Privacy policy

lab3841 s.r.l., as a data controller (hereinafter, " Data Controller "), informs you of the EU Regulation n. 679/2016 (GDPR) and of the Legislative Decree 06/30/2003, n. 196 "Personal Data Protection Code", integrated with the changes introduced by the Legislative Decree 10/08/2018, No. 101 "Disposizioni per l'adeguamento della normativa nazionale alle disposizioni del regolamento (UE) 2016/679", that your data will be processed in the manner and for the purposes indicated below.

Data Processor

lab3841 s.r.l.

Via Parco Giochi, 2 – 12100 – Cuneo (CN)

P.IVA: IT03568690048

Email address: info@lab3841.it

Type of data collected

Among the personal data collected by the Owner, independently or through third parties, there are: cookies, data of use, e-mail address, telephone number, name, surname, company name, address, city, geographical location.

Full details on each type of data collected are provided in the dedicated sections of this privacy policy or through specific informative texts displayed before data collection.

Personal data can be freely provided by the user or, in the case of usage data, collected automatically while browsing the website of the Data Controller.

Unless otherwise specified, all data requested by the Data Controller are mandatory. If the user refuses to communicating them may be impossible for the Owner to provide the service. In cases where the Owner indicate some data as optional, users are free to refrain from communicating such data, without that this has no consequence on the availability of the Service or its operation.

The possible use of Cookies - or other tracking tools - by the Owner or the owners of the third party services used, unless otherwise specified, is intended to provide the requested Service by the User, in addition to the additional purposes described in this document and in the Cookie Policy.

The User assumes responsibility for the personal data of third parties obtained, published or shared through the website of the Data Controller and guarantees to have the right to communicate or disseminate them, freeing the Data Controller from any liability to third parties.

Mode and place of processing of the collected data

Treatment modalities

The Owner adopts the appropriate security measures aimed at preventing access, disclosure and modification or unauthorized destruction of personal data.

The treatment is carried out using IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated. In addition to the Owner, in some cases, could have access to data other subjects involved in the organization of the Holder (administrative staff, commercial, marketing, legal, system administrators) or external subjects (as service providers third party technicians, mail carriers, hosting providers, IT companies, communication agencies) appointed also, if necessary, Data Processors by the Owner. The updated list of managers it can always be requested to the Data Controller.

Legal basis of the processing

The Owner processes personal data relating to the User if one of the following conditions exists:

  • the User has given consent for one or more specific purposes; Note: in some jurisdictions the Owner may be authorized to process Personal Data without the User's consent or another of the legal bases specified below, until the User objects ("opt-out") to such treatment. However, this is not applicable if the processing of Personal Data is regulated by European legislation on the protection of Personal Data;
  • the processing is necessary for the execution of a contract with the User and / or for the execution of measures pre-contract;
  • processing is necessary to fulfill a legal obligation to which the Owner is subject;
  • the processing is necessary for the performance of a task of public interest or for the exercise of public powers vested in the Data Controller;
  • the processing is necessary for the pursuit of the legitimate interest of the Data Controller or third parties.

However, it is always possible to request the Data Controller to clarify the concrete legal basis of each treatment and in particular to specify if the treatment is based on the law, foreseen by a contract or necessary to conclude a contract.

Place

The Data is processed at the Data Controller's operating offices and in any other place where the parties involved in treatment are localized.

The User's Personal Data may be transferred to a country other than the one in which the User does find. To obtain further information on the place of treatment, the User can refer to section concerning the details on the processing of Personal Data.

The User has the right to obtain information regarding the legal basis of the transfer of Data to outside the European Union or an international organization under public international law or consisting of two or more countries, such as the EU, as well as the security measures adopted by the Owner to protect the Data.

If one of the transfers described above takes place, the User can refer to their respective sections of this document or request information from the Data Controller by contacting him at the details given in opening.

Period of conservation

The Data is processed and stored for the time required for the purposes for which it was collected. Therefore:

  • Personal Data collected for purposes related to the execution of a contract between the Owner and the User they will be held until the execution of this contract is completed;
  • the Personal Data collected for purposes related to the legitimate interest of the Data Controller will be held until such interest is satisfied. The User can obtain further information in this regard to the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Holder.

When the treatment is based on the User's consent, the Owner can keep the Personal Data more at long until such consent is revoked. Furthermore, the Owner may be obliged to keep the Personal Data for a longer period in compliance with a legal obligation or order of authority.

At the end of the retention period the Personal Data will be deleted. Therefore, at the end of that term, the right of access, cancellation, rectification and the right to the portability of non-Data they can no longer be exercised.

