Privacy policy

IACNET is committed to protecting the online privacy of the users of this website. As such, this Privacy Policy has been written in order to allow you to understand IACNET’s policy regarding your privacy, as well as how users’ personal information will be handled when using the Website. In general, any information and data which you provide over the Website, or which is otherwise gathered by the Website will be processed according to principles such as purpose limitation, storage limitation, data minimization, data quality and confidentiality.

  1. Data Controller

Data Controller is IACNET s.r.l., with registered office in Rivalta di Torino (To), Fraz. Pasta, Via Massimo D’Antona n.1/11 C.F. e P.Iva: 10835200014. You can contact Data Controller at the following e-mail address: info@iacnet.eu.

 

  1. Personal Data processed and purposes of processing

When users use the Website, IACNET will collect and process information regarding them such as follow.

 

Browsing data

The Website’s operation, as is standard with any websites on the Internet, involves the use of computer systems and software procedures, which collect information about the Website’s users as part of their routine operation. While IACNET does not collect this information in order to link it to specific users, it is still possible to identify those users either directly via that information, or by using other information collected – as such, this information must also be considered Personal Data.

This information includes several parameters related to your operating system and IT environment, including your IP address, location (country), the domain names of your computer, the URI (Uniform Resource Identifier) addresses of resources you request on the Website, the time of requests made, the method used to submit requests to the server, the dimensions of the file obtained in response to a request, the numerical code indicating the status of the response sent by the server (successful, error, etc.), and so on.

These data are used to compile statistical information on the use of the Website, as well as to ensure its correct operation and identify any faults and/or abuse of the Website. Save from this last purpose, these data do not persist for more than 7 working days.

Name, contact details, other Personal Data and special categories of Personal Data

Certain areas of the Website (such as the form to request) include free text fields where you can provide IACNET with some information, which users may use to submit information such as your name, phone number, e-mail address.

By filling in the contact form with their Data, the users consent to their use to respond to requests for information or any other kind.

Where these fields are completely free, users may use them to disclose (inadvertently or not) more sensitive categories of Personal Data, such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership. The content upload in these fields may also (inadvertently or not) include other types of sensitive information relating to you, such as genetic data, biometric data or data concerning health, sex life or sexual orientation.

IACNET asks that users do not disclose any sensitive Personal Data on the Website, unless they consider this to be strictly necessary. As it is totally optional to provide this information, if users do, please mind that IACNET needs your explicit consent to process this kind of Personal Data. IACNET would stress on the importance of providing explicit consent to process this sort of Personal Data if users decide, nonetheless, to share it.

These messages may (inadvertently or not) also include Personal Data related to other persons. In any situation where users decide to share Personal Data related to other persons, users will be considered as an independent data controller regarding that Personal Data and must assume all inherent legal obligations and responsibilities. This means, among other things, that users must fully indemnify IACNET against any complaints, claims or demands for compensation for damages which may arise from the processing of this Personal Data, brought by the third parties whose information you provide through the Website.

As IACNET does not collect this information directly from these third parties (but rather collects them, indirectly, from you), users must make sure that you have these third parties’ consent before providing any information regarding them to IACNET; if not, then you must make sure there is some other appropriate grounds on which you can rely to lawfully give IACNET this information.

  1. Lawful basis for processing and mandatory / discretionary nature of processing

Legal bases for processing users’ Personal Data, according to the purposes identified in Section 2, are as follows:

Service Provision: processing for these purposes is necessary to provide the Services. It is not mandatory for users to give IACNET their Personal Data for these purposes; however, if users do not, IACNET will not be able to provide any Services to them.

Soft Spam: processing for this purpose is based on the interest of IACNET of sending users direct e-mail marketing communication regarding products and services similar to those they have asked for information through the use of the Website. Users can block these communications, and they will suffer no consequence if you do so (aside from not being able to receive further communications).

Profiling: processing for this purpose is based on users’ consent collected by means of the banner cookie. It is not mandatory for users to give consent to IACNET for use of your Personal Data for this purpose, and they will suffer no consequence if you choose not to. Any consent given may also be withdrawn at a later stage.

Compliance: processing for this purpose is necessary for IACNET to comply with its legal obligations. When users provide any Personal Data, IACNET must process it in accordance with the laws applicable to it, which may include retaining and reporting users Personal Data to official authorities for compliance with tax, customs or other legal obligations.

Misuse/Fraud: Information collected for this purpose is used exclusively to prevent and detect fraudulent activities or misuse of the Website (for potentially criminal purposes).

 

  1. Recipients of Personal Data

Users Personal Data may be shared with the following list of persons / entities (“Recipients”):

– Persons, companies or professional firms providing IACNET with advice and consultancy regarding accounting, administrative, legal, tax, financial and debt collection matters related to the provision of the Services and which act typically as data processors on behalf of IACNET;

– Entities engaged in order to provide the Services (e.g., hosting provider or e-mail platform providers);

– Persons authorized to perform technical maintenance (including maintenance of network equipment and electronic communications networks);

– Persons authorized by IACNET to process Personal Data needed to carry out activities strictly related to the provision of the Services, who have undertaken an obligation of confidentiality or are subject to an appropriate legal obligation of confidentiality (e.g., employees of IACNET);

– Public entities, bodies or authorities to whom your Personal Data may be disclosed, in accordance with the applicable law or binding orders of those entities, bodies or authorities;

 

  1. Data processing

This website treats users’ Personal Data in a lawful and correct manner, adopting the appropriate security measures to prevent unauthorized access, disclosure, modification or unauthorized destruction of Personal Data. The treatment is carried out using IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated. The management and storage of personal data will take place in Europe, on servers physically located within the EU Economic Area.

