Information pursuant to EU Regulation 2016/679.
This information is provided in compliance with the provisions of EU Regulation 2016/679 and applies to parties who decide to access the Exactaoptech.com website (respectively, the “Users” and the “Site”), owned by Exacta + Optech Labcenter SpA, as well as to navigate within the same and to use the existing services, regardless of the purchase of products.
1. HOLDER, RESPONSIBLE AND RESPONSIBLE FOR THE TREATMENT
The data controller is Exacta + Optech Labcenter SpA, with registered office in Via Bosco n. 21 – 41030 San Prospero (MO) Italia – P.iva e C.f. : IT01022690364, e-mail address email@example.com; it independently decides on the purposes and methods of the processing, as well as on the security procedures to be applied to guarantee the confidentiality, integrity and availability of data.
In compliance with the provisions of the Privacy Code, Exacta + Optech Labcenter SpA may designate one or more parties as responsible for the treatment of the Privacy.
The updated list of all data controllers is available at the headquarters of Exacta + Optech Labcenter SpA; for more details please send an e-mail to the following address) firstname.lastname@example.org.
The “controllers” carry out their activities according to the instructions given by Exacta + Optech Labcenter SpA and under its control; Exacta + Optech Labcenter SpA periodically verifies that the “controllers” have performed the tasks assigned to them and that they continue to provide suitable guarantees of full compliance with the provisions on personal data protection.
It is specified, in any case, that the data processing operations of the Users are carried out by persons appointed for this purpose, who carry out these activities under the direct authority of Exacta + Optech Labcenter SpA or the controllers, following the instructions to them imparted.
2. TYPE OF DATA PROCESSED AND OPTIONALITY / OBLIGATORY OF DATA
2.1. Navigation data
The simple navigation on the Site involves the collection by Exacta + Optech Labcenter SpA of the so-called “navigation data”, the transmission of which is implicit in the use of Internet communication protocols.
These technical / IT data are collected and used exclusively in an aggregate and non-identifying manner and could be used to ascertain responsibility in the event of hypothetical IT crimes to the detriment of the site. Therefore, the “navigation data” do not allow themselves to identify the User.
2.2. Data provided voluntarily by the User
The Site offers certain services to be used for which the User is required to provide additional data, qualifiable as personal data. For example, the registration to the Site, access to restricted areas and the purchase of products and services of Exacta + Optech Labcenter SpA, are all activities that entail the conferment by the User of personal data that allow Exacta + Optech Labcenter SpA to uniquely identify the User such as, by way of example, name, surname, date of birth, address of residence and / or domicile, telephone number, e-mail address, credit card details.
It is expressly understood that the provision of such personal data is optional, but becomes mandatory in order to allow the User to access certain services of the Site. The renunciation of data, therefore, does not imply any consequences for the User, but in the absence of the related contribution, Exacta + Optech Labcenter SpA will not be able to provide the User with certain services.
In order to promote and improve its products, services and contents, Exacta + Optech Labcenter SpA reserves the right to aggregate personal data and non-personal data. In this case, non-personal data will be treated as personal data until they are aggregated to the latter.
3. METHOD AND PURPOSE OF THE TREATMENT
The processing of personal data is carried out mainly with electronic and telematic methods by Exacta + Optech Labcenter SpA and by other subjects who, appropriately selected for reliability and competence, perform operations instrumental to the pursuit of the purposes strictly related to the use of the Site, its services and the purchase of products through the Website.
The processing by Exacta + Optech Labcenter SpA of the User’s data takes place in order to allow:
a) registration on the Website or subscription to the services offered by Exacta + Optech Labcenter SpA through the Website;
b) the execution of activities connected, instrumental or necessary for the provision of the services of Exacta + Optech Labcenter SpA including the communication of data to third party companies which, by way of example, carry out activities necessary or instrumental to the supply of the services of Exacta + Optech Labcenter SpA;
c) the detection of the degree of satisfaction and preferences of the User;
d) the management of User requests, of a technical or commercial nature, relating to the progress of orders and of a general nature;
e) the sending, after obtaining the consent, of advertising, information and commercial information (for example, through newsletters), as well as the transfer to third parties of data processed for commercial purposes also for sale or attempted sale, or for all those purposes of a commercial and / or statistical nature in accordance with current legislation. The consent given for the sending of commercial and promotional communications (so-called “direct marketing”) implies consent to the receipt of the same communications not only with automated methods, but also through traditional methods (paper mail and telephone calls via operator). In these circumstances, the User is also given the right to express his consent to the receipt of the aforementioned communications exclusively through traditional methods of contact;
f) the profiling of the User who registers at the Site or performs on the Site purchase transactions, in order to allow Exacta + Optech Labcenter SpA, upon obtaining the consent, to elaborate the choices, habits and propensities for the consumption of the Users and, consequently, to: (i) send to these specific text messages aimed at providing personalized behavioral advertising relating to products and services of Exacta + Optech Labcenter SpA; (ii) cross data collected in relation to different functionalities, among those made available to the User; (iii) use other identifiers other than cookies (e.g. authentication credentials, “fingerprints”, etc.) for the detection of specific actions or recurring behavioral patterns in the use of the different functionalities, among those made available to the User.
