Contact Information from the site in accordance with Article 13 of EU Regulation 2016/679 GDPR
Caroni SPA
Via Castelletto Stura, 46
12100 Cuneo (CN)
Partita Iva: 00677140048
Codice Fiscale: 00677140048
Data collected from the interested party
Dear user,
we hereby wish to inform you about the personal data that will be collected and the related treatments that we will perform, as well as any useful information to facilitate contact and interaction with our offices.
Data Controller
The Data Controller is Caroni SPA.
The contact data are as follows:
Telephone: 0171 401346
Mail: privacy@caroni.it
Fax: 0171 403750
Website: https://www.caroni.it
Processing of personal data
This page describes how we manage the website in relation to the processing of personal data of users who interact with the web services on this Caroni SPA website.
The information is provided only for this site and not for other websites that may be consulted by the user through links.
Pursuant to art. 13 of the EU Reg. 2016/679 (GDPR), the undersigned, as Data Controller, informs you that the personal data acquired will be processed in compliance with the rights of fundamental freedoms, as well as the dignity of the person concerned, with particular reference to privacy and personal identity and to the right to protection of personal data.
Pursuant to art. 13 of the aforementioned Regulation, therefore, we provide you with the following information:
Navigation data
The computerised systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified interested parties, but by their very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes IP addresses or domain names of the computers used by users who connect to the site, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters related to the operating system and the user’s computer environment.
These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site.
Data provided voluntarily by the user
The optional, explicit and voluntary sending of e-mails to the addresses indicated on this site entails the subsequent acquisition of the sender’s address, necessary to answer to requests, as well as any other personal data included in the message.
Specific summary information will be progressively reported or displayed on the pages of the site dedicated to particular services on request.
Personal data will be processed exclusively for purposes connected and / or instrumental to the consultation of the site, excluding, therefore, any use different and / or conflicting with those of the “Interested party”.
The processing of information concerning you will be based on principles of correctness, lawfulness, transparency and protection of confidentiality and will be processed and stored using computer tools and paper methods for the time strictly necessary to achieve the purposes for which they were collected.
Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorised access.
The conferment of data is optional, however, the refusal to provide personal data relevant to the purpose of collection will not make it possible to obtain what has been requested.
The treatments related to the web services of this site take place at the headquarters of Caroni SPA and are handled by our processors and hosting providers.
In no case your personal data will be subject to disclosure without your specific consent.
Use of cookies
The Caroni SPA website uses cookies that are analytically shown in the table below.
COOKIE | _ict_current_language/euCookie | |
TYPE | TECHNICAL COOKIE | |
ANONYMIZATION | YES | |
OWNER | caroni.it | |
DESCRIPTION | This cookie is appropriately anonymized and is used to access the services of the site itself and to save basic preferences (language / status cookies acceptance) | |
EXPIRY DATE | 3 months | |
NAME | 1P_JAR/ANID/CGIC/NID/SNID | |
TYPE | PROFILING COOKIE | |
ANONYMIZATION | YES | |
OWNER | Third party (google.com) | |
DESCRIPTION | Cookies are appropriately anonymized and are used to collect information, in aggregate form, on the number of users and how they visit the site. Tools are adopted that reduce the identifying power of cookies and the third party does not cross information collected with others already available | |
EXPIRY DATE | 1 month/6 months | |
NAME | PREF/VISITOR_INFO1_LIVE/YSC | |
TYPE | PROFILING COOKIE | |
ANONYMIZATION | YES | |
OWNER | Third party (youtube.com) | |
DESCRIPTION | Cookies are appropriately anonymized and are used to collect information, in aggregate form, on the number of users and how they visit the site. Tools are adopted that reduce the identifying power of cookies and the third party does not cross information collected with others already available | |
EXPIRY DATE | End of session/24 hours/6 months | |
Links which may appear in some of our website lead to third party sites that may use cookies of various kinds; we therefore invite you to read the relevant information on these sites and to express the consents requested.
The management of each cookie is up to the user who, manually or through the automatic settings of their browser, can decide which cookies to accept, with the possibility of eliminating at any time some or all of the cookies present on her/his personal navigation station.
To facilitate the setting and management of the cookie settings, please find here following the main browsers and the link to the instructions for cookie settings (the links go to pages external to our site, maintained and updated directly by the relevant navigation software producers).
