Privacy policy
Information notice pursuant to and for the effects of Articles 13 and onwards of EU Regulation no. 679/2016 of April 27, 2016 (GDPR - General Data Protection Regulation) concerning the protection of individuals with regard to the processing of personal data and the free movement of such data (General Data Protection Regulation).
By accessing the pages of the website and/or registering for our services, users voluntarily provide their personal data to PARALUPI SRLS, the data controller. The personal data provided will be processed in compliance with the principles of personal data protection established by EU Regulation no. 679/2016 and other relevant legislation.
Data Controller:
The Data Controller is PARALUPI SRLS (hereinafter also referred to as the "Data Controller") and can be contacted through written communication to: Lecce (LE), 73100 – Via Tintoretto, or via email at [email protected].
Nature of the processed data:
The processing involves the use and navigation data, to the extent that the IT systems and software procedures used in the operation of this website acquire information whose transmission is implicit in the use of Internet communication protocols. These are data that are not collected to be associated with identified data subjects but which, through processing and association with data held by third parties, could allow the identification of users (e.g., IP addresses, domain names of computers used by users who connect to the site, URI addresses of the requested resources, the time of the request, the method used to submit the request to the server, and other parameters relating to the user's operating system, browser, and IT devices). Among the technologies used to collect and store information, cookies play a particularly relevant and autonomous role, and users/interested parties are referred to their specific information (indicate the link to the cookie policy).
Voluntarily provided data are subject to processing, such as those provided during registration, subscription to our site, and/or contact, and/or voluntarily made public, including personal identification data such as name, surname, address, email, telephone number, fax, content of any messages, as well as data of an economic nature that are strictly necessary for the execution of existing or future contractual relationships.
No so-called special, sensitive, or judicial data are subject to processing, which might fall under those indicated in Art. 4, letters d) and e) of the privacy code and Art. 9 of EU Regulation 2016/679, the processing of which, moreover, is prohibited by Art. 9, paragraph 1 of the cited EU Regulation, except for specific and strict exceptions provided by the same article.
Purpose and legal basis of the processing:
The personal data collected with the registration or subscription to our website are processed in order to allow access to products, services, and content reserved for registered users. The legal basis for processing the data obtained is represented, in accordance with Art. 6 of EU Regulation 2016/679, by the following conditions:
The data subject has given consent to the processing of his or her personal data;
The processing is necessary for the performance of a contract to which the data subject is a party or for the performance of pre-contractual measures taken at the data subject's request;
The processing is necessary to comply with a legal obligation to which the data controller is subject;
The processing is necessary for the pursuit of the legitimate interest of the data controller or third parties (see also recital no. 47 of the GDPR), provided that the interests or fundamental rights and freedoms of the data subject do not prevail, especially if the data subject is a minor. In this latter case, it is specified that the legitimate interests of the Data Controller are the defense of its own rights, the need for fraud prevention, and/or the development of promotional activities on services/products for direct marketing purposes.
In case the user/interested party has given consent at the time of activation of the service or expresses it later and until its revocation, their personal data may be processed by PARALUPI SRLS to:
Allow access to products, services, and content;
Send, if users have given consent at the time of activation of the service or express it later, and until its revocation, commercial communications about our own products and services or those of third-party companies, also through automated means, for direct sales purposes, as well as for market research and verification of user satisfaction;
Conduct, if users have given consent at the time of activation of the service or express it later, and until its revocation, also through electronic tools, analyses of specific behaviors and consumption habits in order to improve the services provided and direct commercial proposals of interest to the user, also offering aggregated summary data of openings and clicks obtained through a tracking system using "cookies";
Communicate and transfer user data to third parties, if they have given consent at the time of activation of the service or express it later, and until its revocation, for sending commercial communications about products and services of third-party companies, also through automated means, for direct sales purposes, as well as for market research.
PARALUPI SRLS will also use personal data for administrative and accounting purposes and for the fulfillment of contractual obligations towards customers.
Processing methods:
The personal data submitted through the registration/subscription form may be processed by PARALUPI SRLS using automated and paper-based tools. PARALUPI SRLS may also process the aforementioned data in aggregate form, in compliance with the measures prescribed by the supervisory authority and by virtue of the specific exemption from consent provided for by the same, for electronic analyses and processing (e.g., classification of the entire clientele into homogeneous categories based on levels of services, consumption, expenses, etc.) aimed at periodically monitoring the development and economic trends of PARALUPI SRLS's activities, guiding the related industrial and commercial processes, improving services, as well as designing and implementing commercial communication campaigns.
These are therefore legitimate and necessary treatments to ensure a service that better meets the expectations of users/customers. Specific security measures are observed by the Data Controller to prevent the loss of data, illegal or incorrect use, and unauthorized access.
