Source: https://www.hydor.com/en/privacy-sito-web/
Timestamp: 2020-02-24 16:54:52
Document Index: 92199268

Matched Legal Cases: ['art. 13', 'art. 24', 'art. 28', 'art. 29', 'art. 13', 'art. 8', 'art. 13', 'art. 13', 'art. 22', 'art. 6', 'art. 13', 'art. 6', 'art. 6', 'art. 6', 'art. 130', 'art. 6', 'art. 7', 'art. 130', 'art. 6', 'art. 21', 'art. 6', 'art. 6', 'art. 21', 'art. 7', 'art. 6', 'art. 6', 'art. 6', 'art. 13', 'art. 13', 'art. 13', 'art. 15', 'art. 16', 'art. 18', 'art. 21', 'art. 20', 'art. 17', 'art. 7', 'art. 77']

Website Privacy Policy - Hydor
INFORMATION REGARDING THE PROTECTION OF PERSONAL DATA IN RELATION TO THE WEBSITE WWW.HYDOR.COM
art. 13 (EU) REG 2016/679
WEBSITE POLICY MOD. 1 – SEPTEMBER 3, 2019
For any request/information or to exercise the rights set forth in this Policy, please contact info@hydor.com. Please specify “Website Privacy Request – Hydor.com” in the subject of the communication.
“GDPR” GENERAL INFORMATION
DATA CONTROLLER art. 24 EU GDPR
The Data Controller (or “Controller”) shall mean a natural or legal person, public authority, agency or any other body which alone or jointly with others of personal data. Moreover, the Controller is in charge of security profiles. In relation to the processing of personal data of the data subject, the Data Controller is HYDOR S.R.L. with registered office in Via Voiron 27 – 36061 Bassano del Grappa (VI) – Italy, VAT number 03404000246. For additional information, or to exercise your rights as the data subject, please contact us via the above-mentioned addresses.
DATA PROCESSOR art. 28 EU GDPR
The Data Processor is a natural or legal person, public authority, office or any other body, which processes the data subject’s personal data of the Data Controller. With regard to the processing of the data subject’s personal data, the Data Controller may, if needed, appoint the following as external Data Processors:
– the Company that manages the website and corporate marketing, which may process certain data relating to the users of this website if this is necessary for performing its duties or
– its own IT company, which may process the data subject’s information for the purposes of assistance, maintenance, updating and management of systems; or
– the company that provides the navigation space (Hosting).
PERSONS IN CHARGE/AUTHORIZED art. 29 EU GDPR
With regard to persons tasked with data processing, namely the natural persons who process the data under the authority and direction of the Data Controller, the Data Controller shall – where strictly necessary – officially appoint them as (e.g. employees or external parties) and shall instruct them to carefully and lawfully process the data subject’s information. For any further information relating to the persons in charge of data processing, their appointment or instructions for them to properly process the data subject’s information, please contact the above-mentioned addresses.
COMMUNICATION TO OTHER SUBJECTS art. 13 para. 2 letter e) of the GDPR
DATA FROM CHILDREN UNDER 14 YEARS OF AGE art. 8 of the EU GDPR
PROCESSING CARRIED OUT THROUGH THIS WEBSITE WITH REGARD TO USERS
To allow navigation on the website:
PURPOSES OF PROCESSING art. 13 para. 1 letter c) of the GDPR
For what reason(s)/purpose(s) does the Data Controller process the data of the data subject?
LEGAL BASIS OF THE TREATMENT art. 13 para. 1 letter c) of the GDPR
What justifies such processing?
Depending on the case, the legal basis may be consent pursuant to art. 22 of the GDPR (see Cookie Policy) or legal obligations and/or legitimate interests of third parties (art. 6 para. 1 letters c) and f) of the GDPR).
PERSONAL DATA RETENTION PERIOD art. 13 para. 2 letter a) of the GDPR
How long will the Data Controller keep the data of the data subject? This Data Controller does not retain any data potentially provided by navigation only.
In order to comply with legislative obligations:
The data provided by the data subject will be used for the fulfilment of legislative obligations (e.g. fiscal and/or accounting) under national, European or supranational law.
The legal basis for such data processing is the fulfilment of a legal obligation to which the Data Controller is subject (art. 6 para. 1 letter c) of the GDPR).
How long will the Data Controller keep the data of the data subject? The storage period depends on the rule applied by the Data Controller at the time of processing.