Internet Explorer | http://windows.microsoft.com/it-it/internet-explorer/delete-manage-cookies#ie=ie-11 |
Google Chrome | https://support.google.com/accounts/answer/61416?hl=it |
Apple Safari | |
Mozilla Firefox | https://support.mozilla.org/it/kb/Attivare%20e%20disattivare%20i%20cookie |
An additional help in the management of cookies may come from the use of automated services such as those offered by the site http://www.youronlinechoices.com/it/.
We also inform you, concisely, that you have the right to request information about your personal data we are processing, request their correction, cancellation, oppose the processing, ask for limited treatment and data portability according to the provisions of Articles from 15 to 22 of EU Regulation 2016/679 GDPR (copy of the text of the mentioned articles can be requested at the addresses mentioned above).
At any time, you are entitled to submit a complaint to a territorially competent supervisory authority.
Should the treatment be based in whole or in part on your consent, you have the right to withdraw it freely and at any time through the contacts at the addresses indicated above. The processing carried out in accordance with the consent given and the related legal effects will remain valid even after a possible revocation of the consent.
For any further question or communication regarding the processing of your data, do not hesitate to contact us.
The Data Controller
Caroni SPA
Request of the interested parties to exercise their rights
Article 15 – Right of access of the interested party
1. The interested party has the right to obtain from the data controller confirmation that personal data processing concerning him/her is or is not undergoing, and in case, to obtain access to personal data and the following information:
a) the purposes of the processing;
b) the categories of the personal concerned data;
c) the recipients or categories of recipients to whom the personal data have been or will be communicated, especially if recipients of third countries or international organizations;
d) whenever possible, the retention period for personal data provided or, if this is not possible, the criteria used to determine this period;
e) the existence of the right of the interested party to ask the data controller to rectify or delete personal data or limit the processing of personal data concerning him/her or to oppose to their processing;
f) he right to submit a complaint to the supervisory authority;
g) In case data are not collected by the interested person, all information available on their origin;
h) the existence of an automated decision-making process, including profiling referred to in Article 22 (1) and (4), and at least in such cases, significant information on the logic used, and the importance and expected consequences of such processing for the interested party.
2. In case personal data are transferred to a third country or to an international organisation, the interested party has the right to be informed of the existence of adequate safeguards pursuant to Article 46 concerning the transfer.
3. The data controller provides a copy of the personal data being processed. In case of further copies requested by the interested party, the data controller may charge a reasonable fee contribution based on administrative costs. If the interested party submits the request by electronic means, and unless otherwise indicated by the interested party, the information is provided in a commonly used electronic format.
4. The right to obtain a copy referred to in paragraph 3 must not adversely affect the rights and freedoms of others.
Article 16 – Right of rectification
The interested party has the right to obtain from the data controller the correction of inaccurate personal data concerning him/her without undue delay. Taking into account the purposes of the processing, the interested party has the right to obtain the integration of incomplete personal data, also by providing an additional declaration.
Article 17 – Right to cancellation (“right to be forgotten”)
1. The interested party has the right to obtain from the data controller the deletion of personal data concerning him/her without undue delay, and the data controller is obliged to cancel the personal data without undue delay if one of the following reasons exists:
b) the interested party withdraws the consent on which the processing is based in accordance with Article 6 (1) (a) or Article 9 (2) (a), and if there is no other legal basis for the processing;
c) the interested party opposes the treatment according to Article 21 (1), and there is no legitimate overriding reason to proceed with the processing, or opposes the treatment according to Article 21 (2)
d) personal data have been processed unlawfully;
e) personal data must be deleted in order to fulfill a legal obligation under Union or a law State Member to which the controller is subject to;
f) the personal data have been collected in relation to the provision of information society services as referred to in Article 8 (1).
2. The data controller, if he has made public personal data and is obliged, pursuant to paragraph 1, to delete them, taking into account the available technology and implementation costs, takes reasonable steps, including technical ones, to inform the data controllers that they are processing the personal data of the request of the interested party to delete any link, copy or reproduction of his/her personal data.
3. Paragraphs 1 and 2 shall not apply to the extent that processing is necessary:
a) for exercising the right to freedom of expression and information;
b) for the fulfilment of a legal obligation requiring the treatment provided for by the law of the Union or the State Member to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of public authority the data controller is invested of;
c) for reasons of public interest in the public health sector in accordance with Article 9 (2) (h) and (i) and Article 9 (3);
d) for archiving purposes in the public interest, scientific or historical research or statistical purposes in accordance with Article 89, paragraph 1, to the extent that the right referred to in paragraph 1 would render impossible or seriously affect the achievement of the objectives treatment; or
e) for the assessment, exercise or defence of a right in court.
