This document contains information pursuant to Article 13 of EU Regulation 679/2016 (GDPR).
1 – Data controller
ISOLCASA srl – Via Montalbano, 1377/o – 47842 San Giovanni in M. (RN) Tel. 0541 955505 – Fax 0541 955444, info@isolcasa.it, VAT number 02546590403.
2 – Types of data processed
2.1 – Browsing data
During their normal operation, computer systems and software procedures acquire some personal data, the transmission of which is implicit in the use of internet communication protocols. This information is not collected to be associated with identified individuals, but by its very nature, it could allow users to be identified.
This category of data includes (i) the IP addresses or domain names of the computers used by users who connect to the Site, (ii) the URI (Uniform Resource Identifier) addresses of the requested resources, (iii) the time of the request, (iv) the method used to submit the request to the server, (v) the size of the file obtained in response, (vi) the numerical code indicating the status of the response given by the server (successful, error) and (vii) other parameters relating to the operating system and the user's IT environment.
2.2 - Cookies
For data processing via cookies, please read the relevant policy, available at the following link link.
2.3 – Data provided voluntarily by the user
The optional, explicit, and voluntary sending of emails and/or requests for information sent through the "Contacts" section, or the provision of personal data for the receipt of promotional communications and/or informative newsletters, entail the acquisition and processing by the Data Controller of such data and any other information contained in such communications for the purposes indicated in paragraph 3 below.
3 – Purpose and legal basis of the processing
The processing of the User's personal data by the Owner is aimed at:
a) pursue, in accordance with art. 6.1, letter f) of the GDPR, its legitimate interest, consisting in ensuring the security of the Site and the information exchanged thereon, i.e., the ability of such Site to resist, at a given level of security, unforeseen events or unlawful or malicious acts that compromise the availability, authenticity, integrity, and confidentiality of the personal data stored or transmitted and the security of the related services offered or made accessible;
b) with the User's consent, pursuant to art. 6.1, letter a) of the GDPR, send promotional communications and/or informative newsletters regarding Isolcasa products and/or services by email;
c) allow the User to request information regarding the services promoted by the Data Controller on the Site and provide the User, pursuant to art. 6.1, letter b) of the GDPR, with any requested feedback and/or quote.
4 – Consequences of a possible refusal to respond
Aside from what is specified regarding navigation data, which are necessary to allow the correct functioning of the Site, cookies, for which please read the relevant cookie policy, and data contained in information requests, Users are free to provide their personal data:
(i) to receive, via email, promotional communications and/or informative newsletters regarding goods and/or services of Isolcasa Srl.
Failure to provide such data will make it impossible for the User to stay updated on Isolcasa Srl's news and/or services.
In any case, the Data Controller informs Users of the existence of the right to revoke at any time the consent given for the processing of data referred to in the previous point (i), without prejudice to the lawfulness of the processing based on the consent given before the revocation.
5 – Treatment methods
Personal data are processed using manual, computerized, and automated systems for the time necessary to achieve the purposes for which they are collected.
In particular, it is specified that the User's personal data is processed by persons duly appointed to perform such tasks, constantly identified and/or appointed, appropriately trained and made aware of the constraints imposed by law, as well as through the use of security measures designed to guarantee the protection of your privacy and to avoid the risks of loss or destruction, unauthorized access, unauthorized processing or processing that does not comply with the aforementioned purposes.
6 – Communication and dissemination of data
The personal data collected will not be disclosed, sold, or transferred to third parties, except as required by law.
In any case, the Data Controller reserves the right to communicate the data to companies specifically appointed to perform specific services within the scope of its activities and/or, in general, on its behalf, who will act as independent data controllers and/or processors. This also applies to the communication and/or dissemination of data requested, in accordance with the law, by police forces, judicial authorities, information and security bodies, or other public entities for the purposes of defense or state security or the prevention, detection, or suppression of crime.
7 – Rights of the interested party
Pursuant to Articles 15 et seq. of the GDPR:
1. confirmation of the existence or otherwise of personal data concerning you, even if not yet recorded, and their communication in an intelligible form;
2. a copy of your personal data;
3. the rectification of your possibly inaccurate personal data;
4. the deletion of your personal data;
5. the limitation of the processing of your personal data;
6. in a structured, commonly used, and machine-readable format, the personal data you have provided to us or that you have created yourself – excluding opinions created by the Data Controller and/or by those appointed pursuant to Art. 4 of the Privacy Code / by persons authorized to process data on behalf of the Data Controller pursuant to Art. 4 of the GDPR – and to transmit them, directly or through the Data Controller, to another data controller;
7. 'indication:
a) the origin of personal data;
b) the categories of personal data processed;
c) the purposes and methods of processing;
d) of the logic applied in case of processing carried out with the aid of electronic instruments;
e) the identification details of the Owner and any managers;
f) the retention period of your personal data or the criteria useful for determining this period;
g) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it in their capacity as designated representative in the territory of the State, managers, or persons in charge pursuant to art. 4 of the Privacy Code / persons authorized to process the data on behalf of the Data Controller pursuant to art. 4 of the GDPR;
h) updating, rectification or, when you are interested, integration of the data;
i) the transformation into anonymous form or blocking of data processed in violation of the law, including those whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;
j) certification that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the case in which this requirement is proves impossible or involves a manifestly disproportionate use of means compared to the protected right.
8 - Furthermore, the User has the right to object, in whole or in part:
a) for legitimate reasons, to the processing of personal data concerning you, even if pertinent to the purpose of the collection;
b) to the processing of personal data concerning you for the purposes of sending advertising or direct sales material or for carrying out market research or commercial communication.
To exercise the aforementioned rights, Users may send a communication to the Data Controller's email address, as per Article 1 above, indicating in the subject line "Privacy – exercise of rights pursuant to Article 7 of Legislative Decree 196/2003 and Articles 15 et seq. of the GDPR".
Finally, we inform you that if you believe that your rights have been violated by the Data Controller and/or a third party, you have the right to lodge a complaint with the Italian Data Protection Authority and/or other competent supervisory authority pursuant to the GDPR.
9 – Duration of processing and storage of personal data
The User's personal data will be processed by the Data Controller only for the period of time necessary to achieve the processing purposes set out in Article 3 above. After that, they will be retained solely to comply with applicable legal obligations, for administrative purposes, and/or to assert or defend legal claims in the event of litigation or pre-litigation. Personal data processed for sending newsletters will be retained until the Data Controller receives the User's withdrawal of consent.