Information on the processing of personal data through the website

1. Information about the data controller and contact details 

hereinafter referred to as “Data Controller”.

The Data Controller resides in Italy, and therefore no representative has been appointed.

2. Contact details of the Data Protection Officer

The Data Controller has not appointed a data protection officer.

3. Processing method

3.1 Cookies and environmental data

3.1.1 Technical cookies

• Browsing, functional, session cookies: these cookies ensure that the website functions properly.  So-called session cookies (which are not permanently stored on the data subject's device and are automatically deleted when the browser is closed) are used only to send session identifiers. Session cookies are used in order to enable safe and efficient website exploration.
• Statistics cookies: The website uses the data controller’s own statistics cookies or third party statistics cookies. In the latter case, tools are used to reduce the identifying capacity of the cookies, even by masking significant parts of the IP addresses processed. Furthermore, the use of third-party statistics cookies is subject to contractual obligations pursuant to which third party suppliers agree to use them exclusively to provide the service, store them separately and not to “enrich” or “cross reference" these cookies with other information that may be available to them. In any case, the Data Controller does not allow third party suppliers to use cookies for purposes other than those specified above.
  The information obtained from Google Analytics cookies about what the user has done on the website, are sent by the browser of the data subject to Google Inc., with registered office at 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States, and are stored on the servers of the company.
  Google's privacy policy, which we ask you to read, is available on the following link: http://www.google.com/intl/it/privacy/privacy-policy.html
  The privacy policy applicable to Google Analytics services is available on the following link: http://www.google.com/intl/en/analytics/privacyoverview.html
• Browsing data and environmental variables: the computer systems and procedures used to operate the site automatically obtain, during normal operation, personal data relating to the browsing history of the data subject, including environmental variables. This category of data includes:
  ‍− The IP addresses of the computers of the users of the service; 
  − Number of accesses; 
  − Pages displayed; 
  − The date and time of access; 
  − The url the browser was in before displaying our page; 
  − The type of browser;
  − The operating system. 

3.1.2 Non-technical cookies

• ‍Profiling cookies: the website uses profiling cookies provided by third parties.
• Typekit (Adobe): Typekit is a font style service provided by Adobe Systems Incorporated that allows this Website to integrate such content within its pages.
  − Personal Data collected: Usage data and various types of Data as specified by the privacy policy of the service.
  − Place of processing: United States – Privacy Policy. Organisation participating in the Privacy Shield.‍
• Google Maps Widget (Google Inc.): Google Maps is a map service provided by Google Inc. that allows this Website to integrate such content within its pages.
  − Personal Data collected: Cookies and Usage Data.
  − Place of processing: United States – Privacy Policy. Organisation participating in the Privacy Shield.

Delete and disable cookies

Because cookies are normal text files, they may be accessed with a word processor.
You may set your browser preferences to turn off cookies.

Delete/disable cookies with Firefox: http://support.mozilla.com/it/kb/Eliminare%20i%20cookie

Delete/disable cookies with Edge: https://support.microsoft.com/it-it/help/4027947/windows-delete-cookies

Delete/disable cookies with Chrome: http://support.google.com/chrome/bin/answer.py?hl=it&answer=95647

 

3.2 Data provided voluntarily by the data subject

The data the data subject provides optionally and freely when it sends an e-mail to the addresses on the website may be obtained for the purposes specified. Besides the email address which is required to reply to the sender, any other personal data contained in the message will be processed.

The data collected will be stored and processed only to file the message and will not be used for any other purpose.

4. Purpose and legal basis of processing

As regards the technical cookies specified by point 3.1.1 and browsing data, the personal data of the data subject are processed to ensure the proper use of the website; the use of the data is necessary for contractual purposes in order to make the website available in accordance with the relevant terms and conditions. In the latter case, the legal basis of processing is the need to comply with the provisions of the contract to which the data subject is party.

As regards the non-technical cookies, specified by point 3.1.1., the processing of personal data carried out through them ensures a personalised browsing experience through profiling. In the latter case, the legal basis of processing is the data subject’s consent.

As regards the data provided voluntarily by email, the processing of personal data carried out makes it possible to reply to the requests of the data subjects. The legal basis of processing is the legitimate interest of the Data Controller to reply to data subjects.

5. How to express consent

Consent to the processing of personal data using non-technical cookies may be given:

• By clicking the specific box in the banner.

