Privacy data shall be collected and handled in compliance with recommendation n.2/2001, adopted on 17th May 2001 by European authorities for personal data protection with the aim to single out minimum requirements for the online collection of personal data within the European Union and it furthermore represents an information note pursuant to art.13 of d.lgs. 30th June 2003, n. 196 – of the civil code on personal data protection. The information note only refers to the website www.previa.it hereby named “Previa spa”. Previa spa, with headquarters in via Massimo d’Antona 9 bis – 10028 Trofarello (Turin - Italy), e-mail firstname.lastname@example.org, website www.previa.it is the data controller.
Place of data processing.
Data is processed at the headquarters of the data handler. According to what is provided for by art. 43 and subsequent articles of d.lgs. 196/2003 the eventual handling outside the European Union requires the interested party's express consent. Purposes and modalities of personal data handling and navigation data automatically collected by the website or involontarily entered by the users or the interested party shall be collected for the purposes and by means of the modalities listed as follows. Data handling shall take place by means of tools and modalities aimed at ensuring confidentiality and safety of the data, pursuant to provisions of d.lgs. 30th June 2003, n.196 and in compliance with the laws in force. Compulsory and voluntary data, provided by users, shall be used by previa spa solely for the aims detailled as follows:
• to allow for the provision of the service and the delivery of the goods purchased on the website and to a broader extent, for administrative- accounting or technical purposes
• meet specific user enquiries
• keep the user updated on new products or services provided by the website or in relation to special commercial offers
• inform the user of maintenance on the website or allow for the commercial profiling of the user in case of inefficiencies
• to allow for the defence, on the part of the website owner, during a trial or in the preparatory stages of its investigation, against abusive use of the same or of the connected services on the part of the user. When necessary, pursuant to d.lgs. 196/2003, previa spa requires consent from the user or interested party prior to proceeding to personal data handling.
Type of data handled.
Compulsory data supplied by users: While in service, IT systems and procedures aimed at the functioning of the previa spa website collect some personal data related to its users. It is navigation data useful for technical use and for allowing the registered user to exploit the services on offer, therefore conferral is not optional, but compulsory. This information allows for the identification of the user or interested party. Data such as name, surname, address, telephone, e-mail, fax, tax code, ip address and other data which can be related to the user's general information or to technical modalities for user access to the website. This data is used for the sole purposes indicated at the previous points, and for the time necessary for the carrying out the service requested by the user. The user has the right to request its removal at any time for legitimate reasons. The data may be used for the ascertaining of liability in the case of hypothetical cyber crimes damaging the website.
Voluntary user data conferral: The conferral of sensitive personal data, such as data suitable for revealing ethnic or racial origins, religious, philosophical beliefs or other, political opinions, state of health or sexual orientation, is optional and voluntary and requires explicit user consent . In the case that the user uses the website to post or share personal third-party data in any manner, they take full responsibility. Data handler is waivered from any responsibility for their instrumental use following its communication or diffusion. Both in the case of compulsory and optional conferral of data, previa spa commits to storing and checking the same so as to minimise risk of destruction or loss, unauthorised, not allowed or non-compliant access to the purposes of its collection, by means of safety measure.
Processing of data outside the EU
In compliance with provisions of art. 43 and 44 of d.lgs. 30th June 2003 n.196 as well as artt. 25 e 26 of Directive 95/46/ce from the European Parliament and Council of 24th October 1995, handling of personal data outside a member state of the European Union, can only takpe place if the third country in question guarantees adequate protection and safety. For this purpose Previa spa guarantees to use services by suppliers who adhere to programmes for safe data protection such as "safe harbor", i.e. a bilateral agreement between the Eu and the Usa which sets safe and shared rules for personal data transferral to companies on the American territory.
Rights of interested parties
With the aim to exert the rights provided for by art 7 of d.lgs 196/2003 (confirmation of the existence of the conferred data, knowledge of their content and origin, verification of its exactness, request for its integration, cancellation, updating, rectification or request for blocking data handled in breach of the law, opposition to its processing due to legitimate reasons), the user or interested party can contact the data handler directly, at the previously mentioned address.