INFORMATION PURSUANT TO ART. 13 et seq. of EU Regulation 679/2016
Co.R.A. Lab srl, with registered office in Fano (Italy) at Via Luigi Einaudi, 24 – VAT no. 02814670416, as the data controller pursuant to EU Regulation 679/2016 applicable from May 25, 2018 – General Data Protection Regulation (“GDPR”) (hereinafter referred to as GDPR or “Applicable Law”), provides this privacy notice only for the website www.coralab.eu (“Site”), and does not apply to other websites that may be consulted through external links and is provided pursuant to art. 13 et seq. of the Applicable Law.
PRINCIPLES
The processing of personal data by Co.R.A. Lab srl is carried out according to the principles of accountability, lawfulness, fairness, transparency, purpose limitation and storage limitation, data minimization, accuracy, integrity, and confidentiality, in accordance with the legislative provisions of the Applicable Law and confidentiality obligations provided therein.
1. DATA CONTROLLER
Co.R.A. Lab srl, with registered office at Via Luigi Einaudi, 24 61032 Fano (PU), for the purposes specified below, related to the provision of its services, and for the handling of information and contact requests through its website and for the operation of said website (hereinafter referred to as “Site”), processes your personal data acquired in the execution of Services and/or during navigation on this website, as the data controller.
The data controller determines the purposes and means of processing personal data
2. PERSONAL DATA SUBJECT TO PROCESSING
“Personal data” means any information relating to an identified or identifiable natural person (data subject) with particular reference to an identifier such as a name, identification number, location data, online identifier or to one or more elements characteristic of their physical, physiological, genetic, mental, economic, cultural or social identity.
The personal data collected on this site are:
- Navigation data
The IT systems of the Site collect certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. These include IP addresses or domain names of devices used to connect to the Site, the addresses in URL notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment. These data are used to obtain anonymous statistical information on the use of the Site and to check its correct functioning; to allow – given the architecture of the systems used – the correct provision of the various functionalities requested, for security reasons and to ascertain responsibility in case of hypothetical IT crimes against the Site or third parties. - Voluntarily provided data
Through the Site, users may voluntarily provide personal data such as name and email address to contact Co.R.A. Lab through the “Contact” form. Co.R.A. Lab will process these data in compliance with the applicable law, assuming they are referred to the user who has provided them or who has expressly authorized third parties to provide them on their behalf and/or in their interest on an appropriate legal basis that legitimizes the processing of the data in question. In such cases, the user and the third party who has provided the data on their behalf assume all legal obligations and responsibilities, indemnifying Co.R.A. Lab from any disputes, claims, requests for compensation for damage from processing, etc. that may be received by Co.R.A. Lab from third parties whose personal data have been processed through the use of the Site in violation of the applicable law. - Cookies and similar technologies
Co.R.A. Lab collects personal data through cookies. Cookies are small data files that can be sent from a website to the user’s terminal (usually to the browser), where they are stored to be retransmitted to the site during the next visit. A cookie cannot retrieve any other data from the user’s hard drive, transmit computer viruses, or acquire email addresses. Cookies can be used by both the site owner and third parties and can be easily disabled by the user. Co.R.A. Lab needs to use some cookies, including third-party cookies, through this Site to provide its services regularly. Therefore, if the user decides to disable the use of cookies, for purely technical reasons, Co.R.A. Lab may be unable to provide certain services or to provide them in the requested manner.
3. PURPOSES OF PROCESSING AND LEGAL BASIS
The personal data provided through the Site will be processed by Co.R.A. Lab for the following purposes:
- Registration on the Co.R.A. Lab website and purposes aimed at carrying out everything necessary for the provision of the services offered, which takes place mainly through automated and computerized means, pre-contractual purposes, and the stipulation of contracts. In such cases, for some services, Co.R.A. Lab will provide further and specific information on the processing of personal data, in addition to this privacy notice. The legal basis for processing personal data for the purposes described above (point a) is the provision of the service itself or the response to a request and does not require consent under the applicable law.
- Conducting research/statistical analysis on aggregated or anonymous data, without the possibility of identification, solely aimed at measuring the functioning of the Site, evaluating traffic, usage, and interest. This purpose (point b) does not involve the processing of personal data.
