Information on the processing of personal data of website users pursuant to art. 13 of EU Regulation 679/2016
According to the rules of the Regulation, the processing carried out by Vita S.r.l. will be based on the principles of lawfulness, correctness, transparency, limitation of purposes and storage, minimization of data, accuracy, integrity and confidentiality, as well as the principle of accountability referred to in art. 5 of the Regulation.
1. Data controller and personal data protection officer "DPO"
The person responsible for the protection of personal data (hereinafter, "DPO") pursuant to art. 37 et seq. of the Regulations, domiciled at our headquarters, can be reached at the address indicated in the "Contacts" section of this Policy.
2. Personal data subject to processing
The personal data subject to processing may be:
I. Data provided by the user
Identifying data. This term refers to personal data such as name, surname, identification numbers, location data, online identifiers or one or more characteristic elements to make the person identified or identifiable.
Personal data provided for the purposes of registration for an event made available on the Site.
II. Navigation data
The computer systems and software procedures used to operate the Site automatically acquire, in normal operation, some information relating to web browsing whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified interested parties, but by its nature could, through association and processing with data held by third parties, allow users or surfers to be identified. This category includes information on IP addresses, domain names of computers used by users connecting to the Site, URI ("Uniform Resource Identifier") of requested resources, time of request, the method used to submit the request to the web server, the size of the file obtained in response, numerical code indicating the status of the response from the web server (successful, error, etc..) and other parameters relating to the operating system and computer environment. These data are used only to obtain anonymous statistical information on the use of the Site and to check its proper functioning, to identify anomalies and / or abuse, and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the Site or third parties.
III. Data collected through cookies
What are cookies
Browsing this Site involves the receipt of cookies, short text strings that the websites visited send to the user's browser (i.e. the program that serves to navigate as, for example, Chrome, Explorer, Mozilla, etc..) where they are stored and then retransmitted to the same websites during subsequent visits. While browsing a Site, the user may also receive cookies from sites or web servers other than the one he or she is visiting on his or her computer (so-called "third party" cookies). It is possible to distinguish between technical cookies, which allow the performance of activities strictly related to the operation of the Site and can be used freely, and profiling cookies, which are used in order to display the user advertising messages in line with the preferences expressed by the same while browsing and for which it is necessary to obtain the user's consent.
Through this Site your browser may receive technical cookies and third-party profiling cookies.
In particular, technical navigation cookies are used to store navigation preferences and improve navigation on the Sites, and analytical cookies (specifically Google Analytics provided by Google Inc. - hereinafter "Google"), which collect, in anonymous and aggregate form, statistical information on how users navigate (for example, number of pages visited and accessed, time spent on the Sites), useful to understand in which aspects you can improve the Sites.
The use of these cookies does not require the acquisition of the consent of the user, who can still decide to disable the use on your browser. In addition, Google Analytics cookies may be specifically rejected using the tool provided by Google (see
Third-party profiling cookies
Through some pages of our Site you can also receive in your browser third-party profiling cookies, for example to allow the display of content hosted on external platforms and interact with them (eg YouTube) or connected to the Google AdWords service (designed to show the user, during navigation, ads based on the websites previously visited). For this reason, when accessing these pages is proposed a banner to inform the user and allow him to give his consent to the receipt of these cookies, closing the banner or clicking on any other element of the page, outside the banner itself. Vita does not have access to the information collected by third party cookies, which are used in full autonomy by the managers of these services. For more information on how the data collected by means of these cookies is processed, users are invited to consult the privacy notices provided by the subjects who make the services in question available.
IV. How to manage cookies in your browser
You can set your browser to warn you of the presence of cookies and decide whether or not to accept a specific cookie or automatically reject all cookies. Below are references to how to manage the activation/deactivation of cookies for major browsers:
Google Chrome: https://support.google.com/accounts/answer/61416?hl=it
Apple Safari: https://support.apple.com/kb/PH19214?locale=it_IT
Microsoft Internet Explorer and Microsoft Edge: https://support.microsoft.com/it-it/help/17442/windows-internet-explore…
If you decide to reject cookies, it is possible that some interactive features offered by the Sites may not be fully or partially usable.
3. Purpose of treatment
Users' personal data will be processed for the following purposes:
3.1 to allow the navigation of the Site and the provision of the services made available by the Owner, including the management of the security of the Site;
3.2 fulfil any obligations under applicable laws, regulations or Community legislation, or meet requests from authorities;
3.3 for the production of statistics, without it being possible to trace the identity of the person concerned;
3.4 allow the registration to events where you can register through special sections on the Sites;
3.5 send, directly or through third party providers of marketing and communication services, newsletters and communications for direct marketing purposes through email, sms, mms, push notifications, fax, paper mail, telephone with operator, in relation to products provided by Vita;
3.6 in order to carry out profiling activities, through the collection and analysis of information on selections and choices made within the Site, in order to send personalized offers on other products and / or services;
Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorised access.
