Cookies Policy – Website Users

Who are we and what do we do with your personal data?

IGD SIIQ S.p.A. (hereinafter IGD), with registered office in Bologna, via Trattati Comunitari Europei 1957-2007 no. 13, T.C. and VAT no. 00397420399, the Controller of the Data Processed  (hereinafter The Controller), protects the privacy of your personal data and guarantees that it will be safe from any and all compromising events.

Toward this end the Controller gathers and uses the personal data in accordance with the policies and practices adopted which protect the rights granted under the applicable legislation. The Controller updates the policies and practices used to protect the personal data when deemed necessary and, at any rate, as a result of changes in the law or the organization which could impact the processing of your personal data.

The Controller has appointed a Head of Data Protection or Data Protection Officer (HDP or DPO) whom you can contact if you have any questions about the policies and practices used.

You may contact the HDP/DPO at the email address dpo@gruppoigd.it

How does IGD collect and process your data?

Your personal information is processed for the purposes of:

1. Navigating the website gruppoigd.it 
   The personal data processed, such as, for example, IP addresses, cookies stored while navigating  www.gruppoigd.it is used by the Controller to manage the website and gather information.
   Under no circumstances will your personal data be shared or transferred to unknown parties.
2. Disclosures made to third parties and recipients
   Your personal data is shared primarily with third parties and/or recipients as deemed necessary for the purposes referred to herein, as well as in order to comply with certain legal obligations. You will be asked to expressly consent to the disclosure of information made for any other purposes.
   More in detail, your data will be shared with third parties/recipients in order to:
   1. Implement the service (for example, IT service providers);
   2. Make disclosures to the financial authorities, public supervisory and control entities so that the Controller may comply with specific obligations stemming from the activities carried out;The personal data that the Controller processes for this purpose include:
   – Navigation data (IP address)
3. Cyber security
   The Controller and its suppliers (third parties and/or other recipients) process your personal  (for example, your IP address) or traffic data gathered or obtained through the use of the web based services, solely as needed and in a way which guarantees data security, as well as the ability of a network and the connected servers to withstand unforeseen incidents or illicit or malicious acts which compromise the availability, authenticity, integrity and privacy of the personal data filed or shared.
   Toward this end the Controller establishes procedures for the management of any breaches of this personal data (data breaches).

What are cookies and for what reasons may be used for

Cookies are small files placed on the hard drive of the user’s computer by the server of a website that you visit.  Cookies are placed there for the purpose of storing and transferring information. The cookies are sent by a web server (which is the computer used to visit the website) to the user’s browser  (Internet Explorer, Mozilla Firefox, Google Chrome, etc.) and memorized on the computer of the latter; they are then resent to the website during subsequent visits .

Some transactions could not be completed without the use of cookies which, in some instances, are, therefore, technically necessary.  In other cases the website uses cookies to increase ease of use and facilitate the user’s navigation or to allow for users to access specific services.

The cookies may remain in the system for long periods of time and may also contain a unique identification code. This makes it possible to use the cookies to track the user’s navigation within the website, for statistical purposes or advertising, to create a personalized user profile beginning with the pages visited and show and/or send targeted advertisements ( Behavioral Advertising).

Which cookies are used and what are the main reasons for which they are used

The main categories of cookies used by the Controller, the purpose for which they are used and the consequences linked to deactivation:

Third party cookies

Third party cookie, namely cookies created on websites other than the one the user is currently visiting, are used on this website.

More in detail, we hereby inform website users that the following services generate cookies:

Social buttons

There are social buttons/widgets on the website www.gruppoigd.it which appear as social network icons (for example, Facebook. Linkedin etc.) and other web services (for example YouTube etc.).

These buttons make it possible for website users to interact with the social networks by clicking on the button. In this instance the social network and the web service providers capture the user’s data, but the Controller will not share any information relating to the navigation or the user captured through its website as a result of the access to social networks or web services via the social buttons/widgets. These services place “third party” cookies.    Links to the privacy policies of the mostly widely used social networks and websites are provided below:

• Facebook: https://www.facebook.com/help/cookies
• Linkedin: https://www.linkedin.com/legal/cookie_policy
• Yotube: https://policies.google.com/technologies/cookies?hl=it
• Twitter: https://help.twitter.com/it/rules-and-policies/twitter-cookies

Deletion and activation of cookies

By continuing on after reading the abridged policy, the user is granting express consent to the use of the third party cookies described above.

