INFORMATION FOR THE PROCESSING OF PERSONAL DATA pursuant to EU Regulation no. 679/2016 and Legislative Decree no. 196/2003
Drago Spa., in compliance with the principles established by EU Regulation n. 679/2016 – General Regulations on the Protection of Personal Data (“GDPR”) and applicable national legislation (Legislative Decree 196/2003, “Privacy Code”), informs users that the following rules provide an overview of the processing of your personal data, after registration, in the specific context of the offers and online services of the official website www.dragobiella.it as well as “apps” or smartphone applications (from hereinafter, the term “Platform” will be used to indicate internet sites and “apps”). These privacy rules also aim to inform you about your rights and the possibilities to manage and protect your personal data.
2. PURPOSE OF THE TREATMENT
Drago Spa., through the Platform, will be able to collect and process users’ data for the following purposes:
a) Provide services on the Platform. Drago Spa processes information from various sources. Some is automatically collected when visitors use the Platform. This may include data that users have provided spontaneously or that Drago Spa has received from partner companies. b) Send newsletters and promotional communication by e-mail, to the address provided by the user. They may regard the services offered and the products sold by Drago Spa. The consent of the user is necessary for internal processes and for the right of protection in court. At any time the user may request cancellation from the service, reject further similar communications, oppose the processing and lodge a complaint with the Guarantor of Privacy.
The legal basis of the processing of the user’s personal data for these purposes is represented by the legitimate interest of Drago Spa. to send communications relating to the services and products offered on the Platform on which the user expressed interest, as well as in similar services and products. The processing of personal data is connected to the execution of legal obligations, regulations, national and community regulations as well as deriving from provisions issued by authorities legitimated by the law, which represent the legal basis of the treatment.
The purposes indicated will be implemented using both automated and non-automated methods (i.e. email, postal mail etc.). The consent will be requested at the bottom of the registration forms accessible by the user, and may be revoked at any time, even partially. Accordingly, the communications sent by e-mail will include an opt-out button. Failure to provide the consent will preclude the user the possibility of receiving communications, invitations, promotions or offers from Drago Spa., without prejudice to the possibility of using the services accessible through the Platform.
3. PROCESSING PLACE AND METHODS
The data processing related to the data collected on the Drago Spa. Platform takes place at the legal and operational headquarters of the company as well as at the premises of external parties, website providers and managers appointed as Data Processors, and take place for the period of time required by law and strictly necessary to achieve the purposes. Security measures to prevent data loss, illicit or incorrect use and unauthorized access to the data are taken any time data is treated through automated tools.
Data is processed by staff authorized by the company or by external parties in charge of occasional maintenance operations, according to the principles of correctness, lawfulness, transparency, relevance and non-excess with respect to the purposes of collection and subsequent processing.
4. TYPOLOGY AND NATURE OF DATA PROCESSED
Through its Platform Drago Spa. receives and collects information relating to users who visit the pages of the site and who use the available web services, subject to registration. In particular, Drago Spa. acquires and processes the following information.
Access to the site involves the recording of data used for the sole purpose of obtaining statistical information or to ensure correct operation.
The collected data includes the IP addresses and/or the domain names of the computers used by the users connecting to the site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the file size obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters related to the operating system and the user’s computer environment.
These data are not collected for the purpose of associating them with identified subjects, however due to their nature they could allow users to be identified through processing and association with data held by third parties, especially when it is necessary to ascertain responsibility in case of hypothetical IT crimes to the detriment of the site.
The data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning, and are kept for the time necessary to perform the analysis activities and comparative statistical elaborations, in pursuit of the legitimate interests of Drago Spa.
Data provided voluntarily by the user or acquired by the Company Drago Spa. restricts the collection of information relating to users exclusively limited to the pursuit of the purposes described in paragraph
2. The products and services specifically requested (as available at the time of writing) are:
a) Purchase of fabric trend books;
b) Purchase of online fashion trends;
c) Purchase of textile technical books;
d) Purchase of a subscription for access to the textile archive.
