INFORMATION FOR PRIVACY AND DATA PROTECTION
pursuant to art. 13 of Legislative Decree 196/2003 (Privacy Code) and Art. 13 of Regulation (EU) 2016/679 (GDPR 2016/679), concerning the protection for people and other subjects toward the treatment of personal information, the Company Ella Lu S.r.l. as data controller, provides you with the information regarding the processing of personal data of Users who interact with the services and consult the web pages of the websites accessible by internet at http://www.ellalu.com.
This privacy statement is also provided pursuant to and for the purposes of the expectations of the Authority Provision for the protection of personal data of 8 May 2014 “Identification of simplified procedures for information and the acquisition of consent for the use of cookie “
The informative, however, cannot be extended to other sites or pages not belonging to the site itself consulted by the User via links.
In general, the personal data you provide will be processed in compliance with the aforementioned law in accordance with the principles of lawfulness, correctness, transparency, accuracy, integrity, confidentiality and protection of the right to protect personal data, giving priority to the limitation of the purpose and data minimization.
1 – Data controller and data processor
The Data Controller is Ella Lu S.r.l. with registered and processing office in via dei Meloni di Quartirolo n. 10, 41012 Carpi (MO) – tel. +39 059 6228282, mail firstname.lastname@example.org, in the figure of its Legal Representative.
It has also been appointed data processors who, in compliance with Articles 28 and 29 of the GDPR 2016/679, will treat the data you supplied in various ways, according to the methods and purposes expressed below; the updated list of Data Processors is available at the Registered Office of the Data Controller.
2 – Purposes of the data processing
The treatments connected to the web services of this site are carried out on behalf of Ella Lu S.r.l. by Siteground.
Data provided voluntarily by the user
The optional, explicit and voluntary sending of data to this site entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data sent.
The data provided is not subject to profiling with the aid of IT tools.
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
These informations are not collected to be associated with identified interested parties, but by their nature could, through processing and association with data held by third parties, allow Users to be identified.
This category of data includes the IP addresses or domain names of the computers used by users connecting to the Site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (good purpose, error, etc.) and other parameters relating to the operating system and the User’s computer environment.
These data are used for the sole purpose of obtaining statistical information (therefore they are anonymous) on the use of the Site and to check its correct functioning.
These data are kept for the time strictly necessary to provide the User with the requested service, except for any verification of computer crimes against the site.
3 – Processing methods
The treatment is carried out through manual, computerized, telematic, or telecommunication systems, by specially appointed persons, or by persons in charge of occasional maintenance operations, for the time strictly necessary to achieve the purposes for which the data were collected and, in any case, in compliance with the regulations in force. Security measures are also used to guarantee the confidentiality of the interested party to whom such data relate and to avoid undue access to third parties or unauthorized personnel.
4 – Nature of the contribution
Apart from that specified for navigation data, the provision of personal data by Users is optional, however any refusal to provide them, or failure to consent to their processing, will make it impossible to obtain the requested service.
5 – Communication and diffusion of data
No data deriving from the web service will be communicated or spread, except to fulfill the obligations provided for by laws, regulations or community laws.
6 – Transfer of data to third countries
No data deriving from the web service will be transferred by the Data Controller to third countries.
7 – Conservation
In compliance with the principles of lawfulness, limitation of purposes and minimization of data, pursuant to art. 5 GDPR 2016/679, the period of storage of personal data is established for the time strictly necessary to achieve the purposes for which the data were collected and processed, and in any case in compliance with the regulations in force.
8 – Rights of the interested
At any time the subjects to which the personal data refer may exercise, pursuant to Art. 7 of the Privacy Code and of Articles 15-22 of the GDPR 2016/679, the right to:
- obtain confirmation that a processing of personal data concerning him is in progress and in this case to obtain access to personal data and the following information:
– purpose of the processing;
– categories of personal data;
– recipients or categories of recipients to whom personal data have been or will be communicated;
– the retention period, where possible;
- obtain the correction and cancellation of data;
- obtain the treatment limitation;
- obtaining data portability, so receiving them from a data controller, in a structured format, commonly used and readable by an automatic device, and transmitting them to another data controller without hindrance;
- oppose the processing at any time;
- oppose an automated decision-making process relating to natural persons, including profiling.
To exercise your rights and / or request further information, you can contact the Data Controller.