Privacy Policy

TYPES OF DATA PROCESSED

NAVIGATION/BROWSING DATA

The personal data of the user collected during navigation may be processed by automated tools.

The information collected could be the following:

• Internet protocol address (IP).
• Type of browser and device parameters used to connect to the site.
• Name of the internet service provider (ISP).
• Date and time of visit.
• Web page of origin of the visitor (referral) and exit page.
• Number of clicks.
• Information on downloads of documentation from the website.

The above information is processed in an automated form and collected in an exclusively aggregated form in order to verify the correct functioning of the site, to improve the relevance of the results provided, to obtain anonymous statistical information on the use of the site and for security reasons.

For security purposes (spam filters, firewalls, virus detection), the automatically recorded data may eventually include data such as the IP address, which could be used, in compliance with the laws in force, in order to block attempts to damage the site itself or to damage other users, or in any case harmful activities or constituting a crime. Such data are never used for the identification or profiling of the user, but only for the protection of the site and its users.

The data used for security purposes are kept for 7 days.

The data used for statistical purposes are stored for unlimited time.

DATA PROVIDED VOLUNTARILY BY THE USER

MorbidLine Salotti di Vampari Giuliano collects some personal data from users, such as the name, surname, email address and other personal data provided voluntarily by the user during the registration phase, requesting information via email or registering to the newsletter system.

The sending of this data takes place on an optional, explicit and voluntary basis, and involves the subsequent acquisition of the sender’s email address, necessary to respond to requests, as well as any other personal data entered for the purposes of the service.

Personal data relating to religion, state of health, ethnicity or sexual orientation will never be requested and/or collected.

The site is accessible to users without the need to provide their personal data. However, some parts of the site are accessible only to registered users. The data used for registration and/or access to a reserved area are kept for the time needed to provide the service. The registration of this information is necessary for the data controller to provide specific information such as price lists located in the user’s region or services reserved to the customers of the activity. At any time it will be possible to modify or cancel your registration by accessing your personal area, in order to keep your data updated or to delete it from the system.

• In the case of data collected through electronic correspondence generated by a contact form it will be necessary to send an email requesting the explicit deletion of your data from any company CRM.
• In case of subscription to a newsletter it is always possible to remove your email address and the data connected to it through a link at the bottom of every received email.
• In case of registration to a reserved area it is always possible to delete your account by accessing it and clicking on the appropriate link on the profile page.
• In the case of registration to an e-commerce or online shop it is always possible to delete your account by accessing it and clicking on the appropriate link on the profile page.
  (This could result in the loss of the invoices there registered and therefore any right related to the transitions made).
• It is not possible to request the cancellation of browsing data collected anonymously as it is impossible to accurately trace the user to which they are associated (by definition they are not considered “personal data”).

Denying consent may make it impossible to provide certain services and the browsing experience on the site you are used to may be compromised.

RIGHTS OF THE INTERESTED PARTIES

Pursuant to European Regulation 679/2016 (GDPR) and national legislation, the user can, in accordance with the procedures and within the limits established by current legislation, exercise the following rights:

• Request confirmation of the existence of personal data concerning him/her (right of access)
• To know its origin
• To receive intelligible communication of it
• To receive information about the logic, the methods and the purposes of the processing
• Request the updating, rectification, integration, cancellation, transformation into anonymous form, blocking of data processed in violation of the law, including those no longer necessary for the pursuit of the purposes for which they were collected
• In cases of consent-based processing to receive, at the sole cost of the support, its data provided to the holder, in a structured and readable form by a data processor and in a format commonly used by an electronic device.
• The right to lodge a complaint with the Supervisory Authority.
• As well as, more generally, exercise all the rights that are recognized by the current provisions of the law.