Privacy policy in accordance with Articles 13-14 of the European “Privacy” Regulation (GDPR)

DATA PROCESSING NOTICE

This page describes how the site is managed with regard to the processing of the personal data of users who consult it, as well as the methods and purposes for processing personal data.
This information is also provided pursuant to art.13-14 Reg.to EU 2016/679 to those who interact with web services accessible by electronic means from the address: comavcompositi.it
This site is owned by COM.AV. S.R.L. which manages and maintains this site for the purpose of providing information and communications relating to the products or services offered.
This information is provided only for the site in question and not for other Web sites that may be consulted through our links, for which COM.AV. S.R.L. is in no way responsible for.
COM.AV. S.R.L., in its capacity as Data Controller of your personal data, pursuant to and for the purposes of EU Reg. 2016/679 - GDPR, hereby informs you that the aforementioned legislation provides for the protection of the parties concerned with regard to the processing of personal data and that such processing will be based on the principles of correctness, lawfulness, transparency and protection of your privacy and your rights.
Your personal data will be processed in accordance with the legal provisions of the aforementioned legislation and the confidentiality obligations therein.

TYPES OF DATA PROCESSED

Navigation Data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and IT environment. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check that it is functioning correctly, and is deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes to the detriment of the site.

Data provided voluntarily by the user

The optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site, as well as the filling in of forms for sending specific requests, entail the subsequent acquisition of the sender's address, which is necessary for replying to requests, as well as any other personal data included in the message or in the form.
Specific summary information is given or displayed on the pages of the site set up for particular services on request.

Profile data

This data, communicated when registering in the customer area, includes your first name and surname, date of birth, gender, the e-mail address under which you register and your password, and contact details.

Purchase data

When placing an order, we collect your purchase data, including order number, details of the subscription being purchased, and data on the means of payment.

Payment data

For the purpose of payment processing, we collect the payment data you have provided to us, including IBAN and BIC or account number and bank code, credit card data and creditworthiness data. We receive further payment data from external payment processing services and economic information services with which we cooperate for the purpose of payment processing and creditworthiness checks. We only pass on to our payment processing services those data that are necessary for the processing of the payment. Any debit or credit card information is not stored by our systems when an order is placed. The provision of such data is mandatory in order to execute the requested order.

CONSEQUENCES OF REFUSAL TO PROVIDE DATA

Apart from what has been specified for navigation data, the user is free to provide the personal data indicated in the request forms, mailing list subscription, participation in events or in any case indicated in contacts to request the sending of informative, technical or commercial material or other communications. Failure to provide such data will not entail any consequences other than the impossibility of obtaining what has been requested.

MODE OF TREATMENT

The data are processed primarily by electronic and computerised means and stored both on computer media and on paper media as well as on any other suitable media, in compliance with the modalities set out in Articles 6, 32 of the GDPR and by adopting the appropriate security measures to prevent loss of data, unlawful or incorrect use and unauthorised access.
We inform you that, in order to provide a complete service, our portal may contain links to other websites, not managed by us. We are not responsible for errors, content, cookies, publication of unlawful moral content, advertising, banners or files that do not comply with the regulations in force and for compliance with the Privacy Law by sites managed by us to which reference is made. In order to improve the service offered, we would appreciate it if you would immediately report any malfunctions, abuses or suggestions to the following e-mail address: info@comavcompositi.it
Your data will only be processed by personnel expressly authorised by the Controller.

PURPOSE OF PROCESSING

The data will be processed for the following purposes:
-give access to public and/or reserved sections of the site;
-implement the activation and maintenance of any services subscribed to online or the sending of newsletters;
-enabling the procurement and provision of the service;
-processing requests for information, quotations, technical support; -providing information on services and products provided and about changes in products or services;
-fulfil obligations under laws or regulations;
--protection of the Controller in court;
-enable constant monitoring of the effectiveness of the proposed service.

SUBJECTS TO WHOM PERSONAL DATA MAY BE DISCLOSED

The personal data relating to the processing in question may also be communicated to subjects whose right to access your personal data is recognised by law or secondary and/or EU regulations. Your data may be communicated exclusively to competent and duly appointed subjects for the performance of the services necessary for the proper management of the relationship, with a guarantee of protection of the rights of the data subject. Furthermore, some data may be communicated and disseminated to internet operators of which COM.AV. S.R.L. uses for the management of its domains.
Your personal data will not be disseminated in any way.
Your data will not be transferred to third countries.

DATA RETENTION PERIOD

We would like to inform you that, in compliance with the principles of lawfulness, purpose limitation and data minimisation, in accordance with Art. 5 of the GDPR, the storage period of your personal data is set for a period necessary for the performance of the requested services and in compliance with the regulations in force regarding the storage of fiscal, tax and contractual documents.

RIGHTS OF THE INTERESTED PARTIES

1. The data subject shall have the right to obtain confirmation as to whether or not personal data concerning him/her exist, even if not yet recorded, and communication of such data in intelligible form.
2. The data subject has the right to be informed:
a. the origin of personal data;
b. the purposes and methods of processing;
c. the logic applied in the event of processing carried out with the aid of electronic instruments;
d. the identification details of the holder, the persons responsible and the representative designated pursuant to Article 5(2);
e. the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them in their capacity as designated representative in the territory of the State, as managers or appointees.
3. The data subject has the right to obtain:
a. updating, rectification or, when interested, integration of the data;
b. the cancellation, transformation into anonymous form or blocking of data processed in breach of the law, including data whose storage is not necessary in relation to the purposes for which the data were collected or subsequently processed;
c. certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves the use of means
d. manifestly disproportionate to the right protected;
e. data portability.
4. The data subject has the right to object, in whole or in part:
a. for legitimate reasons to the processing of personal data concerning him/her, even if pertinent to the purpose of collection;
b. the processing of personal data concerning him/her for the purposes of sending advertising or direct sales material or for carrying out research
c. market or commercial communication
Furthermore, if the data subject considers that the processing of his or her data is contrary to the legislation in force, he or she may lodge a complaint with the Data Protection Supervisory Authority pursuant to Article 77 of Regulation 2016/679.

THE DATA CONTROLLER

The data controller is COM.AV. S.R.L. with registered office in Via Sales, 175, 24020, Villa d'Ogna (BG), in the person of its legal representative pro tempore.
You have the right to obtain from the data controller the erasure (right to be forgotten), restriction, updating, rectification, portability, opposition to the processing of your personal data, as well as in general you may exercise all the rights provided for in Articles 15, 16, 17, 18, 19, 20, 21, 22 of the GDPR.
In order to exercise the rights listed above, the interested party must submit a written request by e-mail. The e-mail should be addressed to: info@comavcompositi.it