Unigrà S.r.l. (hereinafter “Unigrà”) hereby would like to inform visitors to the website that it provides for the protection of personal data in compliance with Italian national legislation and in accordance with the EU General Data Protection Regulation No. 2016/679.
1. Modalities of acquisition and types of data processed
The website offers information and sometimes interactive content. During navigation of the site, we may acquire information about the visitor in the following ways:
1.1. Registration data
The information requested during registration will be used to allow access to online areas and services. To ensure the proper performance of all activities connected or instrumental to the provision of its services, Unigrà may, where necessary, disclose the personal data of users to other companies of the own Group.
1.2. Website traffic data
The IT systems and software procedures provided to operate this web site acquire, during their normal operation, certain personal data which are implicitly transmitted when using the Internet communication protocols.
The IP addresses or the domain names of the computers used by the users who connect to the site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used for submitting the request to the server, the size of the file received in response, the numeric code indicating the status of the response given by the server (successful, error, etc.) and other parameters relative to the operating system and the IT environment of the user come under this category. Those data will solely be used to obtain anonymous statistical information on the use of the website and to check it is functioning properly, and will be stored for periods in accordance with the relevant legislation.
This information may be used to determine liability in case of cyber-crimes against Unigrà or any perpetrated through the use of the website.
1.3. Data provided voluntarily by the visitor
These are all personal data, additional to registration data, which the visitor freely releases, for example, in order to complete registration to a reserved area, to request information about a particular product or service via a form, to write to an email address or to call a toll-free number for direct contact with customer service.
Where applicable, this information may be used for the purposes of profiling the user. Where this happens, we will send the appropriate communication and obtain your freely-given and specific consent for marketing and/or profiling purposes in accordance with the techniques provided for in current privacy legislation (initially in the process of collecting consent based on opt-in and then, in the case of any refusal of consent, based on opt-out).
Cookies are packets of information sent by a web server (e.g. the website) to the user’s Internet browser, automatically stored on the computer and automatically sent back to the server at each next access to the website.
Unigrà uses “cookies” in order to provide contextualized information to website visitors and to obtain access statistics.
By default, almost all web browsers are set to automatically accept cookies.
Visitors may set their computer browser in such a way that it accepts/rejects all cookies or displays a warning whenever a cookie is proposed, in order to assess whether to accept it or not. The user can, however, change the default configuration and disable cookies (i.e. block them permanently), by setting the highest level of protection.
1.5. Specific types of data processed
Users wishing to access the services and content provided through this website may be required, during registration and depending on the type of service, to provide personal data such as, but not limited to: first and last name, address of residence or domicile, e-mail, place and date of birth, telephone number, etc. Additional personal data may be provided when participating in promotions and other initiatives of any kind. Furthermore, some sections of this website provide free text fields through which users may voluntarily provide Unigrà with information containing personal data, possibly including those relating to third parties. In this circumstance, as these are free fields, it may occur that the user enters, also inadvertently, special categories of personal data, such as, for example, data revealing political opinions, religious or philosophical beliefs, union membership, state of health, etc. Unigrà requests users not to disclose these types of data unless strictly necessary. Users who decide to share such information must give their consent to the processing of such information. Where the user discloses personal data of any nature belonging to third parties concerned, the same will be considered an independent data controller and as such will be responsible for all the relevant duties and legal responsibilities. Unigrà, in any case, requests that users disclose data relating to third parties only if such transmission is based on the prior consent of such parties or on another legitimate legal basis.
Minors may freely browse this website. Minors under 14 years of age, however, may not register on the website or use the services made available through it unless they have previously obtained the consent of the holder of parental responsibility.
2. Purposes of processing
Personal data provided by users are processed for the following purposes:
3. Social plug-ins
The website may use social plug-ins that are special tools that enable the incorporation of social network functionality directly into the website (e.g. icons or buttons such as Facebook’s “I like”).
All social plug-ins on the website are marked with the respective logo owned by the respective social network platform.
When you visit a page of our website and interact with the plug-in (e.g. by clicking the “I like” button) or you decide to leave a comment, the corresponding information is transmitted by the browser directly to the social network platform (in this case Facebook) and stored by this.
4. Linking to/from third party websites
You can follow links on this website to visit other websites related to Unigrà, to those of companies belonging to the Unigrà Group, or to third parties.
The website owner declines any liability for any management of personal data by third parties or for the management of any authentication credentials provided by them.
