Computer systems and software procedures which are used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of the Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which, by their very nature, could allow users to be identified through processing and association with data held by third parties.
This category of data includes, for example, IP addresses or domain names of computers or other tools used by users who connect to the site, the addresses in URI / URL (Uniform Resource Identifier / locator) notation of the requested resources, time of the request, method used in submitting the request to the server, size of the file obtained in response, numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters related to the operating system and the user’s computer environment. These data, necessary for the use of the website, are also processed to obtain anonymous statistical information on the use of the site and to check its correct functioning; these data are deleted immediately after processing (except for the data that must be kept for legal obligations including the possible need to ascertain crime by the competent authorities).
We inform you that:
a) the website aku.it does not use profiling cookies;
b) the website aku.it also allows the sending of “third-party” cookies;
Please refer to the extended information on cookies at the footer of the home page for further information.
The data of Navigation and Cookies are common personal data, which are necessary for the use of the website and are processed for the following purposes:
The optional, explicit and voluntary sending of messages to contact addresses of the Data Controller, as well as the completion and submission of contact forms or other services on the website www.aku.it, entail the acquisition of the sender’s contact details, necessary for a reply, as well as all the personal data contained in the communications including also sensitive data (previously in force under Article 4, letter d), first paragraph of Legislative Decree 196/03), or, in any case, special categories of personal data (pursuant to Article 9 of Regulation 2016/679). The sections of the site prepared for the particular services offered/form are subject, where appropriate, to the consent of the data subject.
The data provided voluntarily by the user are processed for the following purposes:
a) to send informative material or other communications after completion by the user of the appropriate forms or contact forms present on the website, also for purposes of proposition of applications and search for personnel by the Controller, or after the sending of e-mails by the user to the addresses indicated on the site and for related and further purposes of processing of the request;
b) for the offer of the service requested after the completion by the user of the specific form or contact form present on the website, including Marketing and Press service (press room access Aku), sending newsletters and e-commerce service (performance of a contract or execution of a pre-contractual measures requested by user, e.g. preparation of an offer);
c) for marketing purposes, commerce, market research, profiling and for sending advertising material, subject to your consent.
This site deals with the data given mainly on the basis of the consent of users / surfers.
By using and consulting the site or by adhering to the service proposals contained in the different parts of the site, the user approves this information and gives his consent to the processing of personal data in relation to the methods and purposes described here.
Through communication forms or service request forms, explicit consent is collected regarding the purpose of the service offered.
With reference to the processing of personal data in order to the e-commerce service, the following is specified on legal basis and purpose of of the processing.
Legal basis: EU Regulation no. 679/2016
A) without your express consent (Article 6 letters b), c) and e) of the EU Regulation), for the following purposes:
In particular, your data will be processed for purposes related to the implementation of the following obligations, related to legislative or contractual obligations:
B) Only subject to your specific and distinct consent (Article 7 of the EU Regulation), for the following commercial and/or marketing purposes:
The Data Controller, and each of the possible categories of Processor as indicated below, will manage and store personal data collected through the use of the site and its various functions that can be activated at the user’s request with automated and / or paper instruments, for the time strictly necessary to achieve the purposes for which they have been collected or voluntarily communicated by the user and as better specified below.
The processing of personal data will be carried out in such a way as to guarantee adequate security and confidentiality and to prevent unauthorized access or use of personal data. Therefore, personal data will be processed and stored in full compliance with the principles of necessity, data minimization and storage limitation, through the adoption of technical and organizational measures appropriate to the risk level of processing and for a period of time not superior to the achievement of the purposes for which they are processed, in any case for the period prescribed by law.
