Privacy and Cookie policy

PRIVACY POLICY CONCERNING MATTIUSSI ECOLOGIA Ltd (ART. 13 REG. 679/2016) – WEBSITE NAVIGATION

Dear user,
This information is provided by Mattiussi Ecologia Ltd in compliance with the provisions of Regulation 679/2016 (GDPR) regarding the protection of personal data in order to describe the methods of processing the personal data of users who consult this website.

Data controller

Mattiussi Ecology Ltd hereinafter also the “Data Controller”
with registered office in Via Jacopo Linussio, 80 33100 Udine - Italy
Telephone contact: 0432531521
VAT number: 01281780302

Data Protection Officer (DPO)

The Data Controller has appointed a Data Protection Officer (DPO) who can be contacted at the following email: dpo@studiolegalevicenzotto.it.



The personal data collected on this website and any other information that can be associated with you, directly or indirectly, are processed and used in compliance with EU Regulation no. 679/2016 (GDPR) regarding the protection of personal data.
In particular, the computer systems and software procedures used for the operation of this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified individuals, but due to its nature, it could allow users to be identified through processing and association with data held by third parties. This category of data includes IP addresses or domain names of computers used by users connecting to the site, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), and other parameters related to the user's operating system and computer environment.
This data is used only for the purpose of obtaining anonymous statistical information on the use of the website and to ensure its proper functioning.

In addition the Data Controller informs you that the data you provide are processed using IT tools and procedures, for the following purposes:

  • manage and improve navigation on the website;
  • answer the questions you formulated using the appropriate form (see also specific privacy policy);
  • keep a database of the most frequent questions, proposals, communications;
  • subscription to the newsletter service using the appropriate form (see also specific privacy policy);
  • Technical navigation management (see also the "Information on the use of cookies" section at the bottom of the page).

The data you provide may only be known by the Data Controller's personnel and collaborators and possibly by companies that process data on behalf of the Data Controller in outsourcing, in any case for the sole purpose of completing the activities requested by you.

Some data may be processed for the exclusive purposes of technical/IT management of the web service, by the Data Controller's technological partners. In any case, the data will never be disclosed.

EXERCISE OF RIGHTS IN THE FIELD OF PERSONAL DATA PROTECTION

We inform you of the existence of certain rights concerning the protection of personal data, as listed below, and how to exercise them with respect to the Data Controller:

Right to withdraw consent (Article 13): You have the right to withdraw your consent at any time for all processing activities for which the legal basis is your expression of consent. The withdrawal of consent does not affect the lawfulness of the previous processing.

Right of access to data (Article 15): You have the right to obtain from the controller the following information: (a) the purposes of the processing; (b) the categories of personal data concerned; (c) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations; (d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; (e) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing; (f) the right to lodge a complaint with a supervisory authority; (g) where the personal data are not collected from the data subject, any available information as to their source; (h) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

Right to rectification (Article 16): You have the right to request the correction of inaccurate personal data concerning you and to obtain the integration of incomplete personal data.

Right to erasure (Article 17): You have the right to obtain from the data controller the erasure of personal data concerning you if the personal data are no longer necessary for the purposes for which they were collected or otherwise processed, if you withdraw your consent, if there is no overriding legitimate ground for the processing, if the data have been processed unlawfully, if there is a legal obligation to erase them, or if the data are related to web services offered to minors without consent. Erasure can take place, unless the right to freedom of expression and information prevails, if they are necessary for compliance with a legal obligation or for the performance of a task carried out in the public interest or in the exercise of official authority, for reasons of public interest in the area of public health, for archival purposes in the public interest, for scientific or historical research purposes, or for statistical purposes, or for the establishment, exercise, or defense of legal claims.

Right to restriction of processing (Article 18): You have the right to obtain from the data controller the limitation of processing when you have contested the accuracy of personal data (for the period necessary for the data controller to verify the accuracy of such personal data) or if the processing is unlawful, and you require the data for the establishment, exercise, or defense of a legal claim.

Right to data portability (Article 20): You have the right to receive the personal data concerning you, which you have provided, in a structured, commonly used, and machine-readable format and have the right to transmit those data to another data controller where the processing is based on consent or a contract and is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority and the transfer does not adversely affect the rights of others.

Right to lodge a complaint with a supervisory authority (Article 77): Without prejudice to any other administrative or judicial remedy, if you believe that the processing of your data violates the data protection regulation, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State where you reside, work, or where the alleged violation occurred.

The exercise of the aforementioned rights is subject to the limits, rules, and procedures provided for by Regulation 679/2016, which the User must be aware of and implement. In accordance with Article 12(3) of this Regulation, the Data Controller will also provide the data subject with information regarding the action taken without undue delay and, in any case, no later than one month after receiving the request. This period may be extended by two months if necessary, considering the complexity and the number of requests. The Data Controller informs the data subject of such an extension and the reasons for the delay within one month of receiving the request.

To exercise these rights it is necessary to use the form contained in the previous link which must be sent to the Data Controller or to the DPO, duly completed and signed.