The processing related to the web services of this website takes place both at the aforementioned headquarters of PARALUPI SRLS and is carried out only by authorized technical personnel, and at the offices of the Software House Company to which we refer for the management of the site.
In any case, personal data is recorded and stored on electronic databases located in Italy, in countries belonging to the European Economic Area (EEA), and in third countries that guarantee an adequate level of data protection.
Obligation or faculty to provide data:
The provision of data is optional. However, failure to provide data deemed mandatory will prevent proper registration on the website, and consequently, the possibility to use the services reserved for registered users, and, in the case of a purchase, the acceptance by PARALUPI SRLS of the order proposal and the execution of the related contract.
Scope of knowledge of your data:
The following categories of subjects may become aware of your data, as external processors or internal processors authorized by the Data Controller, appointed by the Data Controller:
Internal staff responsible for administrative and accounting activities;
Internal staff responsible for contract execution;
Administrators, accountants, and external consultants for accounting and administrative activities.
The processing of personal data provided by users can also be carried out by companies, entities, or consortia appointed as data processors under Article 28 of the aforementioned EU Regulation, which, on behalf of PARALUPI SRLS, provide specific processing services or related, instrumental, or support activities (e.g., software developers and website managers, IT companies, network providers, electronic communication services, IT and telematics services for data storage and management, freight forwarders, transport companies; or consultants, lawyers, or employees of the company, tax consultants of the company, persons performing technical and organizational tasks; credit agencies, banks, financial companies, insurance companies; companies or individuals providing customer support; reselling companies of our products), to the extent strictly necessary to carry out their assignment in our or their organization, subject to our letter of assignment that imposes the duty of confidentiality and security.
Communication and dissemination:
The personal data provided by users will not be disseminated by us, by which term is meant providing it to unspecified subjects in any way, including by making it available or consulting it. However, they may be communicated by us, i.e., giving it knowledge to one or more specified and qualified subjects, in the following terms:
To participating or affiliated companies;
To subjects who have the right to access personal data by virtue of legal provisions, regulations, or community regulations;
To subjects to whom the communication is provided by law or by regulation, or by public subjects for the performance of their institutional functions.
Rights of the data subject:
The user/interested party may exercise at any time the rights provided for in Articles 15-22 of the GDPR by contacting the Data Controller of this website.
Below is an extract from Article 15 of EU Regulation 2016/679 regarding your right of access to us to remind you that you can obtain the following information:
"The data subject has the right to obtain from the data controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information: a) the purposes of the processing; b) the categories of personal data concerned; c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations; d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; e) the existence of the right to request from the data controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing; f) the right to lodge a complaint with a supervisory authority; g) where the personal data are not collected from the data subject, any available information as to their source."
Moreover, the data subject has the right:
To obtain from the data controller the rectification of inaccurate personal data concerning him or her without undue delay, pursuant to Article 16 of EU Regulation 2016/679;
To obtain the erasure of personal data concerning him or her without undue delay if one of the reasons listed in Article 17 of EU Regulation 2016/679 exists;
To obtain the restriction of processing where one of the hypotheses described in Article 18 of EU Regulation 2016/679 occurs;
To object at any time to the processing of personal data concerning him or her in the cases referred to in Article 21 of EU Regulation 2016/679;
To receive personal data concerning him or her in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, in the cases provided for by Article 20 of EU Regulation 2016/679;
To withdraw consent at any time, if processing is exclusively based on Article 6(1)(a), or Article 9(2)(a) of EU Regulation 2016/679, without prejudice to the lawfulness of processing based on consent given before the withdrawal;
To lodge a complaint, pursuant to Article 77 of EU Regulation 2016/679, with the competent supervisory authority, the Garante Privacy, specifically in the EU Member State where he or she habitually resides, works, or in the place where the alleged violation occurred, as well as the ordinary right to bring a legal action, pursuant to Article 79 of EU Regulation 2016/679, if he or she believes that the rights granted to him or her by the aforementioned EU Regulation have been violated as a result of processing.
Data retention period:
The retention period for the personal data described above complies with the current legal provisions: in compliance with the principles of minimization, proportionality, and necessity, the data will not be stored for longer periods than necessary to achieve the aforementioned purposes and, therefore, the service offered or specific legal provisions (e.g., our legal system requires a period of at least 10 years for the conservation of administrative business documents).
In any case, the company will promptly proceed to the safe erasure or irreversible anonymization of data when the retention of personal data is no longer justified.
