INFORMATION PURSUANT TO ART. 13 OF THE EU REGULATION 2016/679 "EUROPEAN REGULATION ON THE PROTECTION OF PERSONAL DATA"

Dear Customer,

On 25 May 2018, the General Data Protection Regulation (General Data Protection Regulation, from which the acronym GDPR) was approved by the European Commission came into force "To ensure a consistent level of protection of natural persons throughout the Union and prevent disparities that may hinder the free movement of personal data in the internal market "Recital 13 GDPR.
Hatria s.r.l. as a sole shareholder as the data controller (hereinafter the owner) has implemented the provisions of the European Commission in the following statement pursuant to articles 13 and 14 of EU Regulation 2016/679.
This Information on Personal Data Protection (hereafter Information) provides you with detailed information regarding the exercise of your cognitive and control rights regarding your personal data granted to the Data Controller. This information may be supplemented by the Data Controller if any additional services requested by you involve further processing.
The owner is responsible for the collection and processing of your personal data in relation to the activities carried out.

1.Owner of the Treatment
The Data Owner is Hatria s.r.l. a socio unico,
Contacts:
Headquarters in Via Isidoro and Lepido Facii - S.Atto Industrial Zone - 64020 Teramo (TE), Italy
Tel. 0861 2011
Email privacy@hatria.com

2. Categories of processed data
Subject of the processing may be your personal data such as:
2a. Automatically collected data (navigation data)
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes in particular:

  • IP addresses or domain names of computers used by users connecting to the site;
  • the URI (Uniform Resource Identifier) addresses of the requested resources;
  • the time of the request;
  • the method used in submitting the request to the server;
  • the size of the file obtained in response;
  • the numeric code indicating the status of the response given by the server (successful, error, etc.);
  • any parameter relating to the operating system and the IT environment of the User.

2b) Data communicated voluntarily by the user
The voluntary and explicit dispatch of data is the legal basis is the consent, whose conferment is mandatory in order to proceed with the execution of contractual and pre-contractual measures and, for sending e-mails to our addresses, the purpose is to be able to send responses to specific requests made by the user; for the forms the purpose is indicated in the specific information.
The Personal Data acquired to implement contractual or pre-contractual measures adopted at the request of the User and used to manage all the services requested online are treated in accordance with art. 6, paragraph 1, letter b) of the GDPR as well as on the legitimate interest of the Data Controller, pursuant to Art. 6, paragraph 1, lett. f) of the GDPR given by the possible need to protect a right in court.

2d) Data detected through cookies
As better explained in the "Cookie policy", the Internet Site uses "cookies", intended as short fragments of text (letters and / or numbers) that allow the web server to store on the client (the browser) information to be reused during the same visit the website (session cookies) or later, for further visits to the same Website (persistent cookies). The information received through these tools concerns in particular the links clicked by the User, the pages visited and the duration of the visit, information related to statistics on the User's intentions. The Website uses both technical and / or functional cookies, necessary to guarantee navigability on its website and its use by the User, and third-party profiling cookies. The User has the right to disable technical cookies, as better explained in the "Cookie policy", and to deny consent (and subsequently to revoke the consent initially given at any time) to the use of third-party profiling cookies. View Cookie Policy

3. Source of personal data
The personal data held by the Data Controller is collected directly from the data subject.

4. Purposes of data processing and legal basis
The Navigation Data and Personal Data are legitimately processed by the Data Controller in compliance with the provisions of the GDPR and of any other provision of applicable law according to the legal bases established by art. 6 of the GDPR as detailed below.
The processing of your data has as its purpose and legal basis:
a) For automatically collected data, the legal basis is the legitimate interest of the owner and the purpose is to guarantee and improve the web browsing experience. Without prejudice to the User's right to disable the cookies provided for by the current Cookie policy, the Navigation Data are treated by virtue of the existence of a legitimate interest of the Data Controller (Article 6, paragraph 1, letter f) of the GDPR) in what is necessary for the Data Controller to allow the Website to function and its full use by the User.
b) For data provided voluntarily by the user, the legal basis is the consent, whose conferment is mandatory in order to proceed with the execution of contractual and pre-contractual measures and, for sending e-mails to our addresses, the purpose is to be able to send responses to specific requests made by the user; for the forms the purpose is indicated in the specific information.
The Personal Data acquired to implement contractual or pre-contractual measures adopted at the request of the User and used to manage all the services requested online are treated in accordance with art. 6, paragraph 1, letter b) of the GDPR as well as on the legitimate interest of the Data Controller, pursuant to Art. 6, paragraph 1, lett. f) of the GDPR given by the possible need to protect a right in court.

