INFORMATIVE ON THE HANDLING OF PERSONAL DATA
corresponding to the initial home page.
The information is provided only for our site and not for other websites that may be consulted by the user through links.
1 HOLDER OF THE TREATMENT
ISTITUTO OSHO MIASTO
Podere San Giorgio, 16
Postal code 53031
Name: CIPRIANI Francesca
Legal representative: CIPRIANI Francesca
The complete list of all those responsible for the processing of personal data, which we have named, can be easily found by contacting the Data Access Manager or by logging on to the website www.oshomiasto.it
2 PLACE OF DATA PROCESSING
The processing carried out by the owner with the data collected from this site, take place at the aforementioned headquarters of the owner and are only handled by personnel appointed for this purpose or by persons in charge of occasional maintenance operations.
3 DATA COLLECTION METHODS
The collection of information via the site can be done in one of the following ways:
- Explicit mode
- Implicit mode
- Information sent voluntarily by the interested party
3.1 MODALITIES OF EXPLICIT ACQUISITION
On our website there is a data request form.
3.2 MODALITIES OF IMPLICIT ACQUISITION OF INFORMATION
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes IP addresses or domain names of the computers used by users connecting to the site, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the file size obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.), and other parameters related to the operating system and the user’s computer environment.
Other information collected in this way may concern: the “Uniform Resource Locator” (URL) of the site from which the user comes, which pages of the site were visited, what is the next URL to which the user has connected, which browser was used to reach the site.
A “cookie” is a small data file transferred to your computer’s hard drive when accessing a website. No personal data of users is acquired by the site in this regard.
This site uses only so-called session cookies that are not stored permanently on the user’s computer and disappear when the browser is closed.
The use of so-called session cookies is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary for the safe and efficient exploration of the site.
The so-called session cookies used on this site avoid the use of other technologies that could compromise the privacy of users’ browsing and do not allow the acquisition of personal identification data.
The aggregated information collected is anonymous and allows you to analyze the type of traffic on the site. Over time, this can promote the improvement of the content and make it easier to use.
Most browsers automatically accept cookies, but you can also reject them altogether or selectively accept only some, by acting on the preferences of your browser.
If the user inhibits the loading of cookies, some components of the site may not be available and some pages may be incomplete.
3.2.2 DATA LOG
LOGS are archives on which the traffic data is recorded automatically, that is the activities carried out by users who connect to our site on the network. These archives give the possibility to reconstruct all the events that occurred on our site. LOGs are an essential element for the management of the system and allow solving many technical or organizational problems.
We do not handle any kind of Data Log, but it can be generated by the providers who manage our network connections and to whom you must contact us for any clarifications.
3.3 INFORMATION SENT VOLUNTARY BY THE INTERESTED PARTY
The voluntary sending of e-mails to the addresses indicated on this site, involves viewing the sender’s e-mail address and any other personal data included in the message. This information will be used for the sole purpose of proceeding with what is required (production of orders, provision of services, etc.). If, for any reason, the data were used for other purposes, will be subject to the necessary requirements depending on the use that they will do according to the current regulatory provisions (information and, if necessary, request for consent of the interested party), otherwise immediately and irrevocably removed from our information systems.
4 LINKS TO OTHER SITES
There is the possibility that the site contains links to third-party sites. When the user uses these links, he / she proceeds in environments not controlled by our organization that is not responsible for the relative contents in which the user could come across nor the privacy procedures adopted therein.
This information does not extend to the privacy procedures adopted by the linked sites. It is advisable to carefully examine the procedures of each site that is visited. In addition, those sites, in a completely independent, can send their cookies to users, collect data or request personal information.
5 Nature of the data processed
The data collected in addition to those indicated above and necessary for the management of the site may also concern the following categories:
➢ personal, fiscal and economic data that are necessary:
➢ for the provision of the services requested and the subject of economic and / or contractual relations, in force or future (eg necessary for the production of any orders)
➢ for the fulfillment of the related tax obligations and / or mandatory by law (eg invoicing)
➢ personal data (name, surname, company name, telephone number, fax e-mail addresses) necessary to follow up your requests for information and / or technical assistance
➢ data concerning e-mail addresses and other data that may be voluntarily sent to us by e-mail.
6 Purposes of the treatment
For the purposes of the processing we mean the reason, the purpose for which the data are collected. Browsing data: these data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site.
Personal data provided voluntarily by users treated as a result of requests for a service or other kind: such data will be used for the sole purpose and for the time strictly necessary to perform the service or provision requested and may, for this reason, be communicated to subjects belonging to our organization (eg employees, workers, etc.).
7 Methods of processing and storage
The processing of your personal data is carried out by means of the operations indicated in art. 4 n. 2) of the GDPR. The data processing takes place in an automated way through the use of tools and procedures suitable to guarantee the security referred to in art. 32 of the GDPR 2016/679 by authorized persons, in compliance with the provisions of art. 29 of this Regulation. Personal data are subjected to the above processing in compliance with the principles of lawfulness, purpose limitation and data minimization pursuant to art. 5 of the GDPR.
The Data Controller will process your personal data for the sole purpose and for the time strictly necessary to perform the service requested.
8 Security of personal data
Personal data, eventually collected on the site, are protected from unauthorized access, use or disclosure. This data can only be accessed by our staff assigned with their own authentication credentials, and all the security procedures necessary to protect them from violations by unauthorized personnel, both locally and online, have been applied. All personal data supplied to us are in fact stored in a secure and controlled environment. To this end, physical, electronic and organizational processes have been set up to safeguard and protect the information collected.
9 Guarantees for subscribers and / or users and retention of traffic data
For the security guarantees offered during the connection to safeguard the integrity of data and electronic communications, as well as the types of data that are collected, recorded and the relative retention times of such data, it is necessary to read the information released from our provider of the electronic communication service and the provider that you rely on for networking. The collection of these data and the related methods of storage are beyond our responsibility. These activities are eventually carried out by the aforementioned provider of electronic communications services in a completely independent manner.
10 Storage of traffic data
The data collected on the network are not sold, marketed or rented to third parties. If the necessity can be verified, the consent of the interested parties will be required. Personal data may be communicated and / or disseminated as specified under “communication and dissemination”.
11 Sharing information
The personal data collected on the network are not sold, marketed or rented to third parties. If the necessity can be verified, the consent of the interested parties will be required. Personal data may be communicated and / or disseminated as specified under “communication and dissemination”.
12 Obligation or right to give the data
Apart from what specified for navigation data, the user is free to provide personal data that may be requested by browsing our site.
Failure to provide such data may make it impossible to obtain what has been requested.
13 Communication and dissemination
No data collected on the site is communicated or disseminated. There may be the need to use external subjects to fulfill what you have requested (eg production workers, external workers, consultants, couriers, etc.); in this case, such data may also be communicated to such subjects for the aforementioned purposes.
Furthermore, such data can be viewed by persons in charge of internal processing within the institution.
14 Your rights
At any time you can exercise, pursuant to articles. 15-22 of the GDPR, the rights recognized to you including the right of access, rectification, portability and deletion of personal data or limitation of processing.
To exercise these rights you can contact the Data Controller, in the person of the legal representative pro-tempore, available as follows:
- telephone +39 0577 960124,
- e-mail address firstname.lastname@example.org
- postal address at the headquarters of our company.
It is specified that this document, published at the address