This information is provided in compliance with European and national legislation, dictated respectively by “European Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data” (hereinafter “GDPR”) and Legislative Decree no. 196/2003 as amended and supplemented. In this regard, this page describes how the personal data of users consulting the website of CORICOOP s.c.a. (hereinafter also “Data Controller”) is processed.
DATA CONTROLLER
The Data Controller is CORICOOP s.c.a., with registered office at Corso C.so Bra 44/1 – ALBA, n. 21 – 12051 – Alba (CN) and operational headquarters at Borgo San Martino 49 – POCAPAGLIA, n.49 – 12060.
Data Controller’s email address: cooperativacoricoop21@gmail.com
PROCESSING METHODS
The Data Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of personal data.
The processing is carried out using computer and/or telematic tools, with organizational methods and logics strictly related to the purposes indicated. In some cases, certain external parties may have access to the data (such as third-party technical service providers, hosting providers, IT companies, communication agencies, etc.) also appointed, if necessary, as Data Processors by the Data Controller. The updated list of Data Processors can be requested from the Data Controller at any time.
LEGAL BASIS OF PROCESSING
The Data Controller processes personal data relating to the User if one of the following conditions applies:
- The user has given consent for one or more specific purposes;
- The processing is necessary for the performance of a contract with the user and/or for the execution of pre-contractual measures;
- The processing is necessary for compliance with a legal obligation to which the Data Controller is subject;
- The processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party.
In any case, it is always possible to ask the Data Controller to clarify the concrete legal basis of each processing activity, and in particular to specify whether the processing is based on law, provided for by a contract, or necessary to conclude a contract.
TYPES OF DATA PROCESSED AND PURPOSES OF PROCESSING
Navigation Data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes IP addresses or domain names of computers and terminals used by users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters relating to the user’s operating system and computer environment.
This data, necessary for the use of web services, is also processed for the purpose of:
- Obtaining statistical information on the use of services (most visited pages, number of visitors per hour or day, geographical areas of origin, etc.);
- Checking the correct functioning of the services offered.
Navigation data does not persist for more than seven days and is deleted immediately after aggregation (except for any need to establish criminal offenses by the Judicial Authority).
Data Communicated by the User
The optional, explicit, and voluntary sending of messages to the Data Controller’s contact addresses, as well as the filling in and submission of forms on the Data Controller’s website, involves the acquisition of the sender’s contact data, necessary to reply, as well as all personal data included in the communications.
PURPOSES OF PROCESSING THE COLLECTED DATA
User data is collected to allow the Data Controller to provide its services, as well as for the following purposes: Statistics (anonymous data). To obtain further detailed information on the purposes of processing and the personal data specifically relevant to each purpose, the user may refer to the relevant sections of this document.
RETENTION PERIOD
Data is processed and stored for the time required by the purposes for which it was collected. Therefore:
- Personal data collected for purposes related to the performance of a contract between the Data Controller and the user will be retained until the performance of such contract is completed;
- Personal data collected for purposes related to the legitimate interest of the Data Controller will be retained until such interest is satisfied.
The user can obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller. When processing is based on user consent, the Data Controller may retain personal data longer until such consent is revoked. Furthermore, the Data Controller may be obliged to retain personal data for a longer period in compliance with a legal obligation or by order of an authority. At the end of the retention period, personal data will be deleted. Therefore, upon expiration of this term, the right to access, erasure, rectification, and the right to data portability can no longer be exercised.
DATA RECIPIENTS
The data collected for the purposes indicated above will under no circumstances be distributed online or transferred to third parties, without prejudice to any legal obligations and technical requirements linked to the provision of the requested services.
RIGHTS OF THE DATA SUBJECTS
Data subjects have the right to obtain from the Supervisory Authority, in the cases provided for, access to their personal data and the rectification or erasure of the same, or the restriction of processing concerning them, or to object to processing (art. 15 et seq. of the Regulation). The appropriate request to the Data Controller is submitted by contacting the office in charge at the contact details provided above.
RIGHT TO LODGE A COMPLAINT
Data subjects who believe that the processing of personal data relating to them carried out through this website takes place in violation of the provisions of the Regulation have the right to lodge a complaint with the Supervisory Authority (Garante), as provided for by art. 77 of the Regulation itself, or to take appropriate legal action (art. 79 of the Regulation)
