Data Controller and Data Processor
The Data Controller is Aquafil S.p.A. Tax ID No. 09652170961, with registered office in via Linfano 9, Arco, 38062.
The Data Processor is Websolute Spa with registered office in Pesaro, Strada della Campanara, 15 – 61122, VAT No./ Tax ID No. 02063520411 as regards the management of the website and the servers on which it is hosted, as well as the storage of the users’ personal data.
It should be noted that a complete and updated list of the subjects to whom the data may be communicated in their capacity as data processors may be requested through the use of one of the communication channels made available to the Company for the data subjects’ exercise by data subjects of their rights, as indicated further below.
Copyright
Documents, images, trademarks and anything else published and reproduced on this Site are the property of Aquafil S.p.A. and any reproduction of such items to the public is prohibited.
Privacy policy
Personal data processing
Access to some sections of the website www.aquafil.com (individually and with reference to this privacy policy, referred to as the “Site”) and/or any requests for information or services by users of the Site may be subject to the inclusion of personal data whose processing by Aquafil S.p.A. (as Data Controller), is carried out in compliance with Regulation (EU) 2016/679 (GDPR) and Legislative Decree No. 196/2003 and subsequent amendments and/or supplements (Privacy Code).
This information is intended to allow users to know how Aquafil S.p.A. processes personal data even before they access the various sections of the Site and provide their data, and it will still be necessary for the user to take note of it before providing personal data.
Purposes and legal basis of processing
The registration of users on the Site is not required for the provision of certain services offered by Aquafil S.p.A. However, in order to meet any requests made by users regarding such services, users will be asked to provide personal details, which will be processed only for the purposes and for the period strictly necessary.
According to the needs expressed from time to time by the user who accesses the various sections of the Site, the purposes of the processing of personal data may be as follows:
a) allow registration to the Site, necessary to access particular sections of the Site itself and to provide and manage the various services offered. Such processing is based on the provision of a service at the request of the user, in which case the data are processed to enable the display of web pages of the Site and the use of services offered by the Site itself, to manage the activities resulting from the completion of online forms in the various sections of the website, to answer the requests/questions of the user and to manage commercial relationships.
b) carry out marketing activities (such as, merely by way of example and not limited to, the sending of informative, promotional and advertising material), and this also by e-mail, fax, MMS and SMS. In this case the data are processed to send by e-mail or SMS, telephone or similar – even by automated methods of contact – promotional and commercial communications relating to services/products similar to those already offered by the Data Controller and/or new services offered by the Data Controller, reporting of corporate events conferences, workshops, training courses, webinars or whitepapers, subscription and forwarding newsletters only in case of express request. Such processing includes the communication of personal data to partner companies – e.g. third parties and/or other companies in the group – for the purposes of traditional and non-conventional marketing, telemarketing, commercial information, the sending of advertising material or the carrying out of market research, direct sales activities or interactive commercial communications on products, services and other activities relating to third party products.
This is without prejudice to the data subject’s right to object at any time to such processing or to revoke the consent already given for the processing of his or her personal data for this purpose.
c) perform statistical analysis of the use of the Site; in this case the data are processed for web analysis activities, verification of the number of visitors to the Site, control of the trend of relations with the users of the Site.
Please note that the processing of data carried out for the purposes referred to in point a) is based on the execution of a contract to which the user is a party and of the services requested by the same.
The processing for the purposes referred to in point b) is based on the legitimate interest of the Data Controller pursuant to Art. 6, § 1, lett. f) of the GDPR and on the consent of the user and, more specifically, as regards the sending of newsletters, the legal basis is consent. The purposes referred to in point c) are based on the legitimate interest of the Data Controller to manage the Site, to maintain its proper functioning and to protect its rights.
Categories of personal data processed and processing methods
The data collected and processed are divided into the following categories:
1) Navigation data: during their normal operation, the computer systems and software procedures used to operate this Site acquire certain personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses or domain names of computers used by users who connect to the Site, URI/URL (Uniform Resource Identifier/Locator) of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the response from the server (successful, error, etc.), and other parameters regarding the operating system and computer environment. These data are necessary for the use of the web service and are also processed in order to:
– obtain statistical information on the use of the services (most visited pages, number of visitors per time slot or per day, geographical areas of origin, etc.);
– check the correct functioning of the services offered.
Navigation data are deleted immediately after processing (except for their possible use by judicial authorities to ascertain crimes or responsibilities).
2) Data communicated by the user: the optional, explicit and voluntary sending of electronic mail to the addresses indicated on the Site, private messages sent by users to institutional profiles/pages on social media, as well as the completion and submission of forms on the Site, involves the subsequent acquisition of the sender’s address, necessary to respond to requests, and any other personal data communicated by the user.
3) Cookies: cookies are information (small text files) that websites transmit to the device being used (PC, smartphone, tablet, etc.). This information makes it possible to carry out navigation, perform computer authentication, collect information on the number of visitors and on how the Site is used, as well as to monitor users.
