Pursuant to article 13 of the EU Regulation 2016/679 (“GDPR”), this Privacy Notice describes the ways in which SLCG processes users’ personal data.
The information is provided only for the website www.slcg.it (the “Website”) and not for any other websites that may be consulted by the user through links on the Website. Personal data will be processed in accordance with the GDPR and the relevant European and national laws (“Privacy Laws”).
DATA CONTROLLER
The Data Controller is SLCG, with registered office in Milan, Foro Buonaparte 20, 20121.
The Personal Data is stored at the headquarters of SLCG and is managed only by SLCG employees, associates, partners and people appointed by SLCG for Website maintenance.
For any questions or information concerning the data processing, please send an e-mail to fboffa@slcg.it.
PROCESSED DATA
SLCG processes Personal Data communicated by the user or legitimately obtained through the Website for the purposes indicated below. In particular, the following Personal Data is processed:
Navigation data
The IT and telematic systems and the software procedures used to operate the Website acquire, during their normal operation, some data (eg the date and time of access, the pages visited, the name of the Internet Service Provider and the Internet Protocol (IP) address through which you access the Internet, the Internet address from which you connected to our Website, etc.), the transmission of which is implicit in the use of web communication or is useful for better management and optimization of the data and e-mail sending system.
This category includes (i) the IP addresses or domain names of the computers used by users who connect to the Website, (ii) the URI (Uniform Resource Identifier) notation addresses of the requested resources, (iii) the time of the request, (iv) the method used to submit the request to the server, (v) the size of the file obtained in response, (vi) the numerical code indicating the status of the response given by the server (successful, error) and (vii) other parameters relating to the operating system and the user’s IT environment.
Failure to provide navigation data could make it impossible to use the Website.
Data provided by the user
Personal data is data the user directly provides, such as name, e-mail address or the content of the message sent by the user in the event they contact SLCG by sending a message to the e-mail address on the Website. This data will be transmitted to SLCG, which will process it exclusively to provide users with feedback to the communications received or requests made by them.
Cookies
Cookies are data created by a server and stored in text files on the hard disk of your computer, they allow a website to be aware of your behaviour and your preferences.
The Website uses only technical cookies, which are essential for the correct functioning of the website and to provide the service offered and requested by a user. Technical cookies are used by the Data Controller to memorize the user’s session and to carry out other activities strictly necessary for the functioning of the same, for example in relation to the distribution of traffic.
These cookies are installed directly by the owner without the user’s prior consent. In all cases, the user can configure their browser to automatically delete cookies once the browser, computer, or mobile device is closed using the following links:
However, the user must be aware that the refusal of technical and functional cookies could lead to a decrease in the level of functionality of the Website.
STORAGE
Personal data are stored and processed for as long as necessary to fulfill the purposes for which the information was collected, or as otherwise required by law.
Specifically, the Website will retain personal data for a period of two years in order to provide the services requested by them, and in any case no longer than 10 years in those circumstances identified by law.
PROCESSING METHODS
SLCG processes personal data by adopting appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of the personal data processed.
The processing is carried out using IT and non-IT tools, with organizational methods and with logic strictly related to the purposes indicated, so that an adequate level of protection of personal data is guaranteed.
PURPOSE OF THE PROCESSING AND LEGAL BASIS OF THE PROCESSING
The Personal Data provided will be processed exclusively for the achievement of specific purposes and only in the presence of a specific legal basis provided for by the applicable law on privacy and protection of personal data. In particular, the Personal Data will be processed for the following purposes:
USER RIGHTS
Pursuant to art. 15-22 of GDPR, users can exercise specific rights regarding the Personal Data SLCG processes, precisely:
Right of access: right to obtain confirmation from SLCG whether or not Personal Data is being processed and, in this case, to obtain access to it and receive further information on the processing.
Right of rectification: right to obtain from SLCG the rectification of inaccurate Personal Data without undue delay, as well as the integration of incomplete Personal Data, also by providing a supplementary declaration.
Right to cancellation: right to obtain the cancellation of Personal Data without undue delay in the event that the Personal Data are no longer necessary with respect to the purposes of the processing; the consent on which the processing is based is revoked and there is no other legal basis for the processing; the Personal Data have been unlawfully processed; Personal Data must be deleted to fulfill a legal obligation.
Right to object to processing: the right to object at any time to the processing of Personal Data which have a legitimate interest of the Data Controller as their legal basis.
Right to limitation of processing: right to obtain from the Data Controller the limitation of the processing, in cases where the accuracy of the Personal Data is contested (for the period necessary for the Data Controller to verify the accuracy of such Personal Data), if the processing is illicit and / or the interested party opposed the treatment.
Right to data portability: right to receive Personal Data in a structured format, commonly used and readable by an automatic device and to transmit such data to another data controller, only for cases in which the processing is based on consent and for only data processed by electronic means, where possible.
Right to lodge a complaint with the supervisory authority: without prejudice to any other administrative or judicial appeal, if you believe that the processing that concerns you violates the privacy legislation, you have the right to lodge a complaint with the supervisory authority of the Member State in which you reside or work usually, or of the State in which the alleged violation occurred. In any case, you have the right to contact the Guarantor for the protection of Personal Data (“Garante per la protezione dei dati personali”).
In the event that the treatment is based on consent, you can revoke any consent given at any time, without prejudice to the lawfulness of the treatment performed before the revocation.