Privacy Notice for Personal Data Processing – Information Document pursuant to Articles 13-14 of GDPR 2016/679

Pursuant to EU Regulation 679/16 (GDPR), we provide the necessary information regarding the processing of the personal data you provide. This information notice is not valid for other websites that may be consulted through links on the domain websites of the data controller, who is not in any way responsible for third-party websites.

1) Data Controller

The data controller is ITALY2YOU by Rigoldi Eleonora, with its registered office at Via Zanella 7 – 20900 Monza (MB), Italy.

2) Types of Data Processed

Personal Data

Personal data includes any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, particularly by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.

Browsing Data

The IT systems and software procedures used to operate this website acquire certain personal data during their normal operation, whose transmission is implicit in the use of Internet communication protocols.

This information is not collected to be associated with identified data subjects but, by its very nature, could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes IP addresses or domain names of the computers used by users connecting to the site, URI addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the server’s response status (successful, error, etc.), and other parameters related to the user’s operating system and IT environment.

Data Voluntarily Provided by the User

The voluntary, explicit, and optional sending of emails to the addresses indicated on this site and/or the completion of data collection forms involves the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included.

3) Purpose of Data Processing

The voluntarily provided personal data will be processed for the following purposes:

  • Browsing this website;
  • Possible completion of data collection forms for quote requests and/or contacts and/or job applications;
  • General administrative-accounting activities.

For the purposes of applying personal data protection regulations, processing for administrative-accounting purposes refers to activities related to organizational, administrative, financial, and accounting tasks, regardless of the nature of the processed data. These activities particularly include internal organizational functions, those necessary for fulfilling contractual and pre-contractual obligations, and informational activities.

4) Processing Methods – Data Retention

Data processing will be conducted using automated and manual methods, with tools designed to ensure maximum security and confidentiality, by personnel specifically appointed in compliance with Articles 13-14 of the GDPR. Data will be retained for no longer than necessary for the purposes for which they were collected and subsequently processed.

5) Data Communication and Disclosure

The personal data being processed will not be disclosed but may be communicated to companies contractually bound to ITALY2YOU by Rigoldi Eleonora to fulfill contracts or related purposes. Data may be communicated to third parties belonging to the following categories:

  • Other professionals encountered through work-related contacts;
  • Entities providing IT system management services;
  • Firms or companies providing consulting and assistance services;
  • Competent authorities for legal obligations and/or public authority requirements, upon request.

The subjects in the aforementioned categories act as data processors or operate in total autonomy as separate data controllers.

6) Nature of Data Provision and Refusal

Providing data for the purposes specified in section 3 is necessary. Refusal to provide such data will make it impossible to obtain the requested services from the data controller.

7) Data Subjects’ Rights

Data subjects may exercise their rights as set forth in Articles 12-23 by contacting the data controller or data processor, by sending an email to connect@elevolution.eu.

Data subjects’ rights, as specified in Article 15 of the GDPR, include:

  • Obtaining confirmation of whether personal data concerning them exists, even if not yet recorded, and receiving its communication in an intelligible form;
  • Obtaining information regarding:
    • The source of personal data;
    • The purposes and methods of processing;
    • The logic applied in case of processing performed with electronic tools;
    • The identifying details of the data controller, data processors, and designated representatives as per Article 5, paragraph 2 of the Privacy Code and Article 3, paragraph 1 of the GDPR;
    • The subjects or categories of subjects to whom personal data may be communicated or who may learn about it as designated representatives in the state territory, data processors, or agents.

Data subjects also have the rights to:

  • Request updates, corrections, or additions to their data;
  • Request the deletion, anonymization, or blocking of data processed unlawfully, including data that does not need to be retained for the purposes for which it was collected or subsequently processed;
  • Receive confirmation that the operations under (a) and (b) have been notified, including their content, to those to whom the data has been communicated or disclosed, unless this requirement proves impossible or involves a disproportionate effort compared to the right being protected;
  • Object, in whole or in part:
    • For legitimate reasons, to the processing of personal data concerning them, even if pertinent to the purpose of collection;
    • To the processing of personal data for direct marketing, automated calling systems without an operator, email, or traditional marketing methods via telephone and/or postal mail.

Data subjects also have the rights under Articles 16-21 GDPR (Right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with a supervisory authority.

8) Privacy Policy Changes

The data controller reserves the right to modify, update, add, or remove parts of this privacy policy at its discretion and at any time. The data subject is responsible for periodically checking for changes. To facilitate this, the privacy policy will indicate the date of the latest update. The use of the site after the publication of changes constitutes acceptance of the same.

9) Social Plug-ins

Our web pages may contain social network plug-ins (e.g., Facebook.com, managed by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA). If you access one of our web pages with such a plug-in, your internet browser will connect directly to the social network, and the plug-in will be displayed on the screen via the browser connection. Before using these plug-ins, we invite you to consult the respective social network’s privacy policy on their official pages.