PRIVACY POLICY – COOKIE POLICY
Drafted pursuant to Article 13 of EU Regulation 2016/679
WHY THIS INFORMATION
In accordance with Regulation EU 2016/679 (hereinafter
"Regulation"), this page describes the methods of processing
personal data of users who visit www.holdingmorelli.com
(hereinafter "Site").
This information does not
concern other websites, pages, or online services accessible
via hyperlinks published on the Site but referring to
resources external to the domain of the Site.
DATA CONTROLLER
Holding Morelli S.r.l. Benefit Company (hereinafter "Data Controller") with registered office at Via I Maggio, 14, 50053 Terrafino (FI). Contact email of the Data Controller: info@holdingmorelli.com
DATA PROTECTION OFFICER
The Data Controller does not require the figure of the data protection officer pursuant to Article 37 of the Regulation.
TYPES OF DATA PROCESSED
Data provided directly by the user
This category
includes all personal data provided by the user on an
optional basis (for example, by calling the phone numbers
listed on the Site; sending email messages to the addresses
listed on the Site; etc.).
COOKIES AND OTHER TRACKING SYSTEMS
This Site uses cookies — small text files stored on your device — and similar technologies. This section explains which ones are used, why, and how you can control them.
Strictly necessary cookies. These are required for the Site to function and are set without your consent, as permitted by Article 122 of the Italian Privacy Code and Article 5(3) of Directive 2002/58/EC. They are:
- hm_consent — records the cookie choices you make in the banner, and the date you made them, so that you are not asked again on every page. First party. Duration: 180 days.
- user_language — remembers whether you are viewing the Site in English, French or Italian. First party. Duration: 12 months.
- _GRECAPTCHA — set by Google on the contact pages only, as part of the Google reCAPTCHA service, to distinguish genuine enquiries from automated submissions. Without it the contact form cannot be protected against abuse. Third party. Duration: approximately 6 months. Google acts as an independent data controller for this cookie; see Google’s privacy policy.
Analytics cookies (optional). No analytics cookies are currently installed on the Site. Should they be introduced, they would be used only with your consent, to tell us in aggregate which pages are visited so that we can improve the Site. They would not be used to identify you personally, nor for advertising or profiling. If you do not consent, they are not installed and no data is sent.
Your choices. When you first visit the Site, a banner lets you accept or refuse optional cookies. Refusing is as easy as accepting, and no optional cookie is installed before you choose. You may change or withdraw your choice at any time using the “Cookie settings” link in the footer of every page. You can also delete or block cookies through your browser settings, although strictly necessary cookies are required for parts of the Site to work correctly.
Legal basis. Strictly necessary cookies are processed on the basis of the Data Controller’s legitimate interest in providing a functioning and secure Site (Article 6(1)(f) GDPR). Optional cookies are processed on the basis of your consent (Article 6(1)(a) GDPR), which you may withdraw at any time without affecting the lawfulness of processing carried out before withdrawal.
PURPOSES AND LEGAL BASES
Data provided directly by the user
Personal data
provided by the user on an optional basis are used
exclusively to process any requests made and to fulfill
legal obligations and/or pre-contractual and/or contractual
obligations arising from the relationship that the user may
establish with the Data Controller. The legal bases for the
processing of such data are therefore the performance of
obligations arising from the contractual and pre-contractual
relationship, as well as legal obligations. If necessary,
the data may also be used based on the data controller's
legitimate interest in carrying out defensive activities or
asserting or defending a right in court.
METHODS OF PROCESSING PERSONAL DATA
The data collected is processed using computer tools and
only residually in paper form. For the processing of data
related to the Site's services, the Data Controller uses
servers located within the European territory and computer
systems located at the Data Controller's headquarters. Their
transfer abroad is not foreseen. Technical and
organizational measures are adopted to ensure an adequate
level of security and to prevent data loss, unlawful or
incorrect use, and unauthorized access. Data provided
directly by the data subject are kept for the time strictly
necessary to process the requests of the data subject and
then deleted, subject to cases of product purchases (in
which case the data may be kept for the entire duration of
the relationship and according to legal obligations) and for
defensive needs (which may require further retention).
Navigation data does not persist for more than seven days
and is deleted immediately after aggregation, unless there
are any needs for investigating crimes by the Judicial
Authority.
NATURE OF THE PROVISION OF PERSONAL DATA
With the exception of navigation data, necessary to carry out computer and telematic protocols, the provision of data by users through the methods made available within the Site is voluntary. However, failure to provide data will make it impossible for the Data Controller to process the requests submitted or intended to be submitted by the user.
DATA RECIPIENTS
The Data may be processed by employees or collaborators expressly designated as "authorized to process" and/or appointed as "data processors". The complete list of data processors is available at the offices of the Data Controller. The Data will not be transferred to third countries or disclosed in any way.
DATA SUBJECTS' RIGHTS
Data subjects have the right to obtain from the Data
Controller, in the cases provided for, access to personal
data and the rectification or erasure of such data or the
restriction of processing concerning them or to object to
processing and to data portability (Articles 15 et seq. of
the Regulation).
Requests should be addressed to
info@holdingmorelli.com
RIGHT TO LODGE A COMPLAINT
Data subjects who believe that the processing of personal data concerning them carried out through this Site violates the provisions of the Regulation have the right to lodge a complaint with the Garante, as provided for in Article 77 of the Regulation itself, or to take appropriate legal action (Article 79 of the Regulation).