PRIVACY POLICY - Information document article 13 Reg. EU 2016/679- GDPR
Information to be provided where personal data are collected from the data subject

In compliance with the provisions of Reg. EU 2016/679 (European Regulation for the protection of personal data) We hereby provide you with the information require concerning the processing of the personal data provided.

The policy is not valid for other websites that may be consulted via the links on internet sites of the data controller’ domain who is not considered in any way responsible for third-party internet sites. 
The policy is provided in accordance with article 13 of Reg. EU 2016/679 (European Regulation for the protection of personal data) and also inspired by the provisions of Directive 2002/58/EC, as updated by Directive 2009/136/EC, concerning Cookies, in addition to the provisions of the Data Protection Authority for the protection of personal data of 08.05.2014 concerning cookies.


Personal data that can be processed: “personal data”: any information relating to an identified or identifiable natural person (“data subject”); an identifiable person is one who can be identified, directly or indirectly, by reference to an identification such as the name, identification number, location data, on-line identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that person (C26, C27, C30 Reg. EU 2016/679).

Specific policies

Specific policies could be included on the website pages regarding particular services or processing of the data provided.

Cookies
For further information on the cookies used on this website, please refer to the cookies policy at the following link

1. DATA SUBJECTS


DATA CONTROLLER, according to articles 4 and 24 of Reg. EU 2016/679, is Ali Group Srl with sole shareholder, with registered offices in Via Gobetti, 2a Villa Fiorita - 20063 Cernusco sul Naviglio (Milan) – Italy, in the persona of the legal representative pro-tempore, and operational headquarters in via Conti Agosti, 231 - 31010 Mareno di Piave (TV), e-mail privacy.cr@aligroup.it.


DATA PROCESSOR, according to articles 4 and 28 EU Reg. 2016/679, is, among others, the subject appointed to manage and update the website of the data controller, namely the company Neptune di Gianpiero Marino, Via Arnaldo da Brescia 12 – 20025 Legnano (MI) – Italy.

The updated list of designated data processors is available at the headquarters of the data controller.


2. PURPOSE AND LAWFULNESS OF PROCESSING


The personal data provided will be subject to processing in compliance with the conditions of lawfulness under article 6 Reg. UE 2016/679, for the following purposes:

Management of data processing related to (art. 6 letter b)):


- browsing this website;

- filling in forms gathering data, login and/or contract requests and notifications, with sending of the information requested;

- registration on the site to use functions offered by the platform;
- fulfilment of contractual and legal obligations and for administrative and accounting purposes. For the purposes of the application of the provisions concerning the protection of personal data, the processing performed for administrative-accounting purposes are those related to carrying out organisational, administrative, financial and accounting activities, regardless of the nature of the data processed. In particular, these purposes are for internal organisational activities, required to fulfil contractual and pre-contractual obligations, and information activities.


3. RECIPIENTS OR CATEGORIES OF DATA RECIPIENTS


The personal data provided may be disclosed to recipients, who will process the data in their role as data processors, as natural persons acting under the authority of the data controller and the data processor or as independent data controllers, in order to fulfil the contracts or related objectives. 
In particular, the data may be communicated to recipients belonging to the following categories: 


- Mareno - Ali Group Srl;

- Parties that provide services for the management of the information system and communication networks (including e-mail and website management);
- Firms or companies providing support and consultancy services; 

- Competent authorities for fulfilment of legal obligations and/or provisions of public bodies, upon request; 

The subjects belonging to the aforesaid categories perform the task of data processor or operate in complete autonomy as separate data controllers. The list of designate data processors is constantly updated and available at the offices in Via Schiaparelli Giovanni, 15 - 31029 Vittorio Veneto (TV) of Ali Group Srl, or by writing an email to privacy.cr@aligroup.it.


4. TRANSFER OF DATA TO A THIRD COUNTRY AND/OR INTERNATIONAL ORGANISATION


The personal data provided may be transferred abroad within or outside the European Union, within the limits and under the conditions set out in Articles 44 and subsequent amendments of Regulation EU 2016/679, in order to comply with purposes concerning the transfer.

The data subject may obtain a copy of the conditions governing data transfer by writing an email to the address privacy.cr@aligroup.it.


5. STORAGE PERIOD AND CRITERIA


The processing will be carried out by automated and/or manual means, with methods and tools aimed at guaranteeing maximum security and confidentiality, by subjects specifically appointed to do so.

Pursuant to the provision of article 5, paragraph 1, letter e) of Reg. EU 2016/679, the personal data collected will be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed. The storage of the personal data provided is determined on the basis of criteria which can be consulted by writing an email to the address privacy.cr@aligroup.it.


6. NATURE OF CONSENT AND REFUSAL


Apart from the afore-mentioned specifications for browsing data, the user is free to provide the personal data in the dedicated areas on the site. The provision of personal data for the purposes of this policy is necessary to perfect the specific features and use the services offered to the data controller, for example to correctly send requests for information/reports and obtain feedback from the data controller, to register on the site.

Failure to provide personal data may make it impossible to obtain the requested service or to use the services offered by the site.

7. RIGHTS OF THE DATA SUBJECTS


You can exercise your rights under articles 15, 16, 17, 18, 19, 20, 21, and 22 Regulation EU 2016/679, by writing to the data controller the address privacy.cr@aligroup.it.


You have the right, at any time, to ask the data controller for access to your personal data, to modify it, cancel it or restrict its processing. Furthermore, you have the right to object, at any time, to the processing of your data (including automated processing, e.g. profiling) and to the portability of your data.  Without prejudice to any other administrative and judicial redress, if you believe that the processing of data concerning you, infringes the provisions of Reg. EU 2016/679, pursuant to article 15 letter f) of the above mentioned Reg. EU 2016/679, you have the right to lodge a complaint with the Data Protection Authority and, with reference to article 6, paragraph 1, letter a) and article 9, paragraph 2, letter a), you have the right to withdraw consent at any time. If a request is made for data portability, the data controller will provide you with your personal data in structured, standard form that can be read by an automatic device, without prejudice to paragraphs 3 and 4 of article 20 of Reg. EU 2016/679. There is no automated decision-making process.

This policy may be modified following development of the legislation. Please refer to our website for all updates.


 
Updated on: 25.05.2018