In this section the user may change the website’s cookie settings.  Once the settings have been changed, the user must click on the SAVE button.

Technical cookies

Needed to use the website and, if blocked, the site will not work properly.  You must consent first before they can be placed.

Analytical cookies

Make it possible to track visitors on the website and optimize users’ experience and the actual services provided.  If blocked, the Controller will not be able to optimize the navigation experience or the services, though the website is still navigable.

Once enabled, the deletion of single cookies may be done through your browser (through the Settings menu by clicking on Internet options, the relative privacy setting and selecting the desired level of cookie filters). For more information see: Google Chrome, Mozilla Firefox, Apple Safari and Microsoft Windows Explorer.

You may also activate the Do Not Track option available on the majority of the latest generation browsers.

The deactivation of third party cookies will not in any way compromise website navigation.

What happens if you do not provide us with your data?

The personal information provided which identify you are needed in order to fulfill your request to  receive the newsletter and if not provided it will become impossible for the Controller to fulfill your request.

Please refer to the consequences of linked to the deletion of single cookies, as shown in the table above.

How, where and for how long do we store your data?

How do we process your data?

The personal data are processed using IT procedures by specifically authorized and trained internal staff members. These parties may access your personal data to the extent needed to carry out the necessary processing.

The Controller checks the tools used to process your data and the security measures adopted are updated constantly; the Controller also verifies, including through the authorized data processors, that the way the data are gathered, processed, filed or stored, guarantees integrity and authenticity and the use solely for the purposes referred to herein.

Where are your data stored?

The data is retained in computer and electronic files located within the European Economic Area.

How long are your data stored for?

• Cookie:

Please refer to the table above.

• Website navigation:

Your personal data are stored for the time needed to enable website navigation and, at any rate, for not more than 10 years with the exception of the incidents in which the competent Authorities are involved, including in collaboration with the third parties/recipients involved in the cyber security of the Controller’s data, in order to carry out investigations as to the causes of the incident, as well as protect the interests of the Controller against any liabilities stemming from the use of the website or related services.

What are your rights?

Basically you may at any time, freely and without any charges or having to adhere to specific formalities;

• obtain confirmation that data was processed by the Controller;
• access your personal data and know where the data came from (when the data were not provided directly by you), in what situation and the reason for which the data was processed, information about the parties with whom the data was shared, the amount of time the data will be stored or how this time period will be determined;
• update or change your personal data to ensure that the information is always precise and accurate;
• eliminate the data from databases, archives and/or backup systems in the event, among other things, the purpose for which the data was processed no longer exists or if this may be viewed as illicit as long as the conditions provided for under the law exist; and, at any rate, if the processing is no longer justified by another, equally legitimate reason;
• limit the processing of your personal data in certain circumstances like, for example, when the accuracy is disputed, for the amount of time it takes the Controller to verify the accuracy. You will be informed, in a timely manner, when the suspension is over or when the reason for the suspension no longer exists, and, therefore, when the restriction has been eliminated;
• obtain the personal data, if received and/or processed by the Controller with your consent and/or if the data is processed based on a contract and automatically using digital means including for the purposes of transmitting the data to another data controller.

The Controller must comply with the request as soon as possible and, at any rate, not later than one month from the day on which the request was received by the Controller. The term may be extended by two months, if necessary, as warranted by the complexity and number of requests received by the Controller.  In these instances the Controller must advise you of and the reasons for the delay within one month of having received your request. You may exercise your rights by writing to privacy@gruppoigd.it.

How and when may you object to the processing of your personal data?

You may object to the treatment of your personal data for reasons specific to your situation and in order to protect a legitimate interest at any time by submitting your request to the Controller at privacy@gruppoigd.it

You are entitled to withdraw your personal data if there is no prevailing legitimate purpose comparable to the one underlying your original request.

With whom may you file a complaint?

Without prejudice to any other administrative or court action you may take, you may also file a complaint with the competent authority, namely the body responsible for controls, where you normally reside or work or, if different, in the member state where the violation of EU Regulation 2016/679 took place.