Additional information:
This information may be subject to changes. In the event of substantial changes to the processing of personal data by the Data Controller or if the latter intends to process the personal data for a purpose other than that for which they were collected, the Data Controller will be required to inform and notify the Data Subjects again in advance.
By accessing the pages of the website and/or registering for our services, users voluntarily provide their personal data to PARALUPI SRLS, the data controller. The personal data provided will be processed in compliance with the principles of personal data protection established by EU Regulation no. 679/2016 and other relevant legislation.
Data Controller:
The Data Controller is PARALUPI SRLS (hereinafter also referred to as the "Data Controller") and can be contacted through written communication to: Lecce (LE), 73100 – Via Tintoretto, or via email at [email protected].
Nature of the processed data:
The processing involves the use and navigation data, to the extent that the IT systems and software procedures used in the operation of this website acquire information whose transmission is implicit in the use of Internet communication protocols. These are data that are not collected to be associated with identified data subjects but which, through processing and association with data held by third parties, could allow the identification of users (e.g., IP addresses, domain names of computers used by users who connect to the site, URI addresses of the requested resources, the time of the request, the method used to submit the request to the server, and other parameters relating to the user's operating system, browser, and IT devices). Among the technologies used to collect and store information, cookies play a particularly relevant and autonomous role, and users/interested parties are referred to their specific information (indicate the link to the cookie policy).
Voluntarily provided data are subject to processing, such as those provided during registration, subscription to our site, and/or contact, and/or voluntarily made public, including personal identification data such as name, surname, address, email, telephone number, fax, content of any messages, as well as data of an economic nature that are strictly necessary for the execution of existing or future contractual relationships.
No so-called special, sensitive, or judicial data are subject to processing, which might fall under those indicated in Art. 4, letters d) and e) of the privacy code and Art. 9 of EU Regulation 2016/679, the processing of which, moreover, is prohibited by Art. 9, paragraph 1 of the cited EU Regulation, except for specific and strict exceptions provided by the same article.
Purpose and legal basis of the processing:
The personal data collected with the registration or subscription to our website are processed in order to allow access to products, services, and content reserved for registered users. The legal basis for processing the data obtained is represented, in accordance with Art. 6 of EU Regulation 2016/679, by the following conditions:
The data subject has given consent to the processing of his or her personal data;
The processing is necessary for the performance of a contract to which the data subject is a party or for the performance of pre-contractual measures taken at the data subject's request;
The processing is necessary to comply with a legal obligation to which the data controller is subject;
The processing is necessary for the pursuit of the legitimate interest of the data controller or third parties (see also recital no. 47 of the GDPR), provided that the interests or fundamental rights and freedoms of the data subject do not prevail, especially if the data subject is a minor. In this latter case, it is specified that the legitimate interests of the Data Controller are the defense of its own rights, the need for fraud prevention, and/or the development of promotional activities on services/products for direct marketing purposes.
In case the user/interested party has given consent at the time of activation of the service or expresses it later and until its revocation, their personal data may be processed by PARALUPI SRLS to:
Allow access to products, services, and content;
Send, if users have given consent at the time of activation of the service or express it later, and until its revocation, commercial communications about our own products and services or those of third-party companies, also through automated means, for direct sales purposes, as well as for market research and verification of user satisfaction;
Conduct, if users have given consent at the time of activation of the service or express it later, and until its revocation, also through electronic tools, analyses of specific behaviors and consumption habits in order to improve the services provided and direct commercial proposals of interest to the user, also offering aggregated summary data of openings and clicks obtained through a tracking system using "cookies";
Communicate and transfer user data to third parties, if they have given consent at the time of activation of the service or express it later, and until its revocation, for sending commercial communications about products and services of third-party companies, also through automated means, for direct sales purposes, as well as for market research.
PARALUPI SRLS will also use personal data for administrative and accounting purposes and for the fulfillment of contractual obligations towards customers.
Processing methods:
The personal data submitted through the registration/subscription form may be processed by PARALUPI SRLS using automated and paper-based tools. PARALUPI SRLS may also process the aforementioned data in aggregate form, in compliance with the measures prescribed by the supervisory authority and by virtue of the specific exemption from consent provided for by the same, for electronic analyses and processing (e.g., classification of the entire clientele into homogeneous categories based on levels of services, consumption, expenses, etc.) aimed at periodically monitoring the development and economic trends of PARALUPI SRLS's activities, guiding the related industrial and commercial processes, improving services, as well as designing and implementing commercial communication campaigns.
These are therefore legitimate and necessary treatments to ensure a service that better meets the expectations of users/customers. Specific security measures are observed by the Data Controller to prevent the loss of data, illegal or incorrect use, and unauthorized access.
