DATA PROTECTION POLICY

Pursuant to Legislative Decree No. 196 of 30 June 2003, as amended (“Personal Data Protection Code”) and European Regulation No. 679 of 2016 (the “General Data Protection Regulation [GDPR]”), CD10 S.r.l. wishes to inform you and all users and/or visitors to the website www.cd10.it (the “Users” and the “Site”, respectively), regarding the use of personal data collected via the Site.

1. Data Controller, Data Processors and Data Protection Officer

The Data Controller is CD10 S.r.l. (tax code and VAT number 05149700287), with registered address at 35030 Selvazzano Dentro (PD), via Pelosa 78, email cd10@cd10.it (hereinafter the “Data Controller”).

The updated list of designated data processors can be provided upon the request of data subjects and/or users.In the event that a Data Protection Officer is appointed (pursuant to Article 37 of the General Data Protection Regulation), their contact details will be posted on the website www.cd10.it.

2. Information Gathered Automatically by the Site

As with all websites, our Site also uses log files, which store information collected automatically when you visit it. The computer systems and software procedures used to operate the Site automatically acquire some personal data, the transmission of which is implicit in the use of internet communication protocols.

The following information is collected:

This information is processed in an automated form and collected exclusively in aggregate form to ensure the Site is working properly.

3. Social Network Plug-ins

The Site may contain plug-ins from social networks (e.g. Instagram, LinkedIn, etc.). If you access one of our web pages with such a plug-in, the internet browser connects directly to the social network servers and the plug-in is displayed on the screen via the connection to the browser. The plug-in informs the social network server which pages the data subject has visited. If a social network user visits our web pages while logged in to their social media account, their personal data may be associated with the social media account. Even if you use the functions of the plug-in (for example, by clicking on the “Like” button or posting a comment), the information will be associated with the social network account. Further information on the collection and use of data by social networks in general, as well as on rights of the data subject and the means available to protect their privacy in this context can be found on the social network sites. If the data subject does not wish to link the use of the Sites with their social media account, they must log out of the social network before visiting them.

4. The Personal Data you Provide us with by Using the Site: What Purposes we Process it for

Your data is necessary for us to enable you to:

Your data is processed for the following purposes:

The data you provide will be processed mainly with computerised tools under the authority of the Data Controller, by parties that have been specifically authorised and instructed to process it, in accordance with Article 29 of the General Data Protection Regulation and 2-quaterdecies of the Personal Data Protection Code. Please be advised that appropriate security measures are also observed pursuant to Articles 5 and 32 of the General Data Protection Regulation to prevent loss of data, unlawful or incorrect use and unauthorised access.

5. Nature of the Provision of Data and Legal Basis for Processing Data

With reference to the purpose referred to in section 4, point (iii), please see the specific information referred to in that point of this Data Protection Policy.

For the purposes referred to in points (i) and (ii) of section 4 above, the provision of your personal data is necessary as otherwise you will not be able to use the services offered by the Site. As a result, for the purposes referred to in point (i), the lawful basis of the processing is compliance with legal obligations, pursuant to Article 6, section 1(c) of the General Data Protection Regulation, while for the purposes referred to in point (ii), the lawful basis for the processing is the execution of the services provided through the Site and requested by you, in accordance with Article 6, section 1(b) of the General Data Protection Regulation

6. Scope of Data Transfer and Who we can Share your Data with

Your data may be shared only within the EU, to the institutions, parties and external companies (including consultants and service providers) that the Data Controller uses for the management of the Site and for the performance of related activities, whether instrumental or consequent to the execution of the services offered by the Site.

Further details about the above can be found in the specific information provided or displayed on the Site and arranged for the related services on request.

7. Your Rights

Articles 15 ff. of the GDPR cover the data subject’s right to obtain the following, in the manner and within the limits established in Article 2-undecies of the Personal Data Protection Code and Article 12 of the GDPR:

The data subject also has the right to:

The full form to exercise your rights can be found here with instructions for completion and on how to submit it to the Data Controller.

8. Processing Duration

Without prejudice to legal obligations, personal data will be retained for a specified period, based on criteria linked on the nature of the services provided. In particular, browsing data will be stored for a maximum of 7 days.

For more details about the other processing purposes highlighted above and governed by specific policies, please refer to what is expressly indicated therein.

9. Security Measures

Your data is processed through the Site in compliance with applicable law and using appropriate security measures in compliance with current regulations, including pursuant to Articles 5 and 32 of the General Data Protection Regulation.

In this regard, we also confirm the adoption of appropriate security measures targeting the prevention of unauthorised access, theft, disclosure, modification or destruction of your data.

10. Amendments to the Privacy Policy

The Data Controller reserves the right to make changes to this Privacy Policy. In this case, you will be promptly informed, when you use the Site again.