PRIVACY POLICY

DATA CONTROLLER
Following the consultation of this site, data related to identified or identifiable persons may be processed. Pursuant to current legislation and Article 13 of EU Regulation 2016/679 of the European Parliament and Council of April 27, 2016, concerning the protection of natural persons with regard to the processing of personal data, as well as the free movement of such data (hereinafter “EU Regulation”), we inform you that the data controller of the information you provide is Sublitex S.r.l., located in Alba (CN), Via S. Barbara 11, Italy, tax code and VAT number 03737080048 (hereinafter “Data Controller”).
We also inform you that the Miroglio Group has appointed a Data Protection Officer, whose contact details are provided below: Miroglio Group – Data Protection Officer, Via S. Barbara 11, 12051 – Alba (CN), Italy, email: dpo@miroglio.com.

PROCESSING METHODS AND POSSIBLE CATEGORIES OF RECIPIENTS OF PERSONAL DATA
Data processing will be carried out using manual and automated tools for the time strictly necessary to achieve the purposes for which they were collected, based on the purposes specified in the “Types of Data Processed” section of this Privacy Policy. Specific security measures are observed to prevent data loss, illegal or incorrect use, and unauthorized access. Processing related to the web services of this site is managed only by authorized personnel or external processors performing occasional maintenance operations. Data may be communicated to other companies within the Miroglio Group or to third parties qualified as external data processors, exclusively for activities related to the purposes specified in the information provided on the site. The complete list of external data processors can be requested at any time by writing to the Data Controller, Sublitex S.r.l., at the address indicated in the “Rights of Data Subjects” section.
Personal data will be processed within the European Union.

TYPES OF DATA PROCESSED
Navigation Data
The IT systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. These are information not collected to be associated with identified data subjects but which, by their nature, could, through processing and association with data held by third parties, allow users to be identified. This category includes IP addresses or domain names of the computers used by users connecting to the site, URI (Uniform Resource Identifier) addresses of requested resources, request time, method used to submit the request to the server, file size received in response, numerical code indicating the status of the response from the server (successful, error, etc.), and other parameters related to the user’s operating system and IT environment.
This data is used solely to obtain anonymous statistical information about site usage and to check its proper functioning, and is deleted immediately after processing. Data may be used to ascertain responsibility in case of hypothetical computer crimes against the site: except in this case, web contact data do not persist for more than seven days.

Data Provided Voluntarily by the User
Consultation of the site does not require the provision of personal data by the user. The optional, explicit, and voluntary sending of emails to the addresses indicated on this site involves the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message. Such data will be used solely to follow up on the user’s request and may be communicated to third parties only if necessary for this purpose.
For data processing for these purposes, your consent is not required as the processing is necessary for the performance of a contract to which you are a party or for the implementation of pre-contractual measures adopted at your request (Art. 6, paragraph 1, letter b of the Regulation), as well as, where applicable, to comply with a legal obligation (Art. 6, paragraph 1, letter a of the Regulation).
Data processing will be carried out using methods suitable to ensure the confidentiality and security of your data in accordance with current privacy regulations.
For processing of data for additional purposes, beyond those indicated above, such data is retained only for the time strictly necessary to provide the requested service and is deleted immediately afterwards, unless further legal retention obligations are specified.

Cookies
For information regarding cookies on the website, please refer to the Cookie Policy.

VOLUNTARINESS OF DATA PROVISION
Except for navigation data, users are free to provide personal data if requested in specific sections of the site. Failure to provide such data may result in the inability to obtain what is requested.

RIGHTS OF DATA SUBJECTS
Data subjects have the right, at any time, to exercise their rights under Articles 15 et seq. of the EU Regulation, including: a) the right to be informed about the purposes and methods of processing; b) access; c) updating and correction; d) deletion, anonymization, or blocking; e) opposition to processing, including opposition to automated decision-making and profiling; f) withdrawal of consent; g) data portability; h) restriction of processing. Data subjects also have the right to lodge a complaint with the supervisory authority. These rights may be exercised by contacting the Data Controller directly at the email address privacygroup@miroglio.com or by writing to Miroglio Group – Group Privacy Officer, Via S. Barbara 11, 12051 – Alba (CN), Italy.

CHANGES TO THE POLICY
The introduction of new sector regulations, as well as ongoing examination and updates to user services, may require changes to the methods of processing personal data. Therefore, our privacy policy may change over time, and we invite visitors to periodically review this page.