GDPR

Our Privacy Statement
Thank you for visiting our website and your interest in our company and services. Protecting your privacy when handling your data is important to us. Therefore, your personal data will only be processed in accordance with the provisions of GDPR data protection law. We want you to feel secure when visiting our website. We would explain to you how our privacy services work and how the protection of your personal data is guaranteed. According to Article 4 (1) GDPR, personal data comprises all information relating to an identified or identifiable natural person. An identifiable person is a natural person who can be identified directly or indirectly. Further information on this can also be found in Article 4 (1) GDPR. This Privacy Policy can be retrieved, saved and printed out at any time. Provided that we state our legitimate interest or a legitimate interest of a third party (Article 6 (1) lit f GDPR) as the legal basis for processing personal data, you have a right of objection pursuant to Article 21 GDPR: Provided that we state our legitimate interest or a legitimate interest of a third party (Article 6 (1) lit f GDPR) as the legal basis for processing personal data, you have a right of objection pursuant to Article. 21 GDPR:

according to Article 21 GDPR you have the right to object to the processing of personal data at any time. We will then no longer process the personal data for the purposes of direct marketing or any related profiling. We also will not process your personal information for any other purpose after an objection, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or the processing is for the purpose of establishment, exercise or defence of legal claims or defence of legal claims (see, e.g. Article 21 (1) GDPR, so-called “restricted right to object”). In this case, you must give reasons for the objection, on grounds relating to your particular situation. You may also object to the processing of your personal data for reasons arising from your particular situation for scientific or historical research purposes or for statistical purposes pursuant to Article. 89 (1) GDPR, unless the processing is necessary to fulfil a task in the public interest (see Article 21 (6) GDPR).

In order to provide the following Privacy Policy clear enough, we refer by links at various places to information and privacy notices that can be found on external websites. We make every effort to keep the links listed in this Privacy Policy up-to-date.

Controller

The controller responsible for processing personal data in accordance with Article 4 (7) GDPR is:
Di Candia S.r.l., Via Vittorio Veneto n. 10, 21010 Besnate, Italy

Your contact for data protection
If you have any questions regarding the processing of your personal data or your rights relating to data protection, please contact:
Cinzia Di Candia, Via Vittorio Veneto n.10, Besnate, Italy
Privacy e.mail : GDPR@dcdicandia.com

Log-Files
Every time you visit our website, data and information from your device's system are collected and stored it in server log files. web tracking service. We don't attempt to identify an individual person . Our focus is on what visitors to our website do, not who that visitor is. The data is automatically transferred by your browser when you visit our website. This includes the following information:

The purpose of this processing is to make our website accessible from your device and to enable our website to be displayed correctly on your device or in your browser. The data is also used to optimise the website and to ensure the security of our information technology systems.
The data is used for statistical purposes. The statistical analysis of user behaviour enables us, among other things, to react and optimise our offer as well as to identify security-relevant incidents. Processing for statistical purposes does not result in personal data but aggregated data. These results or the personal data are not used in support of measures or decisions regarding any particular natural person.
The legal basis for processing is Article 6 (1) lit f GDPR. We have a legitimate interest in presenting your browser with a technically functional website and allowing you to communicate between our server and your end device. We have a legitimate interest in the processing of data for statistical purposes in order to further optimise the website for your browser and to guarantee the security of our and your system.
We keep the processed information for 4 ( four ) weeks. The recipient of the data is Statscounter, which processes on our behalf, and the server host, that acts as a service to Di Candia Srl.

You have the right to object. You can inform us of your objection at any time by e-mail to GDPR@dcdicandia.com.

The provision of personal data is neither required by law nor by contract and is not required for the conclusion of a contract. You are also under no obligation to provide personal data.

Cookies
Our website uses "cookies". Cookies are text files that are stored on your device to make the use of a website easier. Cookies can store entries and settings on a website so that you do not have to enter or re-enter them each time you visit a website. Cookies contain a so-called cookie ID, which makes it possible to assign the device in which the cookie was stored.
The purpose of this processing is to make your use of our website comfortable and offer you the possibility to save settings. The legal basis for processing is Article 6 (1) lit f GDPR. We have a legitimate interest in presenting you with a website that stores your personal settings and makes visiting our website easier.

