STATEMENT PURSUANT TO ART. 13, LEG. DECREE no. 196/2003 AND ART. 13, EU REGULATION no. 2016/679 Pursuant to art. 13 of Legislative Decree no. 196/2003 (hereinafter the "Privacy Code") and art. 13 of EU Regulation no. 2016/679 (hereinafter referred to as "GDPR Regulation"), laying down provisions for the protection of persons and other subjects regarding the processing of personal data, we wish to inform you that the personal data you provide will be processed in compliance with the above-mentioned legislation and the confidentiality obligations to which our Company is bound. G.F. Aurora S.r.l. provides some information regarding the processing of personal data provided by the user. Please note that, according to Article 4 of the GDPR Regulation, "processing" means: "any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automatic means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction". The personal data you voluntarily provide to G.F. Aurora S.r.l. at the time of registration, during business relations aimed at the conclusion of contractual agreements and their execution, promotional activities or otherwise acquired as part of our activity, in compliance with the legislative and contractual provisions in force, are subject to processing based on principles of correctness, lawfulness and transparency, to protect your confidentiality and your rights, in accordance with the above-mentioned regulations. Therefore, pursuant to Article 13 of the GDPR Regulation, we hereby inform you of the following: DATA COLLECTION METHODS This site collects user data in two ways:
1. Automated data collection: during users' navigation, the following information may be collected and stored in the log files of the site's server (hosting):
- internet protocol (IP) address; - browser type; - parameters of the device used to connect to the site; - name of the internet service provider (ISP); - date and time of visit; - visitor's web page of origin (referral) and exit; - number of clicks, if any. This data is used for statistical and analysis purposes, in aggregate form only. The IP address is used solely for security purposes and is not cross-referenced with any other data.
2. Data provided voluntarily: The site may collect other data in the event of voluntary use of services by users, such as comment services, communication services (contact forms, comment box, request for quotation or information), and will be used exclusively for the provision of the requested service:
- name and surname; - e-mail address; - telephone number. PURPOSE OF THE PROCESSING Your personal data will be processed for the following purposes:
1. institutional, connected or instrumental to the activity of G.F. Aurora S.r.l., such as archiving, processing, invoicing, customer management;
2. to fulfil legal obligations related to civil, fiscal, accounting regulations, for the administrative management of the relationship you have established with G.F. Aurora S.r.l.;
3. to fulfil contractual obligations, technical support and information, and after-sales service;
4. profiling, in order to carry out market and statistical surveys on the products covered by G.F. Aurora S.r.l.'s activity, also aimed at assessing the degree of user satisfaction;
5. direct marketing, for communication on future commercial initiatives, announcements of new products, services and offers from G.F. Aurora S.r.l.. by sending advertising material and newsletters by e-mail and/or hard copy by post;
6. statistics, for the collection of data and information in an exclusively aggregate and anonymous form for the purpose of verifying the correct functioning of our website. None of this information is related to the natural or legal person who is the user of the site and does not allow their identification in any way; therefore, consent is not required;
7. security, for the collection of data and information in order to protect the security of the site (spam filters, firewalls, virus detection) and users and to prevent or unmask fraud or abuse to the detriment of the website. The data are automatically recorded and may possibly also include personal data (IP address) that could be used, in accordance with the relevant laws, to block attempts to damage the site itself or to harm other users, or in any case harmful or criminal activities. Such data are never used for user identification or profiling and are deleted periodically; therefore, consent is not required;
8. ancillary activities, for communication to third parties who perform functions necessary or instrumental to the operation of the service and to enable third parties to perform technical, logistical and other activities on our behalf. Suppliers only have access to personal data that are necessary to perform their tasks, undertake not to use the data for any other purpose, and are obliged to process personal data in accordance with applicable regulations.