4. Legal basis and mandatory or optional nature of the processing
The legal basis for the processing of personal data for the purposes referred to in section 3.1 is art. 6.1.b) of the Regulation as the processing is necessary for the provision of services or for the response to requests from the person concerned.
The legal basis for the processing of personal data for the purposes referred to in section 3.2 is, however, art. 6.1.c) of the Regulation ("the processing is necessary to fulfill a legal obligation to which the data controller is subject"). The provision of personal data for these purposes is optional, but failure to provide it would make it impossible to activate the services requested.
It should be noted, however, that the treatment referred to in section 3.3 is not performed on the basis of personal data and, therefore, can be freely carried out by the owner.
The legal basis for the processing referred to in point 3.4 is Article 6.1(b) of the Regulation.
The legal basis for the processing of personal data for the purposes referred to in sections 3.5 and 3.6 is art. 6.1.a) of the Regulation as the processing is based on consent. The latter is optional and is free to revoke it at any time without any consequence (except for the fact that it will no longer receive marketing communications and/or profiling activities will no longer be carried out). Previously granted consents can be revoked by following the instructions in paragraph 8 of this document.
For the processing of personal data carried out for the purpose of sending direct advertising material or direct sales or for carrying out market research or commercial communications in relation to products or services of the Data Controller similar to those used by the user, Vita may use e-mail addresses in accordance with and within the limits allowed by art. 130, paragraph 4 of the Privacy Code (Legislative Decree no. 196/2003) and by the provision of the Guarantor Authority for the protection of personal data of 19 June 2008 even without explicit consent. The legal basis for the processing of data for this purpose is art. 6, paragraph 1, letter. f) of the Regulation. This is without prejudice to the possibility of objecting to such processing at any time, initially or on the occasion of subsequent communications, easily and free of charge, also by writing to the addresses indicated in the "Contacts" section of this information sheet, and of obtaining immediate feedback confirming the interruption of such processing (art. 15 of the Regulations).
5. Recipients of personal data
5.1. subjects who typically act as data processors pursuant to art. 28 of the Regulation, i.e. subjects who cooperate with the Data Controller for the pursuit of the above purposes, including subjects delegated to carry out technical maintenance activities (collectively "Recipients");
5.2. subjects, bodies or authorities to whom it is mandatory to communicate personal data under the provisions of law or orders of the authorities;
5.3. persons authorised by the Data Controller, pursuant to art. 29 of the Regulation, to process personal data necessary to carry out activities strictly related to the provision of services, who have committed themselves to confidentiality or have in any case an adequate legal obligation of confidentiality.
6. Transfer of personal data
With regard to the possible transfer of Data to countries outside the European Economic Area, the Data Controller hereby informs that the processing will be carried out in accordance with one of the methods permitted by current law, such as, for example, the consent of the interested party, the adoption of Standard Clauses approved by the European Commission, the selection of subjects participating in international programmes for the free circulation of data (e.g. EU-USA Privacy Shield) or operating in countries considered safe by the European Commission. Further information can be obtained, upon request, from the Data Controller at the above contacts.
7. Retention of personal data
The personal data processed for the purposes referred to in section 3.1 will be kept for the time strictly necessary to achieve those same purposes. In any case, since these are treatments carried out for the provision of services, the Owner will keep personal data for the period of time provided for and allowed by Italian law to protect their interests (art. 2946 c.c. et seq.).
The personal data processed for the purposes referred to in section 3.2 will be kept until the time provided by the specific obligation or rule of law applicable.
Further information regarding the period of data retention and the criteria used to determine this period may be requested by sending a written request to the Holder at the addresses indicated in the "Contacts" section of this notice.
In any case, the Owner is entitled to keep his personal data for the period of time provided for and allowed by Italian law to protect his interests (art. 2947 c.c.).
The personal data processed for the purposes referred to in point 3.4 will be processed for the time necessary to allow you to register and participate in the event.
8. Rights of data subjects
Pursuant to articles 15 et seq. of the Regulations, the interested party has the right to ask Vita, at any time, for access to his/her personal data, for their rectification or cancellation or to oppose their processing, to request the limitation of processing in the cases provided for in art. 18 of the Regulations, as well as to obtain in a structured format, commonly used and readable by an automatic device, the data concerning him/her, in the cases provided for in art. 20 of the Regulations.
Requests must be addressed in writing to the Holder or to the DPO at the addresses indicated in the "Contacts" section of this document.
In any case, the interested party always has the right to lodge a complaint with the competent Control Authority (Guarantor for the Protection of Personal Data), pursuant to articles 77 et seq. of the Regulation, if he believes that the processing of his personal data is contrary to the legislation in force.
In order to exercise the above rights or for any other request it is possible to write to the Data Controller at the physical address indicated above or through the dedicated contacts , preferably inserting in the subject of the communication the wording "Request for the exercise of privacy rights".
Last updated: 6th November 2018