site, or through the communication forms, involves the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the message. In particular, the user's personal data. The provision of data is optional. However, failure to enter the necessary data makes it impossible to execute the request. The data thus transmitted may be processed, only for the time necessary for the purposes indicated, even with electronic tools, by persons in charge of the commercial, editorial and administrative areas. Any further processing, for different purposes, will from time to time be the subject of information and a request for specific consent: this happens, for example, in the case of profiling or processing for promotional purposes of direct marketing with automated tools (sms, mms, email, fax, autoresponders, messaging on social networks) and non-automated (telephone with operator or paper mail). For processing carried out for the purpose of direct sending of own advertising material or direct sales or for carrying out own market research or commercial communications in relation to products or services of the Data Controller similar to those purchased,

 

Persons in charge, managers and locations of data processing

Personal data may be shared with: subjects who typically act as data controllers pursuant to art. 28 of the Regulation, i.e.: I) people, companies or professional firms that provide assistance and consultancy to the Data Controller in accounting, administrative, legal, tax, financial and debt collection matters relating to the provision of the Services; II) subjects with whom it is necessary to interact for the provision of the Services (for example hosting providers) III) or subjects delegated to carry out technical maintenance activities (including maintenance of network equipment and electronic communications networks); (collectively “recipients”); the list of data controllers who process data can be requested from the Data Controller by writing to the following addresses: info@alcostricot.com; subjects, bodies or authorities, independent data controllers, to whom it is mandatory to communicate your personal data pursuant to legal provisions or orders from the authorities; persons authorized by the Data Controller to process personal data pursuant to art. 29 of the Regulation necessary to carry out activities strictly related to the provision of the Services, which are committed to confidentiality or have an adequate legal obligation of confidentiality.

 

Transfers of personal data

With regards to the possible transfer of Data to Third Countries, the Data Controller informs that the processing will take place according to one of the methods permitted by current law, such as for example the consent of the interested party, the adoption of Standard Clauses approved by the European Commission, the selection of subjects adhering to international programs for the free circulation of data (e.g. EU-USA Privacy Shield) or operating in countries considered safe by the European Commission. It is possible to obtain further information, upon request, from the Owner at the contacts indicated above.

 

Data retention

The personal data processed will be kept for the time strictly necessary to achieve those same purposes in compliance with the principles of minimization and limitation of conservation pursuant to articles. 5.1.e) of the Regulation. Further information regarding the data retention period and the criteria used to determine this period can be requested by writing to the Data Controller at the following addresses: info@alcostricot.com

 

Rights of interested parties

Pursuant to articles 15 and following of the Regulation, the user has the right to request at any time access to his personal data, rectification or cancellation of the same, limitation of processing in the cases provided for by the art. 18 of the Regulation, obtain the data concerning him in a structured format, commonly used and readable by an automatic device, in the cases provided for by the art. 20 of the Regulation. At any time, the user can revoke pursuant to art. 7 of the Regulation the consent given; lodge a complaint with the competent supervisory authority pursuant to article 77 of the GDPR (Guarantor for the Protection of Personal Data) pursuant to art. 77 of the Regulation, if you believe that the processing of your data is contrary to the legislation in force. The user can formulate a request to object to the processing of his personal data pursuant to article 21 of the GDPR in which to highlight the reasons justifying the opposition: the Data Controller reserves the right to evaluate the request, which would not be accepted if it existed of compelling legitimate reasons to proceed with the processing which prevail over the interests, rights and freedoms of the user. Requests must be sent in writing to the Data Controller at the following address: info@alcostricot.com  

Cosimo Suma

General Manager