POLICY ON THE PROCESSING OF PERSONAL DATA OF USERS OF THIS WEBSITE

Dear Data Subject, Graphus has the utmost respect for User privacy. Any data that is communicated by the User through the website shall be processed with the utmost care, availing of all tools to guarantee its security, in full compliance with current legislation protecting data confidentiality. We wish to inform you that the “Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)” foresees the protection of individuals with regard to the processing of personal data as a fundamental right.

Pursuant to Article 13 of the GDPR, therefore, we inform you of the following:

A / CATEGORIES OF DATA

Oggetto del trattamento possono essere i suoi dati personali quali:
a. Data collected automatically – During normal operation, the computer systems and applications used to operate this website detect data (the transmission of which is implicit in the use of Internet communication protocols) potentially associated with identifiable Users. The data collated includes the IP addresses and domain names of the computers utilised by Users connecting to the website, the URI (Uniform Resource Identifier) addresses of the requested resources, the method employed to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etcetera) and other parameters regarding the operating system, the browser and the IT environment utilised by the User, the name of the internet service provider (ISP), the date and time of the visit, the web page of origin for the visitor (referral) and of exit.
b. Data provided voluntarily by the User – The voluntary and explicit sending of emails to the addresses indicated on the various access channels of this website does not entail a request for consent but involves the acquisition of the sender’s address and data, necessary to respond to requests, as well as any other data personal data included in the message. Such data is voluntarily provided by the User at the time of the request to provide the service. By providing a comment or other information, the User expressly accepts the privacy policy and, in particular, consents to the contents entered being freely diffused, including to third parties. To the contrary, specific policies will be progressively indicated or displayed on the website pages dedicated to particular services on request (Forms). The User must therefore explicitly consent to the use of the data reported in these Forms in order to send the request.

Cookies

The website utilises cookies. The data collected through cookies can be used to access parts of the website or for statistical purposes or even to render the browsing experience more enjoyable and more efficient in the future, in seeking to evaluate user behaviour and modify the offering of the content according to their conduct. For more information, please consult our Cookie Policy.

Plug-in

The website also incorporates plug-ins and/or buttons for social media networks, in order to facilitate the sharing of content on your favourite social media networks. Such plug-ins are programmed so as not to set any cookies when accessing the page, in order to safeguard User privacy. The cookies are set – if so foreseen by the social media networks – only once the User makes effective and voluntary use of the plug-in. If the User browses whilst logged into the social media network, then they will have already accepted the use of cookies used by this site at the time they registered on the social media network. The collection and utilisation of the information obtained through the plug-ins are governed by the respective privacy policies of the social media networks, to which reference is recommended.

B / DATA CONTROLLER

The Data Controller is Graphus – via A. Ghislanzoni 10, 23900 Lecco (LC) Italy, having VAT number 03289610135 and which can be contacted by telephone at +39.0341.324179 or through the email address: info@graphus.it.

C / SOURCES OF PERSONAL DATA

The personal data held by the Data Controller is collected directly from the Data Subject.

D / PURPOSE OF DATA PROCESSING AND LEGAL BASIS

The legal basis and purpose of the data processing is as follows:
1. For data collected automatically, the legal basis is the legitimate interest of the Data Controller and the purpose is to guarantee and improve the web browsing experience.
2. For data provided voluntarily by the User, the legal basis is their consent and, when sending emails to our addresses, the purpose is to be able to send responses to specific requests made by the User; for the forms, the purpose is indicated in the specific Policy.
3. For cookies and plug-ins: please refer to the specific Cookies Policy.

E / DATA DESTINATION

Within the limits pertinent to the purposes for processing indicated, your data may be disclosed to partners, consulting companies, private companies, third-party technical service providers, hosting providers, IT companies and communications agencies.

F / TRANSFER OF DATA TO THIRD COUNTRIES

Your data is not subject to transfer to a third country.

G / RETENTION PERIOD

Based on the Storage Limitation principle (Article 5 of the GDPR), verification of the obsolescence of the data stored in relation to the purposes for which they were collected is carried out periodically. In particular:
1. The data collected automatically is processed, for the time strictly necessary, for the sole purpose of obtaining statistical information regarding use of the website and to check on its regular functioning, as well as for security purposes or according to the deadlines set by law.
2. The data provided voluntarily by the User shall be retained for a period of time not exceeding the achievement of the purposes for which it is processed or according to the deadlines set by law.

H / RIGHTS OF THE DATA SUBJECT

The Data Subject always has the right to request the Data Controller for access to their data, its correction or deletion, the limitation of the processing or the possibility to oppose to the processing, request data portability, revoke consent to the processing of data asserting these and other rights provided by the GDPR through a simple communication to the Data Controller. The Data Subject can also file a complaint with the Supervisory Authority.

I / OBLIGATORY NATURE OF THE CONFERMENT

The Data Subject always has the right to request the Data Controller for access to and the correction or deletion of their data, along with the limitation of its processing or the possibility to oppose to the processing, to request data portability, and revoke consent to the processing of data by asserting these and other rights conferred by the GDPR through simple communication to the Data Controller. The Data Subject can also file a complaint with the Supervisory Authority.
With regard to Points D.1 and D.2 of the aforementioned purposes, the provision of User data is mandatory whilst browsing our website to facilitate the correct delivery of the service. The granting of consent regarding the User’s data per Point D.3 is optional and will not compromise the provision of the service in any way.

J / METHODS OF DATA PROCESSING

The personal data provided by the User will be subject to processing operations in compliance with the aforementioned legislation and the confidentiality obligations that inspire the Data Controller’s activities. The data will be processed both with IT tools and on paper and on any other type of suitable support (such as in the cloud, supplementary digital archiving and storage systems and so on), in compliance with adequate technical and organisational security measures set out under the GDPR.

