POLICY FOR THE PROCESSING OF PERSONAL DATA (Regulation EU 2016/679)

Last updated on: 30/12/2022

The security and protection of personal data is fundamental for ITS Controlli Tecnici S.p.A. (hereinafter “ITS”), which guarantees observance of these principles in the carrying out of all company activities and processes. All processing operations are carried out in respect of regulations applicable with regards to the protection of personal data and in particular those contained in Regulation EU 2016/679 (hereinafter known as “GDPR”), as well as the obligations of confidentiality which characterise the activities of ITS.
This policy intents to inform the users, who use ITS website, accessible telematically about the processing of the personal data, as well as the scope of their communication and dissemination.

The policy refers solely to the ITS website and not to other external websites which may be consulted by users via links.
Before navigating or providing us with your personal data, we invite you to read this policy, as well as any other policies which may be provided in specific reserved sections of the website.

Data controller
ITS Controlli Tecnici S.p.A. (hereinafter "ITS")
Registered & Operating Office: Via di Torre Rossa 66 – 00165 Rome
Phone: +39 06881791
Email: itscontrollitecnici@itscontrollitecnici.it
Certified email: itscontrollitecnici@legalmail.it

Legal basis of the processing
This website mainly processes data according to user consent. The granting of consent takes place via the banner located at the foot of the page, or via the use or consultation of the website. By using or consulting the website, the users approve this privacy policy and allow the processing of their personal data regarding the modalities and purposes described below. Furthermore, via the “Contacts” section, further data is collected exclusively in order to fulfil the requests made by the users.

Type of data processed and purposes of processing
Data collected automatically

The computer systems and the software used for the operating of this website, as part of their standard function, acquire personal data from users which is implicit in the use of internet communication protocols.
This category of data includes: IP addresses or the domain names of computers and terminals used by the users, addresses in URI/URL (Uniform Resource Identifier/Locator) notation for the requested resources, the time of the request, the method used to make the request to the server, the size of the file received in response, the numerical code indicating the status of the response provided by the server (successful, error, etc.), and other parameters relative to the operating system and the user’s computing environment.
This data, which are necessary in order to use the web services, are processed in order to

• obtain anonymous statistical information regarding the use of services (most visited pages, number of visitors per time period or per day, geographical area of origin, etc.);
• control the correct functioning of the services offered.

Navigation data is not held for longer than seven days and are cancelled immediately following aggregation (save for the necessity of investigation into crimes by Judicial Authorities).

Data provided voluntarily by the user.
The optional, explicit and voluntary sending of email to the contact addresses for the data controller indicated on this website leads to the subsequent acquisition of the sender’s email address, which is necessary for responding to requests, as well as any other personal data included in the communication.

Cookies.
Please refer to the “Cookies Policy” for information regarding the management of cookies.

The optional nature of the provision of data
With the exception of that specified for navigation data, the provision of data and the granting of consent for the collection and processing of data is optional. Users may deny consent or revoke previously granted consent at any time (via the browser settings regarding cookies, or the Contact link). However, the denial of consent may lead to the impossibility of obtaining that requested, and the compromising of the experience of navigation on the website.

Duration of storage of data
Without prejudice to that indicated for navigation data, the personal data belonging to users collected from the website during use will be held solely for the time strictly necessary in order to carry out the activities described above. On completion, the data will be cancelled or rendered anonymous, unless further requirements exist for the conservation of the same.

Data recipients or categories of recipients
The personal data of the users are not communicated to third parties or distributed.
The aforementioned personal data is processed by ITS technical personnel who have been specially authorised and trained on the basis of specific instructions concerning the objectives and modalities of processing, or by persons authorised to carry out occasional maintenance operations.

Rights of Data subjects
The data subjects have the right to contact ITS in any moment in order to obtain full transparency regarding operations and in order to exercise their rights pursuant to articles 15 and onwards of the GDPR. In particular, they have the right, at any time, according to the modalities and within the limits set out by the aforementioned regulation, to exercise:

• The right to access: request can be made for information regarding processing operations carried out by ITS or the confirmation that processing of personal data is or is not under way;
• The right to rectification: request can be made for the correction of incorrect and/or incomplete data held by ITS and supplied, for example, during registration or to use specific services rendered available via the website
• The right to erasure: request can be made for the cancellation of data provided.
• The right to restriction: request can be made to limit the processing of data provided in the event that legal requirements apply.
• The right to portability: request can be made to receive personal data in a structured format of common use and readable with an automatic device, which can be transmitted to another subject.
• The right to lodge a complaint with the Supervisory authority: without prejudice to all other administrative or legal measures, data subjects have the right to lodge a complaint with the Data Protection Authority for the protection of personal data in the case in which they feel that our processing violates the regulations regarding the protection of personal data.

Furthermore, in the event that users have granted consent to the processing of personal data for specific purposes, they have the right to revoke their consent at any time, without prejudice to the lawfulness of processing based on consent granted before revocation.
Any requests made for the exercising of personal rights must be made by writing to the address privacy@itscontrollitecnici.it

Updates to this privacy policy
We hereby inform you that ITS may, at any time and without the obligation of providing advance notice, modify this policy, in order to conform to the evolution of relative regulations and/or adapt to the adoption of new internal systems or procedures, or in any case for any other reason that renders said modification opportune and/or necessary. The aforementioned modifications will be duly published on the website and binding as of publication. We therefore invite users to regularly consult this page.