6. Source of the personal data 

Only data provided by the data subject in accordance with this policy, obtained through the website or sent by the data subject by email, will be processed. Data from sources available to the public will not be processed.

7. Recipients and categories of recipients of personal data

The data subject’s personal data may be sent to the following recipients:

• Communications companies that carry out commercial communication and profiling activities on behalf of the Data Controller, as data processors;
• Companies that offer information society services, above all, companies that offer hosting services;
• Companies that offer cloud software.

8. Categories of data

The personal data of the data subject will be processed. No special data will be processed.

9. Transfer of data

The Data Controller intends to transfer the personal data to a third country or an international organisation. The above may include for example:

• Communications companies that provide communications services on behalf of the Data Controller;
• Companies that offer information society services, above all, companies that offer hosting services;
• Service providers of the communications company;
• Companies that offer cloud software.

The transfer of personal data to these subjects, if these are established in a Third Country or an international organization, is carried out in the presence of an adequacy decision of the European Commission, which has verified how the Third Country, region or one or more specific sectors in the third country, or the international organization in question guarantees an adequate level of protection of the data subject's rights.  In any case, the Data Controller - if it deems this to be appropriate - reserves the right to conclude specific separate agreements which oblige such subjects to adopt adequate security measures, including organisational measures, aimed at providing appropriate guarantees regarding the data subject's rights. Google Inc., in particular, is required by contract to ensure adequate protection of the data subject’s rights. The data may thus be transferred to the following countries: United States of America. To obtain a copy of this data or the place where the data have been made available, simply send a request to the email address indicated.

10. Period of retention of personal data 

The personal data processed and retained for the purposes specified by this policy are processed and retained for a period not exceeding 12 months from the date they are obtained;

The Data Controller in any case reserves the right to ask the data subject to renew his/her consent to processing and/or to check consent already given.

11. Optionality of giving consent and consequences of refusing consent

As regards the personal data processed, in order to ensure proper use of the website, providing your personal data is a contractual obligation in the case of technical cookies, given that they are essential to ensure the proper functioning of the website, but is optional in the case of non-technical cookies. In the latter case, failure to provide your personal data only means that it will not be possible to provide a personalised service.

As regards data voluntarily provided by email, the processing of personal data is not a contractual obligation, but is based on the Data Controller’s legitimate interest to reply to the data subjects; without such processing it would not be possible to reply to the requests of the data subject.

12.Rights of the data subject

12.1 Right to object

The data subject, as an interested party, has the right to object, at any time on grounds relating to his/her particular situation,  to the processing of personal data concerning him or her, pursuant to point (e) or (f) of Article 6(1) of the GDPR, including profiling based on those provisions. The Data Controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

12.2 Other rights

The Data Controller also informs the data subject that it has the following rights:

• Right of access by the data subject: the data subject shall have the right to obtain from the Data Controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the specific information, in accordance with article 15 of the GDPR;
• Right of rectification: the data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement, in accordance with article 16 of the GDPR;
• Right to erasure, including the right to withdraw consent: the data subject shall have the right to obtain from the Data Controller the erasure of personal data concerning him/ her without undue delay and the Data Controller shall have the obligation to erase the personal data without undue delay; the data subject also has the right to withdraw his/her consent, where any of the grounds established by article 17 of the GDPR apply; in this case, the right to withdrawal may be exercised at any time without prejudice to the lawfulness of any data processed on the basis of consent given before such withdrawal;
• Right to restriction of processing: the data subject shall have the right to obtain from the Data Controller the restriction of processing where one of the cases established by article 18 of the GDPR apply;
• Right to data portability: the data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to the Data Controller, in a structured, commonly used and machine-readable format and shall have the right to transmit those data to another controller without hindrance from the Data Controller to which the personal data have been provided in the cases and under the conditions specified by article 20 of the GDPR.

13. Exercising your Rights

Requests to exercise the rights indicated by this policy, including, the right to erasure and the right to withdraw consent given, should be addressed directly to the Data Controller at the email address provided. Alternatively, you may exercise your rights by sending a registered letter with return receipt to the address of the Data Controller

Specific notes on contents, texts and images

All graphic documentation and texts are shown for illustrative purposes only and are not intended to be relied upon for, nor to form part of, any contract.

Energy-efficient development and conservation project.