5. Marketing purposes
Your data will not be processed for marketing purposes.

6. Purposes of defense in court
The User's Personal Data may be processed by the Data Controller to defend themselves in the event of the establishment of a judgment and / or in the preliminary stages to it.

7. Further details regarding the services used by the Data Controller in relation to the purpose of data collection
Below is more information on the services that the Owner provides to the User in relation to the purposes for which the Personal Data and Navigation Data are processed.
7.1. Data processing via social networks
This website uses the social media plug-ins of various social networks. These plug-ins are functions of the corresponding social network that allow you to share content from our website with your contacts in social networks or to recommend this content, for example social media plug-ins can be recognized by the respective social network logo.
These services allow interaction with social networks, or other external platforms, directly from the pages of this Application.
The interactions and information acquired by this Application are in any case subject to the User's privacy settings relating to each social network.
In the event that an interaction service with social networks is installed, it is possible that, even if the Users do not use the service, the same collect traffic data relating to the pages in which it is installed.
7.1.a. Google Maps
Our site uses a Google Maps mapping service API, Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
To use the features of Google Maps you need to save your IP address. This information is generally transmitted to a Google server in the United States, where it is stored. As site administrators we cannot interfere or manage the transmission of this data in any way! The legal basis is the legitimate interest of the owner (art.6, paragraph 1, letter f) of the GDPR) we use the services of Google Maps to make our structure and the services we offer more easily traceable, as well as to offer a simple service. fast to customers who want to reach us.
Further information on the use of user data is available in Google's privacy policy at the following link: https://www.google.de/intl/de/policies/privacy/.
7.1.b. YouTube
Our site uses YouTube site plugins, managed by Google Inc. The web page manager is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
By visiting one of our web pages with a YouTube plugin, a connection is established to the YouTube servers. This way the YouTube server is informed which of our web pages you have visited.
Moreover YouTube can store several cookies on your device to acquire information about visitors to our site. These data are used, among other things, to compile statistics on the videos displayed, to improve the usability of the channel and prevent fraud attempts. YouTube cookies remain on your device until you delete them.
If you are authenticated on YouTube on your visit, allow the latter to associate your browsing behavior on our site directly with your personal profile. To prevent this, simply log out of your YouTube account.
The use of YouTube takes place in the legitimate interest of effectively presenting our offers on the web (Article 6, paragraph 1 letter f of the RGPD.
More information on user data management is available in the privacy policy statement of Google: https://policies.google.com/privacy?hl=it
On our website, all social media plug-ins are disabled by default, which means that simply accessing our website does not involve the transmission of any data to social network providers. If the user wishes to use the functionality of the respective social network and, therefore, to activate a social media plug-in initially deactivated, he expressly consents to transfer the data to the social network operator from that moment forward. We have no influence on the scope of data collected in this way by social network providers.
For details on the purpose and scope of data processing, the collection and use by the social networks used by us and the related rights and setting options, consult the privacy policies of social network.

8. Data recipients
Within the limits pertinent to the indicated processing purposes, your data will be communicated to:
employees and collaborators of the Data Controller; to the network of agents of the Data Controller; to business partners; to credit institutions; to debt collection companies; a credit insurance company; to commercial information companies; to professionals and consultants; to companies operating in the transport sector; to our subcontractors or subcontractors if engaged in the performance of activities related to our contractual relationships; to persons specifically appointed and / or authorized by the Data Controller to supply data processing, consultancy, financial statement certification services to the same, or who nonetheless carry out activities that are instrumental, complementary and functional to that of the Data Controller in execution of activities pertaining to the existing contractual relationship; and also to all the subjects to whom the communication is due due to legal obligations.

9. Transfer of data to a third country
Your data will not be transferred to a third country. This site may share some of the data collected with services located outside the European Union area. In particular through social plug-ins and the Google Analytics service. The transfer is authorized and strictly regulated by article 45, paragraph 1 of EU Regulation 2016/679, for which no specific authorizations are required.