You have the right to object. You can restrict or completely prevent the setting of cookies in your browser settings. You can also have cookies deleted automatically when you close your browser window. Find out how to delete cookies in the most common browsers and change the cookie settings, including at: Google Chrome: https://support.google.com/chrome/answer/95647 Mozilla Firefox: https://support.mozilla.org/en-US/kb/delete-cookies-remove-info-websites-stored Apple Safari: https://support.apple.com/kb/PH21411

Information about Google services
We use various services of Google Inc. (“Google”), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For more detailed information on each of the specific Google services that we use on this website, see our Privacy Policy. By integrating Google services, Google may collect and process information (including personal data). It cannot be ruled out that Google also transfers the information to a server in a third country. As can be seen from Google's Privacy Shield certification (see https://www.privacyshield.gov/list under the search term “Google”), Google has committed itself to compliance with the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework on the collection, use and storage of personal data from the member states of the EU and Switzerland. Google, including Google LLC and its wholly owned subsidiaries in the United States, has certified that it complies with the Privacy Shield Principles. For more information on this, see https://policies.google.com/privacy/frameworks. We ourselves cannot influence which data Google actually collects and processes. However, Google states that the following information (including personal data) can be processed:

If you're signed in to your Google Account, Google may add the processed information to your account and treat it as personal information, depending on your account settings, including https://policies.google.com/privacy/partners
You can prevent this information from being added directly by logging out of your Google account or by using the appropriate account settings in your Google account. You can prevent cookies from being installed by making the appropriate changes to your browser settings, however, please note that if you do this you may not be able to fully use all the functions of this website. Here, you can find out how to delete cookies in the most common browsers:

Further information can be found in Google's privacy policy, which you can access here:

To learn more about Google's privacy preferences, https://privacy.google.com/take-control.html

Google Analytics
We use Google Analytics, a web analysis service of Google Inc. (“Google”), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses “cookies”, text files that are stored on your device and facilitate analysis of your use of the website. Google Analytics also uses  web beacons (non-visible graphics). These web beacons allow information such as visitor traffic to these pages to be evaluated. The information generated by cookies and web beacons about the use of our website (including the IP address of the users) is transmitted to and stored by Google on a server, possibly in the USA or other third countries. This information can be passed on by Google to its contracting partners. Information on Google’s existing Privacy Shield certification and other relevant data for data processing by Google in connection with the use of the Google services can be found in this Privacy Policy under „Information about Google services“. Google processes the following types of data:

In addition, you will find more detailed information on the information processed at https://policies.google.com/privacy#infocollect at “Information we get from your use of our services” and at https://privacy.google.com/businesses/adsservices/ .

You have the right to object. You can prevent Google from processing your data by downloading and installing a browser plug-in from the following link: https://tools.google.com/dlpage/gaoptout You can also prevent Google Analytics from collecting data by clicking on the following link. An opt-out cookie is set which prevents the collection of your data on future visits to this website: deactivate Google Analytics . You can also prevent web beacons from collecting data by downloading and installing the add-on available for the respective browser under the following link: https://adblockplus.org/ You can prevent installation of cookies by choosing the appropriate settings in your browser; however, we must advise you that, in this case, you may not be able to fully use all the functions of this website. Find out how to delete cookies in the most common browsers and change the cookie settings including at: Google Chrome: https://support.google.com/chrome/answer/95647 Mozilla Firefox: https://support.mozilla.org/en-US/kb/delete-cookies-remove-info-websites-stored Apple Safari: https://support.apple.com/kb/PH21411 Microsoft Internet Explorer: https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies

The processed information is stored for 26 months and automatically deleted after expiration of this retention period. Further information on data handling in connection with Google Analytics can be found in Google’s Data Privacy Policy: https://support.google.com/analytics/answer/6004245 To learn more about Google’s privacy settings, see https://privacy.google.com/take-control.html?categories_activeEl=sign-in The provision of personal data is neither required by law nor by contract and is not required for the conclusion of a contract. You are also under no obligation to provide personal data. However, failure to provide this information may result in you not being able to use our website or not being able to make full use of all the functions.

