The user’s personal data are managed by CR TUBI, which is the data controller, in compliance with the principles of protection of personal data regulated by the GDPR 2016/679 Regulation.
METHODS AND PURPOSE OF DATA PROCESSING
The data processed are as follows:
1) Navigation data: During their normal operation, the IT systems and software procedures used to operate this website acquire some personal data whose transmission is implicit in the use of Internet communication protocols.
This is information that is not collected to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s computer environment.
The data thus collected could be used to ascertain responsibility in the event of any computer crimes against the site.
2) Data provided directly by the user The optional, explicit and voluntary sending of data as requested by various sections of this site is used to fulfill the user’s requests (example merely indicative and not exhaustive: when requesting information or explanations by writing to the e-mail addresses on the site on the home page or in the internal pages or when spontaneously sending CVs for the purpose of proposing themselves as candidates, or when making direct calls or sending faxes to the numbers always present in the “contacts” section) .
The data collected through the site are processed through IT and telematic procedures, for the time strictly necessary to achieve the purposes for which they were collected, in accordance with the “conservation limitation principle”, art.5, GDPR, in compliance with the the aforementioned legislation and the confidentiality obligations which inspire the activity of the Data Controller. The data may also be processed on paper or on any other type of suitable medium, in compliance with the appropriate security measures pursuant to art. 5 par. 1 letter F of the GDPR.
We adopt all the security measures provided for by the Regulation to protect the collected data, in order to avoid the risk of data loss or theft, unauthorized access and illegal use.
If you choose to contact us using the contact form on our site or an email link like this, none of the data provided by the user will be stored by this website or transferred / processed by any of the third party data processors.
The data will instead be collected in an e-mail and sent to us via the SMTP (Simple Mail Transfer Protocol) protocol. Our SMTP servers are protected by TLS (also known as SSL), which means that the email content is encrypted using 256-bit SHA-2 encryption before being sent over the Internet. The content of the email is then decrypted by our local computers and devices. The provision of data through the forms on the site or the communications transmitted on a voluntary basis by the same user, is always optional; however, in the event of failure to provide the data marked as mandatory within the request forms, we will not be able to provide the user with the service requested from time to time.
LEGAL BASIS
The provision of data is mandatory for all that is required by legal and contractual obligations and therefore any refusal to provide them in whole or in part may give rise to the impossibility of providing the requested services.
The company processes the optional data of users on the basis of consent, that is, through the explicit approval of this privacy policy and in relation to the methods and purposes described below.
The navigation data are processed as necessary to implement the IT and telematic protocols; the provision of personal data by users is free and optional.
Only in the presence of an express authorization from the User, CR Tubi will proceed to use his data for the same activities referred to in the previous paragraph with the help of automated tools without the intervention of an operator and / or for the other purposes from time to time authorized by the User.
In the same way, only with the express consent of the User, CR Tubi will be able to share or communicate its data to its commercial partners – from time to time expressly indicated or listed on the Site – so that they proceed, as owners, to separate treatments with the same methods and the same limits as for the treatment authorized by CR Tubi. Users’ data are never disclosed, except for those that the User voluntarily makes available on any public areas of the Site that are publicly accessible. CR Tubi invites Users not to provide their personal data within the public areas of the Site that are publicly accessible, reserving the right to delete such data or make them anonymous if they are sensitive data as defined in article 4 paragraph 1 letter d) of the Privacy Code. Finally, the data can be communicated to the public authority in the presence of a legitimate order issued by the same. The collected data are not subject to transfer abroad.
CATEGORIES OF RECIPIENTS
Without prejudice to the communications made in fulfillment of legal and contractual obligations, all the data collected and processed may be communicated exclusively for the purposes specified above to the following categories of interested parties:
- Authorized persons;
- External managers
RETENTION OF DATA
The data provided directly by the user to CR Tubi in a voluntary manner both on paper and in computerized form are stored in the paper archives and on the internal server in the company’s offices.
This website is hosted on the server of the Seeweb S.r.l. inside a data center located in Frosinone – Lazio – Italy
All traffic (file transfer) between this website and the browser encrypted and delivered via HTTPS.
STORAGE PERIOD
The data required for contractual and accounting purposes are kept for the time necessary to carry out the commercial and accounting relationship. The data of those who do not purchase or use products / services, despite having had previous contact with company representatives, will be immediately deleted or processed anonymously, if their conservation is not otherwise justified, unless it has been acquired validly the informed consent of the interested parties relating to a subsequent commercial promotion or market research activity. The data retention period is: 10 years from the termination of the relationship
RIGHTS OF THE INTERESTED PARTY
Pursuant to European Regulation 679/2016 (GDPR) and national legislation, the interested party can, according to the methods and within the limits established by current legislation, exercise the following rights:
· request confirmation of the existence of personal data concerning him (right of access); · know its origin; · receive intelligible communication; · have information about the logic, methods and purposes of the treatment; · request its updating, rectification, integration, cancellation, transformation into anonymous form, blocking of data processed in violation of the law, including those no longer necessary for the pursuit of the purposes for which they were collected; · in cases of consent-based processing, receive your data provided to the owner, in a structured and readable form by a data processor and in a format commonly used by an electronic device; · the right to lodge a complaint with the supervisory authority.
The owner of the processing of your personal data is CR Tubi.