Privacy Policy

I – INFORMATION REGARDING THE WEBSITE’S PRIVACY POLICY

1. This section describes how the website techpaspa.com is managed with reference to the processing of personal data of users who consult it. Data processing is carried out in compliance with the criteria established by the European regulation on the protection of personal data, Regulation 2016/679/EU, and any other national legislative text, measure, or authorization issued by the competent Authority. According to the aforementioned regulation, processing must be based on principles of fairness, lawfulness, transparency, and protection of confidentiality and user rights.

2. This notice is provided only for this website and not for other websites that may be accessed by the user through links contained therein.

3. The purpose of this document is to provide information on the methods, timing, and nature of the information that data controllers must provide to users when connecting to the web pages of this site, regardless of the purposes of the connection itself, in accordance with Italian and European legislation.

4. This privacy notice may be subject to changes due to the introduction of new regulations, and users are therefore invited to periodically check this page.

5. If the user is under 16 years of age, pursuant to Article 8, paragraph 1 of Regulation EU 2016/679, consent must be legitimized through the authorization of parents or legal guardians.

II – DATA PROCESSING

1 – Data Controller

1. The data controller is the natural or legal person, public authority, service, or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data. The controller also handles security profiles.

2. For this website, the data controller is Techpa S.p.A., with registered office at Via Apollo XI 2/4, San Giovanni Lupatoto. For any clarification or to exercise the user’s rights, they may contact the company at the following email address: amministrazione@techpaspa.com.

2 – Location of data processing

1. The processing related to the web services of this site takes place at the aforementioned office of the Company (see Data Controller) and is handled by the Company’s staff and/or duly appointed external maintenance and updating personnel. No data from the web service is communicated or disseminated.

2. The User’s Personal Data may be transferred to a country different from the one in which the User is located. For more information about the place of processing, the User may refer to the section on details of the Personal Data processing.

3 – Data retention period

The Data is processed and stored for the time required by the purposes for which it was collected and for a maximum period of 10 years thereafter, unless deletion is requested as outlined in section 4.

Therefore:

1. Personal Data collected for purposes related to the performance of a contract between the Controller and the User will be retained until the contract has been fully executed.

2. Personal Data collected for purposes related to the legitimate interest of the Controller will be retained until such interest is fulfilled. Users can obtain more information on the legitimate interest pursued by the Controller in the relevant sections of this document or by contacting the Controller.

When processing is based on the User’s consent, the Controller may retain the Personal Data for a longer period until such consent is revoked. Furthermore, the Controller may be required to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority.

At the end of the retention period, the Personal Data will be deleted. Therefore, after this period, the rights of access, deletion, rectification, and data portability can no longer be exercised.

4 – Methods of data processing

The Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data.

Processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the stated purposes. In addition to the Controller, in some cases, others involved in the operation of this Application (administrative, commercial, marketing, legal personnel, system administrators) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the Data and may also be appointed, if necessary, as Data Processors by the Controller. The updated list of Processors may always be requested from the Data Controller.

5 – Purpose of data processing

Personal data provided by users navigating the website will be processed for aggregated statistical purposes in anonymous form concerning the data stored in cookies on the user’s device.

Processing related to information requests from the contact form will be carried out solely to provide the requested service.

Processing related to newsletter subscriptions aims to send informational and promotional communications related to the Controller’s own initiatives and/or those of affiliated and/or associated companies.

Users may unsubscribe from the newsletter at any time free of charge by sending an email to the address indicated in section 1 (Data Controller) or via the dedicated link at the bottom of each newsletter received.

6 – Types of data processed

1. Browsing data. The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified individuals, but by its nature could allow users to be identified through processing and association with data held by third parties. This category includes IP addresses or domain names of the computers used by users connecting to the site, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server’s response (success, error, etc.), and other parameters related to the user’s operating system and IT environment. These data are used solely to obtain anonymous statistical information on site usage and to check its correct functioning. The data may be used to ascertain responsibility in the event of hypothetical computer crimes against the site. For these data, and solely for the above purpose, consent is not required.

2. Data voluntarily provided by the user. The voluntary, explicit, and optional sending of emails to the addresses indicated on this site or the completion of forms in specific sections with required and optional fields entails the subsequent acquisition of the sender’s address and other information provided, necessary to respond to service and/or information requests. For these data, and solely for the above purpose, consent is not required.

3. Cookies. No personal data of users is acquired by the site in this regard. No use is made of cookies for the transmission of personal information, nor are so-called persistent cookies or user tracking systems used. The use of so-called session cookies (which are not stored persistently on the user’s computer and disappear when the browser is closed) is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to enable safe and efficient navigation of the site.

7 – Data subjects’ rights

Users have the rights referred to in Articles 15-21 of the European Regulation 2016/679 (Right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object). Specifically:

• The right of access: to obtain confirmation as to whether or not personal data concerning them exists and to access such data and specific information (e.g., purposes of processing, categories of data, recipients to whom the data will be disclosed);

• The right to rectification: to obtain the correction of inaccurate personal data without undue delay. In such cases, the controller is obligated to notify the correction to all recipients to whom the data was disclosed, unless this proves impossible or involves disproportionate effort;

• The right to erasure: to obtain the deletion of personal data without undue delay, and the controller is required to delete the data without undue delay under certain conditions (e.g., if the data is no longer necessary for the purposes for which it was collected; if the data subject withdraws consent; if deletion is required to comply with a legal obligation). In such cases, the controller is obligated to notify the deletion to all recipients to whom the data was disclosed, unless this proves impossible or involves disproportionate effort;

• The right to restriction of processing: users may request the controller to restrict the processing of their data, e.g., to storage only, under specific circumstances (e.g., if processing is unlawful and the data subject opposes deletion; if the data subject contests the accuracy of the data, within the period of verification). In such cases, the controller is obligated to notify the restriction to all recipients to whom the data was disclosed, unless this proves impossible or involves disproportionate effort;

• The right to data portability: to obtain the return of personal data provided and transmit it to another controller or request its direct transmission, where technically feasible;

• The right to object: to object at any time to processing for public interest purposes or legitimate interest; for marketing purposes; for scientific, historical, or statistical research purposes.
Data subjects may lodge a complaint with the Supervisory Authority if necessary or simply contact it for information regarding the exercise of their rights under Regulation EU 2016/679.