Privacy and Cookie Policy

REGULATORY REFERENCES

Directive 2002/58/EC – concerning the ‘processing of personal data and the protection of privacy in the electronic communications sector’

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

THE DATA CONTROLLER

Following consultation of this website, data relating to identified or identifiable persons may be processed. The Data Controller is Colussi S.p.A., with registered office at Via G. Spadolini, 5 – 20141 Milan, Italy.

DATA PROCESSING LOCATION AND RETENTION PERIODS

The processing operations connected to the web services of this site take place at the aforementioned registered office of the Data Controller and are carried out only by personnel expressly authorised by them, or by any third-party suppliers appointed for occasional maintenance operations, designated as Data Processors pursuant to Article 28 of the GDPR. The data collected will be stored – for each type of data processed – exclusively for the time necessary to fulfil the specific purposes indicated in the specific summary information displayed on the website pages and prepared for particular services.

TYPES OF DATA PROCESSED

Browsing data

The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.

This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes IP addresses or domain names of the computers used by users connecting to the site, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment.

These data are used solely for the purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical cybercrimes against the site: except for this eventuality, at present, web contact data do not persist for more than seven days.

Data provided voluntarily by the user

There are no data collection forms on the website. Specific summary information is progressively reported or displayed on the website pages prepared for particular on-demand services (i.e., the toll-free number in the contact area). In addition, there is a toll-free number on the site that users can call to receive information about our products. When calling the toll-free number, the caller’s telephone number will be visible to personnel authorised by the data controller unless the caller has anonymised it. In no case will the telephone number be saved by authorised personnel, unless this is necessary to fulfil a specific user request (i.e., to contact them again following a specific request). Calls will not be recorded and in no case will the personal data collected be disseminated, but we inform you that they may be communicated to third parties who perform specific services on behalf of the Data Controller to ensure a correct and timely response to the user.

COOKIES

Cookies are small text files containing a certain amount of information exchanged between a website and the user’s terminal (usually the browser). They are primarily used to make websites function and operate more efficiently, as well as to provide information to the website owners themselves. Cookies can be either session or persistent. Session cookies remain stored on the terminal for a short period of time and are deleted as soon as the user closes the browser. Their use is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to allow safe and efficient browsing of the site. Persistent cookies, on the other hand, remain stored on the user’s terminal until a predetermined expiry date. These, not being deleted directly when the browser is closed, allow the user’s choices on their site to be remembered, as well as collecting information about the pages of the site visited by the user, the frequency with which the site is visited, and identifying the user’s browsing path, in order to improve the experience on this site. Cookies, whether session or persistent, can finally be First-party or Third-party depending on whether the entity installing the cookies on the user’s terminal is the same operator of the site the user is visiting (in which case they will be called First-party cookies) or a different entity (in which case they will be called Third-party cookies).

Cookies used by this site

This site uses both First-party and Third-party cookies as it utilises the functionalities of Google Analytics services, offered by Google Inc.

Google Analytics uses ‘cookies’ to collect and analyse information regarding how users use the websites they visit. For more information on Google Analytics cookies and their use by Google Inc., please consult: http://www.google.com/intl/it/policies/technologies/cookies/ and https://developers.google.com/analytics/devguides/collection/analyticsjs/cookies-usage,

the privacy policy for Google Analytics at: http://www.google.com/intl/en/analytics/privacyoverview.html

The Facebook Pixel uses ‘cookies’ to collect and analyse information regarding how users use the websites they visit. It collects data to measure Facebook ADS conversions and optimises them for campaigns and retargeting for users who have already performed an action on your website. For more information on Facebook Pixel cookies and their use by Facebook, please consult: https://www.facebook.com/policies/cookies

The table below shows, in detail, the cookies currently present on the website.

COOKIE NAME	DEFAULT EXPIRY	TYPE	COOKIE DESCRIPTION
_ga	Default expiry is set after 2 years	Third-party analytical	This cookie is associated with Google Analytics and is used to distinguish users, assigning each a randomly generated number as an identifier. It is used to calculate the number of page visitors, sessions, and data to produce anonymised statistical analysis reports.
_gid	Default expiry is set after 24 hours	Third-party analytical	This cookie is associated with Google Analytics and is used to distinguish users, assigning each a randomly generated number as an identifier. It is used to calculate the number of page visitors, sessions, and data to produce anonymised statistical analysis reports.
_gat	Default expiry is every 10 minutes	Third-party analytical	This cookie is associated with Google Analytics; it is used to speed up access requests.
_fbp	Default expiry is set after 3 months	Third-party analytical	Cookie used by Facebook to provide a range of advertising products, such as real-time offers from third-party advertisers.
fr	Default expiry is set after 3 months	Third-party analytical	Cookie used by Facebook to provide a range of advertising products, such as real-time offers from third-party advertisers.