K / FINAL NOTES AND MEANS OF UPDATING

The Policy is provided only for this website and not for other websites that may be consulted by the User through links contained within this website. The Policy may be subject to changes due to the introduction of new regulations in this regard, thus the User is invited to periodically check this page in order to be always up-to-date on the latest legislative developments. Prior versions of this Policy can always be requested from the Data Controller.

M / AUTOMATED DECISION-MAKING PROCESSES

There are no automated decision-making processes.

INFORMATION ON COOKIES

The website uses cookies and similar technologies to ensure the proper functioning of the procedures and improve the experience of using online applications. This document provides detailed information on the use of cookies and similar technologies, how they are used and how to manage them.

Definitions

Cookies are short fragments of text (letters and / or numbers) that allow the web server to store information on the client (the browser) to be reused during the same visit to the site (session cookies) or later, even at a distance of days (persistent cookies). Cookies are stored, according to user preferences, by the single browser on the specific device used (computer, tablet, smartphone). Similar technologies, such as, for example, web beacons, clear GIFs and all forms of local storage introduced with HTML5, can be used to collect information on user behavior and use of services.
Later in this document we will refer to cookies and all similar technologies by simply using the term “cookie”.

Types of cookies

Based on the characteristics and use of cookies, we can distinguish several categories: Strictly necessary cookies. These are cookies that are essential for the proper functioning of the site and are used to manage login and access to the site’s reserved functions. The duration of cookies is strictly limited to the work session (when the browser is closed they are deleted). They are used on the site.
Analysis and performance cookies. These are cookies used to collect and analyze traffic and use of the site anonymously. These cookies, even without identifying the user, allow, for example, to detect if the same user returns to connect at different times. They also allow you to monitor the system and improve its performance and usability. The deactivation of these cookies can be performed without any loss of functionality.
Profiling cookies. These are permanent cookies used to identify (anonymously or not) user preferences and improve their browsing experience.

Third party cookies

By visiting a website you may receive cookies from both the visited site (“owners”) and from sites managed by other organizations (“third parties”). A notable example is the presence of “social plugins” for Facebook, Twitter, Google+ and LinkedIn. These are parts of the visited page generated directly by the aforementioned sites and integrated into the host site page. The most common use of social plugins is aimed at sharing content on social networks.
The presence of these plugins involves the transmission of cookies to and from all sites managed by third parties. The management of the information collected by “third parties” is governed by the relevant information to which reference should be made. To ensure greater transparency and convenience, the web addresses of the various information and methods for managing cookies are shown below.
Facebook information: https://www.facebook.com/help/cookies/
Facebook (configuration): log into your account. Privacy section.
Twitter information: https://support.twitter.com/articles/20170514
Twitter (configuration): https://twitter.com/settings/security
Linkedin information: https://www.linkedin.com/legal/cookie-policy
Linkedin (configuration): https://www.linkedin.com/settings/
Google+ information: http://www.google.it/intl/it/policies/technologies/cookies/
Google+ (configuration): http://www.google.it/intl/it/policies/technologies/managing/

Google Analytics

The site also includes certain components transmitted by Google Analytics, a web traffic analysis service provided by Google, Inc. (“Google”). Also in this case these are third-party cookies collected and managed anonymously to monitor and improve the performance of the host site (performance cookies).
Google Analytics uses “cookies” to anonymously collect and analyze information on site usage behavior (including the user’s IP address). This information is collected by Google Analytics, which processes it in order to draw up reports for operators regarding the activities on the websites themselves. This site does not use (and does not allow third parties to use) the Google analysis tool to monitor or collect personal identification information. Google does not associate the IP address with any other data held by Google nor does it try to connect an IP address with the identity of a user. Google may also communicate this information to third parties where this is required by law or where such third parties process the aforementioned information on behalf of Google.
For more information, please refer to the link below:
https://www.google.it/policies/privacy/partners/
The user can selectively disable the action of Google Analytics by installing the opt-out component provided by Google on their browser. To disable the action of Google Analytics, please refer to the link below: https://tools.google.com/dlpage/gaoptout

Duration of cookies

Some cookies (session cookies) remain active only until the browser is closed or the logout command is executed. Other cookies “survive” when the browser is closed and are also available on subsequent visits by the user.
These cookies are called persistent and their duration is set by the server at the time of their creation. In some cases a deadline is set, in other cases the duration is unlimited. However, by browsing the pages of the website, you can interact with sites managed by third parties that can create or modify persistent and profiling cookies.

Manage cookies

The user can decide whether or not to accept cookies using the settings on their browser.
Attention: the total or partial disabling of technical cookies can compromise the use of the site features reserved for registered users. On the contrary, the usability of public content is also possible by completely disabling cookies. Disabling “third party” cookies does not affect navigability in any way. The setting can be defined specifically for the different websites and web applications. Furthermore, the best browsers allow you to define different settings for “proprietary” and “third party” cookies.
By way of example, in Firefox, through the Tools-> Options -> Privacy menu, you can access a control panel where you can define whether or not to accept the different types of cookies and proceed with their removal.
Chrome: https://support.google.com/chrome/answer/95647?hl=it
Firefox: https://support.mozilla.org/it/kb/Gestione%20dei%20cookie
Internet Explorer: http://windows.microsoft.com/it-it/windows7/how-to- manage-cookies-in-internet-explorer-9
Opera: http://help.opera.com/Windows/10.00/it/cookies.html
Safari: http://support.apple.com/kb/HT1677?viewlocale=it_IT