Information notice in accordance with the code on the protection of personal data (Italian Legislative Decree no. 196 of 30 June 2003)

Data controller

The personal data controller is ARCA SpA, with registered offices in OSIO SOTTO, Via A. Vespucci, 18 Tax Code and VAT number 00873790166 represented by its legal representative.

Types of data collected

The Personal Data collected by this Application, independently or via third parties, includes: Cookies, Usage Data, name, surname, various types of Data and e-mail address.
Full details of each type of data collected are provided in the dedicated section of this privacy policy, or via specific information notices displayed prior to the collection of that data.
The Personal Data may be freely provided by the User or, in the case of Usage Data, automatically collected during the use of this Application. All Data requested by the Application is mandatory, and failure to provide such could make it impossible for this Application to provide the service. If the Application marks certain Data as optional, Users are free to refrain from providing such Data, without any impact on the availability of the service or its operability. 
Users who have any questions regarding which Data is mandatory are encouraged to contact the Controller.
The purpose of the use of any Cookies – or other tracking tools – by this Application or the owners of third party services used by this Application, unless specified otherwise, is to provide the service requested by the user, as well as any additional purposes described in this document and in the Cookie Policy, if available.
The User accepts responsibility for any third party Personal Data published or shared using this Application, and guarantees that they have the right to provide or distribute such, releasing the Controller from any responsibility in relation to third parties.

Methods and place of processing the collected Data

Methods of processing

The Owner processes Users’ Personal Data while taking appropriate security measures aimed at preventing access to, disclosure of, amendment to or unauthorised destruction of the Personal Data.
Processing is performed using IT and/or electronic tools, applying organisational methods and approaches strictly associated with the specified purposes. In certain cases, as well as the Controller, categories of appointed parties involved in the organisation of the site (administrative, sales, marketing or legal personnel, system administrators) may have access to the Data, as well as external parties (such as third party technical service providers, postal couriers, hosting providers, IT companies, communications companies), appointed as Data Processors by the Controller, if required. An up-to-date list of the Processors can be obtained at any time from the Data Controller.

Place

The Data is processed at the Controllers’ operating offices, and in all other places where the parties involved in the processing are located. Contact the Controller for further information.

Timeframes

The Data is processed for the time required to perform the service requested by the User, or required for the purposes described in this document, and the User can always ask for the Processing to be interrupted or for the Data to be deleted.

Purposes of processing the collected Data

Users’ Data is collected to enable the Controller to provide its services, and also for the following purposes: hosting and backend infrastructure, protection against SPAM, statistics, optimisation and distribution of traffic, to contact the User, to display content from external platforms, manage contacts and send messages.
The types of Personal Data used for each purposes are specified in the specific sections of this document.

Details on Personal Data Processing

The Personal Data is collected for the following purposes and using the following services:
To Contact the User
Contact form (This Application)
By entering their data into the contact form, the User consents to the use of that data to respond to requests for information, quotes, or any other requests specified on top of the form.
Personal data collected: surname, name and various types of Data.
Protection against SPAM
This type of service analyses this Application’s traffic, which potentially contains Users’ Personal Data, in order to filter out traffic, messages and content identified as SPAM.
Akismet (Automattic Inc.)
Akismet is a SPAM protection service provided by Automattic Inc.

Personal data collected: various types of Data, depending on the service privacy policy specifications.

Place of processing: USA – Privacy Policy
Statistics
The services referred to in this section allow the Data Controller to monitor and analyse the traffic data and serve to track User behaviour.
Adobe Analytics (Adobe)
Adobe Analytics is a service provided by Adobe Systems, Inc.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy – Opt Out
Google Analytics (Google Inc.)
Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google uses the Personal Data collected for the purposes of tracking and examining the use of this Application, preparing reports and sharing them with other services developed by Google.
Google may use the Personal Data to contextualise and customise ads from their advertising network.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy – Opt Out
Display content from external platforms
This type of service allows content hosted by external platforms to be viewed directly from the pages of this Application and interacted with.
If a service of this kind is installed, it is possible that, even if Users do not use the service, the latter may collect traffic data relating to the pages on which it is installed.
Google Fonts (Google Inc.)
Google Fonts is a font style display service managed by Google Inc. that allows this Application to integrate such content into its page.
Personal Data collected: Usage data and various types of Data, depending on the privacy policy specifications of the service.
Place of processing: USA – Privacy Policy
Video Vimeo (Vimeo, LLC)
Vimeo is a video content display service managed by Vimeo, LLC that allows this Application to integrate such content into its page.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy
Cookie Policy
This Application uses Cookies. To find out more and for detailed information, please see the Cookie Policy.

