Information on the processing of personal data collected through the Site

This section provides information on the processing of personal data of users consulting the pages of the site web of Confindustria accessible at the following addresses: www.confindustria.it e my.confindustria.it (hereafter: "Website").

The information is provided exclusively for the Site and not also for other sites web possibly consulted by the user via the link hypertexts that may be published on it.

Data Controller and Privacy Officer

Confindustria, with registered office in Viale dell'Astronomia, 30 - 00144 Rome, e-mail: [email protected].

1. Types of data processed

A. Automatically collected information

Navigation data. When navigating on the Site, the systems and programmes in charge of its operation automatically acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols (e.g. IP address, domain names of the terminals used by users, parameters relating to the user's operating system and computer environment). Such data may also be used to check the correct operation of the Site, as well as to ascertain responsibility in the event of offences committed through or to the detriment of the Site. I log access to the Site do not persist for more than 30 days, except in the event of the need to ascertain criminal offences by the judicial authorities;

Cookie. I cookies is information (small text files) that websites transmit to the device used by the user (e.g. PC, smartphone, tablet). This information makes it possible to carry out navigation, to perform computer authentication, to collect information on the number of visitors and on how the sites are used, and to monitor and profile users. For more information on cookies used by the Site and how to deactivate them, see the Cookie Policy.

B. Data provided by the user

Data provided by the user to take advantage of the services offered on the Sitesuch as, for example: i) access to the restricted area; (ii) subscription to the Newsletter service; iii) participation in initiatives promoted by Confindustria (e.g. surveys, surveys). This data is processed in order to enable the correct provision of the services requested and to follow up on requests made by users.

Information sent by users on an optional and voluntary basis to the addresses indicated on the Site or in the forms published on the Site. This data is processed by the recipient of the communication in order to follow up on the requests received.

In the sections of the Site where personal data are collected, a specific information notice is published from time to time, containing indications of the processing operations connected with the specific activity. We therefore ask you to read the information notice that, from time to time, will illustrate the characteristics of the specific processing operations.

2. Purpose and legal basis of processing

Personal data are processed for the following purposes:

    1. operation and security of the Site and use and optimisation of services web. The processing is based on the legitimate interest of the Controller in pursuing its statutory purposes, as well as its mission institutional through communication via web. Therefore, pursuant to Art. 6(1)(f) GDPR, the processing does not require the consent of the data subject. This is without prejudice to the provisions of the Cookie Policy for the use and management of cookies;
    2. fulfilment of the obligations provided for by laws, regulations, as well as provisions issued by Authorities legitimated to do so. The processing is necessary to comply with the legal obligations to which the Data Controller is subject and, therefore, pursuant to and for the purposes of Article 6(1)(c) of the GDPR, does not require the consent of the data subject.

    Finally, the Controller may process personal data to ascertain, exercise and defend its rights in court. Such processing is based on the legitimate interest of the Controller in protecting its rights.

    When necessary, the Controller requests the user's consent before processing his personal data.

    3. Nature of data provision

    With the exception of navigation data and except as provided for in the Cookie Policy for the use and management of cookiesThe provision of personal data is, in general, optional.

    In some cases, failure to provide data may make it impossible to access specific services and to obtain what may be requested. Failure to provide such data may, therefore, compromise access to the services of the Site or the response to user requests.

    Confindustria reserves the right to prevent or interrupt the service if the data obtained prove to be untrue.

    4. Modalities and duration of treatment

    The personal data collected through the Site are processed in accordance with EU Regulation No. 679/2016, Legislative Decree No. 196/2003 and Legislative Decree No. 101/2018, as well as Privacy Guarantor Order No. 231 of 10 June 2021.

    Processing is carried out through the use of mainly computerised procedures.

    The server in which the Site is located is in the Netherlands.

    Personal data are processed by the Controller's staff, who act on the basis of specific instructions given regarding the purposes and methods of processing.

    Personal data may be communicated to i) external structures, which perform support tasks on behalf of Confindustria, in their capacity as data controllers; (ii) public entities for the fulfilment of legal obligations, which carry out their respective processing activities as autonomous data controllers; iii) public or private entities to enable the Controller to ascertain, exercise or defend a right in court, as well as for other reasons related to the protection of rights.

    Except as provided for the preservation of log access to the Site and data acquired through the use of the cookies (see the Cookie Policy), personal data will be processed for the time strictly necessary to pursue the purposes for which they are collected and will be retained for the duration of the applicable prescriptive periods ex lege exclusively for purposes related to the fulfilment of legal obligations or the defence of the Controller's rights in court.

    5. Rights of the persons concerned

    At any time, users have the right to access their personal data, to request their rectification, updating and deletion. It is also possible to request the limitation of the processing and the portability of the data. These requests may be addressed to Confindustria, Viale dell'Astronomia, 30 - 00144 Rome, e-mail: [email protected].

    Furthermore, in the event that you consider that the processing has been carried out in violation of the legislation on the protection of personal data, you have the right to lodge a complaint with the Italian Data Protection Authority, Piazza Venezia, 11 - 00187 - Rome.