Privacy Notice pursuant to Article 13 of the European Regulation on the Protection of Personal Data 679/2016 (GDPR)

1. This Notice

1.1 24 Enterprise di David Raffaele, aware of the importance of ensuring the security of private information, in accordance with applicable Italian and European legislation, describes the methods of processing the personal data of those ("User", "Users") who connect to this Site, directly or through a link from another site.

1.2 This Site contains links to other websites: this notice does not pertain to those other websites that the User may consult via specific links. They may contain "personal data processing notices" that differ, in whole or in part, from this Notice. Therefore, 24 Enterprise di David Raffaele invites the User to review the privacy notice of each site to which they link before entering any personal information there.

1.3 This notice applies exclusively to personal data processed through and on this Site: it does not pertain to the processing of data through other means (e.g., telephone, mail, etc.).

1.4 This is the current Notice, updated to the date appearing at the bottom: 24 Enterprise di David Raffaele reserves the right, at any time, to modify and update it.

1.5 The statements of 24 Enterprise di David Raffaele below integrate the Legal Notes (Terms and Conditions of Use) of the Site but do not have a contractual nature and therefore do not generate contractual obligations towards the User and corresponding rights of the User.

2. Data Controller

2.1 The Data Controller is: 24 Enterprise di David Raffaele, Tax Code DVDRFL94L24I872Z and VAT No. 03676980794, with registered office at Piazza Roma 4, 88069 Stalettì (CZ), sole proprietorship.

3. Place of Data Processing

3.1 The processing of personal data related to the consultation of the Site takes place at the registered office of 24 Enterprise di David Raffaele mentioned above. The data are stored at a Data Center located at the registered office of 24 Enterprise di David Raffaele at Piazza Roma 4, 88069 Stalettì (CZ).

4. Types of Data Processed

Traffic and Navigation Data Provided by the User's Computer

4.1 The IT systems and software procedures used for the operation of the Site acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes the IP addresses or domain names of the computers used by Users who connect to the Site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.), and other parameters related to the User's operating system and IT environment. Such data constitute the access log.

4.2 The Site also acquires and stores URL sequence data (Uniform Resource Locator) identifying the resources visited or searched for by the User on the Internet (e.g., web pages, documents, images, etc.), including the date and time of access and their content.

4.3 The Site also acquires data and information from the User's computer through the use of permanent and/or session cookies:

  • Permanent Cookies: the IT system of the Site, during its normal operation, sends from the server of 24 Enterprise di David Raffaele to the User's browser some data that are stored on the User's computer's hard drive to allow navigation in certain specific reserved areas of the Site.
  • Session Cookies: the IT system of the Site sends some data consisting of random numbers generated by the server, the so-called session cookies, which are not permanently stored on the User's computer and disappear upon closing the browser. The sending of such data serves to allow the transmission of session identifiers necessary for the safe and efficient exploration of the Site and to collect information about the User's use of the Site.

Any profiling cookies are processed solely to allow the display of personalized banners. No targeted advertising will be sent thanks to the use of such cookies. Consent to their use must be expressed by accepting the use of the Site as per the Privacy Guarantor's Provision of June 4, 2014.

4.4 Most Users' browsers are configured to automatically accept cookies, but the User can set their browser to disable, either permanently or from time to time, the reception and saving of new cookies; or they can set their computer to receive a warning when a cookie is about to be stored. In case of disabling cookies, the User, while able to access the Site, may not be able to navigate in specific and/or reserved areas.

4.5 In general, the Site acquires and stores—and sometimes communicates to third parties—all the browsing data described above exclusively in an anonymous and aggregated form. The processing of such data allows the Data Controller to manage and control the proper functioning of the Site and to carry out statistics and sampling for promotional or scientific purposes, executed directly by 24 Enterprise di David Raffaele or also through specialized third-party companies.

Data Voluntarily Provided by the User

4.6 The Site may sometimes request the User to provide certain personal information such as, for example, name and surname, professional address, phone number, email address, etc. The provision of such data depends solely on the User's will and is therefore absolutely optional.

4.7 To access certain content of the Site in specific reserved areas and to fully utilize the Site's functionality, the User is required to:

  • Obtain a unique pair of keys (Username and Password) through a registration procedure;
  • Subsequently, in each new session, enter their Username and Password for recognition by the authentication system.

4.8 The personal data collected from the form filled out by the User upon their voluntary registration (Registration Data) consist of information related to the User's contacts such as name and surname or company name, professional title, postal address, email address, phone number, fax. The Site's IT system automatically associates such data with the Username and Password chosen by the User and links them to an account. In accesses subsequent to the first one, it will be possible to access the registration personal data only by entering Username and Password; therefore, the User is fully responsible for the custody of their Username and Password.

Data Provided by Third Parties

4.9 The Site's IT system sometimes also processes Users' personal and contact data published in public lists (e.g., telephone subscriber databases, professional order databases, social security databases of the medical-health categories, etc.). As such, this data may be subject to processing by 24 Enterprise di David Raffaele as an independent data controller, in compliance with GDPR provisions and in particular those provided for regarding unsolicited communications (email, SMS, MMS, electronic fax).

5. Purpose of Processing

The provided personal data will be processed for the following purposes:

5.1 Activities strictly related and functional to the operation of the services: for example, allowing the User access to the offered services and viewing the Site's content; allowing the User to receive the requested products or services, executing the received orders; responding to the User's questions and requests.

5.2 Technical management of the Site and its IT system: for example, acquisition, response, and management of information related to the account; securing and controlling the proper functioning of the Site; monitoring the Site's activity.

5.3 Enrichment or personalization of the Site's content, services, or design on the occasion of a single visit or repeated accesses.

5.4 Aggregated profiling (i.e., anonymous, without any prejudice to privacy and confidentiality of each registered controller's data) of Users and their access to reserved specialist pages, for scientific and/or market research, analysis, and report generation, carried out directly by 24 Enterprise di David Raffaele or also through specialized third-party companies.

5.5 Communication with the User regarding changes or updates to the Site and its services; advertising communications, communications of special offers and promotions; requests for market surveys to which the User may freely choose whether to participate or not.

6. Methods of Processing

6.1 The processing of personal data occurs through IT, telematic, and manual tools, both as 24 Enterprise di David Raffaele and under other names and trademarks.

6.2 The processing of data occurs in compliance with GDPR and the prescriptions defined within 24 Enterprise di David Raffaele.

7. Categories of Data Processors

7.1 The processing is carried out by the Controller and its appointed persons: employees, agents, representatives, third-party providers (e.g., companies providing data processing services, invoice printing, packaging and labeling of online purchased products, shipping, etc.).

7.2 The processing is carried out by 24 Enterprise di David Raffaele and, where applicable, by subjects (companies, associations, entities) for the fulfillment of legal obligations.

7.3 The processing of data by 24 Enterprise di David Raffaele and its appointed persons may occur regardless of the User's consent in the following cases:

  • 7.3.1 At the request of judicial authorities, or to defend or protect their rights in administrative, judicial, or arbitration proceedings;
  • 7.3.2 In cases where the processing of data is necessary to allow direct investigations to combat illicit activities, acts in fraud of the law, or to ensure the safety of persons or things; in all cases, in general, where the transmission of data is required by law;
  • 7.3.3 In the event that 24 Enterprise di David Raffaele is acquired by third parties, or in the event that this Site or some of its contents are transferred to third parties.

8. Rights of the Data Subjects

8.1 The User registered on the Site is solely responsible for the accuracy of the personal information entered therein, also for the purposes of Legislative Decree 28 December 2000 No. 445. Pursuant to Articles 15 to 21 of GDPR, the Data Subject has the right to:

  • Obtain confirmation of whether or not personal data concerning them exists, even if not yet registered, and their communication in an intelligible form.
  • Obtain the indication:
    • a) the origin of the personal data;
    • b) the purposes and methods of processing;
    • c) the logic applied in the case of processing carried out with the aid of electronic tools;
    • d) the identifying details of the Controller, the Data Processors;
    • e) the subjects or categories of subjects to whom the personal data may be communicated or who may come to know about them as a Designated Representative in the territory of the State, Data Processors, or Appointees.
  • Obtain:
    • a) the updating, rectification or, where interested, the integration of the data;
    • b) the cancellation, transformation into anonymous form or the blocking of data processed in violation of the law, including those for which retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;
    • c) the attestation that the operations referred to in letters a) and b) have been brought to the knowledge, also regarding their content, of those to whom the data have been communicated or disseminated, except in cases where such fulfillment proves impossible or involves the use of means manifestly disproportionate compared to the protected right.

The User can exercise such rights recognized by law by contacting 24 Enterprise di David Raffaele at the contacts indicated in point 11 below.

8.2 Starting from May 25, 2018, the Data Subject can also, pursuant to Articles 15-21 of GDPR, exercise the following specific rights:

  • Right of access
  • Right of rectification
  • Right to erasure (right to be forgotten), except where processing is necessary for the Controller to exercise rights to freedom of expression and information, to fulfill a legal obligation or to perform a task carried out in the public interest, for archiving in the public interest, scientific or historical research purposes or statistical purposes, to establish, exercise or defend a right in a judicial proceeding.
  • Right to restriction of processing
  • Right to object
  • Right to withdraw consent at any time, without affecting the lawfulness of the processing based on consent before its withdrawal;
  • Right to lodge a complaint with the Data Protection Authority.

Therefore, if the User wishes to exercise such rights, they may do so by contacting 24 Enterprise di David Raffaele at one of the contacts indicated in point 11 below.

8.3 24 Enterprise di David Raffaele reserves the right to communicate changes or updates to the Site to the User whenever necessary.

9. Retention of Personal Data

9.1 24 Enterprise di David Raffaele retains the personal data collected from the User for as long as such information is deemed relevant for commercial purposes, and in any case, up to a maximum of two years from the last interaction or until the User requests the deletion of their data by contacting 24 Enterprise di David Raffaele at one of the contacts indicated in point 11 below.

10. Information Security

10.1 24 Enterprise di David Raffaele is aware of the importance of ensuring the security of the private information it comes to know and therefore commits to protecting the privacy of the Users of its Site.

10.2 Personal and demographic information, including login credentials (username/login and password) of each User, are sent and stored on servers equipped with firewalls and physically located in protected data centers.

10.3 Logins and passwords are transmitted over the Internet in encrypted form via SSL protocol.

10.4 Furthermore, 24 Enterprise di David Raffaele adopts internal security procedures.

10.5 Nevertheless, 24 Enterprise di David Raffaele cannot be held responsible for any unauthorized access, unauthorized payments, data loss (e.g., passwords), illicit/incorrect uses, or alterations of personal information that occur beyond its control, nor can it guarantee the correct and safe use of the User's personal data by third parties.

11. Contacts

11.1 The User can exercise the rights recognized by Legislative Decree 196/2003 and European Regulation 679/2016 by submitting any request, question, comment or complaint regarding this Notice, or the way in which their personal data are processed on the Site to:

Data Controller
24 Enterprise di David Raffaele
Piazza Roma 4, 88069 Stalettì (CZ)
Tel: +39 3533885467
PEC: raffaeledavid@pec.net
Email: info@euronado.com

Notice updated on September 3, 2024