Privacy Policy

Personal data processing policy pursuant to EU Regulation no. 679/2016 (GDPR) and other applicable regulations

The protection of your privacy and your personal data is an important issue that we pay attention to in all our business relationships and in all the services offered. We respect the confidentiality of your personal data and always act in accordance with the provisions of the data protection law and this Privacy Policy.

Introduction

This page is intended to inform the Data Subject/User on how Ecology Group uses the personal data collected from the website www.ecologygroup.it and its on-line applications, regardless of the purpose of the connection. The information is not extended to websites that may be consulted by the user through links.
The methods of collection and management of the processing of personal data are described by identifying: type of data, legal basis, recipients of the processing (including any foreigner sources), retention period, rights of the Data Subject, if there is an obligation to notify the data and any consequences of the refusal, possible presence of automated decision-making processes (including profiling) and categories of data processed. Following consultation of this website, data relating to identified or identifiable persons may be processed pursuant to articles 4 and 24 of Reg. EU 2016/679 – GDPR. This information is collected, evaluated and subsequently used exclusively for the authorised and permitted purposes and is not transmitted to third parties, unless expressly authorised or specified to achieve the purposes. The information is provided in compliance with the provisions of Articles 12, 13 and 14 of EU Reg. EU 2016/679 – GDPR.

1. Data Controller

The Data Controller is Ecology Group with headquarters in Via dell’Industria, 35 – 36030 Sarcedo (VI) Italy, which can be contacted at info@ecologugroup.it. The processing operations will be carried out by Appointees, selected by the Data Controller, who operate under its direct authority in compliance with the instructions received.

2. Personal Data Collected and Processed

Browsing data
The IT systems and software procedures used to operate this website acquire, during normal operation, some personal data the transmission of which is implicit in the use of Internet communication protocols. The data collected includes information relating to accesses, such as IP addresses and domain names of the computers used by users who connect to the site, as well as other parameters relating to the computer environment used by users (such as: the Internet browser used, the operating system, the domain name of the website last visited before accessing our website, the number of visits, the time spent on our website and the pages accessed). This data is used solely to obtain anonymous statistical information on how the site is used and to make sure it is working properly. These data, collected automatically, are not associated with data from other sources, consequently preventing the identification of the Data Subjects. However, we reserve the right to retrospectively verify and associate such data, if concrete indications of illegal use are brought to our attention.

Data provided voluntarily by the user
Some personal data (for example: name, surname, email address, etc.) are requested from the User for registration purposes or for the use of the on-line services on our site. In this case, personal data is collected, as far as possible, on a voluntary and optional basis. In any case, for each of the services on our website there is a dedicated Policy that allows the User to understand precisely what the relative processing refers to. We believe, in fact, that this is the best way to guarantee the correctness, transparency and intelligibility of the information that must be given to the User.

If, on the other hand, the User decides to spontaneously and freely send e-mail or paper mail to the addresses indicated on this website, this will result in the subsequent acquisition of the sender’s e-mail or address, which is necessary to respond to requests, as well as any other personal data included in the message. The personal data collected in this case is exclusively related to: – Identification data (e.g. name, surname, address, telephone, fax, e-mail, etc.). – Tax data (if required by law – for example tax code, VAT number etc.). Personal data sent to us of a different nature or not inherent to those specified above (such as: sensitive or judicial personal data) will be processed in compliance with EU Regulation 2016/679 and related legislation only with the express consent of the Data Subject and only if necessary for the pursuit of the requested purposes, otherwise it will be ignored and not processed or destroyed, with the exception of the data necessary for the fulfilment of contractual obligations or the fulfilment of legal obligations.

Cookies
This website uses various cookies to improve and facilitate navigation. For all information regarding Cookies on this Website, visit the Cookies page Cookies.

3. Lawfulness, Purposes and Methods of Processing

The personal data provided by the Data Subject when interacting with this website will be processed in compliance with the conditions of lawfulness pursuant to Article 6 of 2016/679 (express consent to processing, execution of a contract or pre-contractual measures, fulfilment of legal obligations, pursuit of the legitimate interest of the Data Controller) and are processed and used, to the minimum extent necessary, exclusively for the following purposes: Operation and improvement of navigation on this website. Provision, improvement and support of our on-line services. Response following requests made through the use of the contact form (dedicated information at the time of any use). Legitimate interest of the Data Controller Obligations provided for by Law and Regulations. In any case, personal data will be processed in computerized, electronic, paper form and entered in the relevant databases to which only the Data Controller and its Appointees may have access. With regard to the data processed, in any form, it is emphasized that all appropriate security measures have been adopted to protect the rights, freedoms and legitimate interests of the Data Subject. In addition, specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access. This website is provided on an encrypted HTTPS connection (SSL certificate).