The extent and adequacy of the Personal Data provided will be assessed from time to time, in order to determine the consequent decisions and avoid the processing of excess data with respect to the purposes pursued.

The Data Controller undertakes not to use users’ Personal Data for purposes other than those described in this privacy policy, if not by informing it in advance and, where necessary, obtaining its consent.

 

  1. Transfer of Personal Data

Due to the interactions with Google Analytics, some of your Personal Data may be shared with Recipients who are located outside the European Economic Area. The Data Controller ensures that the processing of your Personal Data by these Recipients takes place in compliance with the applicable legislation. Indeed, transfers are made through adequate guarantees, such as adequacy decisions (see Privacy Shield), Standard Contractual Clauses approved by the European Commission or other guarantees considered adequate.

 

  1. Personal Data Retention

Personal Data processed for Service Provision will be kept by IACNET for the period deemed strictly necessary to fulfil such purposes – in any case, as these Personal Data are processed for the provision of the Services, IACNET may continue to store this Personal Data for a longer period, as may be necessary to protect IACNET’s interests related to potential liability related to the provision of the Services.

Personal Data processed for Marketing and Profiling will be kept by IACNET from the moment you give consent until the moment you withdraw the consent given. Once consent is withdrawn, Personal Data will no longer be used for these purposes, although it may still be kept by IACNET, in particular as may be necessary to protect IACNET’s interests related to potential liability related to this processing.
Personal Data processed for Soft Spam will be kept until you object to such processing.

Personal Data processed for Compliance will be kept by IACNET for the period required by the specific legal obligation or by the applicable law.

Personal Data processed for preventing Misuse/Fraud will be kept by IACNET for as long as deemed strictly necessary to fulfil the purposes for which it was collected.

 

  1. Data subject’s rights

    Data subject are entitled to exercise the following rights before IACNET, at any time:

Ø  obtain confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data (art.15 GDPR);

Ø  obtain the following information:

–    where personal data have been obtained;

–    processing purposes and means

–    in case of automated decision-making, including profiling, at least in those cases, meaningful information about the logic involved;

–    the identity and the contact details of the controller, processor and, where applicable, of the controller’s representative;

–    the recipients or categories of recipients of the personal data;

Ø  obtain: a) rectification of inaccurate personal data; b) the erasure of personal data, the transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed. Data controller must give evidence that the operations referred to in the letters a) e b) have been brought to the attention, also with regard to their content, of those recipients to whom the data have been communicated, except in the case where this fulfillment proves impossible or involves a use of means manifestly disproportionate to the protected right;

Ø obtain the restriction of processing;

Ø  receive the personal data concerning him, which he has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided;

Ø object to the personal data processing;

Ø  withdraw your consent to processing (for Marketing and Profiling or Soft Spam).

Ø  lodge a complaint with a supervisory authority (Garante Privacy www.garanteprivacy.it).

 

We inform you that the rectification of most of the Personal Data provided to IACNET as well as for the exercise of the other rights that the GDPR recognizes to Data Subjects, you can contact Data Controller at the following email address: info@iscnet.eu.

 

  1. Cookie

Cookies are small text files that may be sent to and registered on your computer by the websites you visit, to then be re-sent to those same sites when you visit them again. It is thanks to these cookies that those websites can “remember” your actions and preferences (e.g., login data, language, font size, other display settings, etc.), so that you do not need to configure them again when you next visit the website, or when you change pages within a website.

Cookies are used for electronic authentication, monitoring of sessions and storage of information regarding your activities when accessing a website. They may also contain a unique ID code which allows tracking of your browsing activities within a website, for statistical or advertising purposes. Some operations within a website may not be able to be performed without the use of cookies which, in certain cases, are technically necessary for operation of the website.

 

The Website uses the following types of cookies:

Technical cookies, which are strictly necessary for the Website’s operation, and/or to allow you to use the Website’s content and Services. Users’ consent is not required for the use of these cookies.

Analytics cookies, which allow to understand how users make use of the Website, and to track traffic to and from the Website.

 

Cookies present on the Website

In detail, the cookies present on the Website are as follows:

_ga

2 years

These cookies are used to collect information about how visitors use our website. We use the information to compile reports and to help us improve the website. The cookies collect information in a way that does not directly identify anyone, including the number of visitors to the website and blog, where visitors have come to the website from and the pages they visited.

_gid

1 day

Read Google’s overview of privacy and safeguarding data

__hstc

1 year

These cookies are associated with websites built on the HubSpot platform. It is reported by them as being used for website analytics.

__hssc

30 minutes

hubspotutk

30 minutes

This cookie is associated with websites built on the HubSpot platform. HubSpot report that its purpose is user authentication. As a persistent rather than a session cookie it cannot be classified as Strictly Necessary.

 

 

Cookie settings

The user can refuse the use of cookies in whole or in part and at any time can revoke a consent already provided. Since cookies are connected to the browser used, they can be disabled directly from the browser, thus refusing / withdrawing consent to the use of cookies, or through the banner located at the bottom of the page.

Disabling cookies may prevent the correct use of some functions of the site itself, in particular the services provided by third parties may not be accessible, and therefore may not be viewable (e.g. Google maps).

For more information on how to set the preferences for cookies on your browser, please refer to the following instructions: