INFORMAZIONI SUL TRATTAMENTO DEI DATI PERSONALI
EX ART. 13 DEL REGOLAMENTO (UE) 679/2016
(General Data Protection Regulation - GDPR)
Dear User,
This notice describes the methods of processing personal data of users who visit the website https://www.altograf.it/ (hereinafter referred to as the "site") or use the services provided through the same platform by Altograf S.r.l. organization (hereinafter "Company" or "Altograf S.r.l.") as well as for customers and visitors who directly visit the headquarters or premises of the company.
This statement therefore describes the commitments made to comply with the regulations on the protection of personal data by the Data Controller and specifies the use of data of individuals who use the services and features available on the Site.
If the user provides personal data of third parties, they must ensure that the communication of such data to Altograf S.r.l. and the subsequent processing for the purposes specified in the privacy policy is accompanied by obtaining consent from such third party.
1. Data Controller
We inform you that the Data Controller is:
Altograf S.r.l. with registered office in via Giovanni Agnelli, Zona Industriale 73042 Casarano (LE) - VAT number 04739600759, in the capacity of Data Controller
For any information, the company provides the following communication channels:
2. Types of data processed, purposes, and legal basis of the processing
Following the consultation of this website or the use of services provided through the same platform, the following types of personal data of users may be processed:
A) Navigation data
The computer systems and software procedures used to operate the website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified individuals, but by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by users who connect to the site, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters relating to the user's operating system and computer environment. These data are used by those who manage hosting services for the sole purpose of obtaining anonymous statistical information on the use of the site and to ensure its proper functioning, identify anomalies and/or abuses, and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site or third parties: except for this possibility, the web contact data do not persist for more than seven days.
B) For the website https://www.altograf.it/, personal data voluntarily provided by the user
The personal data freely and voluntarily provided by users of this site may include:
b1) Information entered in the forms found in certain sections of the site (e.g., the "Contact" or "Write to Us" section, "Send me updates," "Shipping Address"), or sent via email to the email addresses or messaging services provided by the Site, or data entered for the purpose of registering on the website or subscribing to the newsletter, to the extent necessary to respond to user requests.
The personal data freely and voluntarily provided by users are collected and processed for the following purposes:
shipping and provision of products requested by the user and management of related payments;
newsletter subscription and email delivery;
response to information requests;
quotation issuance;
order delivery;
preparation of documents for order delivery;
registration for events at the company headquarters;
phone call and/or email in response to information requests;
The data necessary for sending the Forms are limited to providing:
Surname or Company Name
Phone number
Email address
b1) for the website https://www.altograf.it/, the data voluntarily provided by users are:
those entered in the "Contacts" or "Stay in touch with us" or "Write to us" section, respectively, to receive information about products, and for receiving newsletters or about indicated phone, WhatsApp, and email contacts.
The legal basis for the processing for the aforementioned purposes is represented, in addition to the need to fulfill the contract of which the user is a party or to respond to their requests, also by the need to comply with legal obligations to which the Company is subject.
For processing carried out for the direct sending of its advertising material or commercial communications relating to products or services similar to those already requested by users, the Company may use email and postal addresses in accordance with the provisions of the Authority's provision for the protection of personal data of June 19, 2008, as the legal basis for this processing is the pursuit of its legitimate interest and, in any case, the expressed consent, which is a prerequisite for activating the "send" button or other technical measure by which it is evident that the customer is authorizing the data controller to process the data. In any case, in accordance with Article 21 of the Regulation, the user has the possibility to object to such processing at any time, initially or on the occasion of subsequent communications, easily and free of charge by writing to the Data Controller at their email address and to obtain an immediate response confirming the interruption of such processing.
With regard to statistical purposes, the data will be processed in anonymous and aggregate form.
3. Mandatory or optional nature of providing personal data by users
The provision of personal data to the Data Controller, particularly personal data, email address, postal address for product delivery, and phone number, is necessary for the conclusion of the contract for the purchase of products on the website or the registration phase.
The possible refusal to provide personal data marked with an asterisk may make it impossible to complete the registration phase or execute the contract for the purchase of products on the website or to use the services available on it.
4. Recipients of users' personal data
The personal data of users who visit this site or use the services provided through it will be communicated to:
• authorized personnel of Altograf S.r.l. specifically authorized for processing in accordance with Article 29 of the Regulation, within the scope of their respective duties and to the extent necessary to allow the performance of activities strictly related to the provision of the requested services;
• automatically to the company providing the hosting service for the site as the responsible party for the provision of hosting services for the website https://www.aruba.it/ and https://www.wix.com/.
• couriers for product delivery management;
• subjects, authorities, or entities to whom it is mandatory to communicate personal data in accordance with legal provisions or orders from competent authorities;
The personal data of users will not be transferred abroad to countries or international organizations outside the European Union that do not guarantee an adequate level of protection, recognized under Article 45 of the Regulation, based on an adequacy decision of the European Commission. If it becomes necessary for the provision of services, the transfer of personal data to countries or international organizations outside the EU will be carried out in compliance with the guarantees provided for in Articles 45-49 of the Regulation.
5. Storage of users' personal data
The personal data voluntarily provided by users will be stored in a form that allows the identification of data subjects for the time strictly necessary to pursue the purposes for which the data was collected and subsequently processed, and in any case within the limits of the law.
Personal data related to online product purchases will be stored for the maximum period
required for contractual and tax compliance.
6. Rights of data subjects
The GDPR, under Articles 15-22 of the Regulation, grants data subjects (customers) the exercise of the following rights, which the Company intends to guarantee:
to obtain confirmation of the existence or non-existence of their personal data (Article 15(1));
to obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated, and where possible, the retention period (Article 15(1)(a), (c));
to obtain rectification and erasure of data (Articles 16 and 17);
to obtain restriction of processing (Article 18);
to obtain information from the Data Controller about the recipients to whom the personal data have been transmitted and any rectifications or erasures or restrictions of processing (Article 19);
to receive personal data in a structured, commonly used, and machine-readable format from a Data Controller and transmit it to another Data Controller without hindrance (Article 20);
to object to a decision based solely on automated processing, including profiling (Articles 21 and 22);
where the processing is based on consent, to withdraw consent at any time (Article 7(3));
when a personal data breach is likely to result in a high risk to the rights and freedoms of data subjects, the Data Controller shall communicate the breach to the data subject without undue delay (Article 34);
To exercise their rights, users can submit a request to the email and pec addresses mentioned above or by registered mail with return receipt addressed to the company's registered office.
Users who believe that the processing of their personal data, carried out through this site, violates the provisions of the current legislation on the protection of personal data have the right to lodge a complaint with the supervisory authority under Article 77 of the Regulation or to take appropriate legal action.
7. Changes and updates to this Privacy Policy
Changes and updates to this Privacy Policy will be notified to users on the website's homepage or by email (for registered users) as soon as they are adopted and will be binding as soon as they are published on the website in this same section.