Browsing information pursuant to art. 13 of EU Regulation 2016/679
Reference regulations
- EU Regulation No. 679 of 27 April 2016 on the protection of individuals about the processing of personal data and on the free movement of such data (hereinafter referred to as the “EU Regulation”)
- Legislative Decree no. 196 of 30 June 2003 (hereinafter referred to as the “Privacy Code”), as amended by Legislative Decree No. 101 of 10 August 2018
- Recommendation No. 2 of May 17, 2001, on the minimum requirements for online data collection within the European Union, adopted by the European Data Protection Authorities gathered in the Working Party established under Article 29 of Directive No. 95/46/EC (hereinafter referred to as the “Recommendation of the Working Party pursuant to Article 29”)
Var Group S.p.A. (hereinafter also referred to as the “Company”), a joint stock company belonging to the SeSa S.p.A. business group, with registered office at Via Piovola 138, Empoli (FI), VAT No. 03301640482, informs users about the methods and conditions applied by the Company to the processing of personal data.
This Privacy Notice is provided specifically in relation to the personal data of users who consult and use the Company’s website, corresponding to the following domain: www.vargroup.it
The Company acts as the Data Controller, meaning “the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.”
In practice, the processing of personal data may be carried out by individuals specifically authorized to perform such processing operations and duly instructed by the Company for this purpose.
Pursuant to applicable data protection legislation, users who visit and use the Company’s website are deemed data subjects, that is, the natural persons to whom the personal data being processed refer.
Please note that this Privacy Notice does not apply to other websites that users may access through links, including social media buttons, available on the Company’s website.
In particular, Social Buttons are digital buttons or direct links to social network platforms (such as, for example, LinkedIn, Facebook, Twitter, or YouTube) configured within each button. By clicking on these links, users may access the Company’s social media accounts. The social network operators to which the Social Buttons refer act as independent Data Controllers. Consequently, any information regarding the methods by which these controllers process users’ personal data can be found in the respective privacy notices available on the relevant social network platforms.
1. Personal data subject to processing
In connection with the interaction with this website, the Company may process the following categories of users’ personal data:
a. Browsing data: The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified data subjects; however, by its very nature, it could, through processing and association with data held by third parties, allow users to be identified.
This category of personal data includes IP addresses or domain names of the computers used by users who connect to the site, Uniform Resource Identifier (URI) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server’s response (successful, error, etc.), and other parameters related to the user’s operating system and IT environment.
Such personal data is used solely to obtain anonymous statistical information regarding the use of the website and to verify its proper functioning.
Browsing data is retained for no longer than twelve months, except in cases where data must be used to ascertain offences by judicial authorities.
b. Personal data provided voluntarily: The optional, explicit, and voluntary submission of personal data to the Company through the completion of forms on the website entails the acquisition of the user’s email address as well as any other personal data requested by the Company in order to respond to specific requests.
Concerning the processing of personal data provided by completing the contact form on this website, please refer to the relevant Contact Form Privacy Notice.
2. Purpose and legal basis for the processing of personal data
Concerning the personal data referred to in point 1, letter a) of this notice, users’ personal data are processed automatically by the Company to enable website navigation. In this case, the processing is based on a legal obligation to which the Company is subject, as well as on the Company’s legitimate interest in ensuring the proper functioning and security of the website. Therefore, the explicit consent of users is not required.
With regard to the personal data referred to in point 1, letter b) of this notice, processing is carried out in order to provide users with information or assistance. In this case, the processing is based on the execution of specific user requests and on the fulfilment of pre-contractual measures. Therefore, the explicit consent of users is not required.
3. Nature of the provision of personal data
Without prejudice to what is specified for browsing data, the provision of which is mandatory as it is necessary for navigation of the Company’s website, users are free to provide or withhold personal data when requesting information or assistance from the Company.
With reference to the processing of personal data provided by completing the contact form on this website, please refer to the relevant Contact Form Privacy Notice.
4. Modalities and duration of processing of personal data
The processing of personal data is carried out by individuals authorized and specifically instructed by the Company to perform such operations.
User data are processed through automated tools, particularly in connection with website access logs.
With regard to the processing of personal data provided by completing the contact form on this website, please refer to the relevant Contact Form Privacy Notice.
In all cases, personal data are processed in full compliance with the principles of security, confidentiality, accuracy, timeliness, and relevance with respect to the purposes outlined in this notice.
Browsing data, as mentioned in point 1, letter a), are retained for no longer than twelve months, except when data must be used to investigate offences by judicial authorities. The processing of personal data continues for the period strictly necessary to achieve the purposes for which the data were collected or in accordance with applicable legal time limits.
The Company has also implemented specific security measures to prevent the loss, unlawful or improper use of personal data, and unauthorized access
5. Recipients of personal data
Limited to the purposes identified in this policy, your personal data may be communicated in Italy or abroad, within the territory of the European Union (EU) or European Economic Area (EEA), for the compliance with legal obligations. For more information on the recipients of users' personal data provided by virtue of the To fill in the contact form located on this website, please refer to the relevant Contact Form Privacy Notice.
Personal data will not be transferred outside the territory of the European Union (EU) or European Economic Area (EEA).
Personal data will not be disseminated and therefore will not be disclosed to the public or to an indefinite number of subjects.
6. Rights pursuant to art. 15, 16, 17, 18, 20 and 21 of EU Regulation 2016/679
Users, in their capacity as data subjects, may exercise the right of access to personal data as provided for in Article 15 of the EU Regulation, as well as the rights set out in Articles 16, 17, 18, 20, and 21 of the same Regulation.
These include the rights to rectification, erasure, restriction of processing, data portability (where applicable), and objection to the processing of personal data.
The aforementioned rights can be exercised by writing to the following address: [email protected]. If the Company does not provide feedback within the time limits provided by the legislation or the response to the exercise of rights is not suitable, users may complain with the Guarantor for the Protection of Personal Data.
Here are the coordinates:
Italian Data Protection Authority
Fax: (+39) 06.69677.3785
Telephone switchboard: (+39) 06.69677.1
Email: [email protected]
7. Personal Data Protection Officer
It should be noted that SeSa S.p.A., a company that acts as a holding company in the SeSa S.p.A. business group to which Var Group S.p.A. belongs, has appointed, after assessing specialist knowledge of the provisions on the protection of personal data, the Personal Data Protection Officer. The Data Protection Officer monitors compliance with the legislation regarding the processing of personal data and provides the necessary advice.
Furthermore, where necessary, the Data Protection Officer cooperates with the Italian Data Protection Authority.
The relevant contact details are indicated below:
E-mail:[email protected]