Disclosure on browsing pursuant to art. 13 Regulation EU 2016/679
Relevant legislation:
- EU Regulation no. 679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, and the free movement of personal data (hereinafter “EU Regulation”)
- Italian Legislative Decree No. 196 of 30 June 2003 (hereinafter the 'Privacy Code'), as amended by Italian Legislative Decree No. 101 of 10 August 2018
- Recommendation no. 2/2001 of 17 May 2001 on the minimum requirements for on-line data collection in the European Union, adopted by the European personal data protection authorities, meeting in the Group set up by art. 29 of Directive no. 95/46/EC (hereinafter “Recommendation of the Workgroup pursuant to art. 29”)
Data Science S.r.l. (hereinafter 'the Company'), a subsidiary of Var Group S.p.A. pursuant to Article 2359 of the Italian Civil Code, with registered office in Via Piovola 138, Empoli (FI), VAT No. 07235860488, wishes to inform users of the terms and conditions applied by the Company to processing operations performed on personal data.
In particular, the disclosure is provided in relation to the personal data of users who proceed to consult and use the Company's website, which is found at the following domain: www.datascience.vargroup.it
The Company acts as 'Data Controller', meaning 'the natural or legal person, public authority, service or other body which alone or jointly with others determines the purposes and means of the processing of personal data'.
In concrete terms, personal data may be processed by persons specifically authorised to carry out processing operations on users' personal data and, to this end, duly instructed by the Company.
In application of the legislation on the processing of personal data, users who consult and use the Company's website assume the role of 'data subjects', meaning the natural persons to whom the personal data being processed refer.
Please note that the disclosure does not extend to other websites that users may consult through links, including Social Buttons, on the Company's website.
In particular, Social Buttons are digital buttons or direct links to Social Network platforms (such as, but not limited to LinkedIn, Facebook, Twitter, YouTube), configured in each individual 'button'.
By clicking on these links, users will be able to access the company's social accounts.
The operators of Social Networks, to which the Social Buttons refer, act as autonomous Data Controllers; consequently, all information on the methods through which the aforementioned Data Controllers carry out processing operations on users' personal data may be found in the relevant Social Network platforms.
1. Personal data to be processed
In consideration of the interaction with the present website, the Company may process the following personal data of users:
- a. Browsing data: the computer systems and the software procedures used to operate this website, during their normal operation, acquire some personal data, the transmission of which is implicit in the use of the Internet communication protocols. This information is not collected for its association with identified data subjects but may by its nature, including through processing and association with personal data held by third parties, enable the identification of users. Such personal data include the IP addresses or domain names of the computers used by users to connect to the website, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the user’s operating system and software environment. These personal data are used exclusively to collect anonymous statistical information on the use of the website and to check its correct operation. Browsing data are not retained for longer than (12 months), without prejudice to any need for criminal investigations by judicial authorities.
- b. Personal data voluntarily provided: the optional, explicit and voluntary transmission of personal data to the Company, by filling in the forms on the website, entails the acquisition of the email address and any further personal data of users requested by the Company in order to comply with specific requests. With reference to the processing of personal data provided by virtue of filling in the contact form located on this website, please refer to the relevant "contact form disclosure".
2. Purposes and legal basis of the personal data processing
In relation to the personal data pursuant to point 1), letter a) of the present disclosure, users’ personal data are processed, automatically and “obligatorily”, by the Company in order to enable browsing itself; in this case the processing is carried out on the basis of a legal obligation to which the Company is subject, and on the basis of the legitimate interest of the Company to guarantee the correct operation and security of the website; the users’ express consent is therefore not necessary.
With regard to the personal data pursuant to point 1), letter b) of the present disclosure, the processing is performed for the purpose of providing information or assistance to users; in this case the processing is based on fulfilling a specific requests and the fulfilment of pre-contractual measures; the express consent of users is therefore not necessary.
3. Nature of conferment of personal data
Without affecting what is specified for the browsing data in relation to which conferment is obligatory, because it is instrumental to browsing on the the Company’s website, you are free to provide your personal data in order to receive information or assistance from the Company.
With reference to the processing of personal data provided by virtue of filling in the contact form located on this website, please refer to the relevant "contact form disclosure".
4. Methods and duration of personal data processing
The personal data processing is carried out by persons authorised to process personal data, specifically identified and instructed for this purpose by the Company.
The processing of users’ personal data is performed using automated instruments with reference to the data on access to the pages of the website.
With reference to the processing of personal data provided by virtue of filling in the contact form located on this website, please refer to the relevant “contact form disclosure”.
In any case, the processing of personal data is carried out in full compliance with the rules intended to guarantee the security and confidentiality of the personal data, and among other things the accuracy, updating and pertinence of the personal data with respect to the purposes declared in this disclosure.
Without prejudice to the fact that browsing data pursuant to point 1, letter a) do not remain for more than 12 months, the personal data are processed for the time strictly necessary to achieve the purposes for which the same were collected or in any case on the basis of the deadlines provided for in the legal rules.
It should also be noted that the Company has adopted specific security measures to prevent loss, unlawful or incorrect use of personal data and unauthorised access to them.
5. Recipients of personal data
Limited to the purposes identified in the present disclosure, your personal data may be communicated in Italy or to other countries, within the territory of the European Union (EU) or the European Economic Area (EEA), to fulfil legal obligations.
For more information regarding the recipients of users' personal data provided by virtue of filling in the contact form located on this website, please refer to the relevant “contact form disclosure”.
The personal data will not be transferred outside the territory of the European Union (EU) or the European Economic Area (EEA).
The personal data will not be distributed and therefore will not be divulged to the public or to an indefinite number of parties.
6. Rights pursuant to arts 15, 16, 17, 18, 20 and 21 of EU Regulation 2016/679
Users, in their capacity as data subjects, may exercise the rights of access to the personal data provided for in art. 15 of the EU Regulation and the rights provided for in arts 16, 17, 18, 20 and 21 of the said Regulation regarding the rectification, erasure, restriction of the processing of the personal data, the portability of the data, where applicable, and objection to the processing of the personal data.
The aforesaid rights may be exercised by writing to the following address: digitallaw&[email protected]
If the Company does not respond within the time provided for in the legislation or the response provided is unsuitable, users may appeal to the Personal Data Protection Authority.
These are the details:
Personal Data Protection Authority
Piazza Venezia n. 11 - 00187 Roma
E-mail: [email protected]
7. Personal data protection officer
We must specify that SeSa S.p.A., the company that performs the function of holding in the SeSa S.p.A. business group to which the Company belongs in consideration of the control over Var Group S.p.A. under the terms of art. 2359 of the Italian Civil Code, after assessing the specialist knowledge of the provisions on the subject of personal data protection, has appointed the Personal Data Protection Officer. The Personal Data Protection Officer oversees observance of the legislation on the subject of personal data processing and provides the necessary advice.
In addition, where necessary, the Personal Data Protection Officer cooperates with the Personal Data Protection Authority.
Below are the relevant contact details: [email protected]