Purposes of the processing of the collected data

The User Data is collected to allow the Owner to provide its Services, as well as for the following purposes: statistics, contact management and sending messages, display of contents from external platforms, contact the User, interaction with external social networks and platforms, optimization and traffic distribution, advertising, registration and authentication, SPAM protection.

For more detailed information on the purposes of the processing and on Personal Data concretely relevant for each purpose, the User can refer to the relevant sections of this document.

Personal data collected

Interaction with external social networks and platforms

This type of service allows interactions with social networks or other platforms external, directly from the pages of the website of the Data Controller.

The interactions and information acquired by the Owner are in any case subject to the privacy settings of the User relating to each social network.

If an interaction service with social networks is installed, it is possible that, even in the in case Users do not use the service, it collects traffic data related to the pages in which it is installed.

Like button and Facebook social widgets

The "Like" button and Facebook social widgets are services of interaction with the social network Facebook, provided by Facebook, Inc.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy Policy. Subject adherent to the Privacy Shield.

LinkedIn social widgets

LinkedIn social widgets are interaction services with the Linkedin social network, provided by Linkedin, Inc.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy Policy. Subject adherent to the Privacy Shield.

Statistics

The services contained in this section allow the Owner to monitor and analyze the data of traffic and are used to keep track of User behavior.

Google analytics

Google Analytics is a web analysis service provided by Google Inc. ("Google"). Google uses the data Personal data collected for the purpose of tracking and examining the use of the website of the Data Controller, compiling reports and share them with other services developed by Google.

Google may use Personal Data to contextualize and personalize the ads of its own advertising network.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy Policy. Subject adhering to the Privacy Shield.

User Rights

Users can exercise certain rights with reference to the Data processed by the Owner.

In particular, the User has the right to:

  • withdraw consent at any time. The User can revoke the consent to the processing of his own Personal Data previously expressed;
  • object to the processing of your data. The User may object to the processing of his / her Data when it takes place on a legal basis other than consent. Further details on the opposition right are indicated in the section below;
  • access your data. The User has the right to obtain information on the Data processed by Owner, on certain aspects of the processing and to receive a copy of the processed Data;
  • verify and request the correction. The User can verify the correctness of his Data and request updating or correction;
  • get the treatment limitation. When certain conditions are met, the User can request the limitation of the processing of your Data. In this case, the Owner will not process the Data for any other purpose than their preservation;
  • obtain the cancellation or removal of your Personal Data. When certain occur conditions, the User may request the deletion of his Data by the Owner;
  • receive your data or have it transferred to another owner. The User has the right to receive i own Data in structured format, commonly used and readable by automatic device and, where technically feasible, to obtain the transfer without obstacles to another holder. This provision is applicable when the Data is processed by automated tools and the processing is based on consent of the User, on a contract to which the User is a party or on contractual measures connected to it;
  • to make a complaint. The User can propose a complaint to the supervisory authority of the protection of the competent personal data or act in court.

Details on the right to object

When Personal Data is processed in the public interest, in the exercise of its public powers invested the Holder or to pursue a legitimate interest of the Owner, the Users have the right to oppose the processing for reasons related to their particular situation.

How to exercise rights

To exercise their rights, Users can address a request to the contact details of the Holder. Requests are filed free of charge and processed by the Data Controller as soon as possible, in any case within a month.

Cookie policy

The Owner uses Cookies. For more details and to view the detailed information, the User can consult the Cookie Policy.

Further information on treatment

Defense in court

The User's Personal Data may be used by the Owner in court or in phases preparations for its possible establishment for the defense against abuse in the use of the website of the Data Controller or of the connected Services by the User.

The User declares to be aware that the Owner may be required to disclose the Data for order of public authorities.

Specific information

At the User's request, in addition to the information contained in this privacy policy, the Owner could provide the User with additional and contextual information regarding specific Services, or the collection and processing of Personal Data.

System log and maintenance

For needs related to operation and maintenance, the Owner and any third party services from it used may collect system logs, which are files that record interactions and can also contain Personal Data, such as the User IP address.

Information not contained in this policy

Further information in relation to the processing of Personal Data may be requested at any time time to the Data Controller using the contact details.

Response to "Do Not Track" requests.

The Holder does not support "Do Not Track" requests.

To find out if any third-party services used support them, the User is invited to consult the respective privacy policies.

Changes to this privacy policy

The Data Controller reserves the right to make changes to this privacy policy in any time giving information to Users on this page and, if possible, on the website as well as, if technically and legally feasible, by sending a notification to the Users through one of the details of contact held by the Owner. Please therefore consult this page regularly, by doing reference to the date of the last modification indicated at the bottom.

If the changes involve processing whose legal basis is consent, the Owner will provide to collect User consent again, if necessary.

Last edit: May, 16th 2019