Information and authorisation of the treatment of personal data of those concerned: E-commerce customers and visitors to this company website.
MAIN STREET SRL – Registered office at Via G. di Vittorio 3/5 59025 Usella-Cantagallo (PO) tel. +39 0574 166 2721 email@example.com – as the Controller of your personal data, within the meaning and for the purposes of the no. 196 Legislative Decree 30th June 2003 (‘Code regarding the protection of personal data’), and of the Regulation (EU) 2016/679 (also GDPR), hereby informs you that according to the law indicated envisages the protection of persons and other subjects with regard to personal data processing and said processing will be based on fairness, lawfulness and transparency and protection of your privacy and your rights. Your personal data will be processed in accordance with the legislative regulations of the aforementioned law and the confidentiality requirements provided for therein. The sites that are referred to are:
Site security measures: specific security measures have been adopted for the management of this site, aimed at guaranteeing secure access and protecting the information held in the same site from accidental risks of loss or destruction.
To access the reserved area of the site, an identification code and password are assigned to companies, who request one, in order to avoid possible abuse. These passwords are generated in such a way that they don’t contain any references that could lead to the user. The user should keep their password strictly confidential.
Legal information: this privacy statement has been prepared in fulfillment of the obligations under Regulation (EU) 2016/679, Art.10 of the Directive no. 95/46/EC, as well as of Directive 2002/58/EC as revised by Directive 2009/136/EC, on the subject of Cookies.
The use of the collected data: Your data will be processed for the purposes described in the following paragraphs; if it’s related to legislative or contractual obligations it is sufficient to read this policy, if however it’s related to other purposes, the provision of data will be optional for you, and any refusal of the processing by you will not compromise the continuation of the relationship or the fairness of the processing.
Generally the data concerning the User is collected to allow the Owner to provide its services, as well as for the following purposes: contacting the user, send emails, interaction on social networks, statistic purposes and displaying content from external platforms.
The type of Personal Data used for each purpose is outlined in the specific sections of this document. Personal data collected through this site refers to:
1. Web surfing and usage Data, cookies
2. Data voluntary supplied by the user
The Personal Data collected may refer to both the User and the third parties who the User provides the data to. Users are fully responsible for any data of third parties obtained, published or shared through this site and confirm that they have the third party’s consent to provide the Data to the Owner.
The Controller may become aware of specific, or sensitive or judicial data in accordance with the Privacy Code, for the purposes of processing the following data, when necessary for the purposes specified below:
Your sensitive data which is subject to processing is that strictly applicable to obligations, tasks or purposes described above and will be treated in compliance with the General Authorisations issued for the processing of sensitive data.
The information systems and software procedures implemented for the operation of this website may acquire, during the course of their normal execution some personal data. The transmission of which is implied in the use of the Internet communication protocols. Such information is not collected in order to be associated with identified data subjects; however, due to its nature, such information could permit the identification of users, through processing operations and associations with data held by third parties.
This category of data includes IP addresses or domain names of the computers used by users who access the website, URI (Uniform Resource Identifier) notation address of the resources requested, the time the request is submitted, the method used to submit the request to the server, the size of the file obtained in the response, the numerical code indicating the state of the reply given by the server (sent, error, etc.), and other parameters relating to the user’s operating system and information environment.
This data is only used to retrieve anonymous statistical information on the use of the website and to check that it works properly. Such data may be used to ascertain any liability in the case of any alleged computer crimes to the detriment of the website.
Cookies are essential tools as they allow modern sites to work to their full potential, allowing maximum customization, interaction and enhance the online experience of the visitors. They can also help to ensure that adverts that are sent are more relevant to you and your interests.
Cookies can be:
The Privacy Guarantor considers technical cookies as session and functionality cookies and – only under certain conditions – the analytics ones; in particular of the Order of the Privacy Guarantor of 8th May 2014, specified that the latter can be assimilated to technical cookies only if used for the purpose of optimizing the site directly from the controller of the site, who can gather information, using aggregates on the number of users and how they visit the site.
