Privacy
INFORMATION ON THE PROCESSING OF PERSONAL DATA CONNECTED WITH BROWSING AND THE USE OF COOKIES
Identity and contact details of the Data Controller
Legnox S.p.A., hereinafter also “Legnox” or “Data Controller”, with registered address at Via XXV Aprile, 4, Gorgo al Monticano (TV), available at the e-mail address info@legnox.it or on +39 0422 800220.
Legal purpose and basis
A. To verify the correct functioning of services and permit browsing: the IT systems and software used by this site acquire, as part of their normal operation, some elements of personal data, the transmission of which is implicit in the use of Internet communication protocols. This category of data includes IP addresses or the domain names of computers and terminals used by users, addresses in URI/URL (Uniform Resource Identifier/Locator) notation of requested resources, the time the request is made, the method used to submit the request to the server, the file size obtained in response, the numerical code indicating the response status from the server (successful, error, etc.) and other parameters related to the user’s operating system and computer environment.
B. Statistics: information is acquired with the purpose of determining how the visitor interacts with the site in order to acquire statistics.
C. Profiling: visitor tracking information is acquired to create a profile based on the interests shown by the user while browsing and, consequently, to propose ads in line with the preferences previously indicated.
D. To respond to communications made via the published contact details: when the visitor contacts the Data Controller using one of the channels published on the site, the information voluntarily provided by the former is stored in order to process the request.
E. Defensive purpose: the Data Controller may need to process personal data to manage complaints and out-of-court or court-based disputes.
| Purpose | Legal basis (common data) |
|---|---|
| A. | Performance of the contract |
| B. | Consent |
| C. | Consent |
| D. | Performance of pre-contractual measures; Legitimate interest of the Data Controller to respond to requests received. |
| E. | Legitimate interest of the Data Controller to ascertain, exercise or defend a right. |
Cookies
Some of the aforementioned purposes may be fulfilled through the use of cookies. For more information visitors can view the table on the Cookiess page.
Retention period
| Purpose | Retention period |
|---|---|
| A. | Please refer to the Cookiess section |
| B. | Please refer to the Cookiess section |
| C. | Please refer to the Cookiess section |
| D. | Time required to process requests and subsequent communications (generally 12 months). |
| E. | 10 years after the definitive finalisation of the dispute. |
Provision of data and consequences of refusal
| Purpose | Nature | Consequences |
|---|---|---|
| A. | Necessary | It will not be possible to access or use the site. |
| B. | Optional | The Data Controller will not be able to perform statistical processing. |
| C. | Optional | The Data Controller will not be able to perform analytical processing to understand the preferences of the visitor and the latter will not be able to receive ads in line with the interests they have shown. |
| D. | Necessary | It will not be possible to receive the information requested. |
| E. | Necessary | It will not be possible to manage the dispute. |
Scope of communication
All personal data collected and processed may be communicated to internal employees authorised to process personal data, as well as to the following categories of external parties depending on the specific purposes of processing:
| Purpose | Categories of external recipients |
|---|---|
| A. | Parties other than the Data Controller indicated in the “Cookiess” section |
| B. | Parties other than the Data Controller indicated in the “Cookiess” section |
| C. | Parties other than the Data Controller indicated in the “Cookiess” section |
| D. | Companies belonging to the same business group, reps, sales consultants. |
| E. | Law firms; Legal authorities. |
Since data is also processed with IT instruments, it may be visible to parties who carry out assistance/maintenance on said systems.
Transfer of data to third countries or international organisations
The Data Controller transfers personal data to third countries under the following conditions:
| Purpose | Country | Lawfulness of transfer |
|---|---|---|
| A.B.C. | Please refer to the Cookiess section | |
Rights of the Data Subjects
The party to whom the personal data refers shall have the following rights:
Access: you can find out if your personal data is being processed, and if it is, obtain access to it and ask for a copy.
Rectification: you can ask for your personal data to be updated, corrected (if inaccurate) and to have incomplete data completed.
Erasure: you can have your personal data erased if certain conditions are met (please contact the Data Controller for further information).
Restriction: you can ask for your data to be tagged to limit processing in the future if certain conditions are met (please contact the Data Controller for further information).
Objection: you can object to the processing of your personal data for reasons connected to your own specific situation if the processing is based on legitimate interests or is necessary for the performance of a task carried out in the public interest or connected to the exercise of official authority vested in the Data Controller.
Portability: you can receive the personal data provided to the Data Controller in a structured format and ask to send it to another data controller if the processing is based on consent or on a contract and is carried out with automated methods.
Withdrawal of consent: you can withdraw consent for the purposes for which it was requested subject to the lawfulness of the processing carried out up to that time.
The actual rights that can be exercised with respect to the processing carried out are:
| Purpose | Access | Rectification | Erasure | Restriction | Objection | Portability | Withdrawal of consent |
|---|---|---|---|---|---|---|---|
| A. | X | X | X | X | X | ||
| B. | X | X | X | X | X | X | |
| C. | X | X | X | X | X | X | |
| D. | X | X | X | X | X | ||
| E. | X | X | X | X | X |
To exercise the above rights, it is possible to fill in the form available at https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1089924 and send it to the following address: info@legnox.it. The data subject may make a request to the same address to obtain further details in relation to the information set out above (for example balancing test on the legitimate interests or the list of data processors).
