The following information is provided pursuant to art. 13 of Legislative Decree no. 196/2003 – Personal Data Protection Code to those who interact with the web services of this site accessible electronically from the address: www.sanbernardocalci.it

The information is provided only for the site www.sanbernardocalci.it and not also for other websites that may be consulted by the user via links. The information is also inspired by Recommendation no. 2/2001 that the European authorities for the protection of personal data, gathered in the Group established by art. 29 of directive no. 95/46/CE, adopted on 17 May 2001 to identify some minimum requirements for the collection of personal data online, and, in particular, the methods, times and nature of the information that data controllers must provide to users when they connect to web pages, regardless of the purposes of the connection.

The “Owner” of the treatment

Following consultation of this site, data relating to identified or identifiable persons may be processed. The “owner” of their processing is S.BERNARDO SRLS, Località San Bernardo Snc, 56011 Calci (PI) ITALIA.

Place of data processing

The processing connected to the web services of this site takes place at the aforementioned headquarters and is handled exclusively by the Data Controller. The processing connected to navigation data takes place at the hosting servers, under the responsibility of the bandwidth and domain providers. The data will not be disseminated or communicated to any third party except for ordinary business management supported by external suppliers (accountants, banks, etc.) in compliance with confidentiality and only if it is not possible to manage the same data internally or anonymously.

Purpose of processing

The Data will be processed by the Owner for the following purposes: in relation to the purposes expressed by the messages received, such as, by way of example, to respond to any questions, to provide estimates, to send information on professional activity, commercial offers and for marketing activities.

Types of data processed

Browsing data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by users who connect to the site, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's computer environment. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and is deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site: except for this eventuality, at present the data on web contacts do not persist for more than 30 days.

Data provided voluntarily by the user

the optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the message.

Cookies

No personal data of users is acquired by the site in this regard. Cookies are not used to transmit information of a personal nature, nor are persistent cookies of any kind used, or systems for tracking users. The use of session cookies (which are not stored persistently on the user's computer and disappear when the browser is closed) is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to allow safe and efficient exploration of the site. The session cookies used on this site avoid the use of other IT techniques potentially prejudicial to the confidentiality of users' navigation and do not allow the acquisition of personal data identifying the user.

Optional data processing

Apart from what is specified for navigation data, the user is free to provide personal data in the request forms. Failure to provide them may make it impossible to obtain what is requested.

Data controller

The data controller at S.BERNARDO SRLS is Mrs. Eva Poli.

Treatment methods

The Data will be processed by the Owner in paper form or with the aid of electronic tools and with logical procedures aimed at optimizing the processing in compliance with the security measures provided for by the Privacy Code. In particular, the data provided by the interested party will be stored on a database available on a local computer at the headquarters of S.BERNARDO SRLS

Rights of interested parties

The subjects to whom the personal data refer have the right at any time to obtain confirmation of the existence or otherwise of the same data and to know their content and origin, verify their accuracy or request their integration or updating, or rectification (see art. 7 of Legislative Decree no. 196/2003). Pursuant to the same article, you have the right to request the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, as well as to oppose in any case, for legitimate reasons, their processing. Requests should be addressed to Ms. Eva Poli, at S.BERNARDO SRLS, Località San Bernardo Snc, 56011 Calci (PI) ITALY.

LEGISLATIVE DECREE 06.30.2003 N.196
TITLE II RIGHTS OF THE INTERESTED PARTY ARTICLE 7
(RIGHT OF ACCESS TO PERSONAL DATA AND OTHER RIGHTS)

  1. The interested party has the right to obtain confirmation of the existence or otherwise of personal data concerning him, even if not yet registered, and their communication in an intelligible form.
  2. The interested party has the right to obtain the indication:
    a) the origin of the personal data;
    b) the purposes and methods of processing;
    c) the logic applied in case of processing carried out with the aid of electronic instruments;
    d) the identifying details of the owner, the managers and the designated representative pursuant to Article 5, paragraph 2;
    e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them in their capacity as designated representative in the territory of the State, managers or persons in charge.
  3. The interested party has the right to obtain:
    a) the updating, rectification or, when there is interest, the integration of the data;
    b) the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including data whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;
    c) certification that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the case in which such fulfillment proves impossible or involves the use of means manifestly disproportionate to the right protected. 
  4. The interested party has the right to object, in whole or in part:
    a) for legitimate reasons, to the processing of personal data concerning him/her, even if pertinent to the purpose of the collection;
    b) to the processing of personal data concerning him/her for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication