WHY THIS NOTICE
The information is provided pursuant to art. 13 of EU Regulation 2016/679 (so-called GDPR) only for the site www.gradese.it (hereinafter also simply “site”) and not for other websites that may be consulted by the user through other links on the site. The information is also based on Recommendation no. 2/2001 of 17 May 2001, to Opinion n ° 04/2012 on Cookie Consent Exemption of 7 June 2012 and in the Working Document 02/2013 providing guidance on obtaining consent for cookies of 2 October 2013 that the European authorities for the protection of personal data, gathered in the Group established pursuant to art. 29 of the directive n. 95/46 / EC, have adopted to identify some minimum requirements for the collection of personal data online. In particular, the methods, timing and nature of the information that the Data Controllers must provide to users when they connect to web pages, regardless of the purpose of the connection.
THE HOLDER OF THE TREATMENT
Following the consultation of this site and the possible sending of requests to the contacts listed in the various sections of the same, data relating to identified or identifiable natural persons may be processed.
The Data Controller is Gradese Immobiliare Srl , VAT number 00523580314 , with registered office in Grado (GO), Via Venezia Giulia, 7, Tel. +39 0431/85557, E-mail gradese@gradese.it.
TYPES OF DATA PROCESSED
Information Collected Automatically
The computer systems and procedures software used to operate this site web acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified, the computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server ( successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment.
By visiting the site, the following information is automatically collected:
- User’s hostname. The hostname or Internet Protocol address of the user requesting access to the site.
- HTTPS header, and the string ” user agent ” which includes: the type and version of browser used and the operating system with which the browser itself works.
- System date. The date and time of the user’s visit.
- Complete request. The exact request made by the user.
- Content length. The consistency, in bytes, of each document sent to the user.
- The request mode used.
- Universal Resource Identifier (URI). The placement of resources on the server.
- The URI Request string, which is everything after the question mark in the URI.
- Type of device used to consult the site.
- The transmission protocol and the version used.
The information collected automatically by the Firm, through access to the website, is used in order to improve the quality of the service offered to users of the site. This information is collected for the purpose of carrying out (anonymous) statistical surveys. The aim is to determine which data / contents are more or less useful / interesting for users. To therefore improve the effectiveness of the material available on the site.
Data provided voluntarily by the user
The optional, explicit and voluntary sending of e-mail messages to the addresses indicated on this site entails the subsequent acquisition of the sender’s address. This is necessary to respond to requests, as well as any other personal data included in the message.
Apart from what is specified for information collected automatically, the user is free to provide personal data contained in the request forms. Some information is indicated as mandatory, as it is necessary to satisfy the requests expressed. Failure to provide them may make it impossible to obtain what is requested.
METHOD OF TREATMENT
The data processing will be carried out in compliance with the regulations in force and the principles of correctness, lawfulness, transparency, relevance, completeness and non-excess of information. Furthermore, the aforementioned data will be collected and recorded only for the purposes indicated below and kept for a period strictly necessary for the same purposes.
Should the processing also concern personal data falling within the category of particular data (Article 9 GDPR – so-called “sensitive” data – that is, data suitable for revealing racial and ethnic origin, religious, philosophical or other beliefs , political opinions, membership of parties, trade unions, associations or organizations of a religious, philosophical, political or trade union nature, as well as personal data suitable for revealing the state of health, life and sexual orientation) or data relating to criminal convictions and offenses (art. 10 GDPR – so-called “judicial” data) the treatment will be carried out within the limits indicated by the General Authorizations of the Guarantor and by the subsequent equivalent measures, according to the methods provided for by EU Regulation 679/2016 and for the strictly necessary for the regular performance of the activity, of the operations relating to the supply of products / services and the fulfillment of contractual and / or legal / regulatory obligations.
Users are invited to avoid entering unnecessary sensitive and judicial data as this could lead to the destruction of the message .
The treatments connected to the web service (“contacts”) of this site take place at the aforementioned office and are only handled by the Owner. The optional, explicit and voluntary sending of e-mails to the addresses indicated on this site entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message.
Apart from what is specified below for navigation data, the user is free to provide personal data contained in any information request forms. Failure to provide them may make it impossible to obtain what is requested.
PURPOSE AND LEGAL BASIS OF THE PROCESSING
The data collected through the website are processed for the following purposes:
Purpose | Legal basis |
To carry out the provision of the services requested by users / customers and the fulfillment of user / customer requests for information | Contractual or pre-contractual obligation with the interested party |
To comply with the legal obligations resulting from the aforementioned purposes | Legal obligation to which the Owner is subject |
CATEGORIES OF RECIPIENTS
The data provided may only be known by the employees and collaborators of the owner specifically authorized to process such data as appointees, for the sole purpose of perfecting the activities requested by the customer / user of the site. These subjects are bound to secrecy and confidentiality also on the basis of specific internal regulations.
The subjects or categories of subjects who, within the scope of the purposes illustrated in this statement, could become aware of the data or to whom they may be communicated are, as involved in the organization of the site, the internal (administrative) staff specifically appointed and also external subjects (third party technical service providers, hosting providers, IT companies, external consultants) as part of any maintenance activities of the Site and also appointed, if necessary, Data Processors.
The data may also be communicated to public bodies, police forces or other public and private entities, but exclusively for the purpose of fulfilling legal obligations, regulations or community legislation.
STORAGE PERIOD
The data are processed and stored for the time required by the purposes for which they were collected. Therefore:
- The personal data collected for purposes related to the execution of a contract between the Data Controller and the User will be kept until the complete execution of this contract and also subsequently for legal obligations or to protect or assert or defend in court a right of the holder.
- The Data Controller may be obliged to keep Personal Data for a longer period in compliance with a legal obligation or by order of an authority.
- At the end of the retention period, the personal data will be deleted. Therefore, at the end of this term the right of access, cancellation, rectification and the right to data portability can no longer be exercised.
RIGHTS OF THE INTERESTED PARTIES
At any time you can exercise, without particular formalities, your rights towards the Data Controller, pursuant to art. 15 and following of the Regulation, in particular to obtain confirmation from the owner of the existence or not of a processing of data concerning you, to know its origin, to request access to personal data, updating, rectification, the cancellation or to request the limitation of the processing of personal data or to express opposition to their processing, to request their portability.
These articles also provide for the right of the interested party to lodge a complaint with a European supervisory authority (in Italy it is the Guarantor for the protection of personal data) or to appeal to the judicial authority.
Requests should be sent to gradese@gradese.it or to the address of the Controller’s office.
This policy may be subject to changes and updates therefore we invite you to consult it periodically when you interact with our site.
Last updated: May 10, 2022.