This notice on the processing of personal data, hereinafter “Notice”, is provided pursuant to Article 13 of Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, hereinafter “GDPR”.

Browsing data

While browsing the website, IT systems and the hosting provider may automatically collect, for technical and security purposes, certain data transmitted by the user's browser, including:

– IP address;
– date and time of the request;
– requested URL;
– user agent (browser type and operating system).

These data are recorded in server logs to ensure the proper operation, security and integrity of the infrastructure. The logs are retained for the period strictly necessary for these purposes and, in any case, in accordance with the retention periods applied by the hosting provider. The data are not used for profiling or marketing purposes.

The website is hosted by a hosting service provider that processes the data on behalf of the Data Controller as data processor, pursuant to Article 28 of the GDPR. The data are processed within the European Economic Area, except for any transfers carried out in compliance with the safeguards provided for by the GDPR.

Data Controller and Data Processors of personal data

The Data Controller of personal data is ELLEBI IMPIANTI SRL Società Unipersonale, with registered office at Via De La Salle 20, 36060 Romano d’Ezzelino (VI), Tax Code and VAT No. 03302990241, e-mail info@ellebinet.it.

For any request relating to the processing of personal data or the exercise of their rights, the data subject may contact the Data Controller at the email address info@ellebinet.it or by written communication sent to the registered office indicated above.

Purpose of processing

The website does not collect, store or use users' personal data for commercial, profiling or analytics purposes. Any technical data recorded by the server is processed exclusively for the purposes of security and proper operation of the website.

Nature of the provision of data

The legal basis for the processing of technical data collected by the hosting provider is the legitimate interest of the data controller (Art. 6(1)(f) GDPR), connected with the security and maintenance of the website.

Please note that if the Customer is under 16 years of age, processing is lawful only if and to the extent that such consent is given or authorised by the holder of parental responsibility.

Processing methods

The processing of personal data is carried out by means of IT, telematic and possibly manual tools, in accordance with the principles of lawfulness, fairness, transparency and minimisation. The Data Controller adopts appropriate technical and organisational measures to protect the data against unauthorised access, loss, destruction, alteration or unlawful disclosure, ensuring their confidentiality, integrity and availability.

Retention periods

Browsing data and technical logs are retained for the period strictly necessary to ensure the security and proper operation of the website, in accordance with the retention periods applied by the hosting provider.

Data provided through contact forms or by email are retained for the time necessary to manage and respond to the request and, subsequently, for the period required by any protection of the Data Controller's rights or compliance with legal obligations.

Recipients of the data

Personal data may be processed by authorised personnel of the Data Controller and by external parties that provide technical and IT services, including the hosting provider, appointed where necessary as data processors pursuant to Article 28 of the GDPR.

The data are not disseminated or transferred to third parties for commercial purposes. They may also be communicated to the competent authorities or to other parties in the cases provided for by law.

The data are processed within the European Economic Area. If certain suppliers involve a transfer to third countries, such transfer will take place in compliance with the conditions and safeguards set out in Articles 44 et seq. of the GDPR.

The data subject may exercise, in the cases provided for by the GDPR, the following rights:

– obtain confirmation as to whether or not personal data concerning him or her are being processed and, if so, access the data and information relating to the processing;

– request the rectification of inaccurate personal data or the completion of incomplete data;

– request the erasure of personal data in the cases provided for in Article 17 of the GDPR;

– request restriction of processing in the cases provided for in Article 18 of the GDPR;

– object to processing based on the legitimate interest of the Data Controller, on grounds relating to his or her particular situation;

– receive the personal data provided to the Data Controller in a structured, commonly used and machine-readable format and, where applicable, transmit those data to another controller;

– withdraw consent at any time, where the processing is based on consent, without affecting the lawfulness of processing carried out before the withdrawal;

– lodge a complaint with the Data Protection Authority if it considers that the processing of its personal data infringes the GDPR.