Use of the website www.digitalrunway.altaroma.it (hereinafter also referred to as the “website”) requires the sending of cookies and similar tools to the user’s terminal.
In accordance with current legislation (Article 13 of the General Data Protection Regulation, hereinafter also referred to as “GDPR”), the data controller provides users of the website with information relating to the cookies used or allowed to be installed.
WHAT ARE COOKIES?
A “cookie” is a small text file created on the user’s computer when he or she accesses a particular website for the purpose of storing and transporting information. Cookies are sent from a web server (which is the computer on which the visited website is running) to the user’s browser (Internet Explorer, Mozilla Firefox, Google Chrome, etc.) and stored on the latter’s computer; they are then redirected to the website on subsequent visits.
While browsing, the user may also receive cookies from different websites (so-called “third-party” cookies) on his or her terminal, which are set up directly by the operators of these websites and used for the purposes and in the manner defined by them.
WHICH COOKIES ARE USED?
This website uses technical cookies, for which, according to current legislation, no consent is required from the data subject, as well as third-party cookies for analytical and profiling purposes.
More precisely, the website uses:
– technical cookies that guarantee the normal operation and use of the website by the user, detailed below
|PHPSESSID||At the end of the browsing session|
Without such cookies, the website could not function properly.
– technical cookies that make browsing easier, detailed below
it prevents the short message on cookies contained in the banner to reappear when the user reconnects to the website within the expiry date
Deleting this cookie will not save the reading of the banner for accesses made in the 31 days following the first connection to the site.
it makes it possible to store the choice of language
Deleting this cookie will not save the browser language for accesses made in the 365 days following the first connection to the site.
it makes it possible to store bookmarks
By deleting this cookie, the chosen favorites will not be indicated.
Some third-party cookies are installed on the website.
These are technical cookies (as in the case of Google Analytics cookies; the data controller has taken all the precautions prescribed by the Italian data protection authority), which do not require any consent, and profiling cookies (as in the case of cookies related to the widgets of social networks), which are activated by giving consent through the banner.
Details of individual third-party cookies, together with the links where users can get more information and request the deactivation of cookies, are provided below.
Google Analytics cookies
The website uses Google Analytics for analytical purposes.
The data generated by Google Analytics are stored by Google as explained in the information available here. https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage
The data storage period has been set to 14 months.
As expressly indicated by the Italian data protection authority in the document “Clarifications on the implementation of the legislation on cookies” of 5 June 2015, websites which use, for mere statistical purposes, analytical cookies created and made available by third parties are not subject to the obligations provided for by the legislation (including consent) if suitable tools are adopted to reduce the possibility of identifying users through the analytical cookies that they use (for example, by masking significant portions of the IP address) and provided that the use of such cookies is subject to contractual obligations between the websites and third parties, in which the third party is expressly required to use them exclusively for the provision of the service, to store them separately and not to “enrich” or “cross-reference” them with other information available to them.
The website owner has decided to make use of the IP anonymization function provided by Google (described in the following link: https://support.google.com/analytics/answer/2763052?hl=en). The website owner has also accepted the Amendment on the processing of data made available by Google Analytics, with which Google undertakes to process the data according to the requests of the Customer (website owner) and not to share them with other additional services if the Customer does not request it when setting up the services. The user is hereby informed that the owner of this website has not linked Google Analytics to any additional services and that no advertising or data sharing options with Google have been activated.
In light of the measures taken, Google Analytics, which is used by this website for mere statistical purposes, is activated upon landing on the website, without requiring the user’s consent for the use of the relevant cookies.
At the following link https://tools.google.com/dlpage/gaoptout?hl=en it is possible to download the Google Analytics Opt-out Browser Add-on.
The website uses Youtube to integrate videos into the platform.
This is a service offered by Google LLC, which involves the transfer of data abroad with the guarantees offered by standard contractual clauses. The use of this service involves the use of non-technical cookies with the user’s consent.
The website, within the private area, uses Zoom.
This is a service offered by Zoom Video Communications, Inc., which involves the transfer of data abroad with the guarantees offered by standard contractual clauses. The use of this service involves the use of non-technical cookies with the user’s consent.