For more information about the cookies used by our Site and the type of data collected, please see our Cookie Policy.
Personal data will be processed mainly in automated form, by logic strictly related to the purposes mentioned above and specifically:
– as regards contractual purposes (a): processing and collecting of navigation data and data communicated by the user;
– as regards marketing and sending newsletters (b): processing and collecting of navigation data and data provided by the user;
– as regards statistical analysis (c): processing of navigation data.
Nature of the users’ provision of personal data and consequences of the refusal to answer
The provision of personal data is optional only for the processing of data related to the purposes referred to in paragraphs b) and c). For the purposes referred to in point a), however, it is mandatory.
Some personal data are strictly necessary for the functioning of the Site, others are used only to obtain anonymous statistical information on the use of the Site and to check its correct functioning.
Navigation data are acquired automatically by the Data Controller and are also necessary to satisfy the contractual purpose (a).
As regards the data communicated by the user in the request forms of the Site and acquired subsequently also by virtue of questions or inputs from the Data Controller, however, the user is free to choose whether to provide them or not and their absence can only lead to the impossibility of being contacted or to obtain the requested service.
The refusal to provide data or the complete opposition to their processing for the purposes indicated in point a) may make it impossible to satisfy certain requests/questions and to manage future and eventual commercial relations.
The refusal to use the data for the purposes referred to in points b) and c) will not have any effect on existing business relationships with the user.
Notice:
with regard to marketing activities (including the sending of the newsletter), in case of conferment, the user can decide at any time to stop receiving the related communications by clicking on the link at the bottom of each email or by contacting the Data Controller directly at the address info@aquafil.com.
Scope of communication or dissemination of personal data of users
Personal data provided directly by users will not be communicated to third parties or disseminated.
Personal data may be processed by employees or collaborators of the Communication Department and the Human Resources Department of the Data Controller who work under the direct authority of the latter, according to the operating instructions defined by the same.
Storage of personal data
The data storage period depends on the specific purpose for which they are collected and processed, and in particular:
a) Contractual and statistical purposes: for the entire duration of the contract and, after its termination, for 10 years.
b) Marketing purposes and the sending of newsletters: until the right of opposition is exercised; in case of no opposition, for 24 months.
After the expiry of the aforementioned storage period, the personal data will be deleted and destroyed or made anonymous if not already in anonymous form.
Transfer of personal data abroad
Aquafil S.p.A. does not transfer the data of users of the Site to third parties. However, please note that the management of the servers on which the Site is hosted, entrusted to Websolute Spa may involve the transfer of some data to countries outside the EU. In this regard, we would like to inform you that in such situations our company adopts all the appropriate security measures to protect such data. The possible transfer to non-EU countries will take place in compliance with the appropriate and suitable guarantees for the purposes of the transfer itself, such as the standard contractual clauses for the protection of data, in accordance with the applicable regulations and in particular with Articles 45, 46, 47 and 49 of the GDPR and only for the purposes indicated in this privacy policy.
Rights of users as per Articles 15 to 20 of the GDPR
Pursuant to Articles from 15 to 20 of the GDPR, the data subjects have the right to obtain, at any time:
• Confirmation of the existence or otherwise of processing concerning them and access to their data, including information regarding: – the purpose of the processing; – the categories of personal data being processed; – the recipients to whom the data are or will be communicated; – whether the data are transferred outside the European Union and the existence of the relevant safeguards; – the data retention period or the criterion for determining it; – any right to rectification and erasure of data, restriction and opposition to processing; – the right to lodge a complaint with the supervisory authority; – the origin of the data, if the data have not been collected through the data subject; – the existence of an automated decision-making process;
• a copy of the personal data being processed, if this does not infringe the rights and freedoms of others;
• the rectification of inaccurate personal data;
• the erasure of personal data concerning them;
• revocation of the consent given;
• limitation of the processing of personal data;
• personal data provided in a structured format of common use and readable by electronic device, even for transmission to another Data Controller.
In addition, pursuant to Articles 21 and 22 of the GDPR, data subjects have the right to:
1. object at any time, for legitimate reasons related to their situation, to the processing of data relating to them and necessary for the performance of public interest tasks or the pursuit of the legitimate interest of the Data Controller;
2. not be subjected to decisions based solely on automated processing, which may have legal effects or significantly affect the data subject.
In particular, the data subject may at any time oppose the sending of communications relating to commercial activities, marketing by selecting the “unsubscribe” option at the bottom of the email containing the newsletter.
The user may, at any time, exercise the above rights:
– by sending a letter to be sent by ordinary mail to: Aquafil S.p.A., via Linfano 9, Arco, 38062, ITALY;
– by writing an email to info@aquafil.com
The above-mentioned rights can be exercised directly or by conferring, in writing, proxy or power of attorney to individuals or associations.
Right to lodge a complaint with the Supervisory Authority
Pursuant to Article 77 of the GDPR, the data subject has the right to lodge a complaint with the Supervisory Authority if he/she considers that a processing operation concerning him/her violates the legal provisions on the protection of personal data in force.