Privacy Notice

Why this information is provided

Pursuant to Regulation (EU) 2016/679 (hereinafter the "Regulation"), this page describes the manner in which the personal data of users who visit the websites of Grafiche E. Gaspari S.r.l., accessible electronically at the following addresses, are processed:

• https://madein-italy.it/

This information does not concern other websites owned by Grafiche E. Gaspari S.r.l.: specific notices are published on those pages of the Company's websites which are set up for the provision of particular services or for participation in specific initiatives.

Likewise, this information does not concern other websites, pages or online services which may be reached through hyperlinks published on the websites but which refer to resources outside the domain of Grafiche E. Gaspari S.r.l.

Data controller

As a result of visiting the websites listed above, data relating to identified or identifiable natural persons may be processed.

The data controller is Grafiche E. Gaspari S.r.l., with registered office at Via Rizzoli 9, Bologna, 40125 (BO), Italy (Email: assistenza@mycity.it, PEC [certified electronic mail]: info@pec.gasparilab.it, switchboard +39 051 273588).

Data protection officer

The Data Protection Officer (DPO) is Riccardo Moraldi, who may be contacted at the following addresses:

• Email: rpd@moraldi.net
• PEC [certified electronic mail]: riccardo.moraldi@pec.it

Legal basis of the processing

The legal basis consists of the legitimate interest of the Controller in improving the quality of its communications. As further specified below, no cookies are used for the profiling of users, nor any other type of cookie requiring informed consent within the meaning of the "Guidelines on cookies and other tracking tools" of 10 June 2021 (published in the Official Gazette of the Italian Republic No. 163 of 9 July 2021), Register of Measures No. 231 of 10 June 2021.

Types of data processed and purposes of the processing

Browsing data:

The information systems and software procedures responsible for the operation of this website acquire, in the course of their normal operation, certain personal data the transmission of which is implicit in the use of Internet communication protocols.

This category of data includes the IP addresses or domain names of the computers and terminal devices used by users, the addresses in URI/URL (Uniform Resource Identifier/Locator) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and IT environment.

Such data, which are necessary for the use of the web services, are also processed for the purpose of:

• obtaining statistical information on the use of the services (most visited pages, number of visitors by time slot or by day, geographical areas of origin, etc.);
• verifying the proper functioning of the services offered.

Browsing data are not retained for more than seven days (save for any need to establish criminal offences by the judicial authorities).

Data provided by the user:

The optional, express and voluntary sending of messages to the contact addresses of Grafiche E. Gaspari S.r.l., the private messages sent by users to the Company's social media profiles/pages (where this option is available), as well as the completion and submission of the forms available on the Company's websites, entail the acquisition of the sender's contact details, which are necessary in order to reply, as well as of all personal data included in the communications.

Specific notices will be published on those pages of the Company's websites which are set up for the provision of particular services or for participation in specific initiatives.

Cookies and other tracking systems:

No cookies are used for the profiling of users. The only processing carried out concerns the production of statistics on browsing, using pseudonymised data.

The configuration adopted, so as to exclude any processing of identifying data, collects the following information:

• The IP address, which is masked by zeroing out the last 2 bytes (xxx.xxx.0.0)
• The operating system used
• The type of browser
• The type of device (PC, smartphone, etc.)

Technical session cookies (non-persistent) are used, strictly limited to what is necessary for the secure and efficient browsing of the websites.

Information concerning the processing of personal data carried out through the social media platforms used by the Company:

With regard to the processing of personal data carried out by the operators of the social media platforms used by the Company, reference is made to the information provided by them through their respective privacy policies. Grafiche E. Gaspari S.r.l. processes the personal data provided by users through the pages of the social media platforms dedicated to this Company, within the scope of its commercial purposes, exclusively in order to manage interactions with users (comments, public posts, etc.) and in compliance with the legislation in force.

Recipients of the data

The recipients of the data collected as a result of the use of some of the services listed above are the following entities designated by the Company as processors pursuant to Article 28 of the Regulation.

• OVH S.a.s, as the provider of the cloud service for the uploading of documents and images
• Aruba S.p.A., as the provider of the web hosting service

The personal data collected are also processed by the staff of Grafiche E. Gaspari S.r.l., who act on the basis of specific instructions given as to the purposes and means of such processing.

Rights of data subjects and procedure for the erasure of data

Data subjects have the right to obtain from the Controller, in the cases provided for, access to their personal data and the rectification or erasure thereof, or the restriction of processing concerning them, or to object to the processing (Articles 15 et seq. of the Regulation). A request for the exercise of these rights may be submitted by contacting the Data Protection Officer by sending an email to the addresses below:

• info@mycity.it
• amministrazione@pec.egaspari.net

Grafiche E. Gaspari S.r.l. declares that the data will be deleted within 48 hours of the request being taken in charge.

Right to lodge a complaint

Data subjects who consider that the processing of personal data relating to them carried out through this website infringes the provisions of the Regulation have the right to lodge a complaint with the Garante per la protezione dei dati personali (Italian Data Protection Authority), as provided for by Article 77 of the Regulation, or to bring proceedings before the competent judicial authorities (Article 79 of the Regulation).