ADVISORY NOTE ON THE PROCESSING OF PERSONAL DATA
www.zyzjc.cn website users
1) SUBJECT AND PURPOSES FOR PROCESSING PERSONAL DATA
LAE Electronic Spa (Tax Code/VAT no.: 02205880269) with registered offices in Via Padova, no. 25, Oderzo (TV), Italy (hereinafter the “Controller”) informs the users of this website, pursuant to EU Regulation no. 2016/679 (hereinafter the "GDPR") and art.13 of Italian Legislative Decree no. 196/2003 (hereinafter the “Privacy Code”), of the ways in which personal data belonging to the users (hereinafter the “data subjects”) who browse the website, www.zyzjc.cn, is processed.
This information concerns only that published under the LAE Electronic Spa domain and not the links published or contained within it.
The information systems and the software procedures used to operate this site acquire, during their normal operation, certain personal data, the sending of which is implicit in the communication protocols used when browsing the internet.
This category of data includes the IP address or computer or terminal domain names used by users, URI/URL (Uniform Resource Identifier/Locator) names of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response to the request, a numerical code indicating the status of the response given by the server (OK, error, etc.) and other parameters relative to the user’s operating system and computing environment.
This data, which is needed to provide the web services, is also processed: to obtain statistical information on the use of the services (the pages most visited, the number of visitors by hour or by day, geographic origin of the visitors, etc.); to check the proper functioning of the services offered.
The User’s personal data will be stored by the Controller for a limited period of time depending on the purposes for which the data was originally collected and, specifically:
? browsing data will be stored for the period necessary to process it and, in any case, no longer than 24 months from the date it was collected;
? data supplied voluntarily by the User by sending an email to one of the email addresses indicated on the Site will be stored for the time needed to respond to the relative request(s) and, thereafter, for a period of time no longer than 10 years, in compliance with the legal obligations regarding civil, tax and accounting matters.
In any case, data collected via the Site may be stored for a longer period of time than that indicated above in order to fulfil legal obligations, to defend or assert a right and/or to prevent and/or to verify any fraud or other crime or offence within the terms permitted by applicable legislation.
Cookies are not used to profile users, nor are any other tracking methods used.
Session cookies (non-persistent), however, are used but only in a way strictly limited to providing a secure and efficient browsing experience of the site. Storing session cookies on a terminal or in a browser is under the user’s control, whereas on servers, at the end of the HTTPS session, information relative to the cookies remains recorded in the service logs, with a storage time, however, no longer than 24 months.
2) THE CONTROLLER
The Controller is LAE Electronic Spa (Tax Code/VAT no.: 02205880269) with registered offices in Via Padova, no. 25, Oderzo (TV), Italy; Tel. +39 0422 815320; Fax +39 0422 814073; email: [email protected].
The Processor is: Cristian Fiorot born in Aviano (PN) Italy, on 31/10/1976.
3) LEGAL BASIS FOR PROCESSING PERSONAL DATA
The personal data indicated or, in any case, contained in this website, is used exclusively to publicise and to promote the Controller’s products and activities.
In no way whatsoever is data or information collected for the purposes of directly, or indirectly, contacting website users in order to carry out advertising or marketing activities.
No user profiling is done.
4) RECIPIENTS OF THE DATA
The following are recipients of the data, collected by browsing the site www.zyzjc.cn:
Aleapro snc with registered offices in Via Dante no. 28 – 33085 Maniago (PN), Italy in its role as being responsible for maintaining the aforementioned site;
The Controller’s employees and those the Controller assigns to process the personal data.
5) RIGHTS OF THE DATA SUBJECT
A data subject has those rights provided by art. 7 of the Privacy Code and art.15 of the GDPR and, specifically, has the right:
to obtain confirmation or otherwise of the existence of personal data that concerns the data subject, even if not yet recorded, and the communication of this data in an intelligible form;
to obtain an indication:
of the source of the personal data;
of the purposes and methods of processing used;
of the logic applied in the event that processing is performed with the use of electronic tools;
of the identifying details of the Controller, the Processor(s) and the designated representative pursuant to art.5(2) of the Privacy Code and art.3(1) of the GDPR;
of the subjects or categories of subjects to whom the data subject’s personal data may be communicated or who might become aware of the data subject’s personal data in their capacity as a designated representative in the country, as responsible parties or assigned parties;
the data which concerns the data subject updated, corrected or, when appropriate, integrated;
the data which has been processed in breach of the law, including that data for which storage was not necessary with regard to the reasons for which the data was collected or subsequently processed, deleted, transformed into an anonymous form or blocked from being processed;
the confirmation that those operations referred to in letters a) and b), above, have been brought to the notice, including as regards their content, of those to whom this data has been communicated or disseminated, except in the case in which fulfilling this requirement is made impossible or carries an effort manifestly disproportionate to safeguarding this right;
to oppose, in whole or in part:
for legitimate reasons, the processing of the personal data that concerns the data subject, even if relevant to the reason for the data’s collection;
the processing of the personal data that concerns the data subject for the purposes of sending advertising material or to carry out direct sales activities or to perform market research or for commercial communication purposes, through the use of automated call systems without the intervention of an operator, through email and/or through traditional marketing methods by telephone and/or post (or mail). It should be noted that the data subject’s right to oppose the processing of the data that concerns him/her, as described in point b), above, for the purposes of direct marketing through automated means extends to traditional means and that, in any case, it remains possible for the data subject to exercise his/her right to oppose processing even partially. Therefore, the data subject may decide to only receive communication through traditional means or only automated communication or none of the two types of communication.
Where applicable, the data subject also has those rights referred to in articles 16-21 of the GDPR (the right to rectification, the right to erasure, the right to restriction of processing, the right to data portability, the right to oppose processing), as well as the right to submit a complaint to the Supervisory Authority.
The data subject may exercise any of the above rights at any time by sending a recorded delivery letter with return receipt, or an email, to the Controller at the address given above.