PRIVACY POLICY FOR VISITORS AND POSSIBLE CANDIDATES

This information notice, addressed to all visitors to the website www.lorenzinet.com (hereinafter referred to as the “Site”), owned by Lorenzi s.r.l., contains information relating to the management method for the processing of personal data released by same visitors to the aforementioned company site, pursuant to legislative decree 196 of the Privacy Code of 30 June 2003 and the new EU Regulation 2016/679 of 27 April 2016. The information is provided only for the site in question and not for other sites websites that may be consulted by the visitor via links.

1. Place and Data Controller

The data controller is Lorenzi s.r.l. with registered office in via Oslo 2, 35010 Vigonza (PD), tax code and VAT no. 01319110282, info@lorenzinet.com which may at its discretion delegate all or part of its functions to external technical consultants who will be required to keep the information acquired confidential.

2. data Processing purposes

Your Data is processed, without your prior consent, for the following purposes:

a) the execution of the contract or the fulfillment of pre-contractual commitments: in particular,
• manage a contact, technical, commercial, contractual and/or supply request;
• manage and maintain the Site;
• send response communications following emails sent directly to the contacts of our services whose addresses are listed on the Site;

b) the pursuit of a legitimate interest of the Data Controller
in particular:
• analyze the cookies – as indicated in the Cookie Policy – deriving from the use made of the Site;
• prevent or detect fraudulent activity or abuse harmful to the Site;
• exercise the rights of the Owner, for example the right of defense in court.

3. Object of the treatment

In managing the site, the Data Controller processes non-sensitive identification data deriving, respectively, from browsing within the website itself and from voluntary provision by the user, when sending an application using the appropriate form. More detail regarding the object of the two types of processing is provided below.

Identification data deriving from navigation
The information systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This is information that is not collected to be associated with identified interested parties but which by their very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment.
These data are collected by Google Analytics used in order to obtain anonymous statistical information on the use of the Site, to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site: as a result, the data on web contacts could be kept in accordance with and limited to this purpose. Starting from the IP address and the domain name of the computers used, it will be possible, limited to the purpose of ascertaining the reported responsibility, to trace further identification data of the user (in particular, name, surname, e-mail address, telephone number, etc.).
For navigation and consultation of the site, the processing of sensitive data or those from which it is possible to infer the religious beliefs, policies and information on the user’s state of health is not foreseen.

4. Cookie policy

Cookies are data that are sent to the visitor’s internet browser and are memorized by it before being re-transmitted to the site on the next visit (technical cookies) or to another site that manages such data (third-party cookies). Cookies are aimed at the correct functioning of the Site as they allow the memorization of preferences, optimization activities and statistics. Third-party cookies are managed by Lorenzi s.r.l. by Google Analytics for the sole purposes listed above.
For the management of the visitor’s consent to their use, please refer to the treatment of privacy by Google www.google.com/analytics/learn/privacy.html. The settings for managing and disabling cookies change according to the type of browser used on the visitor’s computer. The latter can always request the general deactivation of cookies by changing the settings of their computer. To deactivate Google Analytics, consult instead http://tools.google.com/dlpage/gaoptout.

5. Methods of treatment

The processing of your data is carried out – electronically – by means of collection, registration, updating, organization, conservation, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, cancellation and destruction of data .

6. Duration of treatment

The Data Controller processes the Data for the time necessary to respond to your request and fulfill the aforementioned purposes and in any case for no more than 1 year from collection for contact data and for no more than 6 months from collection for navigation data.
Upon expiry of the term, the visitor may be asked to renew his consent to the processing of his data, without prejudice to the right of the same at any time to revoke the consent given.
The subjects to whom the personal data refer have the right pursuant to art. 7 of Legislative Decree 196/2003 to obtain at any time confirmation of the existence or otherwise of the same data in our archives, verify its accuracy, request its modification and/or cancellation.

7. Data Access

Your data can be accessed for the above purposes:
• employees and/or collaborators of the Data Controller, in their capacity as data processors and/or internal data processors and/or system administrators;
• third-party companies or other subjects (for example, Customer Care operators, IT service providers, suppliers, credit institutions, professional firms, etc.) who carry out outsourced activities on behalf of the Data Controller, in their capacity as external data processors.