In the processing of data that can directly or indirectly identify the User, Exacta + Optech Labcenter SpA respects the principle of strict necessity. Therefore, the processing of User data is excluded when the purposes pursued in individual cases can be achieved through the use of anonymous data (such as, for example, in market research aimed at improving services) or by other means that allow to identify the User only in case of need or at the request of the authorities and the police forces (such as, for example, data relating to traffic and your permanence on the website or your IP address).
g) Fraud prevention (Recital 47 and Article 22 of the GDPR)
The personal data of the interested party, with the exclusion of those particular (Art 9 GDPR) or judicial (Art 10 GDPR) will be processed to allow controls for the purpose of monitoring and preventing fraudulent payments, by software systems that carry out a verification in order automated and preliminary to the negotiation of Services / Products; exceeding these checks with a negative result will make it impossible to carry out the transaction; the interested party may in any case express his / her opinion, obtain an explanation or contest the decision motivating his / her reasons to the Customer Assistance service or to the contact email@example.com; personal data collected for the sole purpose of anti-fraud, unlike the data necessary for the correct execution of the requested service, will be immediately canceled at the end of the control phases.
h) The protection of minors
The Services / Products offered by the Data Controller are reserved to subjects legally able, on the basis of the national reference legislation, to conclude contractual obligations. The Data Controller, in order to prevent illegal access to its services, implements prevention measures to protect its legitimate interest, such as the control of the tax code and / or other checks, when necessary for specific Services / Products, the correctness of the data identification of identity documents issued by the competent authorities.
The User’s data will be communicated to third parties only with the express consent of the User, except in cases where the communication is mandatory by law or is necessary for purposes established by law for the pursuit of which the consent of the User; in such cases, the data may be made available to third parties who will treat them independently and solely for the aforementioned purposes (for example, in the event of a request made by the police or by the judiciary or other competent bodies or to fulfill obligations arising from the contract concluded with the User, as is the case with the communication for payments of the products purchased).
Any processing purpose other than the specific one for which the User has provided the personal data will be highlighted in the information and will be prosecuted by Exacta + Optech Labcenter SpA only upon acquisition of the express consent of the User.
There are treatments for which the law provides for the exclusion of consent. For example, the processing of personal data may take place without obtaining the consent of the User when this is necessary to fulfill a legal obligation or when it is necessary to fulfill the obligations assumed contractually with respect to the same User.
Furthermore, it should be noted that Exacta + Optech Labcenter SpA has the right to use the User’s data, without the need to acquire its express consent, for direct sales activities of products similar to those that the User has already purchased and for surveys of opinion, provided that the User has not refused such use with reference to the e-mail address communicated to Exacta + Optech Labcenter SpA.
The User’s personal data are not transferred to foreign countries, other than those belonging to the European Union, which do not ensure adequate levels of protection for persons. If this is necessary to provide the services or to conclude a contract for the purchase of products, Exacta + Optech Labcenter SpA guarantees that the transfer of personal data of the User to countries that do not belong to the European Union and that do not ensure an adequate level of protection will be carried out only after the adoption by Exacta + Optech Labcenter SpA of the appropriate safeguards provided for by applicable laws.
The holder informs the User that the personal data will be kept for a period of 26 months. After this period, personal data will be deleted.
4. REDIRECT TO EXTERNAL SITES
The Website can use the c.d. social plug-in. Social plug-ins are special tools that allow you to incorporate the features of the social network directly within the site (eg the “like” function of Facebook).
All the social plug-ins on the site are marked by the respective logo owned by the social network platform.
When you visit a page of the Site and interact with the plug-in (eg by clicking the “like” button) or you decide to leave a comment, the corresponding information is transmitted from the browser directly to the social network platform (in this case Facebook) and from this memorized.
5. LINK TO / FROM THIRD PARTY SITES
From the site it is possible to connect through special links to other third-party websites.
Exacta + Optech Labcenter SpA does not control or perform monitoring operations on these websites and their contents.
The activation of the links does not imply any recommendation or warning of Exacta + Optech Labcenter SpA for access and browsing of these sites, nor any guarantee regarding their contents, services or goods supplied and sold to Users.
Exacta + Optech Labcenter SpA declines, therefore, any responsibility regarding the contents of these sites and the rules adopted by them, also with regard to the protection of personal data and the related processing during navigation within the sites in question.
6. RIGHTS OF THE INTERESTED
“The interested party”, intended as the subject to which the personal data refer, has the right to obtain confirmation of the existence or not of personal data concerning him, even if not yet registered, and their communication in intelligible form.
The interested party has the right to obtain the indication:
a) of the origin of the personal data;
b) of the purposes and methods of the processing;
c) of the logic applied in case of treatment carried out with the aid of electronic instruments;
d) of the identification details of the owner, of the managers and of the designated representative;
e) of the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the territory of the State, managers or agents.
The interested party also has the right to obtain: a) updating, rectification or, when interested, integration of data; b) the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed; c) the attestation that the operations referred to in letters a) and b) have been made known, also as regards their content, to those to whom the data have been communicated or disseminated, except in the case where such fulfillment it proves impossible or involves a use of means manifestly disproportionate to the protected right. The data subject has the right to object, in whole or in part: a) for legitimate reasons, to the processing of personal data concerning him / her, even though they are relevant to the purpose of the collection; b) to the processing of personal data concerning him for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication.
In this regard, the User, by accessing their account on the Site, at any time may modify, update or delete personal information such as name, surname, address, country of residence, credit card details relating to his person.
The deletion of personal data at the request of the User may make it impossible for Exacta + Optech Labcenter SpA to continue providing its services to the User.
To exercise the rights listed above, report problems or ask for clarification on the processing of their personal data, the request must be transmitted by the User, with specification of the object thereof, to the Data Processor Exacta + Optech Labcenter SpA based in Via del Via Bosco n. 21 – 41030 San Prospero (MO) Italy – P.iva e Cf : IT01022690364, e-mail address firstname.lastname@example.org.
In any case, the right of complaint to the competent supervisory authority is reserved.
7. SECURITY MEASURES
Exacta + Optech Labcenter SpA can not, however, guarantee to Users that the measures taken for the security of the Site and the transmission of data and information on the Site limit or exclude any risk of unauthorized access or loss of data by devices pertaining to the User; therefore, the User is advised to check that the computer used by the same is equipped with adequate software to protect the transmission of data in the network, both incoming and outgoing (as updated antivirus systems) and that the Internet service provider has taken appropriate measures for the security of data transmission over the network (such as firewalls and antispam filters).
9. CHE COSA SUCCEDE NEL CASO IN CUI L’INTERESSATO NON FORNISCA I SUOI DATI IDENTIFICATI COME NECESSARI AI FINI DELL’ESECUZIONE DELLA PRESTAZIONE RICHIESTA? (ART. 13, 2° COMMA, LETT. E GDPR)
La raccolta ed il trattamento dei dati personali è necessaria per dar seguito alle prestazioni richieste nonché all’erogazione del Servizio e/o alla fornitura del Prodotto richiesto.
Qualora l’Interessato non fornisca i dati personali espressamente previsti come necessari all’interno del modulo d’ordine o del modulo di iscrizione, il Titolare non potrà dar seguito ai trattamenti legati alla gestione delle prestazioni richieste e/o del contratto e dei Servizi/ Prodotti ad esso collegati, né agli adempimenti che da essi dipendono. Che cosa succede nel caso in cui l’Interessato non fornisca il consenso al trattamento dei dati personali per le attività di promozione commerciale su Servizi/Prodotti differenti rispetto a quelli acquistati ? Nel caso in cui l’Interessato non presti il proprio consenso al trattamento dei dati personali per tali finalità, detto trattamento non avverrà per le finalità medesime, senza che ciò comporti effetti sull’erogazione delle prestazioni richieste, né per quelle per cui Egli ha già prestato il proprio consenso, se richiesto.
Nel caso in cui l’Interessato abbia prestato il consenso e dovesse successivamente revocarlo o opporsi al trattamento per attività di promozione commerciale, i suoi dati non saranno trattati più per tali attività, senza che ciò comporti conseguenze o effetti pregiudizievoli per l’Interessato e per le prestazioni richieste.
10. PER QUANTO TEMPO VENGONO CONSERVATI I DATI DELL’INTERESSATO? (ART. 13, 2° COMMA, LETT. A GDPR)
A meno che questi non esprima esplicitamente la propria volontà di rimuoverli, i dati personali dell’Interessato saranno conservati fino a che saranno necessari rispetto alle legittime finalità per le quali sono stati raccolti.
In particolare, saranno conservati per tutta la durata della sua iscrizione anagrafica e comunque non oltre un periodo massimo di 12 (dodici) mesi di sua inattività, ovvero qualora, entro tale termine, non risultino associati dei Servizi e/o acquistati dei Prodotti mediante l’anagrafica stessa.
Nel caso di dati forniti al Titolare per le finalità di promozione commerciale per servizi diversi da quelli già acquisiti dall’Interessato, per le quali inizialmente Egli abbia prestato il consenso, questi saranno conservati per 24 mesi, salvo revoca del consenso prestato.