PRIVACY POLICY

 

This Privacy Policy is intended to describe the management methods of the site currently available at www.ivyoxford1959.it with reference to the processing of personal data of users / visitors who consult it.

This is an information that is also made pursuant to art. 13 of Regulation (EU) 2016/679 (hereinafter also "General Regulation for the Protection of Personal Data" or "RGPD") to those who access the aforementioned site.

The above site is owned by TANTAROBA srl (Vat Number 10929970969) with registered office in Via Emilio Visconti Venosta 4. 20122 Milano.

Users / visitors are invited to carefully read this Privacy Policy before providing any type of personal information and / or filling in any electronic form on the site itself.

 

Index:

1. Data controller.

2. Type of data processed, purpose and legal basis of the processing.

3. Recipients of personal data.

4. Transfer of data to third countries.

5. Processing methods and data retention period.

6. Rights of the interested party.

7. Communication and provision of data.

8. Update and modification of the Privacy Policy.

 

1. Data controller.

The Data Controller is TANTAROBA srl (Vat Number 10929970969) with registered office in Via Emilio Visconti Venosta 4. 20122 Milano.

 

2. Type of data processed, purpose and legal basis of the processing.

2.1. Navigation data.

During normal operation, the IT systems and software procedures used to operate this site acquire some personal data which are then implicitly transmitted in the use of Internet communication protocols.

This is information that by its nature could, through associations and processing with data held by third parties, allow users / visitors to be identified (e.g. IP address, domain names of the computers used by users / visitors who connect to the site, etc.).

These data are used for the sole purpose of obtaining statistical information (therefore they are anonymous) and to check the correct functioning of the site.

2.2. Data provided voluntarily by users / visitors.

If users / visitors connecting to this site send their personal data to access certain services, these data will be processed by the Data Controller for the following purposes:

to. To respond to the request sent, or for the provision of the service in accordance with this Policy and the specific Privacy information provided during the subscription to the individual services;

b. Only with prior consent, to send you promotional and marketing communications regarding services and products; commercial and promotional information may be conveyed through traditional means (ordinary mail), or through automated systems (mail, sms, apps, etc), or through social networks.

 

3. Recipients of personal data.

No data deriving from the web service will be communicated or disclosed to third parties, except to fulfill the obligations established by laws, regulations or community regulations.

 

4. Transfer of data to third countries.

As part of the purposes indicated in art. 3 of this information, your personal data will not be communicated / transferred to third parties established in countries not belonging to the European Union.

 

5. Processing methods and data retention period.

The data processing is carried out by personnel authorized by the data controller through automated tools (e.g. using electronic procedures and supports and company databases) and / or manually (e.g. on paper) for the time strictly necessary to achieve the purposes for which the data were collected and, in any case, in compliance with the current regulatory provisions on the matter.

Personal data will be kept for the period of time strictly necessary to pursue the specific purposes of the processing and, in particular:

- for the data indicated in art. 2.1., For the time necessary to carry out the specified activities, except for any investigations of computer crimes against the site;

- for the data indicated in art. 2.2.a), for the time necessary to perform the requested services or reply to requests made, except for any ascertainments of crimes.

- for the data indicated in art. 2.2.b), no later than 24 months from the time of consent.

 

6. Rights of the interested party.

Users / visitors can at any time exercise the rights provided by the articles. 15-22 of the G.D.P.R., as indicated below.

to. Access to personal data: obtain confirmation whether or not processing of data concerning them is in progress and, in this case, access to the following information: the purposes, the categories of data, the recipients, the retention period, the right to lodge a complaint with a supervisory authority, the right to request the rectification or cancellation or limitation of the treatment or opposition to the treatment itself as well as the existence of an automated decision-making process;

b. Request for rectification or cancellation of the same or limitation of the treatments that concern them; "limitation" means the marking of data stored with the aim of limiting its processing in the future;

c. Opposition to processing: to oppose for reasons connected with the particular situation to the processing of data for the execution of a task in the public interest or for the pursuit of a legitimate interest of the Owner;

d. Data portability: in the case of automated processing carried out on the basis of consent or in execution of a contract, to receive the data concerning them in a structured format, commonly used and readable by an automatic device; in particular, the data will be provided by the Data Controller in .xml format, or similar;

is. Revocation of consent to the processing for marketing purposes, both direct and indirect, market research and profiling; the exercise of this right does not in any way affect the lawfulness of the processing carried out before the revocation;

f. Propose a complaint pursuant to art. 77 GDPR to the Guarantor Authority for the protection of personal data, which can be contacted through the contact details reported on the website http://www.garanteprivacy.it.

The aforementioned rights may be exercised by sending a specific request to the Data Controller through the contact channels indicated in art. 1 of this information.

Requests relating to the exercise of rights will be processed without undue delay.

 

7. Communication and provision of data.

Except as specified for the data referred to in art. 2.1 (navigation data, whose failure to contribute coincides with the failure to browse the website), users / visitors are free to provide their personal data and their failure to provide it may only make it impossible to obtain the requested service.

 

8. Update and modification of the Privacy Policy.

This Privacy Policy may undergo changes over time - also related to the eventual entry into force of new sector regulations, to the updating or provision of new services or to technological innovations - for which the user / visitor is invited to periodically consult this page.