In compliance with the provisions of EU Reg 2016/679 (European Regulation for the Protection of Personal Data) we provide you with the necessary information regarding the processing of personal data provided.

This information is not to be considered valid for other websites that may be accessed through links on the websites of the data controller, who is not to be deemed in any way responsible for the third party websites.

This information is provided pursuant to Article 13 of EU Regulation 2016/679.

 

TREATABLE PERSONAL DATA
"Personal data": any information relating to an identified or identifiable natural person ("data subject"); an identifiable person is one who can be identified, directly or indirectly, with particular reference to an identifier such as name, an identification number, location data, an online identifier or to one or more factors specific to his physical, physiological, genetic, mental, economic, cultural or social identity; (C26, C27, C30).


BROWSING DATA

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This information is not collected for the purpose of being associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by users connecting to the site, URI (Uniform Resource Identifier) of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc..) and other parameters relating to the operating system and computer environment.

This data is only used to obtain anonymous statistical information on the use of the website and to check its proper functioning and is deleted immediately after processing. No profiling or analytical cookies are used, nor are first or third party cookies.

 

The specific information about the use of browsing data is present in the footer of the website, at the following link: sostenibilita.gruppocap.it/en/cookies


1. DATA SUBJECTS

DATA CONTROLLER, pursuant to Articles 4 and 24 of EU Reg. 2016/679 is CAP HOLDING SPA, with registered office in Via Del Mulino, 2 - Palazzo U10 - 20090 Assago (MI), in the person of the interim legal representative.

 

DATA PROTECTION OFFICER (DPO), pursuant to Articles 37-39 of EU Regulation 2016/679, through the Data Controller, who can be contacted at dpo@gruppocap.it.


2. PURPOSES | LEGAL GROUNDS | RETENTION PERIOD | NATURE OF THE PROVISION

Purpose of processing
A) Browsing on this website

Legal grounds

Legitimate interest | rights of the interested party 6(f) and recital 47 of  GDPR

Activities strictly necessary for the functioning of the website and the provision of the browsing service on the platform. 

Data retention period Up to the duration of the browsing session

Nature of the provision Necessary for the pursuit of the legitimate interest of the owner, while respecting the rights and fundamental freedoms of the user.

 

3. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF DATA  

The personal data provided may be communicated to recipients, appointed pursuant to art. 28 of Reg UE 2016/679, who will process the data in their capacity as data processors and/or as natural persons acting under the authority of the Data Controller and Data Protection Officer or acting independently as separate Data Controllers, in order to comply with contracts or related purposes.

By way of example, they may be communicated to third parties belonging to the following categories: - companies of the CAP Group - entities that provide services for the management of the information system used by CAP HOLDING SPA and telecommunications networks (including e-mail); - offices or companies operating in the field of support and consulting; - competent authorities for compliance with legal obligations and / or provisions of public bodies, on request; - in the case of administrative and accounting purposes, the data may be transmitted to commercial information companies for the evaluation of solvency and payment habits and / or to entities for purposes of debt collection.

The list of designated data processors is constantly updated and available at the head office of CAP Holding S.p.A.  or by writing to privacy@gruppocap.it


4. DATA TRANSFER TO A THIRD COUNTRY AND/OR AN INTERNATIONAL ORGANISATION

The personal data provided will not be transferred abroad outside the European Union.


5. RIGHTS OF DATA SUBJECTS

You may exercise your rights as expressed in Articles 15 et seq. of EU Regulation 2016/679 by contacting the Data Controller at privacy@gruppocap.it By way of example, you have the right, at any time, to request where applicable:

Art. 15 - Access: confirmation of whether or not data concerning you is being processed;

Art. 16 - Rectification: you may request to rectify or supplement the data in our possession, if inaccurate;

Art. 17 - Erasure: you can request that your data be erased if they are no longer necessary for the purposes of the company or revoke your consent where given.

Art. 18 - Limitation: you can ask for the limitation of the processing of your personal data, when one of the conditions of art. 18 of the GDPR is met;

Art. 21 - Opposition: may request opposition to the processing of data, unless the Controller processes the data for legitimate compelling reasons that prevail over the interests, rights and freedoms of the person concerned.

There is no automated decision-making process.

Without prejudice to any other administrative and jurisdictional appeal, if you believe that the processing of data concerning you violates the provisions of EU Reg 2016/679, pursuant to art. 15 letter f) of the aforementioned EU Reg 2016/679, you have the right to lodge a complaint with the Data Protection Guarantor.

In the cases provided for, you have the right to the portability of your data and in this case the Data Controller will provide you with your personal data in a structured format, commonly used and readable by an automatic device.


8. CHANGES TO THE PRIVACY POLICY

The Controller reserves the right to modify, update, add or remove portions of this privacy policy at its sole discretion and at any time. The person concerned must check periodically for any changes. In order to facilitate such verification, the policy will contain an indication of the policy update date. The use of the website, after the publication of the changes, will constitute acceptance of them.

 

Update date : 07 May 2019

 

The Data Controller

CAP HOLDING S.P.A.