8. Data Communication

Your Data may be communicated, even without your consent, for the aforementioned purposes to supervisory bodies, law enforcement agencies or the judiciary who will process them, upon their express request, as independent data controllers for institutional purposes and / or by virtue of the law in the course of investigations and controls. Your Data may also be communicated to third parties (for example, partners, freelancers, agents, etc.), as independent data controllers, for carrying out activities instrumental to the aforementioned purposes.

9. Data Transfer

The Data are not disclosed but can be transferred for the aforementioned purposes to non-EU countries. To ensure an adequate level of protection of Personal Data, the transfer will take place by virtue of the adequacy decisions approved by the European Commission or the adoption, by the Data Controller, of the Standard Contractual Clauses prepared by the European Commission.

10. Nature of providing Data and consequences of refusing to answer

The provision of data is mandatory to forward a contact request to the Data Controller. If you decide not to provide your data, we will not be able to follow up on your request.

11. Rights of the interested party

We inform you that, as an interested party, you have the right to:
• obtain confirmation of the existence or otherwise of your Personal Data, even if not yet registered, and that such Data is made available to you in an intelligible form;
• obtain an indication and, where appropriate, a copy of: a) the origin and category of Personal Data; b) of the logic applied in case of treatment carried out with the aid of electronic instruments; c) the purposes and methods of processing; d) of the identification details of the Owner and of the managers; e) of the subjects or categories of subjects to whom the Personal Data may be communicated or who can learn about them, in particular if they are recipients of third countries or international organizations; e) when possible, of the data retention period or the criteria used to determine this period; f) the existence of an automated decision-making process and, in this case, the logic used, the importance and the consequences envisaged for the data subject; g) the existence of adequate guarantees in the event of transfer of Data to a non-EU country or to an international organisation;
• obtain, without unjustified delay, the updating and correction of inaccurate data or, when interested, the integration of incomplete data;
• obtain the cancellation, transformation into anonymous form or blocking of Data: a) processed unlawfully; b) no longer necessary in relation to the purposes for which they were collected or subsequently processed; c) in case of revocation of the consent on which the treatment is based and in case there is no other legal basis, d) if you have opposed the treatment and there is no overriding legitimate reason to continue the treatment; e) in case of fulfillment of a legal obligation; f) in the case of Data referring to minors. The Owner can refuse the cancellation only in the case of: a) exercise of the right to freedom of expression and information; b) fulfillment of a legal obligation, execution of a task carried out in the public interest or exercise of public authority; c) reasons of public health interest; d) archiving in the public interest, scientific or historical research or for statistical purposes; e) exercise of a right in court;
• obtain the limitation of the treatment in the case of: a) disputing the accuracy of the Personal Data; b) unlawful treatment of the Data Controller to prevent its cancellation; c) exercise of your right in court; d) verification of the possible prevalence of the legitimate reasons of the Data Controller with respect to those of the interested party;
• receive, if the treatment is carried out by automatic means, without impediments and in a structured, commonly used and readable format, the Personal Data concerning you to transmit them to another holder or – if technically feasible – to obtain direct transmission by the Holder to another holder;
• object, in whole or in part: a) for legitimate reasons, to the processing of your Personal Data, even if pertinent to the purpose of the collection; b) to the processing of Personal Data concerning you for the purpose of sending advertising material or direct sales or for carrying out market research or commercial communication, through the use of automated call systems without the intervention of an operator by email and/or by traditional marketing methods by telephone and/or paper mail;
• propose a complaint to the Personal Data Protection Authority.

In the above cases, where necessary, the Data Controller will inform the third parties to whom your personal data are communicated of the possible exercise of rights by you, with the exception of specific cases (e.g. when this fulfillment proves impossible or involves the use of means manifestly disproportionate to the protected right).

12. Methods of exercising rights

You may exercise these rights at any time:
• by sending a registered letter with return receipt to the owner’s address;
• by sending an email to privacy@lorenzinet.com