PRIVACY POLICY

Dear User, thank you for visiting our website.

As mentioned below, it describes how the website is managed regarding the processing of personal data of the users who consult it.

WHY THIS NOTICE:

This information is provided also in pursuance of Art. 13 of Legislative Decree 196/2003 “Personal Data Protection Code” and art. 13 and 14 of the European Regulation 679/2016 (otherwise known as “General Data Protection Regulation, GDPR”) to those who interact with the web services directly provided by the Company.

The information provided only applies to this site and does not concern any web sites that may be visited by an user via external links. The information provided is also based on the guidelines contained in Recommendation no. 2/2001 that the European authorities for the personal data protection, brought together in the Working Party established by Art. 29 of Directive no. 95/46/EC, adopted on May 17, 2001 to determine some minimum requirements for the on-line collection of personal data, and, in particular, methods, times and nature of the information that the data controllers must provide to users when they connect to Web pages, independently of the purposes of such connection. Users are therefore invited to read the Privacy Policy expressed below.

The Privacy Policy and Standards used for the personal data protection are based on the following principles:

Data Controller

Il titolare del trattamento dati è Fog srl (di seguito anche “la Società”), Corso della Vittoria 1275, Caronno Pertusella 21042 (VA) P.I. IT03839570128.

Principle of liability

The processing of personal data is managed over time by managers identified within the company organization.

Principle of transparency

Personal data are collected and subsequently processed according to the principles expressed in this Privacy Policy. At the time of any provision of data, information is provided to the interested party, concise but complete, in accordance with the provisions of Art. 13 of the Legislative Decree. n. 196/03 and by Art. 13 and 14 of the GDPR.

Principle of relevance of the data collection

Personal data are processed lawfully and fairly; they are registered for specific, explicit, and legitimate purposes; the purposes of the processing are relevant and not excessive; they are kept for the time necessary for the purposes of collection.

Principle of purpose of use

The purposes of the processing of personal data are made known to the interested parties at the time of data collection. Any new data processing, if unrelated to the stated purposes, are activated after new information to the interested party and any request for consent, when required by Legislative Decree n. 196/03 and the GDPR. In any case, personal data are not disclosed to third parties or disclosed without the prior consent of the interested party, except in the cases expressly indicated by Art. 24 of the Legislative Decree. 196/03 and the GDPR.

Principle of verifiability

Personal data are accurate and up to date. They are also organized and stored in such a way that the interested party is given the opportunity to know, if wants, which data have been collected and recorded, as well as to check their quality and request any correction, integration, cancellation for breach of the law or opposition to the processing and to exercise all other rights, pursuant to and within the limits of Art. 7 of Legislative Decree. n. 196/03 and Art. 15 and SS. of the GDPR, at the addresses indicated in the Information pursuant to Art. 13 of the Legislative Decree. n. 196/03 and pursuant to Art. 13 and 14 of the GDPR present on the website of the Company.

Safety principle

Personal data are protected by technical, information, organizational, logistical, and procedural security measures, against the risk of destruction or loss, even accidental as well as unauthorized access or unauthorized processing.

These measures are periodically updated based on technical progress, data nature and specific processing characteristics, constantly monitored and verified over time. Third parties who carry out support activities of any kind for the provision of the services requested by the “Company”, in relation to which they perform personal data processing operations, are designated by the latter as “Data Processors” and are contractually bound to respect the measures for the security and confidentiality of the data. The identity of these third parties is disclosed to users.

Furthermore, the Company assumes no responsibility for:

  1. 1. the rules and methods of managing the personal data of other websites, which can be accessed from our pages through links and references;
  2. 2. the contents of any e-mail services, Web spaces, chat forums provided to users.

The processing operations connected to the web services offered by this website take place at “the Company” and possibly at the registered office of “the Data Processors” and are carried out by Data Processors in charge of managing the required services, marketing activities – if requested by the user – for data storage activities and occasional maintenance operations.

Scope of data communication

The personal data provided may be disclosed to third parties to fulfil legal obligations, in execution of orders from public authorities entitled to do so or to assert or defend a right in court. If necessary, in relation to specific services or products required, personal data may be disclosed to third parties who perform, as independent data controllers, functions strictly related and relevant to the provision of services or supply of products. Without communication, these services and products could not be provided. Personal data will not be disclosed unless the requested service requires it.

Data provided voluntarily by the user

The types of personal data collected and processed on this website are those required to provide the various services offered. The data collected are processed using paper, automated and telematic methods and with logic strictly related to the purposes of the processing. Your telephone number and your e-mail address may also be used to offer you the services. It is therefore clear that, if such data were not provided, those services that require the use of these tools will not be provided to you. Sending e-mail messages to the addresses mentioned on this website, which is done on the basis of a freely chosen, explicit, and voluntary option, entails acquisition of the sender’s address, which is necessary in order to reply to any request, as well as of such additional personal data as is contained in the message(s).

