Privacy Policy
Why this warning
This page describes how the site is managed with regard to the processing of personal data of the users who consult it.
This is a privacy policy also provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation, hereinafter the “GDPR”) to those who interact with the web services of INTERCOM s.r.l., accessible electronically from the address www.intercomonline.it, which corresponds to the home page of the official website of INTERCOM s.r.l.
This notice is provided only for the specified website and not for any other websites that the user may consult via links.
This privacy policy is also inspired by Recommendation No. 2/2001, which the European personal protection authorities, gathered in the Group established by Article 29 of Directive No. 95/46/EC, adopted on May 17, 2001, to establish minimum requirements for collecting personal data online, and, in particular, the methods, timing, and nature of the information that data controllers must provide to users when they connect to web pages, regardless of the purpose of the connection.
The data controller
Following the consultation of this site, data relating to identified or identifiable persons may be processed (Art. 4 GDPR).
The “data controller” for their processing is INTERCOM s.r.l., with registered office in Via F. Villani 2,
26900 LODI (LO), Italy and operational headquarters in Via C. Cattaneo 18/22 20064 GORGONZOLA
(MI) .
Data processing location
The processing operations connected to the web services of this site take place at the aforementioned headquarters of INTERCOM s.r.l. and are handled only by technical personnel in charge of processing, or by any persons in charge of occasional maintenance operations. No data deriving from the web service is communicated or disseminated. The personal data provided by users who forward requests for the sending of informative material (such as newsletters, etc.) are used for the sole purpose of performing the service or provision requested.
Types of data processed
Browsing data
During their normal operation, the IT systems and software procedures used to operate this website acquire certain personal data, the transmission of which is implicit in the use of Internet communication protocols.
This is information that is not collected to be associated with identified data subjects, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes IP addresses or domain names of the computers used by users who connect to the site, URI (Uniform Resource Identifier) notation addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters relating to the user's operating system and IT environment.
This data is used solely to obtain anonymous statistical information on the use of the site and to check its correct functioning, and is deleted immediately after processing. The data could be used to ascertain liability in the event of hypothetical computer crimes against the site: barring this eventuality, web contact data currently does not persist for more than seven days.
Data provided voluntarily by the user
The optional, explicit, and voluntary sending of electronic mail to the addresses indicated on this website entails the subsequent acquisition of the sender's address, which is necessary to respond to requests, as well as any other personal data included in the message.
Informative summary specifications will be progressively reported or displayed on the pages of the website set up for specific services upon request.
Cookies
No personal user data is acquired by the site for this purpose.
No use is made of cookies for the transmission of personal information, nor are so-called persistent cookies of any kind used, nor systems for tracking users.
The use of so-called session cookies (which are not stored persistently on the user's computer and disappear when the browser is closed) is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to enable the secure and efficient exploration of the site.
The session cookies used on this site avoid the use of other IT techniques that could potentially be detrimental to the confidentiality of users' browsing and do not allow the acquisition of personal data identifying the user.
Optionality of data provision
Apart from what is specified regarding navigation data, the user is free to provide the personal data stated in the request forms to INTERCOM s.r.l. or otherwise indicated in contacts to request the sending of informative material or other communications. Failure to provide such data may make it impossible to obtain what has been requested.
Processing method
Personal data is processed with automated tools for the time strictly necessary to achieve the purposes for which it was collected.
Specific security measures are observed to prevent data loss, illicit or incorrect use, and unauthorized access.
Rights of data subjects
The rights of the data subject, as defined in GDPR 679, are taken as a reference.
The data subjects to whom the personal data refer have the right to know (art. 15 GDPR)
- the purposes of the personal data in question;
- the categories of personal data in question;
- the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
- where possible, the envisaged storage period for the personal data or, if not possible, the criteria used to determine that period:
Data subjects to whom the personal data refer have the right (Articles 15, 16, 18, 17, 21, 22, 20 GDPR)
- Right of access
- Right of rectification
- Restriction of processing or blocking of data processed in violation of the law
- Deletion and oblivion
- Opposition on legitimate grounds to their processing
- Ban on automated decision-making
Notification of breaches to the Data Protection Authority
Pursuant to Articles 33 and 34 of the GDPR, whenever a security breach is detected that accidentally or unlawfully results in the destruction, loss, alteration, unauthorized disclosure of, or access to personal data, and such breach presents a high risk to the rights and freedoms of natural persons, the data controller is required to inform both the supervisory authority and the data subject (to whom the data refers) without undue delay and, where feasible, within 72 hours of becoming aware of it.
This page is accessible via a link present on all pages of the site, pursuant to Article 13 and Article 14 of Regulation (EU) GDPR 679/2016 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data; it constitutes the “Privacy Policy” of this site and will be subject to updates.
Last update: May 25, 2018