SENSITIVE DATA ("PARTICULAR CATEGORIES OF DATA", ART. 9 OF THE REGULATION) The sensitive/particular data that you may provide will be processed only for the operations that are indispensable to fulfil the obligations, including pre-contractual obligations, arising from the relationship of supply of goods, services or performances to the person concerned, in accordance with the principle of pertinence and non-surplus of the processed data necessary to fulfil the contractual obligations. Pursuant to Article 13(1)(c) of the GDPR Regulation, it is recalled that consent may be revoked at any time, without prejudice to the lawfulness of the processing based on the consent given before revocation. LEGAL BASIS OF THE PROCESSING The processing of personal data and sensitive/particular data provided by you is justified by the need to comply with legal and tax obligations to which the Data Controller is subject, as well as the need to execute the contract to which you are a party, or to execute pre-contractual measures taken at your request. The provision of your personal data and any sensitive/particular data is necessary in order to be able to regularly fulfil the contractual and legal obligations connected to the business relationship you have established with G.F. Aurora S.r.l. In their absence, it is not possible for us to continue the contractual relationship. The processing of data for the purposes of direct marketing and profiling is based on the consent of the person concerned. COMMUNICATION AND METHODS OF PROCESSING The data will be processed in the following ways:
1. personal data are processed in such a way as to ensure adequate security and confidentiality. To this end, the data are collected in our database and protected with appropriate security measures to prevent unauthorised access or use of personal data and the equipment used for processing;
Sensitive/particular data that may be collected shall be stored in G.F. Aurora S.r.l.'s computer systems, reducing the use of personal and identification data when the purposes pursued can be achieved by means of anonymous data and appropriate methods that allow the data subject to be identified only when necessary. Sensitive/particular data that are surplus to requirements or no longer necessary because they relate to the performance of evaluation activities that have now been completed will not be subject to further and/or different use by the Data Controller;
3. in compliance with the purposes indicated above and permitted by law, your personal data may be communicated externally to: associated, parent and affiliated companies of G.F. Aurora S.r.l.; G.F. Aurora S.r.l.'s business partners (manufacturing companies, suppliers, carriers and couriers, etc.). (manufacturing companies, suppliers, carriers and couriers, etc.); solely with regard to personal data, companies that carry out surveys concerning customer satisfaction; given that G.F. Aurora S.r.l. operates internationally, the data in question may be transferred abroad, within the territory of the EU, for the execution of the contract concluded between you and G.F. Aurora S.r.l.. These data are transferred with the aid of appropriate guarantees for their protection.
TRANSFER OF DATA COLLECTED IN NON-EU COUNTRIES This website may share some of the data collected with services located outside the European Union. In particular, with Google, Facebook and Microsoft (LinkedIn), via social plug-ins and the Google Analytics service. The transfer is authorised on the basis of specific decisions of the European Union and the Data Protection Authority, in particular, this is Decision 1250/2016 (Privacy Shield - https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/5306161), so no further consent is required. The above-mentioned companies guarantee their adherence to the Privacy Shield. DATA STORAGE PERIOD Personal, personal and sensitive/particular data, processed on this website and in the context of the execution of the contract, will be stored compatibly with legal and tax obligations (e.g. national tax or anti-fraud laws, product warranty duration, etc.) that require the storage of data for a certain period of time. With reference to personal data processed for direct marketing or profiling purposes, the same will be kept in compliance with the principle of proportionality and in any case until the purposes of the processing have been pursued. In this regard, as provided for in Article 21 of the GDPR Regulation, the data subject may exercise his or her right to object at any time to the processing of personal data concerning him or her carried out for such purposes, including profiling. SECURITY MEASURES We process visitor/user data lawfully and fairly, taking appropriate security measures to prevent unauthorised access, disclosure, unauthorised modification or destruction of data. We undertake to protect the security of your personal data during their transmission, using appropriate software. The processing is carried out by means of computer and/or telematic tools, with organisational methods and logic strictly related to the purposes indicated. In addition to the Owner, in some cases, categories of people in charge of the site organisation or external subjects (such as third party technical service providers, hosting providers) may have access to the data. COOKIES This site makes use of cookies, text files that are recorded on the user's terminal or that allow access to information on the user's terminal. Cookies make it possible to store information on visitors' preferences, they are used to check that the site is working properly and to improve its functionality by customising the content of the pages according to the type of browser being used, or to simplify navigation by automating procedures (e.g. login, site language, etc.) and, lastly, to analyse how visitors use the site. This site makes use of the following categories of cookies:
1. technical cookies: used for the sole purpose of carrying out the transmission of an electronic communication, to ensure the correct display of the site and navigation within it. In addition, they make it possible to distinguish between the various users connected in order to provide a service requested from the right user (login), and for site security reasons. Some of these cookies are deleted when the browser is closed (session cookies), others have a longer lifetime (such as the cookie required to store the user's consent in relation to the use of cookies). No consent is required for these cookies;
2. analysis cookies: used directly by the site operator to collect information, in aggregate form, on the number of users and how they visit the site. They are assimilated to technical cookies if the service is anonymised;
3. profiling and marketing cookies: used exclusively by third parties other than the owner of this site to collect information on users' browsing behaviour, interests and consumption habits, also in order to provide personalised advertising.
