The privacy and security of your personal data is and will always be one of our top priorities. We therefore want to clearly explain how and why we collect, store, share and use your personal information, as well as the controls and choices that you can exercise over when and how we share your personal information.
You may be aware of the fact that the new European Union regulation, called the “General Data Protection Regulation” (GDPR), confers certain rights on individuals with regard to their personal data, thereby implementing the provisionCodes of the old Privacy in the light of new technological developments.
The Data Controller of the data you have provided is ATAX , C.F. / P.IVA 09357040964, registered office Via Mascheroni 31, 20145 MILANO MI, which for any question concerning the processing of your data or for the exercise of your rights, can be contacted by writing an e-mail at email@example.com
Users’ rights concerned by the processing
The rights which European legislation stipulates for users are:
- right of access: the right to be informed of and to request access to personal data processed concerning the user (commonly known as a ‘request for access by the data subject’);
- right of rectification: the right to request the modification or updating of the user’s personal data in the event of inaccuracy or incompleteness;
- right of erasure: the right to request the definitive erasure of personal data;
- right of limitation: the right to ask us to temporarily or permanently stop the processing of all or some of the user’s personal data;
- right of opposition:
- the right to object at any time to the processing of personal data for reasons related to the specific situation of the user;
- the right to object to the processing of personal data for direct marketing purposes;
- right to data portability: right to request a copy of one’s personal data in electronic form and the right to supply this personal data to be used in the service of others;
- The right not to be subjected to an automated decision-making process: the right not to be subject to a decision based solely on an automated decision-making process, including profiling, where the decision has a legal effect on the user or an equally significant effect.
- the right to lodge a complaint with a supervisory authority: in Italy, he/she is the Guarantor for the Protection of Personal Data.
Personal data collected
The personal data we collect is the identification data of the user (name, surname, email and possibly the phone number, if provided by the user as part of the message).
Our website also collects anonymous data related to browsing on the site, such as your IP address, domain names of computers used by users who connect to the sites, URI (Uniform Resource Identifier) of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the response from the server (successful, error, etc..) and other parameters related to the operating system and IT environment of the user.
We use this data for the sole purpose of obtaining anonymous statistical information on the use of the sites and to check that they are working properly. The data could be used to ascertain responsibility in the event of hypothetical cybercrime. Except in such cases, these data normally remain on our IT systems for no longer than thirty days.
Authorization to process
In order to enable you to exercise these rights easily and to save your preferences regarding the use of personal data by ATAX, at the time of registration we have inserted 2/3/4 checkmarks indicating that the user authorizes us to process their personal data. For any information and to exercise your rights in relation to the processing of the personal data provided by you, you can write to us: firstname.lastname@example.org
By ticking the authorization for processing pursuant to Art. 13 GDPR, you are authorizing us to contact you to respond to your request for contact (or quote) and it is necessary to keep your contact details in our records and contact you to provide you with the requested service.
The second check box, however, authorizes us to contact you and send you emails containing information about our services / products / events and promotions that may be of interest to you. Authorizing the processing of data for this purpose is not necessary, but you may miss something that might be of interest to you.
[where applicable] The third check box, however, authorizes us to forward your contact information to our partners who may offer you services and/or information of interest to you and you therefore authorize us to send your email and identification data provided by you, so that they can send you promotional emails.
[where applicable] Finally, the fourth check box authorizes us to forward your data outside the territory of the European Union.
Your data is processed internally and stored on servers protected by firewalls and antivirus. Our web-agency that provides the hosting service may host some of your data, but has no access to your data that is sent to our internal mail.
Duration of processing
Your data will be kept only for the time necessary to respond to your contact request. If, on the other hand, you also select the authorization for processing for commercial purposes (to disclose your data to third party partners, where applicable), the registration period is limited to 2 years, after which we will ask you for a new authorization.
ATAX does not carry out user profiling activities, we do not have automated decision-making processes, because we prefer to have direct contact with our users (stay human!).