WHAT HAPPENS IF THE USER BLOCKS THE INSTALLATION OF COOKIES?
With the exception of the technical cookies necessary for browsing, if the user blocks the installation of additional cookies, he or she will still be able to browse the website.
HOW CAN COOKIES BE DISABLED?
Without prejudice to what has been stated above with regard to the necessary technical cookies, the user may delete other cookies using the methods indicated in this policy, in the part where the cookies are listed, or directly through his or her browser.
It should be noted that each browser has different procedures for managing settings. Users can find specific instructions via the links below.
With regard to users browsing from mobile devices, it should be noted that the system configurations for excluding cookie storage or for deleting cookies vary depending on the brand and/or model of the device and it is therefore necessary to consult the manufacturer’s instructions.
To find out about the cookies stored on your terminal and deactivate them individually, please refer to the following link: https://www.youronlinechoices.com/uk/your-ad-choices.
WHAT ARE THE DATA SUBJECT’S RIGHTS?
The data subject is entitled by law to ask the data controller for access to and rectification or erasure of his or her personal data and to exercise his or her right to restriction of processing, to data portability and to object.
The data subject may exercise his or her rights at any time, without any formal procedure, by contacting the data controller or the Data Protection Officer through the contact details indicated in this User Privacy Notice. The controller will reply within 30 days of receipt of the request, as provided for by current regulations.
Below is a detailed description of the rights granted to the data subject by current legislation on the protection of personal data.
- Right of access, i.e. the data subject’s right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information: a) the purposes of the processing; b) the categories of personal data concerned; c) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations; d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; e) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing; f) the right to lodge a complaint with a supervisory authority; g) where the personal data are not collected from the data subject, any available information as to their source; h) the existence of automated decision-making, including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject. Where personal data are transferred to a third country or to an international organization, the data subject shall have the right to be informed of the appropriate safeguards relating to the transfer.
- Right of rectification, i.e. the data subject’s right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
- Right to erasure, i.e. the data subject’s right to obtain from the controller the erasure of personal data concerning him or her without undue delay where one of the following grounds applies: a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; b) the data subject withdraws consent on which the processing is based and where there is no other legal ground for the processing; c) the data subject objects to the processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, or necessary for the purposes of the legitimate interests pursued by the controller or by a third party, and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing for direct marketing purposes; e) the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject; f) the personal data have been collected in relation to the offer of information society services to a child. However, a request for erasure cannot be accepted to the extent that processing is necessary: a) for exercising the right of freedom of expression and information; b) for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; c) for reasons of public interest in the area of public health; d) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in so far as erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing; or e) for the establishment, exercise or defence of legal claims.
- Right to restriction of processing, i.e. the data subject’s right to obtain that his or personal data, with the exception of storage, only be processed with his or her consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State where one of the following applies: a) the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data; b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead; c) the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims; d) the data subject has objected to the processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, or necessary for the purposes of the legitimate interests pursued by the controller or by a third party, pending the verification whether the legitimate grounds of the controller override those of the data subject.
- Right to data portability, i.e. the data subject’s right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and, where technically feasible, the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where the processing is based on consent or a contract and the processing is carried out by automated means. The exercise of the right to data portability shall be without prejudice to the right to erasure.
- Right to object, i.e. the data subject’s right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, or necessary for the purposes of the legitimate interests pursued by the controller or by a third party. Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing.
If the data subject considers that the processing of his or her personal data is in breach of the GDPR provisions, he or she shall have the right to lodge a complaint with a supervisory authority, as provided for in Article 77 of the Regulation, or to an effective judicial remedy (Article 79 of the Regulation).
OWNER AND DATA CONTROLLER
The owner and data controller is Altaroma S.c.p.a., with registered office in Via dell’Umiltà no. 48, 00187 Rome, VAT no. IT05518911002. The Company can be contacted by email at the following address: firstname.lastname@example.org
As regards the processing of data acquired through third-party cookies, please refer to the indications in the list included in this document.
HOW TO CONTACT THE DATA PROTECTION OFFICER
The Owner and Data Controller has appointed the Data Protection Officer, who can be contacted at the following address: email@example.com.
ADDITIONAL INFORMATION ON THE PROCESSING OF DATA