By clicking "I ACCEPT" on the banner when first accessing the site, or by clicking on the X, or by navigating within the site, the visitor expressly consents to the use of cookies and similar technologies, and in particular to the recording of such cookies on his or her terminal equipment for the purposes indicated above, or to access through cookies to information on his or her terminal equipment. For more information and how to disable cookies, please visit the following link: Extended Cookie Policy. (add link to extended cookie policy) THIRD PARTY COOKIES This site also acts as an intermediary for third party cookies (such as social network buttons), which are used to provide additional services and functionality to visitors and to simplify the use of the site itself, or to provide personalised advertising. This site has no control over these third party cookies and has no access to the information collected by these cookies. Information on the use of these cookies and their purposes, as well as how to disable them, is provided directly by the third parties on the pages indicated below. It should be noted that, generally, tracking users does not involve identification of the same, unless the user is already subscribed to the service and is also already logged in, in which case it is understood that the user has already given his/her consent directly to the third party at the time of subscribing to the relevant service (e.g. Facebook). This website uses cookies from the following third parties: - Google Inc. For information on the use of the data and its processing by Google, we recommend that you read Google's privacy policy and Google's terms of use when using partner sites or apps. - Google Analytics Used to analyse users' use of the site, compile reports on site activity and user behaviour, check how often users visit the site, how the site is tracked and which pages are visited most frequently. The information is combined with information collected from other sites in order to create a comparative picture of the use of the site in relation to other sites in the same category. Data collected: browser ID, date and time of interaction with the site, page of origin, IP address. Place of data processing: European Union - anonymisation of the service being active. The data collected does not allow personal identification of users, and is not cross-referenced with other information relating to the same person. They are processed in aggregate form and anonymised (truncated to the last octet). On the basis of a special agreement (DPA), Google Inc. (the data controller) is prohibited from cross-referencing this data with data from other services. Further information on Google Analytics cookies can be found on the page Google Analytics Cookie Usage on Websites. You can selectively disable (opt-out) the collection of data by Google Analytics by installing the appropriate component provided by Google on your browser. - Adobe Analytics For information on the use of data and its processing by Adobe Analytics, we recommend that you read the privacy policy and how to disable (opt-out). To view the Extended Cookie Policy, also with reference to third parties, please use the following link (add link to Extended Cookie Policy) SOCIAL NETWORK PLUGIN This site also incorporates plugins and/or buttons in order to allow easy sharing of content on your favourite social networks. When you visit a page on our website that contains a plugin, your browser connects directly to the servers of the social network from where the plugin is loaded, which server can track your visit to the site and, where appropriate, associate it with your social network account, in particular, whether you are logged in at the time of your visit or whether you have recently browsed one of the websites containing social plugins. If you do not wish the social network to record data relating to your visit to this website, you must log out of your social network account and, if necessary, delete the cookies that the social network has installed in your browser. Plugins with advanced privacy protection functions are installed on this website, which do not send cookies or access cookies on the user's browser when the page is opened, but only after the plugin is clicked. The collection and use of information by these third parties are regulated by their respective privacy policies, to which please refer: - Facebook (cookie policy link) - Twitter (cookie policy link) - Google+ (cookie policy link). RIGHTS OF THE DATA SUBJECT The data subject has the rights set out in Article 7 of the Privacy Code and Article 15 (right of access) of EU Regulation No. 2016/679, namely the rights to:
1. obtain confirmation of the existence or otherwise of personal data concerning him/her, even if not yet recorded, and its communication in intelligible form;
2. to obtain information on: a) the origin of the personal data; b) the purposes and methods of processing; c) the logic applied in the event of processing carried out with the aid of electronic instruments; d) the identity of the data controller, data processors and the designated representative pursuant to Art. 5, paragraph 2, Privacy Code and Art. 3, paragraph 1 GDPR; e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of the data in their capacity as designated representative in the territory of the State, data processors or persons in charge of processing;
3. obtain: a) the updating, rectification or, where interested therein, integration of the data; b) the cancellation, transformation into anonymous form or blocking of data processed in breach of the law, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected;
4. object, in whole or in part: a) on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection; b) to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys;
5. the right to lodge a complaint with the Supervisory Authority on any matter concerning the aforementioned data processing.
Furthermore, pursuant to Articles 16 to 22 of EU Regulation No. 2016/679, the data subject may exercise:
1. the right of rectification (Art. 16);
2. the right to be forgotten (deletion art. 17);
III. the right to restriction of Processing (Art. 18);
1. the right to obtain from the Controller notification to the recipients to whom the data have been transmitted of any rectification or erasure or restriction of processing (Art. 19);
2. the right to portability (Art. 20);
3. the right to object (Art. 21);
VII. the right to refuse automated processing (Art. 22). In this way, you are given access to your data for:
1. a) verifying the truthfulness;
2. b) amend them if they become inaccurate;
3. c) supplement them also by means of a supplementary declaration;
4. d) request cancellation.
The interested party may revoke at any time the consent expressed in relation to the separate purposes indicated above, except for the impossibility of continuing business relations as indicated and without prejudice to the processing of data previously acquired for the fulfilment of tax-tax obligations dependent on the contracts concluded. The data subject may exercise his or her rights at any time by contacting the following contacts: E-mail: g.f.aurora@pec.it; DATA CONTROLLER The Data Controller is: G.F. Aurora S.r.l., in the person of its legal representative pro tempore Mondanaro Luisa, with registered office at Via Console Cesario 3 80132 naples; E-mail: g.f.aurora@pec.it Last updated: 09.06.2021