In particular, the Data Controller will retain the personal data provided as follows:
The subjects or categories of subjects to whom your personal data may be disclosed or made known and who may process them for the purposes above are:
Without the need for an expressed consent (Article 6 letter b) and c) of the EU Regulation), the Data Controller may communicate your data for the purposes referred to in paragraph 4.A) to supervisory bodies, judicial authorities , to insurance companies for the provision of insurance services, as well as to those subjects to whom the communication is mandatory by law for the accomplishment of the purposes indicated above. These subjects will process the data as independent data controllers. During and after browsing, your data may be disclosed to third parties, in particular to:
To obtain more information about the list of subjects to whom the above data will be communicated, please contact the Data Controller. There is absolute prohibition on the dissemination of common and sensitive data (and in any case data pursuant to Article 9 of Regulation 2016/679).
The data processed are located at the headquarters of the Data Controller or at the provider within the EU. In any case it is understood that the Data Controller, if necessary, will have the right to move data even to countries outside the European Union. In this case, the Data Controller hereby ensures that the transfer of data to countries outside the European Union will take place in accordance with the applicable legal provisions, subject to the stipulation of the contractual clauses and standard verifications envisaged by the European Commission, in compliance with the required guarantees.
The communication of your common and sensitive personal data, and in any case of data pursuant to art. 9 of Regulation 2016/679, is optional; however, any refusal to communicate the aforementioned data or revocation of the subsequent processing may make it impossible for the Data Controller to provide certain services and/or process the user’s/data subject’s requests and/or to conclude the contract and therefore to buy throught e-shop and/or compromise the browsing experience on the site. The user is therefore entitled to refuse consent or revoke the consent provided at any time (by sending emails to the address of the controller indicated above or the browser-specific settings for cookies or via the links indicated for cookies of third-parties).
As a data subject, you have the rights set forth in art. 15 of the EU Regulation as below and precisely:
1. you have the right to obtain from the Data Controller confirmation that personal data processing concerning you is or is not in progress, and in this case, to obtain access to personal data and the following information:
a) processing purposes;
b) personal data categories in question;
c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular to third countries or international organizations;
d) when possible, the retention period of the personal data provided or, if this is not possible, the criteria used to determine this period;
e) the existence of the right of the data subject to request the Data Controller to rectify or erase personal data or limit the processing of personal data concerning him/her or to object their processing;
f) the right to lodge a complaint with a supervisory authority (the Guarantor for the protection of personal data www.garanteprivacy.it);
g) if the data are not collected from the data subject, all available information on their origin;
h) existence of an automated decision-making process, including profiling pursuant to art. 22, paragraphs 1 and 4 of the EU Regulation, and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of the processing for the data subject.
2. If your personal data is transferred to a third country or to an international organization, you have the right to be informed of the existence of adequate guarantees pursuant to art. 46 of the EU Regulation concerning the transfer.
3. The Data Controller will provide you with a copy of your personal data being processed if you request it. In case you request further copies, the Data Controller may charge you a reasonable fee based on administrative costs.
If you submit the request by electronic means, and unless otherwise indicated, the information will be provided in an electronic format in common use.
4. The right to obtain a copy referred to in paragraph 3 must not adversely affect the rights and freedom of others. Moreover, where applicable, you can enjoy the rights referred to in articles 16 to 22 of the EU Regulation and precisely have:
You also have the right to revoke at any time any consent already given without prejudice to the lawfulness of the processing based on the consent given before the revocation.
For requests to exercise your rights, each data subject can contact the Data Controller at the above mentioned addresses, in particular by sending:
What is offered by the Data Controller and subject of the relationship with you does not provide for the intentional acquisition of personal information relating to minors. In the event that information on minors has been unintentionally registered, the Data Controller will delete them promptly at the request of the data subject.
It may happen that the writer is not the Data Controller to which you have given your personal data, but appears to be joint-controller or processor and therefore your data have come to the writer secondly due to a contract that regulates the parties. In this case it is specified that the writer will do everything possible to make sure that you have been informed and gave consent to the processing. You can ask the writer at any time for the source of acquisition of your data.
This information is in force since 25.05.18