5. Legal basis of processing and obligatory/optional provision of data
The provision of data is mandatory for contractual and service-provision purposes, and for the discharge of legal duties, since the processing concerned is directly instrumental to the management of the contractual relationship between the parties, the provision of the requested service, and compliance with the law. In their absence, there may be no commercial relationship with the data subject and Unigrà cannot guarantee the registration to the website or the services provided by it.
The provision of data for marketing purposes is entirely optional, since this processing is based on the consent of users, who may therefore decide not to provide any data or to withdraw consent thereafter. In this case, they will not be able to receive any communications about our events, products and services, but they will continue to be entitled to registration on the website and the services offered by it.
No prior consent is required for the activities of providing sales information based on the legitimate interest of Unigrà to send users/customers communications via e-mail regarding types of services and/or products similar to those previously purchased by them, with the intent to maintain and develop their business activities; however, the receipt of these communications may be terminated easily and at any time by using the link at the bottom of each of the emails received for this purpose.
Every provision and processing of data for purposes related to personalized sales information (profiling) is based on a specific prior consent of the user, who may, therefore, decide not to confer any data or subsequently withdraw his consent to such processing.
6. Modalities of data processing and storage
Personal data provided to Unigrà will be processed in accordance with national and European regulations, including any measures issued by the Italian Supervisory Authority (Autorità Garante per la Protezione dei Dati Personali) where applicable.
Data processing operations will be carried out both manually and electronically and will protect confidentiality through appropriate technical and organizational security measures.
Personal data are stored only for as long as strictly necessary to achieve the purposes for which they have been collected. Unigrà will keep website services authentication credentials active until the user decides to delete their account.
The data necessary to allow the performance of the contractual relationship may be retained even after the termination of the commercial relationship, specifically in so far as it may be necessary in order to protect the interests of the Company from possible contractual liability. At the end of this period the data will be deleted.
In order to comply with legal requirements, the data may be stored for longer periods in accordance with applicable legislation.
Personal data processed for marketing, sales information and/or profiling purposes will be kept by Unigrà until the withdrawal of the consent given or the communication of objection to such processing. Once your consent has been withdrawn, Unigrà will no longer use your personal data for these purposes, but may, if necessary, retain it when used in different processing.
7. Recipients, disclosure and dissemination of data
Your personal data will be processed by personnel who have been trained by Unigrà and to whom the specific role of data manager or processor has been assigned and appropriate instructions are given, and who have bound themselves to confidentiality.
To ensure the proper performance of all activities connected or instrumental to the provision of its services, Unigrà may, where necessary, disclose the personal data of users to other companies of the own Group.
Personal data may be disclosed to third parties with whom Unigrà has ongoing contractual relations concerning services instrumental to the performance of its activities (such as, for instance, carriers for the delivery of products, auditors, insurers, certification bodies and consultancies specialising in law, tax, customs, finance, environmental issues, security etc.).
Without prejudice to the foregoing and without prejudice to disclosures made in compliance with legal duties, personal data will not be disclosed to third parties or otherwise disclosed.
The data will be processed by Unigrà within the territory of the European Union and the European Economic Area. If for technical, organisational and/or operational reasons it is necessary to use entities located outside the European Union or the European Economic Area, Unigrà will ensure that the processing of data by these persons is carried out in compliance with applicable legislation, in accordance with the provisions of articles 13 and 45 et seq. of the UE General Data Protection Regulation No. 2016/679.
8. Rights of data subjects
The persons to whom the personal data refer have the right at any time to ask Unigrà, pursuant to articles 15 et seq. of the UE General Data Protection Regulation No. 2016/679, for:
Withdraw consent for marketing and profiling purposes and object to processing for the purpose of sales information on similar products: data subjects may withdraw from or have the sending of sales information terminated at any time by writing to the e-mail address below or, in the case of communications received by means of computer systems, by following the procedure set out at the bottom of the communication.
Furthermore, data subjects are informed that they have the right to lodge a complaint with the Italian Supervisory Authority (Autorità Garante per la Protezione dei Dati Personali) in the event they believe that their rights have been infringed by the Data Controller and/or a third party.
To exercise the above rights or to obtain further information, you may send a written request, writing in the subject line “Privacy — Exercise of privacy rights”, to the following e-mail address: firstname.lastname@example.org.
9. Data Controller and Data Processors
The Data Controller is UNIGRA’ S.r.l., with registered office in Via Gardizza n. 9/b, 48017 Conselice (RA). As Data Controller, it has identified and appointed a group of data processors, an updated list of whom is available upon request by writing to: email@example.com.