Privacy Policy | AGE web solutions

This English translation is provided for convenience only. In case of discrepancy, the Italian version prevails.

Introduction

AGE web solutions S.r.l., with registered office at via Cairoli 32, Ferrara, as Data Controller pursuant to Articles 4(7) and 24 of Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (hereinafter also the “EU Regulation”), hereby informs you, pursuant to Article 13 of the EU Regulation, that it holds personal data relating to you and that it will process them for the purposes and in the manner set out below. Processing of personal data means any operation (or set of operations) performed with (or without) the aid of automated processes on personal data (or sets of such data), such as: collection, recording, organisation, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission (including electronic transmission), dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. We therefore inform you that such data will be processed manually and/or with the aid of IT or telematic tools for the purposes set out below.

Data you are asked to provide

The personal data provided by the customer and processed in accordance with Regulation (EU) 2016/679 on privacy include, purely by way of example:

Name and surname
Address of residence
Telephone numbers
Email addresses
Passwords
Unique identification codes
etc.

and any other data that AGE web solutions S.r.l. deems useful to process throughout the relationship (both commercial and technical) between the parties.

Purposes of processing

The purpose pursued is both the management of the commercial relationship between the parties and the management (mainly through cloud services provided directly by AGE web solutions S.r.l. through its own staff) of the safety of workers in the workplace, of safety, quality and environmental management systems, and of any other information directly connected with the products/services supplied by the company to the customer. Therefore, purely by way of example, the data controller may be required to manage, on behalf of the customer, data such as:

the customer’s worker records
health, safety and environmental risks for workers
data on worker training, information and instruction courses
(non-sensitive) occupational health data (excluding medical records, whose database is encrypted)
etc.

Profiling

The personal data provided by the customer may be used by AGE web solutions S.r.l. to profile the data subject, i.e. to analyse or predict aspects concerning, for example, the economic situation, personal preferences, interests, reliability, behaviour, location, etc. of said customer (whether a natural or legal person), solely in relation to the commercial (or technical) relationship between the parties.

Recipients or categories of recipients to whom the data may be disclosed

The data may be disclosed to any other third party where disclosure is required by law or is necessary to correctly perform services in any case provided for by Regulation (EU) 2016/679 on privacy or by the terms governing any promotional/advertising initiatives addressed to the customer. With reference to Article 13(1)(e) of the EU Regulation, the parties (or categories of parties) who may become aware of the user’s personal data as data processors (or persons in charge of processing) are listed below. Specifically:

employees of the Data Controller appointed and authorised to carry out the processing
third parties engaged by the Data Controller for the organisation and management of any products and/or services from time to time, appointed as persons in charge of the processing.

In any case, the customer’s personal data will never be disseminated.

Methods of processing

The personal data collected are processed using the following tools (so as to ensure the security and confidentiality of the data collected, as well as full compliance with Regulation (EU) 2016/679 on privacy):

paper-based
electronic
telematic.

The personal data collected may be:

collected directly from the customer/supplier
collected from third parties
collected from public registers, lists, deeds or documents that anyone can access.

Nature of the provision of data

Authorisation to provide personal data is mandatory for all processing connected with legal obligations. Provision is optional if the data are collected for:

carrying out market research
sending advertising material
carrying out promotional activities.

It is understood that providing such data is a binding condition for the effective performance of the contractual obligations undertaken, whereas any refusal to provide the optional data will make it impossible for AGE web solutions S.r.l. to:

carry out market research
send advertising material to the customer
carry out promotional activities aimed at the customer.

Personal data retention period

The data will be retained for the periods laid down by the applicable legislation, specified below pursuant to Article 13(2)(a) of the EU Regulation. Personal data will be retained for the duration of the processing carried out. This is without prejudice to the five- or ten-year retention periods applying solely to documents and related data of a civil-law, accounting and tax nature, as required by the laws in force. Finally, with specific reference to personal data processed for the purpose of any customer profiling, such data will be retained for 12 months, or for a shorter period if the data subject withdraws their specific consent. Pursuant to Article 13(1)(f) of the EU Regulation, please note that none of the data collected will be transferred to a third country or to an international organisation, either within or outside the European Union.

Exercise of the data subject’s rights

Pursuant to Articles 13(2)(b) and (d), 15, 18, 19 and 21 of Regulation (EU) 2016/679, the data subject is informed that:

they have the right to request from the Data Controller access to, rectification or erasure of their personal data or restriction of processing concerning them, or to object to such processing, as well as the right to data portability
they have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), following the procedures and instructions published on the Authority’s official website at www.garanteprivacy.it, if such data are processed by the Controller in a manner that does not comply with Regulation (EU) 2016/679 on privacy
any rectification or erasure of personal data or restriction of processing carried out at the request of the data subject will be communicated by the Data Controller to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The Data Controller will inform the data subject about those recipients if the data subject so requests
the exercise of the above rights is not subject to any formal requirement and is completely free of charge
Articles 15, 16, 17, 18, 19, 20, 21, 22 and 23 of the EU Regulation can be consulted at the following link: https://eur-lex.europa.eu/

Right to lodge a complaint with the supervisory authority

The data subject whose personal data are processed may, at any time, in the event of use of their data that does not comply with this notice, lodge a complaint with the competent authority in order to stop the processing.

Data controller and data processor

The data controller for AGE web solutions S.r.l. is its legal representative pro tempore, who can be contacted either by certified email (PEC) at dpo@agews.com or at the addresses given in the “Locations” section of this website.