Campo dei Fiori S.r.l. (“CDF”) is aware of the importance of protecting the right to privacy and, in its quality of Data Controller, informs the users of www.campodeifiori.it website (“Users” or “Data Subjects”) that the personal data collected through navigation on the website (“Data”) will be processed in compliance with the law on the protection of personal data. When using the services offered by the site (filling out MTM forms, etc.) the user will receive specific information regarding the further processing of personal data made by CDF.
Pursuant to Article 13 of Regulation (EU) no. 679/2016 (“Regulation”), with reference to the methods of management and processing of Users’ Data, CDF provides the following information.
1. Types of data collected, purpose and legal basis of processing Navigation data The computer systems and software procedures used to operate the www.campodeifiori.it website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses or domain names of the users' terminals that connect to the site, the MAC (Media Access Control) addresses, the addresses in the URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to forward the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the response from the server (successful, error, etc.) and parameters related to the operating system and to the user's computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site. The legal basis that legitimises that processing is art. 6 par. 1, lett. b) of the Regulation, since it allows the User to use the service requested. The same data may also be used to fulfil legal obligations or to requests of the judicial Authority. The legal basis that legitimises that processing is art. 6 par. 1, lett. c) of the Regulation, since it is necessary to fulfil a legal obligation to which the data controller is subject
Users are requested not to use the tools provided by the site any data concerning health, political opinions or religious beliefs as well as any other special categories of data. If provided without a proper written consent of their processing, such Data will be immediately deleted
Cookie The site uses technical cookies (session and navigation), to ensure normal navigation and use of the website (allowing, for example, to authenticate the access in restricted areas). The site also uses profiling cookies and third-party analytics (with reduced identifying potentials), in order to monitor the use of the site by users for the purpose of optimising the web platform and statistics (analytical). For all information concerning the processing of personal data by means of cookies, please refer to the policy on the extended cookie, linked in the footer of each website page. 2. Data retention period Personal data collected and processed when browsing the www.campodeifiori.it site will be kept for the entire period of service providing and in any case deleted or rendered anonymous within 7 days. Personal data sent voluntarily by users through the tools on the site will be deleted after providing the service requested or having responded to them and in any case within the maximum period of 6 months from the end of this activity, with the exception of those required to comply with fiscal, accounting and administrative regulations or to fulfil other legal obligations and to document the activities carried out. 3. Modalities for Data processing The Data will be stored and processed with electronic tools and will be stored both electronically and on paper, organised in a database, and on any other type of appropriate support. Specific security measures are followed to prevent data loss, illicit or incorrect use and unauthorised access. The processing of Data carried out by CDF does not involve automated decision-making processes. 4. Reporting data The communication of navigation data is a necessary to provide the requested service (navigation on the site) and mandatory for this purpose: in default, the navigation of the www.campodeifiori.it website will be impossible. 5. Entities to whom personal data may be disclosed The Data may be communicated to: (i) subjects who are entitled and have the interest to access to the Data by law or secondary and / or EU legislations; (i) Data Controller’s internal staff; (iii) companies, associations or professional offices that provide services and activities, on behalf of the Data Controller, as Data Processors for the fulfilment of legal obligations, as well as for every organizational and administrative need necessary to provide the services requested. The names of the Data Processors are listed in an updated list available at CDF premises (to be requested at the addresses indicated in point 9). The Data will not be disseminated. 6. Data Transfer abroad or to international organisations CDF does not transfer customer data processed for the purposes indicated in this policy in countries located outside the European Union or to international organizations 7. Link to sites or services of third parties This policy is provided only for the processing of personal data made through this website and the tools provided by the same, and not for other websites that may be consulted by the user through connection, whose managers operate as independent data controllers. Users are therefore invited to read their privacy policies carefully, before accessing the services of third parties. 8. Data Subject’s rights In relation to the above-mentioned Data processing, Data Subjects have the right to exercise at any time the rights provided by the Regulation, including, for example, to obtain: (a) access, updating, correction or, when interested, integration of data; (b) deletion, transformation into anonymous form or blocking of data processed in violation of the law; (c) the limitation of data processing; (d) copy of their data in standard format. Furthermore, Data Subjects have the right to obtain the indication of: (i) the origin of personal data; of the purposes and methods of the processing; (ii) the logic applied in case of processing carried out with the aid of electronic instruments; (iii) details of the Controller, Processor(s), and appointed representative. Data Subjects are also entitled to object, in whole or in part: