I – INFORMATION ABOUT THE PRIVACY POLICY OF THE CARAPAN WEBSITE

1. This section contains information about how Carapan Srl manages the processing of data belonging to the users of the Carapan Srl website.

2. This privacy policy is also valid for the purposes of Article 13 of EU Regulation No. 2016/679 on the protection of individuals regarding the processing of personal data and the free movement of such data for persons interacting with Carapan Srl and can be found at the home page: www.carapan.it

3. The Privacy Policy is provided only for the Carapan Srl website and not for other websites the user may consult through the links contained therein.

4. The aim of this document is to provide information relating to the methods, timescales and nature of the information that the data controller must provide to users on connection to the Carapan Srl website, regardless of the reason for that connection, in compliance with Italian and European legislation.

5. The information may be subject to changes due to the introduction of new rules, so users are invited to check this page periodically.

6. If the user is under 16 years of age, according to Art. 8, c.1 EU Regulation 2016/679, they will have to legitimise their consent through the authorisation of their parents or legal guardian.

II – DATA PROCESSING
1 – Data Controller
1.
The data controller is the natural or legal person, public authority, service or other body which, individually or together with others, determines the purposes and means of processing personal data.
They are also responsible for all security issues.
2.
The data controller for this website is:
Pimapan Srl, and for any clarification or exercise of your rights, you may contact them at the following email address: amministrazione@carapan.it
2 – Data processor
1.
The data processor is the natural or legal person, public authority, service or other body that processes personal data on behalf of the data controller.
2.
Pursuant to Article 28 of EU Regulation No. 2016/679, upon appointment by the data controller, the data processor of the Carapan Srl website is:
Mr Gianluca Picciau.
3 – Place of data processing
1.
Data processing generated by the use of the Carapan Srl website occurs at Via Po 4 – 09122 Cagliari.
2.
In case of need, the data processor or individuals appointed by such for this purpose can process the data associated with the newsletter service at the relative office.
III – COOKIES
1 – Type of Cookies
1.
The Carapan Srl website uses cookies to render the user’s navigation experience easier and more intuitive: Cookies are short strings of text used to memorise information that may concern the user, their preferences or the device used to access the internet (computer, tablet or mobile phone) and are mainly used to adapt the functioning of the website to the user’s expectations, offering a more personalised navigation experience and memorising the choices made on previous visits.
2.
A cookie consists of a small quantity of data transferred to the user’s browser by a web server and can only be read by the server that made the transfer.
It is not an executable code and does not transmit viruses.
3.
Cookies do not record personal data, and no identifiable data is memorised.
If you wish, you can stop the saving of some or all cookies.
However, in doing so, you may negatively affect the use of the website and the services offered.
To proceed without modifying the options regarding cookies, simply continue to navigate.
Below are the types of cookies used by the website:
2 – Technical cookies
1.
Several technologies are used to preserve information in the user’s computer, which are subsequently collected by the websites.
Among these, the HTML cookie is the most well-known type of technical cookie.
These are necessary for navigation and to facilitate the user’s access to and use of the website.
They are necessary for transmitting communications over electronic networks or for the provider to provide the service requested by the customer.
2.
The settings to manage or disable cookies can vary depending on the internet browser used.
However, the user can manage or request the general deactivation or deletion of cookies by changing their Internet browser’s settings.
This disabling operation may slow down or prevent access to certain parts of the website.
3.
Technical cookies enable the safe and efficient use of the website.
4.
Cookies inserted into the browser and re-transmitted by Google Analytics or through the blogger statistics service or similar services are technical only if used for optimising the website directly by the owner of the website itself, which can collect information in an aggregate form on the number of users and how these visit the website.
On these conditions, the same rules regarding the privacy policy statement and consent valid for technical cookies apply also to analytics cookies.
5.
In terms of duration, we can distinguish between temporary (session) cookies, which are automatically cancelled on termination of the navigation session and are used to identify the user, thus avoiding the need to log in for every page visited, and persistent cookies, which remain active in the computer until they expire, or the user deletes them.
6.
Session cookies may be installed to allow access and stay in the private area of the portal as an authenticated user.
7.
