Privacy

The Privacy Policy of the website www.pentaferte.com

The procedures for managing the site are described in reference to the processing of the personal data of the users who consult it.

The policy is also applicable in accordance with section 13 of Italian Legislative Decree 30 June 2003, no. 196 “Italian Personal Data Protection Code” to persons interacting with Pentaferte S.p.A. online services, accessible electronically from the address:

• http://www.pentaferte.com

This policy only applies to the Pentaferte S.p.A. site and not to any other websites which users may consult via links.

THE DATA “CONTROLLER”

The consultation of this site involves providing personal information and data.

The data “controller” is Pentaferte S.p.A., based in Nocella s.p.262 – 64012 Campli (TE).

LOCATION OF DATA PROCESSING

The processing related to the online services for this site takes place at the aforementioned site of Pentaferte S.p.A. and is dealt with only by technical personnel in charge of processing, or by personnel in charge of maintenance work.

TYPES OF DATA PROCESSED AND PURPOSE OF PROCESSING

Registration data

The information requested during registration will be used to provide access to Pentaferte S.p.A. online services.

In order to ensure that all related or instrumental activities are carried out correctly, Pentaferte S.p.A. may, where necessary, communicate the personal data of users to other companies in the Group.

Furthermore, as registration comes prior to accessing online services, personal data of customers, once the choice of service is made and after further information is given, will be processed for the purposes related and/or functional to the chosen service.

If the selected services are operated by third parties, the data will be communicated to the individual operators. These will act as “controllers” for the processing related to the provision of services under its jurisdiction.

Navigation data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols.

This information is not collected to be associated to specific individuals, but by its very nature, it could, through processing and association with data held by third parties, make it possible to identify users.

This category of data includes IP addresses or domain names of computers used by users connecting to the site, URI (Uniform Resource Identifier) of the resources required, the time of the request, the method used to submit the request to the server, the dimension of the file received in return, the numerical code indicating the state of the data response from the server (successful, error etc.) and other parameters relating to the user’s operating system and computer environment.

This data is used for the sole purpose of obtaining anonymous statistical information about site use and to check correct operation and is kept for the time defined by applicable reference legislation. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site.

COOKIES

We do not use cookies to transmit information of a personal nature, nor are so-called persistent cookies of any type, i.e. user tracing systems, used.

The use of so-called session cookies (which are not permanently stored on the user’s computer and disappear when the browser is closed) is strictly limited to transmitting session identifiers (consisting of random numbers generated by the server) necessary to enable safe and efficient exploration of the site

The so-called session cookies used on this site avoid the use of other computer technologies that could compromise the privacy of users navigation and do not allow the acquisition of the user’s personal identification data.

PROCESSING ARRANGEMENTS

Personal data will be processed by means of computer/electronic instruments and for purposes relative and/or instrumental to online services or for simple browsing on the site, as established by current Italian legislation, in particular:

• to enable the service to be supplied;
• to make it possible to exercise the applicable legal obligations.

The data will be processed by means of instruments and/or procedures designed to ensure the privacy and security of the data, according to what is defined in sections 33 et seq. of Italian Legislative Decree of 30 June 2003 no. 196.

DATA SUBJECTS’ RIGHTS

The subjects to whom the personal data refers have the right at any time to obtain confirmation as to whether or not personal data concerning them exists and to find out the content and the source, check the accuracy or ask for it to be integrated or updated, or rectified (section 7 of Italian Legislative Decree of 30 June 2003 no. 196).

Pursuant to this article, subjects have the right to obtain erasure, anonymisation or blocking of data that has been processed unlawfully as well as the right to object in all cases, on legitimate grounds, to processing.

Requests should be sent to the data controller at their headquarters.

This document represents the “Privacy Policy” of this site.

Section 7 Italian Legislative Decree 196/03 - Right of access to personal data and other rights

• The data subject has the right to obtain confirmation as to whether or not personal data concerning them exists, regardless of its being already recorded, and communication of such data in intelligible form.
• Data subjects have the right to be informed:
  1. of the source of the personal data;
  2. of the purposes and methods of the processing;
  3. of the logic applied to the processing, if the latter is carried out with the help of electronic means;
  4. of the identification data concerning the data controller, data processors and the representative designated as per Section 5(2);
  5. of the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative(s) in the State’s territory, data processor(s) or person(s) in charge of the processing.
• Data subjects have the right to obtain:
  1. updating, rectification or, where interested therein, integration of the data;
  2. erasure, anonymisation or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;
  3. certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.
• Data subjects have the right to object, in whole or in part,
  1. on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;
  2. to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.