10. storage period
Based on the principle of conservation limitation (art. 5, GDPR), the check on obsolescence of the data stored in relation to the purposes for which they were collected is carried out periodically.
In particular:
a) the data collected automatically are processed, for the time strictly necessary, for the sole purpose of obtaining statistical information on the use of the site and to check its regular operation, also for security purposes or based on the deadlines set by law .
b) The data provided voluntarily by the user will be kept for a period of time not exceeding the achievement of the purposes for which they are processed or based on the deadlines set by law: for the entire duration of the contract and in any case for a period of time not exceeding 5 years from the conclusion of the contract.

11. Rights of the interested party
With regard to the data, you may exercise the rights provided by the EU Regulation 2016/679 in articles from 15-22 GDPR and ex art. 7 and 77 GDPR

  • Art. 15 right of access: the right to obtain confirmation that personal data concerning you are being processed and, in this case, to gain access to your personal data, including a copy of them;
  • Article 16 right of rectification: the right to obtain the rectification of inaccurate personal data concerning him and / or the integration of incomplete personal data without unjustified delay;
  • Art. 17 right to cancellation (right to oblivion): the right to obtain, without unjustified delay, the deletion of personal data concerning you;
  • Art. 18 right to limitation of treatment: right to obtain the limitation of the treatment, when a) The data subject disputes the accuracy of his personal data, for the period necessary for the Data Controller to verify the accuracy of such data
    b) The processing is unlawful and the data subject opposes the deletion of personal data and requests instead that its use be limited
    c) Personal data are necessary for the interested party to ascertain, exercise or defend a judgment in court
    d) The data subject has opposed the processing pursuant to art. 21 GDPR, in the period of waiting for the verification regarding the possible prevalence of legitimate reasons of the data controller with respect to those of the interested party.
  • Art. 19 right to notification: the right of the interested party to communicate by the Data Controller to each of the recipients to whom the personal data were transmitted, any adjustments or cancellations or limitations of the processing carried out.
  • Article 20 right to data portability on structured format, commonly used and readable by an automatic device: the right to receive, in a structured format, commonly used and readable by an automatic device, the personal data concerning you provided by the Data Controller and the right to transmit them to another Data Controller without impediment, if the processing is based on consent and is carried out by automated means. Furthermore, the right to obtain that your personal data is transmitted directly by the Owner to another Owner if this is technically feasible.
  • Art. 21 right to object to the processing: the right to object, at any time for reasons connected to his particular situation, to the processing of personal data concerning him based on the condition of the legitimate interest or the execution of a task of interest public or the exercise of public authority, including profiling, unless there are legitimate reasons for the Data Controller to continue processing that prevails over the interests, rights and freedoms of the data subject or for the assessment, exercise or defense of a right in court.
    In addition, the right to object to processing at any time if personal data is processed for direct marketing purposes, including profiling, to the extent that it is connected to such direct marketing.
  • Article 22 right of non-submission to decisions based solely on automated processing: including profiling, which produces legal effects that concern him or that significantly affects his person.
  • Article 7 paragraph 3: the interested party has the right to withdraw his consent at any time in cases where the processing is based on consent, without prejudice to the lawfulness of the treatment based on consent before the revocation.
  • Art. 77 right to lodge a complaint with the supervisory authority: Authority for personal data. Insert the link for the rights exercise form.

The rights referred to above may be exercised against the Data Controller by contacting the references indicated in the initial box "contact points".
The exercise of your rights as an interested party is free of charge pursuant to Article 12 GDPR. However, in the case of manifestly unfounded or excessive requests, also due to their repetitiveness, the holder could charge you a reasonable fee, in light of the administrative costs incurred to manage your request or deny the satisfaction of your request.

12. Mandatory or non-binding consent
The provision of your data is mandatory while browsing our website for the purposes mentioned above under points 2.a), 2.b), 2.c), 2.d) to allow the correct provision of the service and to be able to fulfill to pre-contractual and contractual obligations.

13. Data processing methods
The personal data supplied by you will be subject to processing operations in compliance with the aforementioned legislation and the confidentiality obligations which inspire the activity of the Data Controller. The data will be processed both by computer tools and on paper and any other type of suitable support, in compliance with the appropriate security measures pursuant to Article 5 par. 1 letter F of the GDPR.

14. Final notes and updating procedures
The information is provided only for this website and not for other websites that may be consulted by the user via links contained in this site. The information may undergo changes due to the introduction of new regulations in this regard, therefore the user is invited to periodically check this page to keep up to date with the latest legislative news. Previous versions of this information may always be requested from the Data Controller

counter