The purpose of the privacy policy is to provide maximum transparency regarding the information that the website collects and how it is used.

In compliance with the obligations arising from national legislation (Legislative Decree 30 June 2003, no. 196, Personal Data Protection Code) and European legislation (European Regulation on the Protection of Personal Data no. 679/2016, GDPR), this website respects and protects the privacy of visitors and users, making every possible and proportionate effort to not infringe upon the rights of users.

1. Data Controller

The Data Controller is the Company El Centenario, represented by its legal representative pro tempore Stefano Cavallero (hereinafter referred to as the ‘Company’), which guarantees compliance with the regulations on the protection of personal data by providing the following information regarding the processing of data communicated or otherwise collected during navigation on this website.

You can contact the Company at the following phone number: +39 011 3324 34 or at the following email address: info@alragu.it.

2. Data Collected Automatically

Like all websites, this website also makes use of log files in which information collected automatically during users’ visits is stored, such as:

1.  Internet domain and IP protocol;

2.  Browser type and operating system of the computer used;

3.  Date, time, and duration of the visit to the site;

4.  Pages visited and possibly the number of clicks;

5.  Web page of origin and exit of the visitor;

6.  Any search engine from which you entered the site;

These are pieces of information that are not collected to be associated with identified individuals, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. The information collected automatically may be used by the Company:

1.  In case of suspected use in violation of applicable law;

2.  For statistical purposes;

3.  To improve site navigation and content.

The legal basis legitimizing the processing is the need to make the site’s features usable following the user’s access. Consent is not required for the provision of such data.

3. Voluntarily Communicated Personal Data

Apart from what is indicated in article 2) above, your personal data are processed for the following purposes: promotional communications, including personalized ones, market research, economic/statistical analysis, prize programs, surveys of customer satisfaction through the sending of advertising leaflets and promotional documentation in paper form, email, SMS, MMS, and telemarketing.

4. Legal Basis and Nature of the Obligatory or Optional Provision of Data

Apart from the purposes indicated in article 2) above, the legal basis legitimizing the processing of your personal data for the purposes referred to in article 3) above is the consent freely given.

The provision of personal data is always optional: failure to provide it will result in the Company’s inability to send newsletters, advertising material, or to carry out any other promotional initiatives.

5. Data Processing Methods and Storage Time

The collected data will be processed using electronic or automated tools, computer and telematic tools, or through manual processing with logic strictly related to the purposes for which the personal data were collected and, in any case, in order to ensure their security.

Personal data are kept for the time strictly necessary to manage the purposes for which the data were collected, in compliance with current regulations and legal obligations.

6. Authorized Persons for Processing, Data Controllers, and Communication of Data

The recipients of the data provided are the Data Controller, as well as the employees and collaborators of the latter, in their capacity as internal processors and/or data controllers and/or system administrators.

The data may also be processed by professionals and/or companies appointed to perform technical, development, management, and administrative-accounting activities.

The data may also be communicated to the following categories of recipients:

1.  Supervisory bodies, Judicial and/or Public Authorities, as well as those subjects to whom communication is mandatory by law for the fulfillment of said purposes;

2.  Subjects providing services for the management of the Company’s IT system and telecommunications networks (including email);

3.  Studies or companies within the scope of assistance and consultancy relationships;

4.  Subjects carrying out monitoring, auditing, and certification activities of the activities carried out by the Company also in the interest of customers;

In addition, the data may be transferred to companies belonging to the e-commerce, mail-order sales, publishing, utilities, tourism, sports, communication, entertainment, financial, insurance, automotive, consumer goods sectors, for sending advertising material and other promotional and commercial purposes, via web, mail, email, telephone (SMS, MMS, telemarketing).

The collected data may be transferred abroad, including outside the European Union, in the forms and ways provided by current legislation, ensuring in any case an adequate level of protection.

7. Rights of the Data Subject

At any time, you may exercise, pursuant to art. 7 of Legislative Decree no. 196/2003 and articles from 15 to 22 of EU Regulation no. 2016/679, the right to:

1.  obtain confirmation of the existence or not of your personal data;

2.  indications about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated, and, when possible, the storage period;

3.  obtain the rectification and erasure of data;

4.  obtain the restriction of processing;

5.  obtain data portability, i.e., receive them from a data controller, in a structured, commonly used and machine-readable format, and transmit them to another data controller without hindrance;

6.  object to processing at any time, even if processed for direct marketing purposes;

7.  object to an automated decision-making process relating to individuals, including profiling;

8.  request the data controller access to personal data and their rectification or erasure or restriction of processing concerning him or her or to object to their processing, in addition to the right to data portability;

9.  revoke consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation;

10.  lodge a complaint with a supervisory authority.

8. How to Exercise Rights

You can exercise the rights indicated in article 7) above at any time by sending an email to info@alragu.it.