These are not persistently stored in the PC but only for the browsing session, until the browser is closed. They disappear upon closure of the same.
Their use is strictly limited to transmitting session identifiers comprising random server-generated numbers that are necessary to enable the safe and efficient exploration of the website.
3 – Third-party cookies
1.
In terms of origin, we distinguish between cookies sent to the browser directly by the website being visited and third-party cookies sent to the computer by other websites and not by that being visited.
2.
Persistent cookies are often third-party cookies.
3.
Most third-party cookies comprise tracking cookies used to identify online behaviour, understand the users’ interests, and thus customise advertising proposals for them.
4.
Third-party analytical cookies may be installed.
They are sent from third-party domains outside the website.
5.
Third-party analytical cookies are used to collect information regarding the behaviour of the users of the Carapan Srl website.
The detection takes place anonymously to monitor the performance of the website and improve its usability.
Third-party profiling cookies are used to create profiles relating to the users, to offer adverts in line with the users’ choices.
6.
The use of these cookies is governed by the rules laid down by the third parties, so users are invited to read the privacy policies and instructions for managing or disabling cookies published on the relevant web pages.
IV – DATA PROCESSED
1 – Data processing procedures
Like all websites, this website also uses log files that save the information collected automatically during user visits.
The information collected may include the following:
– internet protocol (IP) address; – type of browser and parameters of the device used to connect to the website; – name of the internet service provider (ISP); – date and time of visit; – web page of origin of the visitor (referral) and exit; – number of clicks, if any.
2.
The information mentioned above is processed automatically and collected exclusively in an aggregated manner to check the correct functioning of the website and for security purposes.
This information will be processed according to the data controller’s legitimate interests.
3.
For security purposes (antispam filters, firewalls and virus detection), automatically recorded data may also include personal data such as the IP address, which could be used, in compliance with relative current legislation, to block attempts to damage the website or to cause damage to other users, and any activity that is in any way damaging or that constitutes a crime.
This data is never used to identify or profile the user but only to protect the website and its users; such information will be processed according to the data controller’s legitimate interests.
4.
Where the website allows the posting of comments, or in the case of specific services requested by the user, including the possibility of sending a CV for a possible employment relationship, the website automatically detects and records specific user identification data, including the user’s email address.
This data is understood to be provided voluntarily by the user when requesting the service.
By entering a comment or other information, the user expressly accepts the privacy policy and consents to the added contents being freely disclosed to third parties.
The data received is used exclusively to provide the service requested and solely for the time necessary to provide the service.
5.
The information that the website users decide to make public via the services and the instruments provided to the same are provided by the user consciously and voluntarily, exempting the website from any responsibility regarding any violation of the law.
It is the user’s responsibility to ensure that they have permission to provide the personal data of third parties or content protected by national and international regulations.
2 – Purposes of data processing
1.
The data we collect on our website when you access it are used exclusively for the purposes stated above and kept for the time strictly necessary to carry out the specified activities and, in any case, not longer than five years.
2.
The data used for security purposes (blocking attempts to damage the website) are held for the time strictly necessary to achieve the previously indicated objective.
3 – Data provided by the user
1.
As indicated above, the optional, explicit and voluntary sending of emails to the addresses indicated on this website necessarily implies that the user provides their email address, which we use to answer to requests, as well as any other personal data included in the message.
2.
Specific summary information shall be progressively reported or displayed on the appropriate website pages dedicated to particular services provided on request.
4 – Support for browser configuration
1.
The user may also manage cookies via the settings in their browser.
However, deleting cookies from the browser may lead to losing preferences set for the website.
2.
For further information and support, you can visit the specific support page for the web browser used:
– Internet Explorer: https://support.microsoft.com/ it-it/help/17442/windows- internet-explorer-delete- manage-cookies
– Firefox: https://support.mozilla.org/ en-US/kb/enable-and-disable- cookies-website-preferences
– Safari: https://www.apple.com/legal/ privacy/it/
– Chrome: https://support.google.com/ accounts/answer/61416?hl=it