4. Compulsory provision of data

The data transmitted in the implicit use of internet communication protocols, as previously specified, are automatically conferred and necessary to proceed with browsing the website.
As regards the on-line services offered on this website, the provision of the data indicated as mandatory in the fields of the relevant forms is necessary to obtain what is requested, to carry out the service and/or any professional or employment relationships. Apart from the above, the User is free to provide any other personal data when browsing this site and filling in the on-line service forms.

5. Data Processing Location

The processing operations connected to the web services of this website take place at the aforementioned premises of the Data Controller and are carried out only by authorised personnel, or by persons appointed to carry out occasional maintenance operations. The acquired data is saved on web servers stored in dedicated server farms located in Italy and in the EU.

6. Possible recipients of the data

The data is never transmitted to third parties unless they are necessary and/or involved in the achievement of the purposes and/or provision of the service and/or in the execution of orders or contracts. Additionally, we may be required to disclose personal data in order to fulfil legal obligations and/or meet legal requirements and/or to enforce rights and agreements.

• Transmission of data to third parties: the data of the Data Subject is not transmitted to third parties except in cases of execution of an explicit request or the need to carry out a contract or service.
• Transmission of data abroad: we do not transmit data to foreign parties.
• Compliance with similar laws and obligations: only when necessary, we will transmit your personal data in order to:
  – apply or comply with a law, a regulation, an order issued by a public authority or mandatory measures;
  – detect and prevent security threats, fraud or other harmful activities; protect and/or enforce the rights and properties of Ecology Group or third parties;
  – protect the rights and personal safety of our employees and third parties.

In relation to the purposes indicated in the previous points, the data may also be communicated to the following subjects or categories of subjects, regularly appointed to the processing in full compliance with the measures in force:

• Accountancy firms, when the information is due by law, or is in the interest of the subject (natural or legal person);
• Law firms, when the information is due by law, or when the information is in the interest of the subject (natural or legal person);
• Technical and/or Commercial Consultants, to fulfil requests or services.

7. Data retention period

At the end of the provision of the service, or in cases that do not provide otherwise within the Information dedicated and accepted by the Data Subject, personal data will be stored exclusively for historical or statistical purposes or for any obligations, in accordance with the law, regulations, community legislation and codes of ethics and good conduct signed pursuant to art. 40 of Reg. 2016/679, for a period as per current legislation (usually 10 years), or, if it is not subject to any law, for a period not exceeding 5 years. Beyond this period, the personal data will be stored in an anonymous form, or will be destroyed.

8. Absence of an automated decision-making process

There is no automated decision-making process on this website and, in particular, there is no profiling system.

9. Rights of data subjects

Data Subjects have the right to:

• to obtain confirmation as to whether or not personal data concerning them exists, regardless of their being already recorded, and the communication of such data in intelligible form without delay;
• request information, in writing, regarding their personal data stored by us (e.g.: origin, purpose, methods, categories, logic applied, retention period, rights, identification data of the Data Controller, subjects or categories to whom the data may be communicated);
• revoke consent to the use of personal data;
• request the cancellation of their data;
• request the transformation and/or restriction or blocking of data processed unlawfully;
• request the updating, rectification or integration of the data;
• obtain their personal data, provided to the Data Controller, so as to be able to transmit the data to another Data Controller;
• request a certificate that the aforementioned operations have been brought to the attention of those to whom the data may have been communicated, except in cases where this proves impossible or involves the use of means disproportionate to the protected right;
• to object, for legitimate reasons, to the processing of personal data concerning them, even though it may be pertinent to the purpose of collection;
• lodge a complaint with the Data Protection Authority (garanteprivacy.it).

For more information regarding privacy laws and rights, the Data Subject can visit the website of the Data Protection Authority at: www.garanteprivacy.it .

Data subjects wishing to exercise their rights must use the contact details of the Data Controller.