This page describes how to manage the site with reference to the processing of personal data of users who consult it. This is an information that is provided pursuant to art. 13 of Legislative Decree no. 196/2003 Code regarding the protection of personal data and art. 7 and 13 - 22 of the GDPR 2016/679
THE "OWNER" OF THE TREATMENT
Following consultation of this site, data relating to identified or identifiable persons including their images may be acquired. The owner of their treatment is CONSORZIO ALASSIO UN MARE DI SHOPPING which has its administrative headquarters in
VIA LORENZO SOLLAI 18
ALASSIO (Sv) 17021
VAT number 01616460091
Register of Companies of Savona
PLACE OF DATA PROCESSING
The treatments connected to the web services of this site take place at the aforementioned headquarters of ALASSIO UN MARE DI SHOPPING and are handled by the staff in charge of processing, or by any persons in charge of occasional maintenance operations.
TYPES OF DATA PROCESSED
Navigation data. The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes the IP addresses or domain names of the computers used that connect to the site, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's computer environment.
These data are used only to obtain anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site: except for this possibility, the data on web contacts do not persist for more than seven days.
No personal user data is acquired by the site in this regard. Cookies are not used to transmit information of a personal nature, nor are persistent cookies of any kind used, or systems for tracing users. The use of session cookies used on this site avoids the use of other IT techniques that are potentially prejudicial to the confidentiality of users' browsing and do not allow the acquisition of the user's personal identification data.
OPTIONAL NATURE OF PROVIDING DATA
Apart from that specified for navigation data, the user is free to provide the data contained in the request forms. Failure to provide them may make it impossible to obtain what is requested. For the sake of completeness, it should be remembered that in some cases, the Authority (Guarantor or delegates) may request news and information pursuant to Article 157 of Legislative Decree no. 196/2003 and of the art. 15 of the GDPR 2016/679, for the purpose of controlling the processing of personal data. In these cases, the reply is mandatory under penalty of an administrative sanction.
METHOD OF TREATMENT
Personal data are processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected.
Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
RIGHTS OF THE INTERESTED PARTIES
The subjects to whom the personal data refer have the right at any time to obtain confirmation of the existence or otherwise of the same data and to know its content and origin, verify its accuracy or request its integration or updating, or the rectification or limited use of the same (Article 7 of Legislative Decree No. 196/2003 and Articles 16 - 18 of the GDPR 2016/679). Pursuant to the same articles, one has the right to request cancellation, transformation into anonymous form or blocking of data in violation of the law, as well as to oppose in any case, for legitimate reasons, to their treatment. For your convenience, we reproduce the above articles in full: art. 7 Legislative Decree 196/03
1. The interested party has the right to obtain confirmation of the existence or not of personal data concerning him, even if not yet recorded, and their communication in an intelligible form.
2. The interested party has the right to obtain the indication:
a) the origin of the personal data
b) the purposes and methods of the processing;
c) the logic applied in case of processing carried out with the aid of electronic tools;
d) the identity of the owner, manager and the representative appointed under Article 5, paragraph 2;
e) of the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the territory of the State of managers or agents.
The interested party has the right to obtain:
a) updating, rectification or, when interested, integration of data;
b) the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those which do not need to be kept in relation
for the purposes for which the data were collected or subsequently processed;
c) the attestation that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment is proves impossible or involves the use of means that are manifestly disproportionate to the protected right.
3. The interested party has the right to object, in whole or in part:
a) for legitimate reasons, to the processing of personal data concerning him, even if pertinent to the purpose of the collection;
b) to the processing of personal data concerning him for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication.
Right of rectification
The interested party has the right to obtain from the data controller the correction of inaccurate personal data concerning him without undue delay. Taking into account the purposes of the processing, the interested party has the right to
obtain the integration of incomplete personal data, also by providing an additional declaration. Article 17
Right to erasure ("right to be forgotten")
1. The data subject has the right to obtain from the data controller the cancellation of personal data concerning him without undue delay and the data controller is obliged to cancel the personal data without undue delay, if one of the following reasons exists:
a) the personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;
b) the interested party revokes the consent on which the processing is based in accordance with Article 6, paragraph 1, letter a), or Article 9, paragraph 2, letter a), and if there is no other legal basis for the processing ;
c) the interested party opposes the processing pursuant to Article 21, paragraph 1, and there is no legitimate overriding reason to proceed with the processing, or opposes the processing pursuant to Article 21,
d) the personal data have been unlawfully processed;
e) personal data must be deleted to fulfill a legal obligation under Union law or the law of the Member State to which the data controller is subject;
f) the personal data have been collected in relation to the offer of information society services referred to in Article 8, paragraph 1.
2. The data controller, if he has made personal data public and is obliged, pursuant to paragraph 1, to delete them, taking into account the available technology and implementation costs, he shall take reasonable measures, including technical ones, to inform the data controllers who are processing the personal data of the request of the interested party to delete any link, copy or reproduction of his personal data.
3. Paragraphs 1 and 2 do not apply to the extent that processing is necessary:
a) to exercise the right to freedom of expression and information;
b) for the fulfillment of a legal obligation that requires the processing provided for by the law of the Union or of the Member State to which the data controller is subject or for the performance of a task carried out in the public interest or in the exercise of public authority of which the data controller is invested;
c) for reasons of public interest in the field of public health in accordance with Article 9 (2),
letters h) and i), and Article 9, paragraph 3;
d) for archiving purposes in the public interest, for scientific or historical research or for statistical purposes
in accordance with Article 89 (1), insofar as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of such processing; or e) for the assessment, exercise or defense of a right in court.
Right to limitation of treatment
1. The interested party has the right to obtain from the data controller the limitation of the processing when re
one of the following hypotheses runs:
a) the data subject disputes the accuracy of the personal data, for the period necessary for the data controller to
verify the accuracy of such personal data;
b) the processing is unlawful and the interested party opposes the cancellation of personal data and requests instead that its use be limited;
c) although the data controller no longer needs it for processing purposes, the personal data are necessary for the data subject to ascertain, exercise or defend a right in court;
d) the interested party opposed the processing pursuant to Article 21, paragraph 1, pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.
2. If the processing is limited pursuant to paragraph 1, such personal data are processed, except for storage, only with the consent of the interested party or for the assessment, exercise or defense of a right in court or to protect the rights of another natural or legal person or for reasons of significant public interest of the Union or of a Member State.
3. The interested party who has obtained the processing limitation pursuant to paragraph 1 is informed by the data controller before said limitation is revoked.
In any case, for any clarification, you can send an email to info @ XXXXXX or send a registered letter with return receipt to: CONSORZIO ALASSIO UN MARE DI SHOPPING
VIA LORENZO SOLLAI 18
ALASSIO (Sv) 17021
ALASSIO UN MARE DI SHOPPING P. IVA 01616460091