Additional information on processing

Defence in legal proceedings

The User’s Personal Data may be used by the Controller in legal proceedings or in the stages prior to such proceedings to defend against abusive use of this Application or the associated services by the User.
The User declares that it is aware that the Controller may be requested to provide the Data at the request of public authorities.

Specific information

At the User’s request, in addition to the information contained in this privacy policy, this Application can provide the User with additional and contextual information regarding specific services, or the collection and processing of Personal Data.

System log and maintenance

For operation and maintenance purposes, this Application, and any third party services used by the latter, may collect system logs, i.e. files that record interactions and that may also contain Personal Data, such as the User’s IP address.

Information not contained in this policy

More information relating to the processing of Personal Data can be requested at any time from the Data Controller using the contact information.

Exercise of rights by Users

The parties to whom the Personal Data relates have the right, at any time, to obtain confirmation from the Data Controller as to whether or not such data exists, to discover its content and origin, to check its accuracy or request to supplement, remove, update or correct it, anonymise it, or block Personal Data processed illegally, as well as to object to its processing in any case, on legitimate grounds. Such requests should be made to the Data Controller.
This Application does not support “Do Not Track” requests.
To find out whether any third parties used support such requests, the User should consult the relevant privacy policy.

Changes to this privacy policy

The Data Controller reserves the right to make changes to this privacy policy at any time, notifying the User on this page. You are therefore invited to check this page regularly, referring to the last modified date specified at the bottom. Should the User not accept the changes made to this privacy policy, they must stop using the Application and may request that the Data Controller removes their Personal Data. Unless otherwise specified, the previous privacy policy will continue to apply to any Personal Data collected up to that point.

Definitions and legal references

Personal Data (or Data)

A piece of personal data is any information relating to a natural person, identified or identifiable, including indirectly, through reference to any other piece of information, including a personal identification number.

Usage Data

This is the information collected automatically by this Application (or by the third party applications used by this Application), including: IP addresses, or domain names of the computers used by the User to connect to this Application, URI (Uniform Resource Identifier) addresses, time of the request, method used to submit the request to the server, the size of the file received in response, the numerical code specifying the server response status (successful, error, etc.), the country of origin, the characteristics of the browser and the operating system used by the visitor, the various time data relating to the visit (e.g. the time spent on each page) and details of the itinerary taken within the Application, with particular reference to the sequence of pages consulted, the parameters relating to the operating system and the User’s IT environment.

User

The individual who uses this Application, who must be the same as the Interested party or be authorised by the latter, and whose Personal Data is processed.

Interested Party

The natural or legal person to whom the Personal Data relates.

Data Processor (or Processor)

The natural or legal person, public administration body or any other organisation, association or body appointed by the Controller to process the Personal Data, according to the provisions of this privacy policy.

Data Controller (or Controller)

The natural or legal person, public administration body or any other organisation, association or body responsible, including together with another controller, for making decisions regarding the purposes and methods of processing personal data and the tools used, including the security profile, in relation to the operation and use of this Application. Unless specified otherwise, the Data Controller is the owner of this Application.

This Application

The hardware or software tool used to collect the User’s Personal Data.

Cookies

Small pieces of data stored on the User’s device.

Legal references

Notice to European Users: this privacy notice has been drafted in compliance with the obligations set out by Art. 10 of Directive no. 95/46/EC, as well as the provisions of Directive 2002/58/EC, as updated by Directive 2009/136/EC on the subject of Cookies.
This privacy notice relates exclusively to this Application.
For any information or requests, please contact our General Management:
ARCA SpA,
registered offices in OSIO SOTTO (BG), Via A. Vespucci, 18 Tel: +39 035 4825111 email: info@arcavasi.it
Tax Code and VAT no. 00873790166
If you would like to see the full text of the Italian Personal Data Protection Code, please visit the official website of the Supervisory Authority www.garanteprivacy.it.