GDPR (General Data Protection Regulation)
Data protection is fundamental for us. We respect the current data protection law 196/2003 and we will respect the GDPR. According to the GDPR, there are some reasons that legitimize the processing of personal data. Below, we see what are the main legal bases recognized by the GDPR. Basic requirements and implications for products
The data used must be necessary for the provision of the Service and must be clearly defined in the contract stipulated with the user.
According to the GDPR privacy directives: – It is necessary to receive unambiguous, aware, specific and free consent from the user by means of a clear affirmative action. – People have the right to withdraw their consent and this possibility must be brought to their attention.
Owner of the data
The person who decides the “purposes” and “means” of the processing of personal data is defined as data controller. In a similar way to what is already in place with the current data protection law, data controllers will have to take compliance measures that include how data is collected, the purpose for which it is used and the period of retention, as well as ensuring the right of people to access the data they have provided. cocoawtc.com invites all its customers to inform visitors of their websites in advance of the ownership of the data (our customer) and how visitor data is processed and stored on our systems.
Responsibility for data processing
The person who processes personal data on behalf of a data controller is defined as data controller. Certain obligations now apply directly to data controllers and the data controllers must bind them to certain contractual commitments to ensure that the data is processed securely and legally. In compliance with art. 13 of Legislative Decree 196/2003 (hereafter Privacy Code) and with regard to GDPR, Umberto Caprara owner of the website www.cocoawtc.com (hereafter “Site”), informs users who interact with the services offered by the Site (hereinafter “Visitor” or “Visitors”), accessible electronically, on the methods for processing the personal data of the visitors themselves. This information is provided only for the Site and not for other Internet pages that may be consulted by the Visitor through links on the Site. The treatment is carried out in compliance with the following conditions.
1. Holder of the treatment
The data controller (later the “Controller”) is Umberto Caprara- Tax code CPRMRT90D09F205J.
You can contact the owner by email firstname.lastname@example.org
2.Personal data processed by the Data Controller and processing purposes
2.1 Data deriving from navigation on the Site
To make it possible to view, consult and navigate the website’s web pages, the computer systems and software procedures used to operate the Site acquire some Visitor data whose transmission is implicit in the use of Internet communication protocols. This category of data includes the IP addresses or domain names of the computers used by users who connect to this site, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (200OK, 404, 301 etc.) and other parameters relating to the operating system and the user’s IT environment. During navigation, the Site will send cookies to the Visitor’s computer to help users customize and optimize, also in terms of time savings, navigation on the Site. Cookies can store user preferences and other information. The most common browsers can be configured to reject all cookies or to report the possible sending of a cookie. The aforementioned data are processed in accordance with the provisions of art. 123 of the Privacy Code, therefore, when they are no longer necessary for the transmission of electronic communication, they are deleted or made anonymous based on the times set out below, to allow the processing of statistical information on the use of the Site and to control its proper operation. The above data are kept for the time strictly necessary for the pursuit of the purposes highlighted above and deleted when the result inherent in the purpose is achieved. These data are processed only to facilitate navigation on the Site, to carry out statistical processing on the use of the Site and to trace any illegal activities to the detriment of the Site.
2.2 Data voluntarily provided by the user
The Visitor has the right to voluntarily send e-mail messages to the addresses shown on the pages of the Site; in this case the Owner or his delegate will acquire the sender’s address in order to respond to requests, as well as any other personal data included in the message. The data collected through the submission of registration forms are: name, surname, email and telephone number. The data collected has the purpose of: responding to the request and sending any quotation offer. Each submission form reports the purpose of keeping the Collected data. The data will be used exclusively for the indication shown and for a useful period not exceeding one year, if contract isn’t signed or the visitor interrupts the use of the services.
3. Methods of data processing
Personal Data is collected and processed using electronic devices and, in any case, automated tools. Personal Data will be stored on the servers of Register S.p.A where the software underlying the functioning of the Site is resident; the servers are allocated to an external entity which will be appointed as Data Processor. Personal Data will be processed in a lawful and correct manner, exclusively for the purposes specifically indicated in point 2.2 of this Information. Personal data, however stored, are protected from subtraction or alteration by means of specific security, management and archiving systems.
4. Nature of the provision of data and consequences in the event of failure to provide data
Without prejudice to the optional nature of sending the data voluntarily provided by the user (referred to in point 2.2), the provision by the Visitor of the data deriving from browsing the site is optional; to avoid providing such data, the Visitor must use special software available on the net, which allow anonymous surfing on the internet. Failure to provide such data implies the foreclosure of the achievement of the purposes of statistical processing on the use of the Site and the tracking of any illegal activities to the detriment of the Site. The Visitor may oppose the receipt of cookies by setting his / her Internet browsing program (browser) in order to prevent the receipt of such data. Disabling cookies will however prevent the full use of the functionality of the Site, including the purchase procedures.
5. Communication of data
The data deriving from browsing the site may be communicated, within the limits strictly necessary for the pursuit of the purposes referred to in point 2 or for the following reasons, to the external subjects listed below:
Umberto Caprara and his collaborators
The aforementioned Physical and Legal Persons will process Personal Data only within the limits strictly necessary for the fulfillment of the services requested by the Visitor and will protect their confidentiality by respecting the regulations in force.
6. Diffusion of data
By diffusion, the Privacy Code means “giving knowledge of personal data to indeterminate subjects, in any form, including by making them available or consultation”, for example through the publication of Personal Data on a website accessible to all. The Data Controller specifies that Personal Data won’t be disclosed.
7. Rights of the interested party
According to the legislation indicated, this treatment will be based on the principles of correctness, lawfulness, transparency and protection of your privacy and your rights. Pursuant to article 13 of the GDPR 2016/679, therefore, we provide you with the following information:
- Personal data (name, surname, identity document information and copy of it, telephone, email address, etc.), will be provided at the time of joining according to the type of association requested.
- We inform that, taking into account the purposes of the processing as illustrated above, the provision of data is mandatory and their failure, partial or incorrect, may have, as a consequence, the impossibility of proceeding with the execution of the service.
- If the subject who provides the data is under the age of 16, this treatment is lawful only if and to the extent that this consent is given or authorized by the holder of parental responsibility for which the identification and copy data are acquired of the identification documents.
- The treatment will be carried out both with manual and / or IT and telematic tools with organization and processing logics strictly related to the purposes themselves and in any case in order to guarantee the security, integrity and confidentiality of the data in compliance with the organizational measures, physical and logical in accordance with current provisions.
- Personal data are kept for the entire duration of the professional service relationship and / or the mandate. In case of transposition of personal data for requests for quotes and / or general information that does not produce an execution of the work, the data will be kept for a maximum period of 12 months. Personal data are collected in case of transposition of personal data for requests for quotes and / or information.
The Visitor can, at any time, exercise the rights:
- access to personal data;
- to obtain the correction or cancellation of them or the limitation of the treatment concerning him;
- to data portability;
- to withdraw consent, where provided: the withdrawal of consent does not affect the lawfulness of the treatment based on the consent given before the revocation;
- to lodge a complaint with the supervisory authority (Privacy Guarantor).
The exercise of your rights may take place by sending a request by email to email@example.com
The Data Controller is Umberto Caprara; for any clarifications regarding the protection of personal data, it can be reached at the address: firstname.lastname@example.org