– Opera: https://help.opera.com/en/ latest/
5 – Social Network Plugins
1.
This website also incorporates plugins and/or buttons for social networks to allow easy content sharing on your favourite social networks.
These plugins are programmed not to set any cookies on access to the page, in order to safeguard the users’ privacy.
Cookies are only set, if provided for by the relative social network, when the user voluntarily uses the plugins.
Please note that if a user navigates while logged in to a social network, then they have automatically given their consent for use of the cookies handled by this website at the moment of enrolment with the social network.
2.
The collection and use of information obtained via plugin is governed by the respective privacy policies of the social networks, which we recommend you view:
Facebook: https://www.facebook. com/policies/cookies/
Twitter: https://help.twitter. com/it/rules-and-policies/ twitter-cookies
Instagram: https://help.instagram.com/ 519522125107875
Linkedin: https://www.linkedin. com/legal/cookie-policy
V – USER RIGHTS
1.
Article 13, par. 2 of EU Regulation 2016/679 lists the user’s rights.
2.
The Carapan Srl website hereby informs the user of:
the data subject’s right to request from the data controller access to personal data (Art. 15 EU Regulation), their update (Art. 7, para.
3(a) Legislative Decree
196/2003), rectification (Art. 16 EU Regulation), integration (Art. 7, para.
3(a) Legislative Decree
196/2003) or restriction of the processing of data concerning them (Art. 18 EU Regulation) or to object, on legitimate grounds, to their processing (Art. 21 EU Regulation), plus the right to data portability (Art. 20 EU Regulation);
the right to request the deletion (Art. 17 EU Regulation), transformation into anonymous form or blocking of data processed in breach of the law, including data whose retention is unnecessary for the purposes for which the data was collected or subsequently processed (Art. 7, para.
3(b) Legislative Decree
196/2003);
the right to obtain certification that the operations of updating, rectification, integration of data, deletion, blocking of data, and transformation have been brought to the attention, also regarding their content, of the persons to whom the data has been communicated or disseminated, except where this proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected (Art. 7, para.
3(c) Legislative Decree
196/2003);
3.
Requests can be addressed informally to the Data Controller, or using the form provided by the Italian Data Protection Authority or by sending an email to the address: amministrazione@carapan.it.
4.
If processing is based on article 6, paragraph 1, letter a) – explicit consent for use – or on article 9, paragraph 2, letter a) – explicit consent for the use of genetic or biometric data regarding health, of data revealing religious or philosophical beliefs or membership with trade unions, or that show racial or ethnic origin or political opinions – the user may withdraw consent at any time without affecting the legality of processing based on consent granted before revocation.
5.
Likewise, should a law be violated, the user may file a complaint to the Italian Data Protection Authority, which is responsible for monitoring the processing of personal data within Italy.
6.
For more detailed information regarding your rights, see Articles 15 and subsequent sections of EU Regulation 2016/679 and Article 7 of Italian Legislative Decree
196/2003.
VI – TRANSFER OF DATA TO NON-EU COUNTRIES
1.
This website may share some data collected using services from outside the European Union.
In particular with Google, Facebook and Microsoft (LinkedIn) via social media plugins and the Google Analytics service.
Transfer is authorised and strictly regulated by Article 45, paragraph 1 of EU Regulation 2016/679, and further consent is therefore not required.
The businesses mentioned above guarantee that they adhere to the Privacy Shield.
2.
Data will never be transferred to other countries that do not respect the conditions set out in Article 45 and onwards of the EU Regulation.
VII
– SECURITY OF DATA PROVIDED
1.
This website processes users’ data lawfully and correctly, by taking appropriate security measures to prevent unauthorised access, disclosure, alteration, or unauthorised destruction of data.
The processing is carried out using IT and/or telematic tools, with organisational methods and logic strictly related to the purposes indicated.
2.
As well as the Data Controller, in some cases, categories of persons in charge with the organisation of the website (administrative, commercial, marketing or legal personnel and system administrators) or external subjects (such as third-party suppliers of technical services, postal service operators, hosting providers, information technology companies and communication agencies) may have access to the data.
VIII
– CHANGES TO THIS DOCUMENT
1.
This document, published at: https://www.carapan.it/web/policies/
is this website’s privacy policy.
2.
It may be subject to changes or updates.
If said modifications or updates are relevant, these will be reported to the users via relative notifications.
3.
Previous versions of the document will still be available on this page.
4.
This document was updated on 05/12/2021 to comply with the relevant regulatory provisions and, in particular, to comply with EU Regulation 2016/679.