Notice on the processing of personal data
This notice is provided pursuant to articles 13 and 14 of Regulation (EU) 2016/679 of 27 April 2016 (hereinafter GDPR) to users of the horeca-innovazione.it website (hereinafter the Site).
1. Data controller
The data controller is [INSERT COMPANY NAME], with registered office in [INSERT ADDRESS], VAT [INSERT VAT]. The controller can be contacted at the following addresses: email redazione@horeca-innovazione.it, certified email [INSERT PEC].
2. Categories of data processed
The Site may process the following categories of personal data.
Browsing data. The IT systems and software procedures responsible for the operation of the Site acquire, in the normal course of operation, certain personal data the transmission of which is implicit in the use of Internet communication protocols. These include data such as IP addresses, domain names, URIs of requested resources, request times, status codes. Such data are used solely for the purpose of producing anonymous statistical information on the use of the Site and to verify its proper functioning.
Data voluntarily provided by the user. The optional, explicit and voluntary sending of messages to the Site contact addresses, newsletter subscription and any other form of contact result in the subsequent acquisition of the sender's contact details, necessary to respond to requests, in addition to any personal data included in the communications.
Cookies. For more information please refer to the Cookie Policy.
3. Purposes of processing
The personal data collected are processed for the following purposes.
- Delivery of the Site service and its technical functionality
- Response to contact requests sent via email or forms
- Sending of the newsletter following subscription and explicit consent
- Anonymised statistical analysis of Site traffic
- Compliance with legal obligations
4. Legal basis
Data processing is carried out on the following legal bases.
- Performance of a service requested by the user (art. 6.1.b GDPR), for browsing data and replies to requests
- Explicit consent (art. 6.1.a GDPR), for newsletter subscription and non technical cookies
- Legitimate interest of the controller (art. 6.1.f GDPR), for Site security and abuse prevention
- Compliance with legal obligations (art. 6.1.c GDPR), where applicable
5. Processing methods
Data processing takes place using IT tools for the time strictly necessary to achieve the purposes for which the data were collected. Data are protected by adequate security measures preventing unauthorised access, disclosure or accidental loss.
6. Disclosure to third parties
The data collected may be communicated to technical service providers appointed as data processors pursuant to article 28 GDPR, including the Site hosting provider, any newsletter sending services, any statistical analysis services. Data are never disclosed to third parties for marketing purposes without the user's explicit consent.
7. Data transfer outside the EU
Some technical services used by the Site may involve the transfer of personal data to non European Union countries. In such cases the transfer takes place exclusively to countries that ensure an adequate level of protection according to European Commission decisions or based on standard contractual clauses approved by the same Commission.
8. Retention period
Browsing data are retained for a maximum period of twelve months. Contact data and those provided for the newsletter are retained for the time necessary for the processing purposes and in any case until the user withdraws consent. Security logs are kept for the time strictly necessary for the protection of Site security.
9. Rights of the data subject
The user may exercise at any time the rights recognised by articles 15 to 22 of the GDPR.
- Access to one's own personal data
- Rectification of inaccurate data
- Erasure of data (right to be forgotten)
- Restriction of processing
- Data portability in structured format
- Objection to processing
- Withdrawal of consent at any time
To exercise these rights it is sufficient to write to redazione@horeca-innovazione.it. A response will be provided within thirty days of receipt of the request.
10. Complaint to the Supervisory Authority
The data subject who believes that the processing of personal data referring to them carried out through this Site takes place in violation of the GDPR has the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it), as provided for by article 77 of the Regulation.
11. Changes to this notice
This notice may be subject to updates. The date of the last update is indicated at the top of the document. Users are invited to consult it periodically.