Pursuant to Articles 13 et seq. of EU Regulation 679/2016 (“GDPR”), Archivissima (“Company” or the “Data Controller”) provides the following information regarding the processing of personal data of users (“User/Users”) within the context of Browse and/or using the services of the website: archivissima.it (“Site”).
This information is provided only for the Site and not for other websites that may be consulted by the User via links present on the Site.
2. Data Controller
The Data Controller is Archivissima, with registered office in Turin, C.so V. Emanuele II 44 Turin. E-mail: info@archivissima.it. Phone: 011.19694875.
3. Data Protection Officer
The Company has appointed a Data Protection Officer (“DPO”). For all matters relating to the processing of personal data and/or to exercise the rights provided by the Regulation itself, the User can contact the DPO at the following email address: info@archivissima.it.
4. Types of data processed
4.1 Browse data
The computer systems and software procedures used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols.
This information is not collected to be associated with identified individuals, but by its very nature could allow users to be identified.
This category of data includes (i) the IP addresses or domain names of the computers used by users connecting to the Site, (ii) the URI (Uniform Resource Identifier) addresses of the requested resources, (iii) the time of the request, (iv) the method used to submit the request to the server, (v) the size of the file obtained in response, (vi) the numerical code indicating the status of the response given by the server (successful, error) and (vii) other parameters relating to the operating system and the user’s computer environment.
These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct functioning and are deleted immediately after processing.
4.2 Cookies
For the processing of data via cookies, please read the relevant policy, available at the following link.
4.3 Data voluntarily provided by the User:
a) The optional, explicit and voluntary sending of e-mails to the mail addresses indicated on the Site involves the acquisition and processing by the Data Controller of such data and any other information contained in such communications for the purposes indicated in the following paragraph;
b) the User’s request to receive the newsletter involves, with the consent of the interested party, the processing of the following data: e-mail address;
c) registration to the platform and the sending of requests via contact and/or assistance forms involves the processing of the following data: name, surname, e-mail;
d) subscribing to the Archivissima platform involves the processing of payment data.
4.4 Purposes and legal basis of processing
The processing of the User’s personal data by the Data Controller is aimed at:
- pursuing, in accordance with Article 6.1, letter f) of the GDPR, its legitimate interest, consisting in guaranteeing the security of the Site and the information exchanged on it, i.e., the ability of the Site to resist, at a given level of security, unforeseen events or unlawful or malicious acts that compromise the availability, authenticity, integrity and confidentiality of personal data stored or transmitted and the security of the relative services offered or made accessible;
- for sending the newsletter;
- allowing the User to communicate with the mail addresses indicated on the Site;
- allowing the User to subscribe to the Archivissima platform and to make assistance requests through the dedicated forms.
5. Mandatory or optional nature of data provision and consequences of refusing to respond
The provision of data by the User is mandatory for the Data Controller to provide the requested services. In case of refusal, it will be impossible to use the chosen service.
6. Methods of processing and retention periods of personal data
Personal data are processed using manual, IT and automated systems. For the correct processing of data, the interested party must promptly communicate any changes. Data relating to online payment for purchased services will be processed by PayPal in a protected and secure environment and will not be acquired or processed in any way by Archivissima.
It is specified, in particular, that the User’s personal data are processed by duly appointed persons assigned to carry out these tasks, constantly identified and/or appointed, appropriately instructed and informed of the constraints imposed by law, as well as through the use of security measures aimed at guaranteeing the protection of confidentiality and preventing the risks of loss or destruction, unauthorized access, unauthorized or non-compliant processing for the purposes referred to above. Security measures are constantly improved based on technological development.
7. Communication of data to third parties
Personal data will be processed by the Data Controller, by the Data Processors appointed by him and by strictly authorized data processors. They may be communicated to co-owner companies for data processing, if appointed.
Data may also be communicated following inspections or checks, if requested from the Company, to all inspection bodies responsible for checks and controls regarding the regularity of legal compliance.
The Data Controller guarantees the utmost care so that the communication of personal data to the aforementioned recipients concerns exclusively the data necessary for achieving the specific purposes for which they are intended.
Personal data are stored in the Data Controller’s databases and will be processed exclusively by authorized personnel. The latter will be provided with specific instructions on the methods and purposes of processing. Such data will also not be communicated to third parties, except as provided above and, in any case, within the limits indicated therein, nor will they be disseminated, except in the cases described above and/or provided for by law.
8. Duration of processing and retention of personal data
The User’s personal data will be processed by the Data Controller only for the period of time necessary to achieve the purposes of the processing, after which they will be stored solely in execution of the legal obligations in force on the matter, for administrative purposes and/or to assert or defend a right, in case of disputes and pre-litigation.
9. Existence of an automated decision-making process
There is no automated decision-making process.
10. Data Controller’s intention regarding personal data transfer
The Data Controller will not transfer Users’ personal data to a third country or an international organization.
11. Rights of the interested party
As an interested party, the User may exercise, at any time, against the Data Controller the rights referred to in Article 7 of the Privacy Code and Article 15 of the GDPR listed below, by sending a specific written request to the email address: info@archivissima.it.
In the same way, the User can withdraw any consents expressed with this information at any time.
The User has the right to:
- obtain confirmation as to whether or not personal data concerning him or her are being processed, even if not yet recorded, and their communication in intelligible form;
- obtain the indication: a) of the origin of the personal data; b) of the purposes and methods of processing; c) of the logic applied in case of processing carried out with the aid of electronic instruments; d) of the identification details of the data controller, data processors and the representative designated pursuant to Article 5, paragraph 2 of the Privacy Code and Article 3, paragraph 1 of the GDPR; e) of the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them as designated representative in the territory of the State, data processors or persons in charge;
- obtain: a) the updating, rectification or, when interested, the integration of data; b) the erasure, transformation into anonymous form or blocking of data processed in violation of the law, including those whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed; c) certification that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which such fulfillment proves impossible or involves a manifestly disproportionate use of means compared to the protected right;
- object, in whole or in part: a) for legitimate reasons, to the processing of personal data concerning him or her, even if pertinent to the purpose of the collection; b) to the processing of personal data concerning him or her for the purpose of sending advertising material or direct sales or for carrying out market research or commercial communication, through the use of automated calling systems without the intervention of an operator via e-mail and/or through traditional marketing methods by telephone and/or paper mail. It should be noted that the right of opposition of the interested party, set out in the previous point b), for direct marketing purposes through automated methods extends to traditional ones and that in any case the possibility for the interested party to exercise the right of opposition even only in part remains. Therefore, the interested party can decide to receive only communications through traditional methods or only automated communications or neither type of communication.
Where applicable, he also has the rights set forth in Articles 16-21 of the GDPR (Right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the Supervisory Authority.
This Privacy Policy was updated on 23/05/2019. Any updates will always be published on this page.