For the purposes of establishing, exercising or defending rights:
The data provided by the data subject shall also be processed, if necessary, for the purposes of ascertaining, exercising or defending the rights of the Data Controller in court.
The legitimate interest of the Data Controller legitimises this processing (article 6 para. 1 letter f) of the GDPR). In fact, if a dispute or litigation were to arise between the data subject and the Data Controller, the latter would be entitled to process the data of the data subject in order to put forward his reasons.
How long will the Data Controller keep the data of the data subject?
The Data Controller shall keep the data of the data subject for this purpose only if there is a reasonable likelihood that he will have to take legal action.
For the processing of requests for information (“Contact us for more information” form):
By filling in certain forms, the user provides his/her own personal data, which will be processed by this Data Controller to verify requests for information from the data subject (requests generally relating to the type of activity carried out by the company, quotes, or other activities relating to the scope of work of the Data Controller).
The legal basis is the implementation of pre-contractual measures taken at the request of the data subject (art. 6 para. 1 letter b) GDPR).
The Data Controller immediately informs the data subject that – in the event of the conclusion of the contract – the company will keep the data for a maximum period of 10 years from the termination of the contractual relationship, for reasons of legal, fiscal and accounting protection to which the Data Controller is subject by law.
For the sending of advertising communications (so called Direct marketing):
The information provided below will apply whenever the user is required, while browsing this website, to provide his/her data and consent for the receipt of advertising material or commercial communications, offers and promotions, direct sales, or for carrying out market research or opinion polling (hereinafter referred to collectively as “direct marketing”.
The legal basis consists:
1) in the consent (optional) ex art. 6 para. 1 letter a) of the GDPR of the data subject;
2) in art. 130, paragraph 4 of the new Privacy Code, but only in the case of processing via e-mail and for sending communications relating to services similar to those already “sold” to the customer;
3) in the legitimate interest ex art. 6 para. 1 letter f) (in conjunction with Recital 47 of the GDPR) where the data subject expects such processing from the Data Controller and this does not adversely affect his rights and freedoms.
4) in the case of processing of communications with a telephone operator, such processing is precluded in respect of the data subject who is registered in the Opposition Register.
1) In the case of consent, the data will be retained for this purpose until the consent referred to in art. 7 of the GDPR is revoked. Revocation of consent shall not affect the lawfulness of processing based on consent prior to revocation;
2) – 3) instead, in the case of processing carried out pursuant to art. 130 paragraph 4 of the new Privacy Code and art. 6 par. 1 letter f) the data will be kept for this purpose until the data subject objects to the to the data processing pursuant to art. 21 of the GDPR, which must be asserted from the start of the processing or during the course of its continuation.
To send out newsletters (information/updates):
The following information will be applied whenever, in the course of browsing this website, the user is asked to provide his data and consent to receive information and updates on the area of competence of the company (hereinafter referred to as the “Newsletter”).
The purpose of the processing is to send information and updating communications to the applicant.
1) in the provision of a service adopted and performed at the request of the data subject (art. 6 para. 1 letter b) of the GDPR);
2) in the consent (optional) ex art. 6 para. 1 letter a) of the GDPR of the data subject;
The data will be kept for the purpose of sending newsletters until the data subject decides to object to the receipt of such communications (art. 21 of the GDPR). In the case of prior consent, the data will be kept for this purpose until the revocation of consent pursuant to art. 7 of the GDPR. Revocation of consent shall not affect the lawfulness of processing based on consent prior to revocation.
Implementing pre-contractual measures taken at the request of the data subject (art. 6 para. 1 letter. b) of the GDPR), like requests for information about the business and services provided by the Data Controller; consent provided by the user (art. 6 letter. a) of the GDPR), (who by contacting the Data Controller will expressly declare this; or the legitimate interest of the Data Controller constitute the legal basis for processing (art. 6 para. 1 letter. f) of the GDPR).
MEANS OF PROCESSING art. 13 of the GDPR
With which systems does the Data Controller carry out such processing?
Processing carried out exclusively by means of computer systems.
OBLIGATORY NATURE OF THE PROVISION art. 13 para. 2 letter e)
Is the data subject obliged to provide his/her data to the Data Controller? Consequences in case of failure to provide.
The system depends on legal obligations; in fact, it is sometimes the legislative framework that provides for the way in which processing is carried out (see, for example, on electronic invoicing).
