Privacy Policy

PRIVACY POLICY UNDER REG. EU 679/2016
Reg. EU 2016/679 called “GDPR,” provides a system of safeguards to protect the processing that is done on personal data. Specifically, according to Art. 13 of the aforementioned regulation, the Data Controller is required, even before any data can be processed, to provide a set of information about the purposes and methods of their processing.

Therefore, in relation to the personal data of those who interact with the web services of Curti Costruzioni Srl, we would like to inform you of the following.

1) PURPOSE OF DATA PROCESSING

The processing of personal data is directed to the registration and management and proper fulfillment of services provided by the site.

2) CATEGORY OF DATA PROCESSED

NAVIGATION DATA
The Computer Systems and related software procedures responsible for the operation of this website acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols (cookies). This category of data includes, for example, IP addresses or domain names of computers used by users to connect to our website and other browsing-related information. This data is used by the site in “anonymous” and “aggregate” form solely for statistical and operational purposes of the website (e.g., login pages, exit pages, etc.).

PERSONAL DATA.
The data controller primarily processes identification/contact data (first name, last name, addresses, type and number of identification documents, telephone numbers, e-mail addresses, of a tax/billing nature, except others) and, if commercial transactions are involved, financial data (of a banking nature, especially current account identifiers, credit card numbers, except others related to the aforementioned commercial transactions). The processing that the data controller carries out, both for the execution of the contract and by virtue of the express consent of the Client/interested party, does not generally concern special categories of personal data, known as sensitive data (revealing racial or ethnic origin, political opinions, religious beliefs, state of health or sexual orientation, etc.) or genetic and biometric data or so-called judicial data (relating to criminal convictions and offenses).

Data voluntarily provided by the user: The optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message. Data will be kept only for the purpose of the requested subscription to the sending of newsletters or special offers or commercial information material and not for sending specific information relevant to the confirmation of the same, such as receipt, reservation code and conditions. The information provided will not be used for commercial purposes and will not be sold, transmitted, licensed, or otherwise forwarded to third parties, except to our reservation service provider for exclusive reservation purposes. In any case, the site administrator ensures that scrupulous procedures are adopted to protect browsing data and that special care is taken to protect credit card information provided when making online reservations.

Newsletter: Visitors to the site can register for the newsletter service. Upon registration, the user’s e-mail address will be automatically included in a contact list to which e-mail messages may be sent containing periodic updates with information, including of a commercial and promotional nature, regarding initiatives, events or promotions of the data controller. The data will be used for the sole purpose of sending the e-mail newsletter and will not be disclosed to third parties.

MODE OF DATA PROCESSING
Data will be processed in accordance with the limits and conditions placed by reg. EU 2016/679 and in particular:
(a) is carried out by means of the operations or set of operations that can be summarized as follows: collection; recording and organization; processing, including modification, comparison/interconnection; use, including consultation, communication; storage; deletion and destruction; security and protection, including accessibility and confidentiality, integrity, protection;
b) is also carried out with the aid of electronic or otherwise automated means and in compliance with the minimum security measures dictated by reg. EU 2016/679;
c) is carried out directly by the organization of the Data Controller and/or by Service Companies outside the structure of the Data Controller in accordance with the relevant regulatory provisions, authorized for this purpose.

COMMUNICATION OF DATA
Data may also be disclosed, strictly in relation to the above purposes, to the following parties or categories of parties:
for the purposes referred to in point 1) above: to internal/external collaborators of our Company for consultancy and accounting and administrative tasks or for mandates as a result of administrative/legal disputes; to any other subjects, to whom the current legal and/or contractual regulations provide for the obligation of communication;

PROVISION OF DATA
The provision of personal data for processing under 1) above is necessary in order to register and to send requests through the site.

DATA DISSEMINATION
Personal data will not be disseminated by us and/or transmitted to third parties for purposes other than those stipulated in this notice.

DATA TRANSFER ABROAD
The transfer of data abroad for purposes related to the provision of the requested services may be envisaged. In this case, the data may be transmitted only to entities operating within the European Union space.

RIGHTS OF THE DATA SUBJECT
Reg. EU 2016/679 confers on the data subject the exercise of specific rights, including those to obtain from the data controller confirmation of the existence or non-existence of their personal data and their provision in an intelligible form; to have knowledge of the origin of the data, as well as the logic and purposes on which the processing is based; to obtain the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, as well as the updating, rectification or, if there is interest, the integration of data.

A data subject shall have the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her; the controller shall refrain from further processing unless he or she can demonstrate compelling legitimate grounds for processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

Portability of the same data is guaranteed upon request by the owner.

The data subject may, likewise, request a copy of the data in order to take it with him or transfer it to another Data Controller.

The interested party has the right to withdraw consent to the processing of data at any time, knowing that the consequence will be the immediate interruption of the provision of the service, without prejudice in any case to the legal obligations of the Data Controller regarding the preservation of the data acquired.

The data subject has the right to lodge a complaint with a supervisory authority.

Therefore, at any time, you may exercise, pursuant to Articles 15 to 22 of EU Regulation No. 2016/679, the right to:

(a) request confirmation of the existence or non-existence of their personal data;
(b) obtain information about the purposes of processing, categories of personal data, recipients or categories of
recipients to whom the personal data have been or will be disclosed and, when possible, the retention period;
(c) obtain rectification and deletion of data;
(d) obtain restriction of processing;
(e) obtain portability of data, i.e., receive them from a data controller, in a structured, commonly used and
machine-readable, and transmit them to another data controller without hindrance;
f) object to the processing at any time and also in the case of processing for direct marketing purposes;
(g) object to automated decision-making related to individuals siche, including profiling.
(h) request from the data controller access to and rectification or erasure of personal data or restriction of personal data
of the processing concerning him or her or to object to its processing, as well as the right to data portability;
(i) withdraw consent at any time without affecting the lawfulness of the processing based on the consent given
Before revocation;
(j) file a complaint with a supervisory authority.
The data subject may exercise his or her rights by written request sent to the data controller as identified above, to the postal address at which it has its registered office in San Siro (CO) Via Piano snc or by pec to the address: impresacurti@legalmail.it

DATA CONTROLLER
The data controller is Curti Impresa Edile Srl.
For any further information regarding the processing of personal data, you can directly contact the “Personal Data Protection” function of the site manager by writing to info(at)impresacurti.com, which also keeps the updated list of “Data Processors”.