Privacy Policy

PURSUANT TO ART. 13 EU REG. 679/2016 – GDPR

Pursuant to art. 13 of EU Regulation 679/2016 (hereinafter GDPR) relating to the protection of natural persons with regard to the processing of personal data for their free circulation, this information describes the methods of processing of personal data of users who consult the COMI website CONDOR SpA. This information does not concern other sites, pages or online services accessible via hypertext links possibly published on the sites, but referring to resources external to the COMI CONDOR SpA domain.

Data controller

The data controller is COMI CONDOR SpA (hereinafter Comi Condor) with registered office in via Po 27, 27010 Santa Cristina e Bissone (PV), and operational headquarters in via A. Volta 6, 20019 Settimo Milanese (MI).

Legal bases applied

The data processing takes place in compliance with the following legal principles (art. 6, par. 1, letter c), f):

c): the processing is necessary to fulfill a legal obligation to which the data controller is subject;
f) the processing is necessary for the pursuit of the legitimate interest of the owner or third parties to whom the data are communicated .

Purpose of data processing

Your personal data will be processed for the following purposes:

guarantee compliance with the obligations established by laws, regulations, or community legislation or imposed by the authorities;
internal statistical purposes;
possible exercise of the owner's rights in court and management of any disputes.

Types of data processed

Browsing data.

The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes the IP addresses or domain names of the computers and terminals used by users, the addresses in URI/URL ( Uniform Resource Identifier /Locator) notation of the requested resources, the time of the request, the method used in the submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment.

These data, necessary for the use of web services, are also processed for the purpose of:

obtain statistical information on the use of services (number of visitors per daily time slot, geographical areas of origin, etc.);
check the correct functioning of the services offered.

The navigation data does not persist for more than seven days (except for any need for the investigation of crimes by the judicial authority).

Data communicated by the user.

The optional, explicit and voluntary sending of messages to the contact addresses of Comi Condor , the messages sent by users to institutional profiles/pages on social media, as well as the compilation and forwarding of the forms on the site, entail the acquisition of the sender's contact details, necessary to respond, as well as all personal data included in the communications.

Cookies.

No cookies are used for user profiling or any other type of tracking. The only processing carried out concerns the production of statistics with pseudonymized data.
Technical session cookies (non-persistent) are used, strictly limited to what is necessary for safe and efficient navigation of the sites.
Regarding the processing of personal data carried out by the managers of the Social Media platforms used by Comi Condor, please refer to the information provided by them through their respective Privacy Policies .

Recipients of the data

Personal data may be transferred and processed by other subjects in the capacity of designated subjects, managers, or independent data controllers, in order to comply with pre-contractual, contractual, legal obligations or for legitimate interest. Categories of recipients can be, for example:

subjects designated to process data by the data controller and appointed pursuant to articles. 29 and 32 of the GDPR;
subjects delegated and/or appointed by the owner to carry out ordinary/extraordinary maintenance activities on the website;
legal consultants for resolutions of any legal and contractual problems;
authorities, public administrations and supervisory and control bodies for their institutional purposes;
may possibly be made available to third parties for the defense of rights, as well as in fulfillment of the obligations established by law or regulations and upon request by the competent authorities.

Data transfer abroad

The data provided and collected by the data controller are not subject to public dissemination or profiling.
The data can be transferred to countries within the EU and outside the EU; these transfers can be carried out by organizations and/or companies receiving the data as specified above under "Data recipients".

Data retention times

We inform you that, in compliance with the principles of lawfulness, limitation of purposes and minimization of data, pursuant to art. 5 of the GDPR, the retention period of your personal data is established for a period of time not exceeding the completion of the services provided.

Rights of interested parties

In order to fulfill the obligations established by the Regulation in question, Comi Condor reminds you of the applicable rights of interested parties.

Art. 15 GDPR right of access to data

The interested party has the right to request confirmation of the existence or otherwise of the processing of their personal data, to obtain access to their personal data and to certain information specifically indicated in the art. 15 of the GDPR. The interested party has the right to obtain:
indications regarding the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, the retention period.

Art. 16 GDPR right to rectify data

The interested party has the right to obtain from the data controller the rectification of inaccurate personal data concerning him or her without unjustified delay. Taking into account the purposes of the processing, the interested party has the right to obtain the integration of incomplete personal data, including by providing a supplementary declaration.

Art. 17 GDPR right to delete data

The interested party has the right to obtain from the data controller the deletion of personal data concerning him or her without unjustified delay and the data controller has the obligation to delete the personal data without unjustified delay, unless there are reasons impeding the exercise. of the aforementioned right.

Art. 18 GDPR right to limit data processing

The interested party has the right to obtain from the data controller the limitation of the processing of personal data or revoke the previous consent given. The revocation of consent will not affect the lawfulness of the processing carried out previously.

Art. 20 GDPR right to data portability

If the processing is based on consent or on a contract and carried out by automated means, the interested party has the right to receive the personal data concerning him or her provided to a data controller in a structured, commonly used and machine-readable format. and has the right to transmit such data to another data controller without impediments from the data controller to whom he provided them.

Art. 21 GDPR right to object

The interested party has the right to object at any time, for reasons related to his particular situation, to the processing of personal data based on the legitimate interest of the owner or on his consent, including profiling, unless the owner demonstrates the existence of compelling legitimate reasons to proceed with the processing which prevail over the interests, rights and freedoms of the interested party or for the assessment, exercise or defense of a right in court.

Art. 22 GDPR automated decision-making relating to natural persons, including profiling

The interested party has the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or which similarly significantly affects him or her.
Please note that the data controller does not use automated decision-making processes including profiling.

Art. 77 GDPR right to lodge a complaint with the supervisory authority

Without prejudice to any other administrative or jurisdictional appeal, the interested party who believes that the processing concerning him or her violates this Regulation has the right to lodge a complaint with a supervisory authority, in particular in the member state in which he/she habitually resides, works or the place where the alleged violation occurred.
( https://www.garanteprivacy.it/ ).

How to exercise your rights

If you request information relating to your data, the data controller will respond as soon as possible and in any case no later than 30 days from the request.
The exercise of rights by the interested party is free pursuant to art. 12 GDPR. However, in the case of requests that are manifestly unfounded or excessive also due to their repetitiveness, the data controller may charge the interested party a reasonable fee in light of the administrative costs incurred to manage his/her case, or deny satisfaction of his/her request.
The email address to easily exercise your rights is: privacy@comicondor. com.

If it is not possible for the interested party to send this request via e-mail, it may be sent by ordinary mail via registered mail to the company's registered office.

Settimo Milanese, 12/03/2024