Navigation data

It is useful to know that the software procedures relied upon to operate this Website acquire personal data as part of their standard functioning; the transmission of such data is an inherent feature of Internet communication protocols. Such information is not collected in order to relate it to identified data subjects, however it might allow user identification per se after being processed and matched with data held by third parties (e.g. its Internet Service Provider). This data category includes IP addresses or the domain names of the computers used by any user connecting with this website, URL (Uniform Resource Locator) addresses of requested resources, the time of such requests, the method used for submitting a given request to the server, returned file size, a numerical code relating to server response status (successfully performed, error, etc.) and any other parameter related to the User’s operating system and computer environment. These data are only used to extract anonymous statistical information on Website use as well as to check its correct functioning. The Data Controller is, depending on the service requested, the designated Managers retain, for a limited period in accordance with the law, the path (LOG) connections / navigations made to respond to any requests by the judicial authority or other public body entitled to apply for these traces for the detection of any liability in case computer crimes are committed against the website.

Apart from what has been specified with respect to navigation data, the user is free to provide or not the personal data requested in the service registration form. On this form, however, some data can be marked as mandatory; it must be understood that such data are necessary for the provision of the requested service. If these data are not provided, the requested service cannot be provided.

At the time of any provision of data, in accordance with the provisions of Art. 13 of the Legislative Decree. n. 196/03 and by Art. 13 and 14 of the GDPR, the interested party is provided with a brief but complete and transparent information on the purposes and methods of the processing, on the mandatory or optional nature of the provision of data, on the consequences of their non-disclosure, on the subjects or categories of subjects to whom the personal data may be communicated and the purpose of dissemination of the data, on the rights referred to in Art. 7 of Legislative Decree. n. 196/03 and Art. 15 et seq. of the GDPR (access, integration, updating, correction, cancellation for the breach of the law, opposition to processing, etc.), on the identity and location of the Data Controller and Data Processors. The interested party is therefore required to express his informed, free consent, expressed in a specific and documented form, in the form required by law, where required by the same. If the provision of personal data takes place in the following stages, additions to the previously provided information may be provided and new consent to the processing required by the Privacy Code and the GDPR may be requested.

Security measures adopted for the protection of collected data

The Company uses “secure” architectures and technologies to protect personal data against undue disclosure, alteration, or improper use. The protections activated against personal data are aimed at minimizing the risks of destruction or even accidental loss of data, unauthorized access or processing that is not permitted or does not comply with the purposes of the collection. These security measures obviously meet the minimum requirements indicated by the Legislator (Technical Regulations regarding the minimum security measures according to articles 33 to 36 of Legislative Decree no. 196/03). The subjects to whom the personal data refer have the right at any time to receive confirmation of the existence or otherwise of such data and to know its content and origin, verify its accuracy or request its integration or updating, or rectification (Article 7 of Legislative Decree No. 196/03 and Article 16 of the GDPR). Pursuant to the same article, the interested party has the right to request cancellation, transformation into anonymous form or the blockage of the data processed in breach of the law, as well as to oppose in any case, for legitimate reasons, to their processing. Requests should be sent to Fog srl by writing to info@ifog.cloud.

Purpose of data processing:

  1. Execution of computer authentication.
  2. Optimization of user navigation.
  3. Monitoring of sessions and anonymous statistical analysis.
  4. Definition of the user profile based on the preferences shown during navigation.

Processing methods

Personal data is processed with automated means, with logic strictly related to the aforementioned purposes and in any case in order to guarantee the security and confidentiality of the data.

Duration of process data:

Technical cookies will have the duration necessary to satisfy your requests.
Cookies managed by third parties have the duration indicated by the respective Cookies Policy belonging to third parties with respect to Fog srl.

Subjects to whom the data may be communicated:

The data can be disclosed to all those parties who carry out the necessary activities for the company for the provision of cookies as detailed in your favour. The subjects belonging to the aforementioned categories to whom the data may be communicated, will use the data as “owners” in full autonomy.

Rights of the persons concerned:

The User may exercise his/her rights to object to the use of cookies by leaving the site and also refusing the use of technical cookies essential for your navigation. If, on the other hand, the user wants to browse the site, but refuse the use of third-party cookies, can always deny consent by disabling them from the main browsers. The User will have the right to obtain from the Company confirmation of the existence or not of personal data about him, an indication of the origin of the personal data, of the purposes and processing methods, of the logic applied, in case of processing carried out with the automated means, as well as of the subjects or categories of subjects to whom the personal data have been or will be disclosed or who can learn about them as managers or agents; the user will also have the right to the cancellation, transformation into anonymous form or blocking of data processed in breach of the law, data portability, as well as updating, rectification, limitation or, if requested, integration or to receive a copy of the data being processed. The User will also have the right to lodge a complaint with the Privacy Guarantor.

For any communication concerning the processing of personal data by Fog srl, you should send an email to the address: info@ifog.cloud.

Data Controller

The data controller is Fog srl, Via Umbria 7 00187 Roma, P.I. IT03839570128.