You may also lodge a complaint with a supervisory authority: for Italy the Data Protection Supervisory Authority (www.garanteprivacy.it).
INFORMATION ON THE PROCESSING OF PERSONAL DATA CONNECTED WITH FILLING OUT THE “CONTACTS” FORM
This policy statement supplements the website privacy policy in order to specifically illustrate how the Data Controller shall process the data entered in this form. We therefore invite you to view the website browsing privacy policy provided above.
Identity and contact details of the Data Controller
Legnox S.p.A., hereinafter also “Legnox” or “Data Controller”, with registered address at Via XXV Aprile, 4, Gorgo al Monticano (TV), available at the e-mail address info@legnox.it or on +39 0422 800220.
Legal purpose and basis
A. Management of information requests: personal data is processed for all requirements connected with the fulfilment of requests for information and/or quotes.
B. Newsletter: contact information is used to send advertising or commercial material to the e-mail address provided.
C. Management of the manifestation and withdrawal of consent: the Data Controller processes personal data to confirm that consent to marketing communications requires double opt-in authorisation. The Data Controller records withdrawals of consent (blacklist) to ensure that no further communications are sent to those that do not wish to receive them.
D. Defensive purpose: the Data Controller may need to process personal data to manage complaints and out-of-court or court-based disputes.
| Purpose | Legal basis (common data) | Legal basis (specific data) |
|---|---|---|
| A. | Performance of pre-contractual measures; Legitimate interest of the Data Controller to respond to requests received. | / |
| B. | Consent. | / |
| C. | Legitimate interest of the Data Controller to receive lawfully expressed consent and to trace withdrawals to avoid undesired communications. | / |
| D. | Legitimate interest of the Data Controller to ascertain, exercise or defend a right. | Ascertain, exercise or defend a right. |
Retention period
| Purpose | Retention period |
|---|---|
| A. | Time required to process requests and subsequent communications (generally 12 months). |
| B. | Until the withdrawal of consent. |
| C. | 1 month from data storage. Data stored on the blacklist is retained for 3 years. |
| D. | 10 years after the definitive finalisation of the dispute. |
Provision of data and consequences of refusal
| Purpose | Nature | Consequences |
|---|---|---|
| A. | Necessary | It will not be possible to receive the information requested. |
| B. | Optional | It will not be possible to receive promotion and marketing communications. |
| C. | Optional | It will not be possible to receive promotion and marketing communications. |
| D. | Necessary | It will not be possible to manage the dispute. |
Scope of communication
Data is processed by internal staff authorised to carry out specific duties and communicated externally according to the following rules
| Purpose | Categories of external recipients |
|---|---|
| A. | Reps, external consultants. |
| B. | Marketing consultancy firms, companies that offer technology platform hosting/management services. |
| C. | Marketing consultancy firms, companies that offer technology platform hosting/management services. |
| D. | Law firms; Legal authorities. |
Since data is also processed with IT instruments, it may be visible to parties who carry out assistance/maintenance on said systems.
Transfer of data to third countries or international organisations
The Data Controller transfers personal data to third countries under the following conditions:
| Purpose | Country | Lawfulness of transfer |
|---|---|---|
| B. C. | United States of America |
|
Rights of the Data Subjects
Access: you can find out if your personal data is being processed, and if it is, obtain access to it and ask for a copy.
Rectification: you can ask for your personal data to be updated, corrected (if inaccurate) and to have incomplete data completed.
Erasure: you can have your personal data erased if certain conditions are met (please contact the Data Controller for further information).
Restriction: you can ask for your data to be tagged to limit processing in the future if certain conditions are met (please contact the Data Controller for further information).
Objection: you can object to the processing of your personal data for reasons connected to your own specific situation if the processing is based on legitimate interests or is necessary for the performance of a task carried out in the public interest or connected to the exercise of official authority vested in the Data Controller.
Portability: you can receive the personal data provided to the Data Controller in a structured format and ask to send it to another data controller if the processing is based on consent or on a contract and is carried out with automated methods.
Withdrawal of consent: you can withdraw consent for the purposes for which it was requested subject to the lawfulness of the processing carried out up to that time.
The actual rights that can be exercised with respect to the processing carried out are:
| Purpose | Access | Rectification | Erasure | Restriction | Objection | Portability | Withdrawal of consent |
|---|---|---|---|---|---|---|---|
| A. | X | X | X | X | X | ||
| B. | X | X | X | X | X | X | |
| C. | X | X | X | X | X | ||
| D. | X | X | X | X | X |
To exercise the above rights, it is possible to fill in the form available at https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1089924 and send it to the following address: info@legnox.it. The data subject may make a request to the same address to obtain further details in relation to the information set out above (for example balancing test on the legitimate interests or the list of data processors).
You may also lodge a complaint with a supervisory authority: for Italy the Data Protection Supervisory Authority (www.garanteprivacy.it).