Privacy policy
The purpose of this privacy policy (hereinafter the “Privacy Policy“) is to describe how the following website wwww.ilmondodiemilia.com (hereinafter the “Website“) is managed with reference to the processing of personal data of users/visitors who consult them in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the “Regulation“) and other applicable legislation on the protection of personal data.
Data Processor
IL MONDO DI EMILIA, individual company held by ALESSIO BORIS, Via Kramer 17, 20129 Milan, Italy, Tax code LSSBRS73S18F952T and VAT no. 11335850969 has the role of data controller according to the relevant definition contained in article 4 at point 7) of the Regulation, ” the natural or legal person, public authority, service or other body which, individually or together with others, determines the purposes and means of the processing of personal data”.
Type of data processed and purposes of processing relating to navigation on Internet Websites
The Website offers informative and interactive content. While the user is browsing the Website, the Website can acquire the user information in the following ways:
Browsing data
The computer systems and software procedures used to operate each Website and these allow each Website, during the Internet use of the user, to collect specific personal data in which transmission is inherent in the communication protocols of the Internet.
This category of the above specific data includes: IP addresses; type of browser used; operating system; domain name and addresses of Websites from which access or exit has been made; information on the pages visited by users within the Website; access time, the stay on individual pages; analysis of the internal path and other parameters regarding the operating system and computer environment.
This technical data is collected to be used solely for aggregate and non-identifying manner and could be used to ascertain liability in the event of hypothetical computer crimes against the Website.
Data provided voluntarily by User
This includes all personal data that is given freely on the Website, for example, to register and/or access a restricted area or to request information by completing a form.
The processing of these personal data will be carried out based on the information contained in the specific Privacy Notice provided pursuant to Articles 13 and 14 of the Regulation by Data Controller at the time of providing personal data requested in the appropriate form.
Moreover, personal data may be processed for profiling purposes collected through cookies. The processing of such personal data will be carried out based on the indications within Cookie Policy section present on the Website.
How data is processed
The processing of personal data is carried out mainly using procedures and electronic devices for the time strictly necessary, in accordance with Article 5 of the Regulation.
Personal data will be processed by the Data Controller to the extent strictly needed for the pursuit of the main purpose. In particular, personal data will be processed for a period of time equal to the minimum necessary, as indicated in Recital 39 of the Regulation, i.e., until the termination of the contractual relationship between the data subject and the data controller, except for a further period of retention that may be required by law as also provided for in Recital 65 of the Regulation.
Redirect to external websites
The Website may make use of ‘social plug-ins’. Social plug-ins are special tools that allow social network features to be incorporated directly on Websites (e.g., Facebook’s “Like” or Instagram’s “Following”).
All social plug-ins on the Website are indicated by their respective logos, which are the property of the social network platform.
When you visit a page on the Website and interact with the plug-in, for example by clicking on the “Like” button or deciding to leave a comment, the corresponding information is transmitted from the browser directly to the social network platform (e.g. in this case Facebook or Instagram) where it is stored.
For information on the purpose, the type and the methods of collection, processing, use and storage of personal data by the social network platform, and how to exercise your rights, are contained in the privacy policy of the individual social network.
Connection to and from third-party sites
You can connect to other third-party websites from the Website.
In this regard, Il mondo di Emilia can not be held liable for the possible use of personal data by third-party websites and for the use of login credentials provided by third parties.
Rights of personal and data subject
As provided for in Article 15 of the Regulation, the data subject may access his/her personal data, request that it be corrected and updated, if incomplete or incorrect, request its cancellation if it was collected in violation of a law or regulation, as well as oppose processing for legitimate and specific reasons.
In particular, below is a list of all the rights that can be exercised, at any time, vis-à-vis the data controller:
Right of access: the right, pursuant to article 15(1) of the Regulation, to obtain confirmation from the data controller as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information: a) the purposes of the processing; b) the categories of personal data concerned; c) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations; d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; e) the existence of the right to request from the data controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing; f) the right to lodge a complaint with a supervisory authority; g) where the personal data are not collected from the data subject, any available information as to their source; h) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject. All this information can be found in the policy that will always be available in the Privacy Notice section of Website.
Right to rectification: right to obtain, pursuant to Article 16 of the Regulation, the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, it is possible to have incomplete personal data completed, including by means of providing a supplementary statement.
Right to erasure: right to obtain, pursuant to Article 17(1) of the Regulation, the erasure of personal data concerning him or her without undue delay and the data controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies: a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; b) the data subject withdraws consent on which the processing is based, and where there is no other legal ground for the processing; c) the data subject objects to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2); d) the personal data have been unlawfully processed; e) the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the data controller is subject. In some cases, as provided for in Article 17(3) of the Regulation, the data controller is entitled not to delete your personal data if their processing is necessary, for example, to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest, for purposes of filing in the public interest, scientific or historical research or for statistical purposes, for ascertaining, exercising or defending a right in court.
Right to restriction of processing: the data subject has the right to obtain the restriction of processing, pursuant to Article 18 of the Regulation, where one of the following applies: a) the accuracy of the personal data is contested by the data subject, for a period enabling the data controller to verify the accuracy of the personal data; b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead; c) the data controller no longer needs the personal data for the purposes of processing but the data is required by the data controller for the establishment, exercise or defence of legal claims; c) the data subject has objected to processing pursuant to Article 21(1) of the Regulation pending the verification whether the legitimate grounds of the data controller overrides those of the data subject. In case of restriction of processing, personal data will be processed, except for storage, only with the consent of or for the establishment, exercise or defence of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest.
Right to data portability: Pursuant to Article 20 (1) of the Regulation the data subject shall have the right to receive the personal data concerning him or her, which he / she has provided to new data controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the data controller to which the personal data have been provided. In this case, it will be the responsibility of the data subject to provide us with all the exact details of the new data controller to whom he or she intends to transfer his or her personal data by providing written authorisation.
Right to object: Pursuant to Article 21(2) of the Regulation and as also reiterated in Recital 70, the data subject may object at any time to the processing of his or her personal data if they are processed for purposes of direct marketing, including profiling to the extent that it is purpose is for direct marketing.
Right to lodge a complaint with a supervisory authority: without prejudice to the right to appeal to any other administrative or judicial body, if the processing of personal data carried out by the data controller and/or joint controllers is deemed to be in violation of the Regulation and/or applicable law, a complaint may be lodged with the relevant Data Protection Authority.
To exercise all rights as identified above, simply contact the data controller by sending an e-mail to [email protected].
Changes to the Privacy Policy
This Privacy Policy is applicable to the Website from its publication and integrates and completes the privacy information provided within the Website . The possible entry into force of new sector regulations, as well as the constant examination and updating of the general conditions of use of the Website could lead to the need to change these methods. It is therefore possible that this Privacy Policy may undergo changes over time and we therefore invite each user/visitor to periodically consult this page. It is understood as of now that any variation of the privacy information provided during the collection of personal data will be communicated to each interested party by the data controller in the manner identified by the latter.