Article 18 – Right of limitation of processing
1. The interested party has the right to obtain from the data controller the limitation of processing when one of the following hypotheses occurs::
a) the interested party disputes the accuracy of personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
b) the processing is illegal and the interested party opposes the cancellation of personal data and asks instead that its use is limited;
c) although the data controller no longer needs personal data for processing purposes, they are necessary for the interested party to ascertain, exercise or defend a right in court;
d) the interested party opposed the treatment pursuant to Article 21 (1), pending the verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.
2. If the processing is limited in accordance with paragraph 1, such personal data shall be processed, except for storage, only with the consent of the interested party or for the establishment, exercise or defense of a right in court or to protect the rights of another natural or legal person or for reasons of public interest of the Union or of a State Member.
3. The interested party who obtained the processing restriction pursuant to paragraph 1 shall be informed by the controller before the limitation is revoked.
Article 19 – Obligation to notify in case of rectification or cancellation of personal data or limitation of the processing
The data controller shall inform each of the recipients to whom the personal data have been transmitted of any correction or cancellation or limitation of the processing carried out pursuant to Article 16, Article 17 (1) and Article 18, unless this proves impossible or involves a disproportionate effort. The data controller informs the interested party of these recipients if he/she requests it.
Article 20 – Right to data portability
1. The interested party has the right to receive, in a structured format, in common and automatic way, the personal data concerning him / her provided to a data controller and has the right to transmit these data to another data controller without impediments from part of the data controller to whom he has provided them if:
a) The processing is based on consent pursuant to Article 6 (1) (a) or Article 9 (2) (a) or on a contract within the meaning of Article 6 (1) (b) ; and
b) the treatment is carried out by automated means .
2. In exercising his/her rights related to the portability of data pursuant to paragraph 1, the interested party shall have the right to obtain direct transmission of personal data from one controller to another, if technically possible.
3. The exercise of the right referred to in paragraph 1 of this Article does not prejudice Article 17. This right does not apply to the processing necessary for the performance of a task carried out in the public interest or in connection with the exercise of official authority the holder of the treatment is invested with.
4. The right referred to in paragraph 1 must not affect the rights and freedoms of others.
Article 21 – Opposition right
1. The interested party has the right to oppose at any time, for reasons connected with his/her particular situation, to the processing of his/her personal data pursuant to Article 6, paragraph 1, letters e) of), including profiling on the basis of these provisions. The data controller refrains from further processing personal data unless he demonstrates the existence of binding legitimate reasons to proceed with the processing that prevail over the interests, rights and freedoms of the interested party or for the assessment, exercise or the defense of a right in court.
2. If personal data are processed for direct marketing purposes, the interested party has the right to object at any time to the processing of personal data concerning him / her for such purposes, including profiling so far as it is connected to such direct marketing.
3. If the interested party objects to processing for direct marketing purposes, personal data are no longer processed for these purposes.
4. The right referred to in paragraphs 1 and 2 shall be explicitly brought to the attention of the interested party and shall be presented clearly and separately from any other information at the latest at the time of the first communication with the interested party.
5. In the context of the use of information society services and without prejudice to Directive 2002/58 / EC, the interested party may exercise their right to object by automated means using technical specifications.
6. Where personal data are processed for the purposes of scientific or historical research or for statistical purposes in accordance with Article 89 (1), the interested party shall have the right to object to the processing of personal data for reasons connected with his/her particular situation, unless the treatment is necessary for the performance of a task in the public interest.
Article 22 – Automated decision-making process concerning individuals, including profiling
1. The interested party has the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning him/her or which significantly affects his/her person.
2. Paragraph 1 shall not apply if the decision:
a) is necessary for the conclusion or execution of a contract between the interested party and a data controller;
b) is authorised by the law of the Union or of the State Member to which the controller is subject, which also specifies appropriate measures to protect the rights, freedoms and legitimate interests of the interested party;
c) is based on the explicit consent of the interested party.
3. In the cases referred to in paragraph 2 (a) and (c), the controller shall implement appropriate measures to protect the rights, freedoms and legitimate interests of the interested party, at least the right to obtain human intervention from the controller , to express their opinion and to challenge the decision.
4. The decisions referred to in paragraph 2 shall not be based on the particular categories of personal data referred to in Article 9 (1), unless Article 9 (2) (a) and (g) applies and not adequate measures are in place to protect the rights, freedoms and legitimate interests of the interested party.