Technical cookies are essential to allow the user to move within the site and to use its features, such as accessing the Reserved Area (i.e. registration, authentication). These cookies are strictly necessary and are used to store a unique identifier, which identifies the user as unique compared to the other users visiting the site at the same time. Therefore they enable the platform to provide the user with a consistent and precise service. Furthermore, these cookies allow the site to remember the user’s choices (i.e. user name, language, country of origin, etc.), to distribute requests on multiple servers, to store when the user gives his consent to certain options, to allow the user to view content and videos using Adobe Flash Player.
These cookies can be session or persistent, installed by the site or by third parties such as Google Analytics. Their use is limited to the performance and improvement of the site. These cookies collect aggregate statistics on how users use the site, thus allowing its improvement. For instance they can be used to check if users can easily find the desired information, or to identify what aspects of the site are of greatest interest. These cookies are used by Drago Spa. to process statistical and aggregate analyzes on how users navigate the site, the number of pages visited or the number of clicks made. Mechanisms to mask the IP address of users are adopted, and Google Analytics can’t cross such information with others in their possession, for the purpose of identifying users.
Disabling cookies through the browser
If desired, the user can delete cookies from the site through his browser’s settings.
Most browsers are set to accept cookies. However, the user can configure his browser to restrict the number of cookies accepted or block all cookies, changing the browser settings in the following ways:
Microsoft Internet Explorer
Click on the ‘Tools’ icon in the upper right corner and select ‘Internet Options’. In the pop-up window select ‘Privacy’. Here the user can change the cookie settings.
Click the three dots icon in the upper right corner and select ‘Settings’, then scrowl and select ‘Advanced’. Reach the ‘Privacy’ settings and chose what to turn on or off.
From the drop down setting menu in the upper right corner select ‘Preferences’, then select ‘Security’. Here you can adjust the cookie settings.
Please note, however, that disabling the use of all cookies on the site will compromise some features (i.e. authentication possibility).
Further information about cookies
The website www.allaboutcookies.org contains instructions for managing cookies on the most popular browsers; alternatively, you can consult the documentation attached to the software used on your device.
6. DATA COMMUNICATION
The data provided by users as well as those collected by the Platform will not be disclosed and may be communicated by Drago Spa to the following categories, even abroad in non-EU countries, exclusively for the purposes and methods described above:
a. collaborators, consultants or freelancers of which Drago Spa. makes use for technical or organizational tasks or collaborates for the purpose of providing and operating its services and activities;
b. people, companies or professional firms that provide assistance and advice to Drago Spa. with particular but not exclusive reference to accounting, administrative, legal, tax and financial matters;
c. companies and/or third parties such as compulsory public and/or private bodies;
d. subjects whose right to access data is recognized by legal provisions or by orders of the authorities.
7. DATA CONSERVATION
The data are processed for the time necessary for the provision of the services requested by the user and for the performance of the activities connected and instrumental to them, as explained in paragraph 2, and are canceled as soon as the purposes for which they were collected and treated end. In particular, the data relating to accounting and invoicing will be kept for a period of at least 10 years.
8. RIGHTS OF THE INTERESTED PARTY
a) request the correction of inaccurate or incomplete data;
c) request the limitation of treatment (i.e. in the event of a dispute on the accuracy of the data; if the processing is illegal and the user opposes the cancellation of personal data; if the data are necessary for the exercise or defense in court of a user’s right; if the holder no longer needs them; in case of exercising the right of opposition, for the time necessary to verify the existence of legitimate reasons).
d) receive in a common and readable format by automatic device (i.e. pdf) personal data concerning the user and transmit them to another holder, or obtain direct transmission from one holder to another, if technically feasible (so-called data portability).
The user also has the right to object, in whole or in part, for legitimate reasons, to the processing of personal data concerning him/her, as well as the right to object, even partially, to the processing of personal data for the purposes of commercial information, marketing advertising or market research by Drago Spa.
Finally, if the user believes that the processing of the data provided violates the legislation on the protection of personal data, the user has the right to lodge a complaint with the Authority for the protection of personal data (www.garanteprivacy.it).
Should the changes be particularly significant and/or significantly affect the user’s rights, Drago Spa. can choose to also communicate them via a different method (i.e. email).