PRIVACY POLICY
Information to be provided where personal data are collected for the data subject who consult Inventis s.r.l web sites according to the Article 13 of the Regulation UE 2016/679
WHY THIS INFORMATION
Website navigation (internet service) of https://www.inventis.it http://www.invisia.it e http://www.inventisbiomedica.it and its subdomains my.inventis.it, extranet.inventis.it of INVENTIS s.r.l. (following “Inventis”) are accessible in a telematic way at the following addresses:
- www.inventis.it
- inventis.it
- my.inventis.it
- www.invisia.it
- invisia.it
- www.inventisbiomedica.it
- inventisbiomedica.it
and they entail the acquisition and subsequent processing of personal data, which are directly or indirectly attributable to the User, obtained in the following methods of collection:
• Cookies: imply the automatic collection of electronic device data used for navigation and navigation’s preference data.
• “Chat” application filled out by the User (name or pseudonym, e-mail address and a phone number -optional-) that collects automatically the geographic position, the tracking of navigation’s passages, which led to the view of the website page, the recognition of preferences and previous visits.
• Template on the website page of information request: filled out by the User, prior consent where the User is a child below the age of 16 years, given or authorised by the holder of parental responsibility over the child.
This information is provided to Users of internet’s service in order to communicate purposes, modalities and legal basis of processing personal data, given spontaneously or collected automatically from Users who consult the pages of the site, as well as to make them aware of their rights of protecting personal data, according to the article 13 of the Regulation (UE) 2016/679 on protection of information.
This information does not concern other websites, pages or online services reached through hypertext links (that may be available on Inventis’ website) but it refers to external resources of Inventis’ domain, like:
DATA CONTROLLER
The Regulation defines the Data Controller as the natural or legal person who decides purposes and means of personal data processing.
Data Controller is : Inventis s.r.l, based in : Corso Stati Uniti 1/3, IT-35127, Padova
Reachable through :
Email : privacy@inventis.it
PEC: inventis@pec.it
Tel: +39 049.8962844
PROCESSED DATA AND PURPOSE OF THE PROCESSING
Navigation’s data
IT systems and software procedures, used for the operation of this site, acquire personal data, during their normal operation, whose transmission is implicit in the functionality of Internet’s communication protocols or whose collection is only for a marketing purpose and analysis of the User behaviour as a consumer.
To this class of data belong IP addresses or domain names of computers and terminals used by Users, URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time table of the request, the method used to submit the request to the server, the file size obtained as response, the number code showing the response status given by the server (successful action, failure, etc..) and other parameters related to the operating system, to the browser used and to the User’s computer environment.
These data are collected automatically by mean of cookies, listed and described on the page (“cookie policy”) with the following purposes :
• Use of web services and check of the correct functioning of the services,
• Statistical analysis for a marketing purpose and analysis of the behaviour of the Users on how the services are used ( visited pages, number of visitors per hour a day, geographical areas of origin, etc.)
Navigation data are eventually processed anonymously and aggregated for a statistical purpose.
More detailed information about the type of navigation’s data collected, purposes, the persistence of the collection and the possibility of denying the consent to the collection, can be found on the cookie policy
Data communicated by the User (template REQUEST FOR INFORMATION)
The free, consensual, explicit and voluntary sending of message to Inventis’ contact addresses, through the request information’s template available on the website, or the private messages sent by the Users through reachable ways ( phone number, fax or email) leads to the acquisition of the sender’s name and his contact details, strongly needed to answer the questions made, as well as the acquisition of other personal data that might be included in the text of the User communication.
However, the sending is possible only after the acceptance of this information. The Data Controller will not process the data further unless upon explicit request of consent, specifying the additional purposes and modalities.
Regarding the data communicated in the social media fan pages, reachable through hypertext links, like :
Or other fan pages, whose administrator and Data Processor is Inventis, arranged for the provision of certain services, please refer to specific information that will be made available for these pages.
Data conferred by the User and/or automatically collected
Inventis had made available a chat tool (“plugin”) in the web site pages that allows Users, upon giving their name and contact data (e-mail and phone number), to chat with an entrusted operator. This tool, managed by a third party provider (“privacy policy of zoho salesiq”), allows the operator to acquire more data, in addition to those already given consensually included those for communication, like :
• Geolocation (opt out option before location)
• Tracking of the User data
• Identify of previous and new Users
• Sharing of the terminal screen (previous consent needed)
• E-mail campaign (previous consent needed)
The acquired data are collected automatically thanks to cookie for a marketing purpose, for proposals or publicity, for the analysis of preferences and the User’s behaviour in order to improve the commercial proposition of Inventis.
LEGAL BASIS OF THE PROCESSING
Legal basis (lawfulness of processing criteria) of the data processing are mainly:
- The User’s consent, expressed by the spontaneous provision of personal data upon information of the purposes and modalities, or by exercising opt-out function for data automatically collected by cookies, as explained in the Cookie Policy of this site, being aware in that case User may experience a detriment of their navigation.
- The legitimate interests pursued by the Data Controller for the purposes of improving his commercial proposition and the navigation experience of the User, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.
DATA RECIPIENTS AND DATA TRANFER TO THIRD COUNTRIES
Personal data as so far referred, either given spontaneously or automatically collected during the navigation are may be transferred to third parties for further processing, said recipients act as Data Processors , as regulated in the article n. 28 of the Regulation and therefore bound to precise obligations of data protection as referred in said article.
Data Processors appointed by Inventis in relation to the websites and whose activities are governed by contract, are:
FLUID DESIGN LAB • VIA CAVAZZONI, 38/A • 36056 TEZZE SUL BRENTA (VI)
Inventis utilise as well third-party processing platforms as below listed, for those User may refer to the respective “Private Policy”
- FACEBOOK https://www.facebook.com/business/gdpr
- ZOHO https://www.zoho.eu/privacy.html
- LINKEDIN https://www.linkedin.com/legal/privacy-policy
- TWITTER https://twitter.com/it/privacy
Users personal data are archived on servers in the European Union territory or in servers in third countries (USA), that ensure an adequate level of protection, according to the decision of the European Commission.
STORAGE PERIOD
Data given by Users to Inventis through web template, chat or e-mails are preserved for maximum two (2) years and anyway no further processed for purposes other than that for which the personal data were collected. Exception is made for a different period as granted by the Users, prior their consent, which will be retained until renewal or final cancellation by the Users, according to their right to erasure or “to be forgotten”.
RIGHTS OF THE DATA SUBJECTS
Data Subjects have the right to obtain from Inventis, as applicable, the access to their personal data, the rectification, erasure of their data, the restriction or objection to further processing (Article 15 and following of the Regulation), by contacting the Data Controller at Inventis (Inventis s.r.l. - Privacy Office - Corso Stati Uniti 1/3, IT-35127, Padova, email: privacy@inventis.it).
The exercise of the rights can be done filling the special template available on the web page of the Italian Supervisory Authority for Data Protection
https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1089924
RIGHT TO LODGE A COMPLAINT
Where Users as data subjects, in relation to the use of the web site, feel that their personal data may have been processed in violation to the Regulation, they have the right to lodge a complaint to Inventis or to the Supervisory Authority according to Article 77 of the Regulation.
Without prejudice to any available administrative or non-judicial remedy, including the right to lodge a complaint with a supervisory authority pursuant to Article 77, each Data Subject shall have the right to an effective judicial or even take the appropriate judicial seats (Article 79).
The complaint to the Italian Supervisory Authority can be lodged following the instructions available on this link:
https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4535524