PRIVACY AND COOKIE POLICY

The data controller is NI.VAL. GROUP SERVICE Srl, with registered office at Via F. Garofoli, 233 – 37057 S. Giovanni Lupatoto (VR), Italy.

NIVAL GROUP SERVICE Srl manages all personal data acquired through this website jointly with the following companies, which also have their registered office at Via Garofoli, 233 - 37057 San Giovanni Lupatoto (VR), Italy:

• TEAM S.r.l.
• SAN MARTINO SERVIZI S.r.l.
• COOPERATIVA S.IN.CO.

The above companies have therefore entered into a joint controllership agreement pursuant to Article 26 of the GDPR. Further information may be requested by contacting the Controller.

The Data Protection Officer is APTA Servizi Professionali Srl, Via F. Brindisi, 32 – 65017 Penne (PE), represented by Dr Eng Massimo Forestiero, who may be contacted at dpo@nivalgroup.com.

The Controller may not be held liable for damage of any kind caused directly or indirectly by access to the Site, by an inability or impossibility to access it, or by the use of information contained therein. Links to external websites are provided solely as a service to users, and no responsibility is accepted for the accuracy or completeness of those links.

The Controller also reserves the right to amend or update the Site’s content, in whole or in part, including as a result of changes to applicable law. The date of the latest update is shown at the bottom of this page.

Personal data collected through this website are processed using automated tools solely for explicit and specified purposes, lawfully, fairly and transparently in relation to the data subject, and are not used beyond the purposes for which they were collected.

Data minimisation (adequacy, relevance and limitation in relation to the purposes of processing), accuracy and confidentiality are therefore ensured.

To ensure appropriate protection of personal data provided by users and to prevent its loss, including accidental loss or theft, and unlawful use, the Controller has adopted technical and organisational measures that are monitored and updated when necessary.

The legal basis for processing data acquired through this Site is:

• the Controller’s legitimate interest, with regard to browsing data and technical cookies;
• the performance of pre-contractual measures taken at the data subject’s request (Article 6(1)(b) GDPR), with regard to data entered in the “CONTACT” section;
• the data subject’s consent, with regard to the use of analytics cookies.

Personal data may be shared with:

• persons authorised by the Controller to process personal data who have undertaken confidentiality obligations;
• consultants acting as external processors, to the extent necessary to perform their duties, who are bound by confidentiality and security obligations;
• judicial authorities in the exercise of their functions where required by applicable law.

The Controller will process personal data for the period strictly necessary to achieve the purposes set out in this Privacy Policy and for as long as permitted by Italian law to protect its interests (Article 2947 of the Italian Civil Code). Further information about the personal-data retention period and the criteria used to determine it may be requested by writing to the Controller.

Personal data will not be transferred to parties located outside the European Economic Area and will not be publicly disclosed.

Pursuant to Articles 15–22 of the GDPR, data subjects may contact the Controller at any time to request access to their personal data and to:

• obtain erasure, anonymisation or blocking of data processed unlawfully;
• obtain the updating, rectification and completion of data;
• obtain confirmation that such changes have been communicated to those to whom the data were disclosed;
• object on legitimate grounds to data processing or to any automated decision-making process, including profiling;
• obtain restriction of processing or portability to another controller;
• withdraw consent to processing for the purposes indicated above, without affecting the lawfulness of processing based on consent before its withdrawal;
• receive their data in a structured, commonly used and machine-readable format.

Data subjects also have the right to lodge a complaint with the competent supervisory authority, the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali), if they believe that the processing of their personal data does not comply with applicable law.