Contact form and newsletters
On our website there is a contact form, which you can use for requesting the access to Reserved Areas and for downloading our literatures. If you contact us via this business contact form, the data entered in the input fields will be processed by us. From this form, the following data is mandatory (marked with an “*”):

You may also add further data as voluntary information. We treat mandatory disclosures and voluntary disclosures in the same way. The mandatory disclosure is necessary in order to be able to assign the correct contact persons to the person making the request as part of our internal routing. The following data is also processed when the message is sent:

The purpose of processing personal data within the context of mandatory disclosures and voluntary disclosures is to process the business contact request and to be in commercial contact with the person in order to answer their request. The legal basis for the processing of your personal data in the context of business contact is Article 6 (1) lit b GDPR. The other personal data processed upon submission of the contact form (IP address, date and time of sending) serves to prevent misuse of our contact form and – once submitted – to document consent given and/or acknowledgement of the data protection notice. The legal basis for this is our legitimate interest pursuant to. Article 6 (1) lit f GDPR. We have a legitimate interest in preventing or proving misuse of our contact form. In addition, we have a legitimate interest in recording the consent and/or acknowledgement of the data protection notice you have given. If you have given us your consent for promotional activities, we also process the data for this purpose. The legal basis for this data processing is our legitimate interest pursuant to Article 6 (1) lit f GDPR. We have a legitimate interest in processing the information you submit as part of the business contact request in order to send you information about our products. We keep the processed information only as long as necessary for the intended purpose or as long as is required by law. The additional personal data collected during the sending of the contact form will only be stored for as long as is necessary or required by law for the intended purpose. The recipient of the data is 123formbuilder, which processes on our behalf, and the server host, that acts as a subcontractor to Di Candia Srl. Provided that we base the processing of your personal data on our legitimate interests, you have the right to object. We also send periodical newsletters through a third service, from which we process the following data :

The recipient of the data is Mailchimp, which processes on our behalf, and the server host, that acts as a subcontractor to Di Candia Srl. Provided that we base the processing of your personal data on our legitimate interests, you have the right to object.

You can send us or inform us of your objection at any time by e-mail to GDPR@dcdicandia.com  

 The provision of personal data is neither required by law nor by contract and is not required for the conclusion of a contract. You are also under no obligation to provide personal data. However, failure to provide this information may result in you not being able to use our contact form.

Social networks and external links
In addition to this website, we also maintain presences in social media, which you can access via corresponding buttons on our website. If you visit any such media presence, personal data may be transmitted to the provider of the social network. It is possible that in addition to storing the data you have specifically entered in the social media, other information may also be processed by the social network provider. Moreover, the social network provider may process the most important data about the computer system which you use to visit it – for example, your IP address, the processor type used, and the browser version and plug-ins. If you are logged in to the respective network with your personal user account while visiting such a website, this network can assign the visit to this account. The purpose and scope of the data collection by the respective social media as well as the further processing of your data there and your rights in this regard can be found in the respective regulations of the controller concerned, e.g. on: Facebook: https://www.facebook.com/about/privacy/ Twitter: https://twitter.com/privacy Google: https://policies.google.com/privacy We also point out that our website contains further links to external third-party websites, whereby we have no influence on the processing of data on these third-party websites.

Data security
We secure our website and other systems through technical and organisational measures against loss, destruction, access, modification or distribution of your data by unauthorised persons. However, despite regular checks, complete protection against all risks is not possible.

Changes to this Privacy Policy Changes in the law or in our internal processes may make it necessary to adapt this Privacy Policy. In the event of any such changes, we will inform you of these above the heading “Privacy Policy”. You have a right to withdraw any consent you have given. Please note that (if you do not make use of your right to withdraw consent) the current version of the Privacy Policy is the one that is valid.

Withdrawal of consent
You have the right to withdraw any consent given at any time with effect for the future, without affecting the lawfulness of any processing which took place before consent was withdrawn.

Rights of the data subject

You have the following rights:

For enquiries of this kind, please contact GDPR@dcdicandia.com. Please note that we must ensure that such requests are actually from the person concerned. Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority. Automated decision-making does not take place on our website.

Di Candia S.r.l. | Via Vittorio Veneto n.10 | 21010 Besnate, Italy | Tribunale di Busto Arsizio 25337

Issued: 24-05-2018