Web policy

WEB POLICY – Navigation information pursuant to art. 13 EU Regulation 2016/679

Reference standards:

  • EU Regulation no. 679 of 27 April 2016 concerning the protection of individuals with regard to the processing of personal data, as well as the free circulation of personal data (hereinafter “EU Regulation”)
  • Legislative Decree n. 196 of 30 June 2003 (hereinafter “Privacy Code”), as amended by Legislative Decree n. 101 of 10 August 2018
  • Recommendation no. 2 of 17 May 2001 relating to the minimum requirements for online data collection in the European Union, adopted by the European authorities for the protection of personal data, gathered in the Group established by art. 29 of directive no. 95/46/EC (hereinafter “Recommendation of the Working Group pursuant to art. 29”)

ICOS S.p.A., with registered office in Via Monsignor L. Maverna, 4 – 44122 Ferrara, VAT no. 01031270380, wishes to inform users about the methods and conditions applied by the Company to the processing operations performed on personal data.

In particular, the information is provided in relation to the personal data of users who consult and use the Company’s website, corresponding to the following domain: www.icos.it

The Company acts as “Data Controller”, meaning “the natural or legal person, public authority, service or other body which, individually or together with others, determines the purposes and means of processing personal data ”.

Specifically, the processing of personal data may be carried out by subjects specifically authorized to carry out processing operations on users’ personal data and, for this purpose, duly instructed by the Company.

In application of the legislation on the processing of personal data, users who consult and use the Company’s website assume the quality of “interested subjects”, meaning the natural persons to whom the personal data being processed refer.

It should be noted that the information is not intended to be extended to other websites that may be consulted by users through links, including the Social Buttons, present on the Company’s website.

In particular, Social Buttons are digital buttons or direct connection links with Social Network platforms (such as, but not limited to, LinkedIn, Facebook, Twitter, YouTube), configured in each individual “button”.

By clicking on these links, users will be able to access the Company’s social accounts or share the contents published on the ICOS S.p.A. website on their personal account.

The managers of the Social Networks, to which the Social Buttons refer, operate as independent Data Controllers; consequently, any information relating to the methods by which the aforementioned Data Controllers carry out the processing operations on the users’ personal data can be found in the relevant Social Network platforms.

1. Personal data being processed

In consideration of the interaction with this website, the Company may process the following personal data of users:

to. Navigation data: the computer systems and software procedures used to operate this website acquire, during normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties but which by their very nature could, through processing and association with personal data held by third parties, allow users to be identified. This category of personal data includes the IP addresses or domain names of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment. These personal data are used only to obtain anonymous statistical information on the use of the website and to check its correct functioning.

The navigation data does not persist for more than (12 months), without prejudice to any need for the investigation of crimes by the judicial authorities.

b. Spontaneously provided personal data: the optional, explicit and voluntary transmission of personal data to the Company, by filling in the forms on the website, involves the acquisition of the email address and all other personal data of the users requested by the Company in order to comply with specific requests.

With reference to the processing of personal data provided by completing the contact form located on this website, please refer to the relevant “contact form information”.

 

2. Purpose and legal basis of the processing of personal data

In relation to the personal data referred to in point 1), let. a) of this information, the personal data of users are processed, automatically and “compulsory”, by the Company in order to allow navigation; in this case the treatment takes place on the basis of a legal obligation to which the Company is subject, as well as on the basis of the legitimate interest of the Company to guarantee the correct functioning and security of the website; therefore, the express consent of the users is not required.

3. Nature of the provision of personal data

Without prejudice to what has been specified for navigation data in relation to which the provision is mandatory as it is instrumental to navigation on the Company’s website, users are free to provide or not provide personal data in order to receive information or assistance from the Company .

With reference to the processing of personal data provided by completing the contact form located on this website, please refer to the relevant “contact form information”.

 

4. Methods and duration of the processing of personal data

The processing of personal data is carried out by subjects authorized to process personal data, specifically identified and instructed for this purpose by the Company.

The processing of users’ personal data is carried out through the use of automated tools with reference to access data to the website pages.

With reference to the processing of personal data provided by completing the contact form located on this website, please refer to the relevant “contact form information”.

In any case, the processing of personal data takes place in full compliance with the provisions aimed at guaranteeing the security and confidentiality of personal data, as well as, among other things, the accuracy, updating and pertinence of personal data with respect to the purposes stated in the this information.

It being understood that the navigation data referred to in point 1, let. a) they do not persist for more than 12 months, the processing of personal data takes place for the time strictly necessary to achieve the purposes for which they were collected or in any case on the basis of the deadlines established by law.

It should also be noted that the Company has adopted specific security measures to prevent the loss, illicit or incorrect use of personal data and unauthorized access to the same data.

 

5. Recipients of personal data

Limited to the purposes identified in this disclosure, your personal data may be communicated in Italy or abroad, within the territory of the European Union (EU) or the European Economic Area (EEA), for the fulfillment of legal obligations .

For more information with reference to the recipients of the users’ personal data provided by completing the contact form located on this website, please refer to the relevant “contact form information”.

Personal data will not be transferred outside the territory of the European Union (EU) or the European Economic Area (EEA).

Personal data will not be disclosed and therefore will not be disclosed to the public or to an indefinite number of subjects.

 

6. Rights pursuant to articles 15, 16, 17, 18, 20 and 21 of EU Regulation 2016/679

Users, as interested parties, will be able to exercise the rights of access to personal data provided for by art. 15 of the EU Regulation and the rights provided by the articles 16, 17, 18, 20 and 21 of the same Regulation regarding the rectification, cancellation, limitation of the processing of personal data, data portability, where applicable and opposition to the processing of personal data.

The aforementioned rights can be exercised by writing to the following address: privacy@icos.it

If the Company does not provide a response within the timeframe established by the legislation or the response to the exercise of rights is not suitable, users can lodge a complaint with the Guarantor for the Protection of Personal Data.

Here are the coordinates:

Guarantor for the Protection of Personal Data

Website: www.garanteprivacy.itwww.gpdp.it

Email: garante@gpdp.it