Processing carried out by means of computer systems (e.g. with the use of email, certified email, telematic platform, management systems, other) and paper systems (e.g. with the drafting of judicial documents, warnings, printing of documents, paper mail, other). Sometimes, the system depends on legal obligations (see PCT).
Failure to provide data does not allow the user to receive information on the activities carried out by the Data Controller or quotes or other information relating to.
For the sending of advertising communications (so-called Direct marketing) and for sending out Newsletters:
Communications concerning “Direct Marketing” or “Newsletters” are carried out through “automated” systems (such as, for example, by email, fax, text message, telephone calls without the aid of an operator, social networks, interactive applications, push notifications) and through “traditional” systems (such as, for example, by paper mail and/or calls with an operator). It should be noted that the consent collected for performing processing with “automated systems” legitimises the Data Controller to use the same data for the execution of communication through the “traditional systems”. In any case, the data subject has the right to oppose any form of unwanted processing (for example, expressing his willingness to receive only communications by email).
In the event of failure to provide data to receive communications on “direct marketing” or news and updates on the field of competence of the Data Controller, the data subject may not receive more information on the activities and services that the Data Controller carries out.
DISCLOSURE AND TRANSFER OF DATA IN COUNTRIES NOT BELONGING TO THE EUROPEAN UNION OR TO INTERNATIONAL ORGANIZATIONS
art. 13 para. 1 letter f).
The Data Controller does not disclose the person concerned data but could transfer the data to countries outside the EU. In the case of transfers, the Data Controller guarantees the application of the rules referred to in articles 44 and following of the GDPR. For any information, contact the email address already reported.
What are the rights of the data subject who has given his or her data to the data controller?
– the right of the data subject to request access to his/her personal data from the Data Controller (art. 15 EU GDPR);
– the right of rectification, i.e. the right to modify data if it changes (art. 16 EU GDPR);
– the right to restrict processing of his/her data, i.e. to limit the use of data by the Data Controller (art. 18 EU REG.);
– the right to object to data processing on legitimate grounds (art. 21 GDPR);
– the right to data portability, i.e. the right to obtain a copy of all personal information processed by the Data Controller in a structured and machine-readable format (art. 20 EU GDPR);
– the right to ask the Data Controller to erase their data (art. 17 EU GDPR);
– the right to withdraw, at any time, the express consent previously granted, without prejudice to the lawfulness of the data processing carried out until that point (art. 7 – 13 EU GDPR);
– the right to lodge a complaint with the Italian Data Protection Authority if privacy regulations are breached (art. 77 EU GDPR).
Requests, made without a formal procedure, may be sent to the Data Controller at the following address: info@hydor.com
For any request/information or to exercise the rights set forth in this Policy, please contact info@hydor.com.
Please specify “Website Privacy Request – Hydor.com” in the subject of the communication.
The “PERSONAL DATA PROTECTION POLICY OF THE WEBSITE” forms an integral part of the following “COOKIE POLICY”, including the rights that a user may exercise by contacting the above-mentioned addresses.
II. HOW TO SELECT AND/OR DISABLE COOKIES
III. COOKIES USED ON THIS WEBSITE.
First-party technical and profiling cookies
Domain: www.hydor.com
Third-party profiling and technical cookies
1) by clickinghttp://www.youronlinechoices.com/it/, you can access more detailed information about third-party cookies, the concept of behavioural advertising and the promotional and targeting cookies that may be stored on your computer/device. The user may disable all or some of these cookies by clicking the following link:http://www.youronlinechoices.com/it/le-tue-scelte or
This website uses “Google Analytics” to install analytical technical cookies that allow the website owner to obtain statistical data regarding web navigation and to improve services offered to its users. The website owner has adopted appropriate tools to decrease the identifying power of the analytical cookies used, by masking significant portions of the IP address. The data generated by Google Analytics is stored in accordance with the terms specified by the privacy policy located at the following address: https://support.google.com/analytics/answer/2838718
Google Inc.’s privacy policy can be found at the following address: http://www.google.it/intl/it/policies/privacy/
You may disable Google Analytics by installing the opt-out add-on on your browser supplied at the following address: https://tools.google.com/dlpage/gaoptout
domain: hydor.com
For more information about this service or to disable the relevant cookies, please refer to Google’s privacy policy, accessible via the following address:
List of profiling cookies installed as a result of using the Map: