Privacy Policy

Information notice on the website and the use of cookies

Please see Cookie Policy here.

This information notice was drafted and customised for visitors to the websites:

This document cancels and fully replaces the document published previously concerning cookies.

Specific summary information is given progressively or displayed on the pages of the website, referring to specific services available on request, which have a form for collection of data.

Please also note that to provide a complete service our website may contain links to other websites, which are not managed by Gruppo Romani S.p.A.. Gruppo Romani S.p.A. is not liable for any mistakes, contents, cookies, publication of unlawful moral contents, advertising, banners or files that do not comply with the provisions of the laws in force or the Privacy Act by websites that are not managed by the Data Controller.

Persons concerned: users of the websites

Gruppo Romani S.p.A. , in its capacity as Data Controller concerning your personal information, pursuant to and in accordance with GDPR 2016/679 on art. 13 and 14, hereby informs you that the above law concerns the protection of persons and other subjects concerning the processing of personal data and that such processing shall be done in accordance with the principles of correctness, honesty, transparency and the protection of your confidentiality and rights.

The information and personal data you provide or which is in any other way acquired when using the website shall be processed in compliance with the legislative provisions of the above-mentioned laws and the confidentiality obligations imposed therein.

Types of data processed

a) Navigation data

Computer systems and software procedures used on this website acquire, during their normal operation, some personal data whose transmission is implicit in use of Internet communication protocols.

This information is not collected to be associated with identified data subjects, but by their nature, could, through processing and association with data held by third parties, identify users. This category includes IP addresses, or domain names used by users who connect to the site, URI (Uniform Resource Identifier) of requested resources, time of request, the method used to submit the request to the server, the file size obtained, etc. These data are used to obtain web anonymous or aggregate statistics and to check the correct operations. These data are permanently located on third party servers (hosting). The data could be used to verify responsibility in case of hypothetical crimes against the website.

b) Cookies

The websites use cookies to help users to customize their experience, faster navigation, improve safety, analyze the use and efficiency of the services and offer commercial information. Users can view the Cookie Policy, containing all expression and negation of consent.

Purposes of the processing: The data collected during navigation are processed for the following purposes:

Performance of operations strictly linked and instrumental to the management of relations with users and visitors to the website;
Collection, storage and processing of data for ·statistical analyses, also in anonymous and/or aggregated form and sharing with social network.

Data processing to fulfil the purposes listed in point 1 is necessary and any non-provision or incorrect provision of any information may limit and/or impede the full use of the functions and services available on the website.

The provision of data indicated in purpose 2 is optional, and your refusal for processing shall not compromise the functions and services available on the website. Concerning the optional provision of data, more information concerning the cookies present on the website can be found in the document Cookie Policy.

Personal data provided voluntarily by the user: the optional, explicit and voluntary sending of e-mails to the addresses indicated in this website or the filling in of any forms present implies the subsequent acquisition of the sender’s personal data (including, but not limited to: name, surname, e-mail address). Specific disclaimers/statement are provided where forms are available.

Processing methods: personal data are processed using manual, electronic and automated systems, and also using cookies strictly for the time required to achieve the purposes for which they were collected. All data are processed in compliance with the methods indicated in GDPR 2016/679, adopting security measures as indicated on art. 6 and 32.

Data are processed for web services at the server located at an external provider (please contact the Data Controller for the name), and are kept at the places where the servers are physically located.

Communication: your data are processed in the company by authorized and appointed subjects designated by the Data Controller:

ICT
Sales
Marketing
Human Resources

Your data may be notified to third parties, in particular to:

External Provider
Companies performing ordinary and extraordinary maintenance of the websites
Companies that provide services related to third-party cookies.

Dissemination: Your data will not be publicly disclosed.

Third parties: Your data are collected also using instruments and services provided by third parties and are kept by them. The types of cookies indicated in the cookie policy have been set in order to reduce the power of the identifier cookie and have been disabled the functions that allow the intersection of information by third part. For more information, please refer to the Cookie Policy.

Data Controller: Data Controller is Gruppo Romani S.p.A.. Data Controller has designed interim data processor (name available writing to privacy@grupporomani.com).

The Data Controller has appointed a Data Protection Officer (“DPO”) pursuant to Art. 37, whom you can contact by writing to: dpo@grupporomanispa.it.

You may at any time access your personal data, verify their content, accuracy, ask for their integration, update, amendment, deletion, block for breach of laws, oppose the processing for legitimate reasons. To enforce your privacy rights you may contact the Data Controller or Data Processor of personal data, available at our registered offices as above identified or by e-mail: privacy@grupporomanispa.com.

APPLICATION OF THIS INFORMATION NOTICE
If you have any questions regarding this information notice, please contact Gruppo Romani S.p.A. in the first instance by sending an e-mail to privacy@grupporomanispa.com.

MODIFICATIONS TO THIS INFORMATION NOTICE

Gruppo Romani S.p.A. reserves the right to update this information notice in order to adapt it to the aforementioned law, keeping in due consideration the suggestions provided by employees, customers, collaborators and users. At the end of this document you can see the modification date.

GDPR 2016/679: Art. 15, 16, 17, 18, 19, 20, 21, 22

A data subject shall have the right to obtain confirmation as to whether or not personal data concerning him exist, regardless of their being already recorded, and communication of such data in intelligible form.

A data subject shall have the right to be informed :

of the source of the personal data;
of the purposes and methods of the processing;
of the logic applied to the processing, if the latter is carried out with the help of electronic means;
of the identification data concerning data controller, data processors and the representative designated as per Section 5(2);
of the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative(s) in the State’s territory, data processor(s) or person(s) in charge of the processing.

A data subject shall have the following rights:

to obtain updating, rectification or, where interested therein, integration of the data;
to obtain erasure, anonymization or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;
to obtain certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.

A data subject shall have the right to object, in whole or in part:

on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;
to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.

Last update: 16/11/2018