With reference to EU Regulation 2016/679 – General Data Protection Regulation (GDPR) and the Personal Data Protection Code (Legislative Decree no. 196/2003)
Dear user of the website www.eurekaitalia.it, this document aims to help you understand what data we collect as part of our professional activity, how we use it, how it is updated, what your rights are as a web customer and the tools available to you to keep your data under control at all times.
Eureka S.r.l. (the data controller) is aware of the importance of protecting the confidentiality of personal data and – considering that the Internet is potentially a great tool for exchanging and circulating information – intends to make every effort to comply with rules of conduct that are in line with EU Regulation 2016/679 (GDPR) as already done in relation to Legislative Decree 30 June 2003, no. 196 (Personal Data Protection Code) and that guarantee safe, controlled and confidential web browsing.
In light of the above, the user of the www.eurekaitalia.it website is invited and recommended to carefully read this document which governs, in general, the rules that Eureka S.r.l. observes in collecting and processing personal data in order to always provide a satisfactory service to its customers and users and, in particular, the methods and purposes of processing the personal data provided by the user through navigation on our site.
What kind of processing do we do with your data?
Eureka S.r.l. collects some personal data from users (such as name, surname, email address, telephone number, etc.) provided voluntarily by the same during the registration phase, when requesting information by email or when registering for the newsletter system. This data is used to respond to user requests or to carry out the services they have requested.
The email address of users who subscribe to the newsletter service, once registered, is subsequently managed through an automatic system for sending newsletters.
Why do we process your data?
The personal data provided by users are used for the sole purpose of performing the service or provision requested.
Other data of a technical (and not personal) nature are collected for security and statistical purposes, are processed automatically and collected in an exclusively aggregate form for the purpose of verifying the proper functioning of the site, to improve the relevance of the results provided and to obtain anonymous statistical information on the use of the site and its accesses. This data will not, in any case, be communicated to third parties or disseminated.
For security purposes (spam filters, firewalls, virus detection), automatically recorded data may also include data such as the IP address, which could be used, in accordance with applicable laws, to block attempts to damage the site itself or to cause damage to other users, or in any case harmful or criminal activities. This data is never used to identify or profile users, but only for the purpose of protecting the site and its users.
What kind of information do we collect?
Your personal data collected may be: first and last name, residential address, email address, telephone number.
The processing carried out only concerns common data. The presence of any data that can be qualified as “particular” (pursuant to art. 9 of the GDPR) such as, for example, data relating to religion, state of health, ethnicity or sexual orientation, will result in the immediate destruction of the relevant message, announcement or communication that you may have provided.
Technical navigation data
The technical data collected may include the following
– internet protocol (IP) address;
– browser type and parameters of the device used to connect to the site;
– name of the internet service provider (ISP);
– date and time of the visit;
– the visitor’s web page of origin (referral) and exit;
– number of clicks, if any;
– any information on downloading documentation from the site;
– area of origin of the visitor;
– length of stay on a web page;
– age group.
How long do we keep your data?
In the case of personal data that you voluntarily provide, the data controller will store this data for the time required to verify and evaluate the information you have provided in order to exchange information, contacts or services you have requested. Once this purpose has been fulfilled, the data will be deleted within 2 years of the service being terminated.
Where do we process your data?
The data collected from the site are processed at the headquarters of Eureka S.r.l. and at the web hosting datacenter where the site is hosted and are handled only by technical personnel authorised to process the data, or by any persons authorised to carry out occasional maintenance operations (site developers).
No data deriving from the web service is disseminated except in cases expressly provided for by law.
Who processes your data?
In addition to the owner, in some cases, categories of authorised parties involved in the provision of the requested service (administrative, commercial, marketing, legal, system administrators) or external parties, also duly authorised by the owner (such as agents, retailers, third party technical service providers, postal couriers, hosting providers, IT companies) may have access to the data.
Are you obliged to give your data?
No. The site is accessible to users without the need to provide personal data.
If you do not provide your data, we will not be able to respond to your requests for information. In some cases we ask for your explicit consent to the processing of your data (e.g. for subscription to newsletters): such consent may be provided on-line by filling in a box.
In any case, the provision of data and any consent to their processing is on an optional, explicit and voluntary basis and may, at your request, be deleted from our database at any time.
You may deny consent and may revoke consent already given at any time in the following ways:
– In the case of data collected by means of electronic correspondence generated by a contact form, it will be necessary to send an email requesting the explicit deletion of your data.
– It is not possible to request the deletion of technical surfing data collected anonymously, as it cannot be precisely related to the user with whom it is associated.
Withholding consent may make it impossible to provide certain services and the site navigation experience may be compromised.
How is your data processed?
Personal data is processed by automated tools.
Specific security measures are observed to prevent data loss, illegal or incorrect use and unauthorised access. However, there is always a slight possibility of risk that an unauthorised third party intercepts the transmission via the Internet. We therefore urge you to exercise caution when transmitting personal data via the Internet and to weigh the benefits against the risks.
Could your data be transferred outside the European Community?
This site may share some of the data collected with services located outside the European Union. In particular with Google, Google Analytics and social networks in general. The transfer is authorised under specific decisions of the European Union and the Data Protection Authority, in particular Decision 1250/2016 (Privacy Shield), so no further consent is required. The companies mentioned above guarantee their adherence to the Privacy Shield.
What rights do you have to protect your data?
Pursuant to European Regulation 679/2016 (GDPR) and national legislation, the user may, in the manner and within the limits provided for by current legislation, exercise the following rights:
– request confirmation of the existence of personal data concerning him/her (right of access);
– know its origin
– receive intelligible communication of such data
– obtain information on the logic, methods and purposes of the processing;
– request the updating, rectification, integration, cancellation, transformation into anonymous form, blocking of data processed in violation of the law, including those no longer necessary to achieve the purposes for which they were collected;
– in cases of processing based on consent, to receive, at the sole cost of any support, your data provided to the data controller, in a structured and machine-readable form and in a format commonly used by an electronic device;
– the right to lodge a complaint with the Supervisory Authority (http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4535524);
– as well as, more generally, to exercise all the rights recognised to him by the laws in force.
Who is the data controller?
The Data Controller is Eureka S.r.l., with registered office in Via Veneto, 20/22 – 31040 Gorgo al Monticano (TV).