The processing related to the web services of this website takes place both at the aforementioned headquarters of PARALUPI SRLS and is carried out only by authorized technical personnel, and at the offices of the Software House Company to which we refer for the management of the site.
In any case, personal data is recorded and stored on electronic databases located in Italy, in countries belonging to the European Economic Area (EEA), and in third countries that guarantee an adequate level of data protection.
Obligation or faculty to provide data:
The provision of data is optional. However, failure to provide data deemed mandatory will prevent proper registration on the website, and consequently, the possibility to use the services reserved for registered users, and, in the case of a purchase, the acceptance by PARALUPI SRLS of the order proposal and the execution of the related contract.
Scope of knowledge of your data:
The following categories of subjects may become aware of your data, as external processors or internal processors authorized by the Data Controller, appointed by the Data Controller:
Internal staff responsible for administrative and accounting activities;
Internal staff responsible for contract execution;
Administrators, accountants, and external consultants for accounting and administrative activities.
The processing of personal data provided by users can also be carried out by companies, entities, or consortia appointed as data processors under Article 28 of the aforementioned EU Regulation, which, on behalf of PARALUPI SRLS, provide specific processing services or related, instrumental, or support activities (e.g., software developers and website managers, IT companies, network providers, electronic communication services, IT and telematics services for data storage and management, freight forwarders, transport companies; or consultants, lawyers, or employees of the company, tax consultants of the company, persons performing technical and organizational tasks; credit agencies, banks, financial companies, insurance companies; companies or individuals providing customer support; reselling companies of our products), to the extent strictly necessary to carry out their assignment in our or their organization, subject to our letter of assignment that imposes the duty of confidentiality and security.
Communication and dissemination:
The personal data provided by users will not be disseminated by us, by which term is meant providing it to unspecified subjects in any way, including by making it available or consulting it. However, they may be communicated by us, i.e., giving it knowledge to one or more specified and qualified subjects, in the following terms:
To participating or affiliated companies;
To subjects who have the right to access personal data by virtue of legal provisions, regulations, or community regulations;
To subjects to whom the communication is provided by law or by regulation, or by public subjects for the performance of their institutional functions.
Rights of the data subject:
The user/interested party may exercise at any time the rights provided for in Articles 15-22 of the GDPR by contacting the Data Controller of this website.
Below is an extract from Article 15 of EU Regulation 2016/679 regarding your right of access to us to remind you that you can obtain the following information:
"The data subject has the right to obtain from the data controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information: a) the purposes of the processing; b) the categories of personal data concerned; c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations; d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; e) the existence of the right to request from the data controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing; f) the right to lodge a complaint with a supervisory authority; g) where the personal data are not collected from the data subject, any available information as to their source."
Moreover, the data subject has the right:
To obtain from the data controller the rectification of inaccurate personal data concerning him or her without undue delay, pursuant to Article 16 of EU Regulation 2016/679;
To obtain the erasure of personal data concerning him or her without undue delay if one of the reasons listed in Article 17 of EU Regulation 2016/679 exists;
To obtain the restriction of processing where one of the hypotheses described in Article 18 of EU Regulation 2016/679 occurs;
To object at any time to the processing of personal data concerning him or her in the cases referred to in Article 21 of EU Regulation 2016/679;
To receive personal data concerning him or her in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, in the cases provided for by Article 20 of EU Regulation 2016/679;
To withdraw consent at any time, if processing is exclusively based on Article 6(1)(a), or Article 9(2)(a) of EU Regulation 2016/679, without prejudice to the lawfulness of processing based on consent given before the withdrawal;
To lodge a complaint, pursuant to Article 77 of EU Regulation 2016/679, with the competent supervisory authority, the Garante Privacy, specifically in the EU Member State where he or she habitually resides, works, or in the place where the alleged violation occurred, as well as the ordinary right to bring a legal action, pursuant to Article 79 of EU Regulation 2016/679, if he or she believes that the rights granted to him or her by the aforementioned EU Regulation have been violated as a result of processing.
Data retention period:
The retention period for the personal data described above complies with the current legal provisions: in compliance with the principles of minimization, proportionality, and necessity, the data will not be stored for longer periods than necessary to achieve the aforementioned purposes and, therefore, the service offered or specific legal provisions (e.g., our legal system requires a period of at least 10 years for the conservation of administrative business documents).
In any case, the company will promptly proceed to the safe erasure or irreversible anonymization of data when the retention of personal data is no longer justified.
Additional information:
This information may be subject to changes. In the event of substantial changes to the processing of personal data by the Data Controller or if the latter intends to process the personal data for a purpose other than that for which they were collected, the Data Controller will be required to inform and notify the Data Subjects again in advance.