COSVAL GROUP PRIVACY POLICY SANOTINT

Cosval S.p.A pays the utmost attention to the confidentiality, protection and security of personal data relating to the subjects it comes into contact with.

The Navigator of this site is therefore invited to visit all the sections of this document in advance, which describes how the site is managed with reference to the processing of personal data of users who consult it. This is an information note also pursuant to art. 13 of Legislative Decree 30 June 2003 n. 196, "Code regarding the protection of personal data" and art. 13 Regulation 2016/679 / EU "GDPR", to all those who interact with the web services of Cosval S.p.A, accessible electronically at the address: www.sanotint.it

This information is provided and is valid only on this site and not for other websites that may be consulted by the user through links on the site.

Cosval S.p.A has no control over these sites or over the procedures they apply to respect the confidentiality of data; we suggest you consult the privacy policies of all the companies you come into contact with before communicating personal information.

THE "OWNER" OF THE TREATMENT

Following consultation of this site, data relating to identified or identifiable persons may be processed.

The "owner" of their treatment is Cosval S.p.A, which is based in Viale delle Industrie 10/5 20020 Arese (MI) Italy, CF & VAT 01314310150 - Email info@cosvalgroup.com

RESPONSIBLE FOR TREATMENT

Cosval S.p.A is responsible for the treatment pursuant to Article 29 of the Code regarding the protection of personal data.

PLACE OF DATA PROCESSING

The treatment takes place in the territory of the European Union. The Data Controller does not transfer personal data to third countries (outside the European Union).

The treatments connected to the web services of this site take place at Cosval S.p.A. and are only handled by technical personnel in charge of the treatment. The owner processes the personal data of users by adopting the appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of personal data. The treatment is carried out using IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated. In addition to the owner, in some cases, categories of agents involved in the organization of the site (administrative, commercial, marketing, legal, system administrators) or external subjects (such as third party technical service providers, postal couriers) may have access to personal data. , hosting provider, IT companies, communication agencies) also appointed, if necessary, responsible for the treatment by the owner. The updated list of data processors can always be requested from the data controller.

TYPES OF DATA PROCESSED

Navigation data

During their normal operation, the IT systems and software procedures used to operate this website acquire some personal data whose transmission is implicit in the use of Internet communication protocols.

This is information that is not collected to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's computer environment.

These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site: except for this eventuality, at present the data on web contacts do not persist for more than seven days.

Data voluntarily provided by the user

The optional, explicit and voluntary sending of e-mails to the addresses indicated on this site entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the message.

OPTIONAL DATA SUPPLY

Apart from what is specified for navigation data, the user is free to provide the personal data contained in the request forms to Cosval S.p.A.

Their absence may make it impossible to obtain what is requested. The methods of processing the personal data requested is shown in the specific summary information: Information request service (SPECIFIC INFORMATION).

For each type of treatment, you can request the modification / cancellation of your personal data by requesting it at the email address info@cosvalgroup.com

METHOD OF TREATMENT

Personal data are processed with IT tools. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.

DURATION OF TREATMENT AND STORAGE PERIOD

The personal data voluntarily provided by the interested party will be processed by the Data Controller and kept for a period of 5 years. At the end of the fifth year, the system will send an e-mail to the interested party who, freely and according to his will, will be able to express his consent again to continue processing according to the services for which he had previously given consent. Failure to renew consent to the processing of data will make it impossible to continue using the services.

RIGHTS OF THE INTERESTED PARTIES

The subjects to whom the personal data refer have the right at any time to obtain confirmation of the existence or otherwise of the same data and to know its content and origin, verify its accuracy or request its integration or updating, or rectification (article 7 of the Code regarding the protection of personal data).

The interested party has, pursuant to Regulation (EU) 2016/679, the right to:

- art. 15 - obtain from the data controller confirmation that personal data concerning him or her is being processed and, in this case, to obtain access to personal data and other specific information;

- art. 16 - obtain from the data controller the correction of inaccurate personal data concerning him, without undue delay;

- art. 17 - obtain from the data controller the cancellation of personal data concerning him without undue delay;

- art. 18 - obtain the limitation of the treatment in specific cases;

- art. 20 - receive personal data concerning him in a structured format, commonly used and readable by an automatic device;

- art. 21 - object at any time to the processing of personal data concerning him carried out for marketing purposes (commercial communications sent by the owner).

For the exercise of rights, the interested party can send an email info@cosvalgroup.com The owner will inform you of the receipt and will respond to your request within 40 (forty hours) working hours. Pursuant to art. 19, requests relating to the rights referred to in articles 16, 17 and 18 will be sent by the owner to the recipients.

Pursuant to the same article, you have the right to request cancellation, transformation into anonymous form or blocking of data processed in violation of the law, and to oppose in any case, for legitimate reasons, to their treatment.

Requests should be addressed:

- by e-mail, at the address: info@cosvalgroup.com

- or by mail, to Cosval S.p.A, which is based in Viale delle Industrie 10/5 20020 Arese (MI) Italy, CF & VAT 01314310150 - Email info@cosvalgroup.com.

Right to lodge a complaint with a supervisory authority

The interested party also has the right to lodge a complaint with the competent supervisory authority - Guarantor for the Protection of Personal Data - at the following pec address protocol@pec.gpdp.it