In addition to the cookies listed in the table, this site also uses so-called session cookies. These cookies are not permanently stored on the user’s computer and disappear when the browser is closed. Their use is strictly limited.

Cookie management

Normally, browsers allow control over most cookies through the browser settings themselves. However, please note that disabling technical cookies, either totally or partially, may compromise the use of the site’s functionalities. In any case, if the user does not wish to receive any type of cookies on their computer, either from this site or from others, they can increase their privacy protection level by modifying their browser’s security settings:

Mozilla Firefox: https://support.mozilla.org/en-GB/kb/enable-and-disable-cookies-website-preferences
Google Chrome: https://support.google.com/chrome/answer/95647?hl=en-GB
Internet Explorer: http://windows.microsoft.com/en-GB/windows-vista/block-or-allow-cookies
Safari 6/7 Mavericks: https://support.apple.com/en-gb/HT201265
Safari 8 Yosemite: https://support.apple.com/en-gb/HT201265
Safari on iPhone, iPad, or iPod touch: https://support.apple.com/en-gb/HT201265

LINKS TO OTHER WEBSITES

This site may contain links or references for accessing other sites, such as the social networks Facebook and Instagram. We inform you that the Data Controller does not control the cookies or other monitoring technologies of these websites, to which this Policy does not apply.

OPTIONAL PROVISION OF DATA

Apart from what is specified for browsing data, the user is free to provide their personal data. However, failure to provide them may make it impossible to obtain what has been requested.

METHODS OF PROCESSING AND RETENTION PERIODS

Personal data are processed, including with the aid of automated tools. The Data Controller has adopted all minimum security measures required by law and, drawing inspiration from the main international standards, has also adopted further security measures to minimise the risks related to the confidentiality, availability, and integrity of the personal data collected and processed.

SHARING, COMMUNICATION AND DISSEMINATION OF DATA

The collected data may be transferred or communicated to other companies that perform activities strictly connected and instrumental to the operation of the service for the data controller, such as So.Gest.I. S.r.l., belonging to the Colussi Group, which manages the personal data of users who contact the Colussi Group’s toll-free number and the management of the IT systems on which they are stored. Personal data provided by users who submit requests for informative material (brochures, informative material, etc.) are used solely for the purpose of performing the requested service or provision and are communicated to third parties only if this is necessary for that purpose (companies that provide enveloping, labelling, shipping services). Outside of these cases, personal data will not be communicated unless contractually or legally required, or unless specific consent is requested from the data subject.

In this sense, personal data could be transmitted to third parties, but only and exclusively if:

a) there is explicit consent to share the data with third parties;
b) there is a need to share information with third parties in order to provide the requested service;
c) this is necessary to comply with requests from the Judicial Authority or Public Security.

No data derived from the web service is disseminated.

RIGHTS OF DATA SUBJECTS

Personal data protection legislation expressly provides for certain rights for data subjects. In particular, pursuant to Articles 15 et seq. of Regulation (EU) 2016/679, each data subject has the right to obtain confirmation of the existence or otherwise of data concerning them, to obtain an indication of the origin and purposes and methods of processing, the updating, rectification, integration of the data, as well as their erasure if processed in violation of the law or if one of the reasons specified by Article 17 of Regulation (EU) 2016/679 exists.

CHANGES TO THESE PRIVACY POLICIES

The Data Controller periodically reviews its privacy and security policy and, if necessary, revises it in relation to regulatory or organisational changes or those dictated by technological evolution. In the event of policy changes, the new version will be published on this page of the site.

QUESTIONS, COMPLAINTS, SUGGESTIONS AND EXERCISE OF RIGHTS

Anyone interested in further information, contributing with their suggestions, or submitting complaints or objections regarding privacy policies, how our Company processes personal data, as well as asserting their rights under personal data protection legislation, may contact the Data Controller by writing to Colussi S.p.A., with registered office at Via G. Spadolini, 5 – 20141 Milan, Italy, or by sending an email to privacy@colussigroup.it.

LAW AND JURISDICTION

The interpretation and execution of these conditions are governed by Italian law. The Court of Milan (Italy) shall have exclusive jurisdiction over any dispute connected to these conditions. The Data Controller reserves the right to seek urgent remedies in any court, including abroad, to protect its interests and enforce its rights.