Notice pursuant to Article 13 of Regulation (EU) 2016/679 – WEB Askos
Version no. 1 of June 5, 2024
Through this document (“Notice”), the Data Controller, as defined below, wishes to inform you about the purposes and methods of processing your personal data and the rights that are recognized by Regulation (EU) 2016/679 concerning the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“GDPR”). This Notice may be supplemented by the Data Controller if any additional services you request may involve further processing.
Data Controller
Askos srl
Email: [email protected]
VAT / Tax ID: IT08407411217
Types of Data Processed
The processing activities carried out are aimed at acquiring the following personal data:
- Behavioral Data: Navigation logs;
- Common Data: Personal identification data.
Categories of Data Subjects
The processing activities are aimed at the following categories of data subjects: Web Users.
Purposes of Processing and Lawful Basis for Processing
- WEBSITE – Navigation Data
To obtain anonymous statistical information about usage, to ensure the correct functioning of the site, and to establish liability in case of hypothetical computer crimes against the Data Controller.
Lawful Basis for Processing: Legitimate Interest – Art. 6, para. 1, letter f, GDPR.
Purposes of Processing:
- Data analysis for website evolution and maintenance;
- Establishing liability in case of potential computer crimes against the site and/or data subjects;
- Anonymous statistical analyses on website usage.
Nature of Provision:
Mandatory – Failure to provide the data will result in the inability of the company to deliver the web service provided.
Data Retention Period:
The data is stored for 30 days.
Processing Methods:
Processing is performed using computerized tools.
- WEBSITE – Site Requests
Requests made by data subjects through the website of the Data Controller.
Lawful Basis for Processing: Performance of a Contract – Art. 6, para. 1, letter b, GDPR.
Purposes of Processing: 1) Sending requests through web platform tools.
Nature of Provision:
Optional – Failure to provide the data will prevent the Data Controller from responding to the requests of the data subject.
Data Retention Period:
Until the request is processed.
Processing Methods:
Processing is performed using computerized tools.
Data Transfer Outside the EU
Personal data is processed exclusively within the European Union.
Data Subject Rights – Complaint to Supervisory Authority
In relation to the processing described in this Notice, as a data subject, you may exercise the rights stipulated by Articles 15 to 22 of the GDPR under the conditions set by the GDPR, including the following rights:
- Right of access: The right to obtain confirmation as to whether or not personal data concerning you are being processed and, if so, to gain access to your personal data;
- Right to rectification: The right to have inaccurate personal data about you rectified without undue delay and/or to have incomplete personal data completed;
- Right to erasure (right to be forgotten): The right to obtain the erasure of personal data concerning you without undue delay. The right to erasure does not apply where processing is necessary for compliance with a legal obligation or for the performance of a task carried out in the public interest or for the establishment, exercise, or defense of legal claims;
- Right to restriction of processing – Article 18 GDPR: The right to obtain restriction of processing when: a) the accuracy of the personal data is contested by the data subject; b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead; c) the personal data are needed for the establishment, exercise, or defense of legal claims; d) the data subject has objected to processing pending the verification whether the legitimate grounds of the controller override those of the data subject.
- Right to data portability: The right to receive, in a structured, commonly used, and machine-readable format, personal data about you and to provide them to another controller;
- Right to object: The right to object to the processing of personal data concerning you for reasons related to your particular situation and, at any time, to data processing for direct marketing purposes.
If processing is based on consent, you may withdraw such consent (consent withdrawal). You may withdraw your consent at any time and with the same ease as it was provided, without affecting the lawfulness of processing based on consent before its withdrawal.
You also have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. However, we may use automated decision-making if necessary for entering into, or performance of, a contract between us, if authorized by Union or Member State law, or based on your explicit consent.
In any case, you have the option to contest the decision, to express your opinions concerning it, and to request the intervention of a person to review it.
You may file a complaint with the Data Protection Authority at any time: http://www.garanteprivacy.it
The above rights may be exercised with the Data Controller by contacting the above references.