PRIVACY POLICY

INFORMATION REGARDING THE PROTECTION OF PERSONAL DATA

Nuvyta S.r.l., with registered office in Cologno Monzese (MI), Via W. A. ​​Mozart 47, C.F. / VAT number 10223560961, as owner of the processing of personal data, pursuant to art. 13 of the European Regulation (EU) 2016/679 (hereinafter “GDPR”), as well as by Legislative Decree 196/2003 as amended by Legislative Decree 101/2018 (hereinafter the “Code”), informs you of the following .

Nuvyta S.r.l., as owner of the processing of personal data (hereinafter the “Owner”) as part of its business, processes personal data according to the following rules.

CATEGORY OF PROCESSED DATA

a) Data collected automatically. The computer systems and applications dedicated to the operation of the website www.nuvyta.it detect, during their normal operation, some data (the transmission of which is implicit in the use of Internet communication protocols) potentially associated with identifiable users. The collected data includes the IP addresses and domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) ​​addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters concerning the operating system, the browser and the IT environment used by the user. These data are processed, for the time strictly necessary, for the sole purpose of obtaining statistical information on the use of the site and to check its regular functioning. The provision of such data is mandatory as it is directly linked to the web browsing experience.

b) Data provided voluntarily by the user. The voluntary and spontaneous sending of paper communications, faxes, e-mails to our addresses, for the purpose of requesting information regarding the services offered by the Data Controller, does not require the prior collection of consent. Instead, any compilation of the form specifically prepared on our website involves the necessary reading of this information and the subsequent acquisition of the user data necessary to respond to requests for information and / or provide the requested service; in this case, specific summary information will be reported or displayed on the pages of the site prepared for particular services on request. The user must therefore explicitly consent to the use of the data contained in these forms in order to send the request with respect to the purposes described. The personal data of the interested party (hereinafter the “Interested”), which may be collected and processed for the purposes indicated below, are collected directly from the interested party and are: personal data and contact details.

2. PURPOSE OF DATA COLLECTION

2.1. Provide the interested party with the requested information. The collection and processing of personal data are aimed at responding to the interested party regarding requests for information forwarded to Nuvyta by filling in a specific online form concerning the services offered by the same and, therefore, to proceed with the completion of the requested service.

2.2. Legal obligations and accounting and administrative obligations. Fulfillment of all obligations of an accounting and administrative nature as well as for the obligations envisaged by Nuvyta by the sector legislation applicable to the type of service provided to the interested party, meaning by this laws, regulations, community legislation, provisions issued by Authorities legitimated to do so by law and by Supervisory and Control Bodies. The data, for this last purpose, can be communicated to public administrations that are recipients of obligations provided for by sector legislation, such as by way of example and not limited to: Ministry of Economic Development, Supervisory Authority for the Protection of Personal Data and other databases of public administrations to which, even following their request, the communication of data is mandatory.

2.3 Commercial and Marketing Activities Related to Nuvyta. If the interested party gives his consent, the processing can also be directed to the transmission of communications in electronic and paper format, for the carrying out of advertising and marketing activities by Nuvyta as owner and / or on behalf of the same. by external parties (in Italy and / or abroad) appointed by the owner himself to carry out the promotional activity. These activities can be carried out both with traditional tools (ie: sending newsletters and advertising material, direct sales, carrying out market research, commercial communications, calls with operator) and with non-traditional tools (ie: automated call systems without the intervention of an operator, e-mail, fax, Mms “Multimedia Messaging Service” or Sms “Short Message Service” or other type messages).

The processing of data of the interested party: (i) for the purposes referred to in point 2.1 above is based on the execution of pre-contractual and contractual measures; for the purpose referred to in point 2.2 above, lies in the fulfillment of the related legal obligations, including those of a regulatory nature; (ii) for the purpose referred to in point 2.3 lies in the specific consent possibly given by the interested party. The provision of the data subject’s personal data is – mandatory in relation to the purposes indicated in this point 2.1. Failure to provide it, subject to consent, will not allow the data subject to be processed and to carry out the service requested by the same; – mandatory in relation to the purposes indicated in this point 2.2., Failure to provide it will not allow to provide the requested service or to fulfill legal obligations; – optional in relation to the purpose indicated in this point 2.3, in the absence of consent Nuvyta will not be able to provide commercial information on its services.

3. COMMUNICATION OF DATA

The personal data received may be disclosed to the following categories of subjects: partners with whom Nuvyta has collaboration agreements in place for the provision of the requested services; internal employees or external collaborators of Nuvyta; professional studies; companies that carry out marketing activities on behalf of Nuvyta; private companies that operate as suppliers who perform technical, support, software supply and telematic and IT services on behalf of Nuvyta. The data of the interested party will not be disseminated in any way. The data collected in general are not transferred abroad except for data that are voluntarily provided by the interested party through requests for information received from him to Nuvyta through the use of particular means of communication such as instant messaging (Whatsapp) or social networks to which Nuvyta adheres; in this case, the data processing is governed by the data protection policies applied by the service managers to which the interested parties have voluntarily adhered.

4. DATA PROCESSING METHOD

The personal data provided by the interested party will be the subject of processing operations in compliance with the aforementioned legislation and the confidentiality obligations which inspire the activity of the Data Controller. The data will be processed both with IT tools and on paper and on any other type of suitable support, in compliance with the appropriate security measures pursuant to Article 5 par. 1 letter f) of the GDPR.

5. DATA RETENTION PERIOD

The data collected will be kept for a period of time not exceeding the achievement of the purposes for which they are processed (“conservation limitation principle”, Article 5, GDPR) or on the basis of the deadlines set by law. In particular: – for the purposes referred to in point 2.1, the retention times are 12 months from the date of registration of the data; – for the purposes referred to in point 2. 2. it is 10 years from the termination of any contractual relationship; – for the purposes referred to in point 2.3. are 12 months from receipt. The verification of the obsolescence of the data stored in relation to the purposes for which they were collected is carried out periodically.

6. DATA PROTECTION OFFICER / DATA PROTECTION OFFICER (“RPD” or “DPO”)

The DPO has not been appointed, as it does not meet the legal requirements.

7. RIGHTS OF THE INTERESTED PARTY

The interested party always has the right to request from the Data Controller access to your data, the correction or cancellation of the same, the limitation of processing or the possibility of opposing the processing, to request data portability, to revoke the consent to the processing by asserting these and the other rights provided by the GDPR by simply communicating to the Data Controller, who is Nuvyta, at the following addresses:

Nuvyta S.r.l. – Via W. A. ​​Mozart 47, 20093 Cologno Monzese (MI)

e-mail: info@nuvyta.it

Tel: [+39 0222179862]

The interested party can also lodge a complaint with a supervisory authority for the protection of personal data.

© 2021 Nuvyta – All rights reserved

UNI EN ISO 9001 : 2015