In compliance with the provisions of EU Regulation 2016/679 (hereinafter referred to as GDPR) we hereby provide information regarding the processing of personal data provided by the data subject, relating to the relationships with PAT (hereinafter referred to as the Company). The information is provided pursuant to art. 13 GDPR.
The Data Controller is PAT Srl with registered office in Via San Gaetano, 113, 31044 Montebelluna (TV) – tel +39 0423600531; fax: + 39 0423302077; email: firstname.lastname@example.org; pec: email@example.com.
The Data Protection Officer is Mr. Mario Brocca, tel. +39 0371/ 594.3191, email: firstname.lastname@example.org; certified email: email@example.com.
For all website users, personal data may be used to:
In addition to the purposes described above, the personal data of users who register with the website will also be used for purposes connected with the services requested and, in particular, to:
Technical cookies will be downloaded when browsing the website. These include:
There are also statistical and profiling cookies, also of third parties to which you may be redirected during browsing.
The complete and updated list of cookie types is available in the banner of the cookie detection and management tool.
This website processes data based on consent. By using or consulting this website, the data subject implicitly consents to the possibility of storing only those cookies that are strictly necessary (“technical cookies”) for the functioning of this website. For other types of cookies, the data subject can provide or withhold the consent through the appropriate flags in the banner that appears when you open the website. Limited to access to internal portals that provide for a controlled access procedure, the legal basis is the legitimate interest of the Company, attributable to the safety of the service.
The personal data collected during the browsing session will be retained for the time needed to carry out the specified activities and for no more than 26 months. Data provided voluntarily by the user will be retained until the user revokes the related consent given. Consents expressed with reference to non-technical cookies will be valid for 6 months, after which the consent will be requested again.
Like all websites, this website also uses log files to retain the information collected during visits by users in an automated manner. The following types of information may be collected:
The above information is processed automatically and collected in order to check the proper functioning of the website, as well as for statistical or security reasons.
For security reasons (anti-spam filters, firewall, virus detection), the data recorded automatically may also include such personal data as the IP address, which may be used in compliance with the relevant current legislation to block attempts to damage the website or other users or, in any case, to block other detrimental activities or crimes. Such data is never used to identify or profile the user, but solely to safeguard the website and its users.
As a consequence of normal use, the IT systems and software procedures dedicated to the functioning of this website acquire certain personal data whose transmission is inherent to the use of Internet communications protocols. This category of data includes the IP addresses or domain names of the computers used to link to the website, the addresses of the resources requested in URI (Uniform Resource Identifier) notation, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the reply given by the server (success, error, etc.) and other parameters relating to the operating system and IT environment of the user.
Except as specified for the browsing data, the user is free to provide additional personal data, with respect to that indicated above, when registering with the website.
Failure to provide this data may make it impossible to obtain the requested information or to provide certain services and the browsing experience on the website might be compromised.
The Company confirms that your “sensitive” data is never collected.
Pursuant to and for the effects of Arts. 12 et seq of the GDPR, the personal data that the data subject provide to us will be recorded, processed and retained in the Company’ hard-copy and electronic files, with the use of adequate technical and organizational measures in order to safeguard such data. The processing of data subject personal data may consist in any operation or set of operations described in art. 4, para. 1, point 2 GDPR.
Personal data will be processed with the use of suitable tools and procedures that guarantee security and confidentiality. Such processing activities may be carried out directly and/or via delegated third parties using IT equipment or electronic instruments.
The data of the data subject may be processed by the employees of the corporate functions of the Companies assigned to the pursuit of the purposes indicated above. These employees have been expressly authorized to process the data and have received adequate operating instructions pursuant to and for the purposes of Article 29 GDPR.
The data may also be communicated by the Companies to:
The personal data of the data subject, provided through registration, may be communicated, meaning by this term the giving of knowledge to one or more specific subjects, by the Companies to third parties in order to implement all the necessary legal and/or contractual obligations. In particular, the personal data of the interested party may be communicated to public bodies or offices or control authorities in order to fulfil legal and/or contractual obligations.
Your data may be may communicated as follows:
Dissemination – The Company will not disseminate your data indiscriminately, i.e. they will not make it known to unspecified parties or make it available for use or consultation.
Trust and confidentiality – The Company recognize the importance of the trust shown by data subjects who consent to the processing of their personal data and, therefore, undertake not to sell, lease or rent such personal information to others.
The data provided by the data subject will only be processed countries within the European Union. If the personal data of the data subjects are processed in a country outside of the EU, the data subject’s rights under EU legislation will be guaranteed and the data subject will be notified on a timely basis.
Most browsers (Internet Explorer, Firefox, Chrome, etc.) are configured to accept cookies. The cookies stored on the hard disk of your device can however be deleted and, in addition, it is possible to deactivate cookies by following the instructions provided for the principal browsers at the links below:
Internet Explorer https://support.microsoft.com/it-it/help/17442/windows-internet-explorer-delete-manage-cookies#
Pursuant to Articles 15 et seq of the GDPR, the data subject may exercise the following rights:
Pursuant to Art. 2-undicies of Legislative Decree 196/2003, the exercise of data subjects rights may be delayed, restricted or excluded, following justification provided without delay, unless this might compromise the purpose of the restriction, for as long as and to the extent that this constitutes a necessary and proportionate measure, taking into account the fundamental rights and legitimate interests of the data subject, in order to safeguard the interests referred to in paragraph 1, letters a) (protected interests with regard to money laundering), e) (for the conduct of defensive investigations or the exercise of a right in court) and f) (for the confidentiality of the identity of the employee who reports offenses he becomes aware of on his duties). In such cases, data subjects’ rights may also be exercised through the Personal Data Protection Authority in the manner referred to in Article 160 of said Decree. In such case, the Personal Data Protection Authority will inform the data subject that it has carried out all the necessary checks or that it has carried out a review, as well as of the data subject right to take legal action.
It should also be noted that – before processing the requests – the Companies may ascertain the identity of the data subject, in order to evaluate the legitimacy of the same.
To exercise such rights, the data subject may contact the Data Controller at: firstname.lastname@example.org or by calling 0423 600531 or by sending a message to the PAT Privacy Office, Via San Gaetano, 113, 31044 Montebelluna TV. The Data Controller will reply to you within 30 days of receiving your formal request.
If the above-mentioned rights concerning data subject personal data are infringed, the latest may complain to the competent authority.