For further information regarding cookies, characteristics and functions, please consult the following sites http://www.allaboutcookies.org, www.youronlinechoices.com, http://cookiepedia.co.uk and the aforementioned Order of the Guarantor.
Sending emails to the addresses specified on the site
The optional, explicit and voluntary sending of electronic mail to the email addresses specified on this website shall imply the subsequent acquisition of the sender’s email address, which is necessary to reply to requests, as well as other personal data, if any, contained in the message.
Compiling the data collection form (to request information and manage courses)
The web site on the “@contact us” or “appointments” page allows the interested parties to request information by inserting some personal data (such as name and surname, company name, e-mail address, food preferences and/or organizational set-up to manage the stay during company courses etc..). Such data will be processed by Main Street SRL staff, specifically empowered for responding exclusively to the user’s request, either manually or using IT tools. The personal data inserted in the Form are divided into two categories: obligatory and optional, as shown in the procedure for requesting information. The provision of the obligatory data and the relative processing for the purposes indicated above is strictly to carry out the request. The other data that is gathered is to help Main Street SRL offer an even better service and will be kept for as long as is strictly necessary. We would like to point out that you can exercise your rights specified in the “RIGHTS OF THE DATA SUBJECT”, at any time by addressing the Data Controller directly.
Register to the site
Subscription to the site and newsletters
Publishing photos and videos
Methods of processing: The Data Controller processes the Data of Users in a proper manner and shall take appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Personal Data. The data processing is carried out by:
Any data processing that is carried out it will be in compliance with the provisions set forth in Chapter II of the Regulation (EU) 2016/679 and Articles 11,31 and of the Legislative Decree. 196/03.
Communication: your data will be stored at our registered office and will only be communicated to the persons responsible for the carrying out of services necessary to manage the relationship properly, whilst guaranteeing a protection of the data subject’s rights
Your data will be processed by the personnel specifically authorized by the Controller, in particular, by the following:
In addition to the Data Controller and internal staff, in some cases, the Data may be accessible to external parties (such as third party technical service providers, mail carriers, hosting providers, IT companies, communication agencies) appointed if necessary, as Data Processors by the Controller, in particular to:
Dissemination: the data, without prejudice to the absolute prohibition of disseminating data which is able to reveal one’s health status, may be disseminated, as described above, on:
Data retention: Data processing of this site will take place at the company’s registered office and will be handled by the technical staff in charge of processing.
Your personal data will be kept as mentioned previously, and be kept for no longer than is necessary for the purposes for which it is being processed. Or until the User requests to be cancelled. Once collected the data will be stored on the company’s operating system or in the reference files and /or hard copies. Once cancelled it may be that the data is still stored but anonymously.
Rights of the data subject: The subjects to whom the personal data refers to, have the right, at any time, to obtain confirmation as to whether or not personal data concerning him or her exist, if so, to know its content and origin, verify its accuracy or request to be updated, integrated or rectified.
You also have the right to obtain from the Controller, the cancellation, the communication, the updating, rectification, or if interested, integration of the personal data, as well as exercising your rights in accordance with art.7 of the Privacy Code and Chapter III of the GDPR, Articles 12 to 23, including the right to file a complaint with the supervisory authority.
Additional information about data collection and processing:
The User’s Personal Data may be used for legal purposes by the Data Controller of the internet site, in Court or in the stages leading to possible legal action deriving from improper use of this application or the related services by the User.
Specific information concerning particular services or the collection and processing of the Personal Data supplied by the User or Interested party may be found on the pages of the Site.
System Logs and Maintenance
For operation and maintenance purposes, this site and any third party services may collect files that record interaction with this Site (System Logs) or use for this purpose other Personal Data (such as IP Address).
Information not contained in this policy
More details concerning the processing of Personal Data may be requested from the Data Controller at any time.
Link to third party sites
The Data Controller is not responsible for the processing of personal data that may be carried out by and through the sites which the user visits via links from this site.