- Compliance with legal obligations, regulations, EU regulations, orders and prescriptions of the competent authorities to which Co.R.A. Lab is subject. Processing for the above purpose (point c) does not require consent as it is legitimate processing, constituting compliance with legal obligations, also related to the provision of services.
- Pursuit of a legitimate interest of Co.R.A. Lab, as the data controller, such as managing complaints and disputes, recovering debts, preventing fraud and illegal activities. The legal basis in this case (point d) is the legitimate interest of Co.R.A. Lab also to exercise and/or defend its rights in the appropriate venues if necessary.
- Conducting commercial and promotional communication activities to the email address provided by the user, related to the services and activities of Co.R.A. Lab. The provision of consent for the processing of personal data for the purposes listed above (point e) is optional, but their possible non-provision could make it impossible to respond to a request made to Co.R.A. Lab or to fulfill an obligation to which Co.R.A. Lab is subject.
4. RECIPIENTS
Personal data may be shared and communicated, for the purposes specified above in point 3, in Italy or abroad, to third parties such as:
- Subjects necessary for the provision of services offered by the Site, such as tax and legal consultants of Co.R.A. Lab in relation to related fulfillments, to companies and technical consultants in charge of managing and maintaining the information systems, software, and databases, to financial, administrative, archiving, auditing, and balance sheet certification service companies, in any case in strict connection and within the limits of the fulfillment of their respective tasks and activities.
- Persons authorized by Co.R.A. Lab to process personal data who have committed to confidentiality or have an adequate legal obligation of confidentiality (e.g., employees and collaborators of Co.R.A. Lab).
- Judicial authorities in the exercise of their functions when required by applicable law.
5. TRANSFERS
Some personal data may need to be transferred to recipients outside the European Union, in compliance with applicable law.
6. DATA STORAGE
Co.R.A. Lab will process personal data for the time strictly necessary to achieve the purposes detailed and indicated in point 3 for a limited period of time and different depending on the type of activity involving the processing of personal data. After this period, the data will be definitively deleted or in any case anonymized irreversibly. The data communicated to Co.R.A. Lab using the “Contact” form will be stored for 12 months from communication, unless contracts are concluded.
7. RIGHTS OF THE DATA SUBJECT
Within the limits of the applicable law, the data subject, whose personal data are processed through the Co.R.A. Lab website, may exercise the following rights at any time:
- The right to obtain confirmation of the existence or not of personal data and, in this case, to obtain access to and a copy of them. Unless otherwise required by applicable law, Co.R.A. Lab may refuse to provide such a copy if it could infringe the rights and freedoms of others.
- The right to obtain information about the origin of personal data; the purposes and methods of processing; the logic applied in case of processing carried out with the help of electronic means; the identification details of the data controller and, if appointed, the data processors and the privacy representative; the subjects or categories of subjects to whom the personal data may be communicated.
- The right to obtain the update, rectification, integration of the data, deletion, transformation into anonymous form, or blocking of data processed in violation of the law, including those for which storage is not necessary in relation to the purposes for which the data were collected or subsequently processed, in the cases provided for by the applicable law, the limitation of processing in the cases provided for by law.
- The right to object, in whole or in part, for legitimate reasons to the processing of personal data, even if pertinent to the purpose of collection, to the processing of personal data for sending advertising material or for direct sales or for carrying out market research or commercial communication.
- The right to withdraw consent at any time, where it constitutes the legal basis of processing, without prejudice to the lawfulness of the processing based on the consent given before withdrawal, to lodge a complaint with the supervisory authority, in the cases provided for by applicable law, to receive the data in a structured, commonly used, and machine-readable format and to transmit such data to another data controller without hindrance.
- The right to obtain certification that each recipient to whom the personal data have been disclosed has received notification of any rectifications or deletions or limitations of processing, except where this proves impossible or involves a manifestly disproportionate effort compared to the right being protected. In any case, upon express request, the data subject may also obtain the details of these recipients.
Such requests should be sent via email to: info@coralab.eu
8. CHANGES
This Privacy Policy is effective from July 18, 2024. Co.R.A. Lab reserves the right to modify or simply update its content, in part or in full, due to changes in the applicable law. Co.R.A. Lab will inform about such changes as soon as they are introduced and will be binding as soon as they are published on the Site. In any case, any changes made over time to this notice will be duly published in a specific section of this Site.
FURTHER INFORMATION
https://www.garanteprivacy.it/codice
https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/3167231