Privacy Policy Web Site

PRIVACY POLICY DATA COLLECTED FROM WEBSITE NAVIGATORS

ARTICLES 13-14 OF (EU) REGULATION 2016/679

(European Personal Data Protection Regulation)

Dear Website Navigator,

Route220 S.r.l.  as the Data Controller of your personal data, in compliance with EU Regulation 2016/679 (known as the “GDPR”), we hereby inform you that the legislation in question provides for the protection of data subjects with regard to the processing of personal data and that such processing will be based on the fundamental principles of fairness, lawfulness, transparency, and protection of your privacy and your rights.

Purpose and legal basis: your personal data will be processed in accordance with the provisions of the aforementioned legislation and the confidentiality obligations set forth therein; in particular, your data will be processed for the following purposes related to the implementation of legislative or contractual obligations: a) purposes related to the execution of a contract to which you are a party or to the execution of pre-contractual measures taken at your request (for example, contact request via the “Contact” form, etc.); b) purposes necessary to ascertain, exercise, or defend a right in court or whenever the judicial authorities exercise their judicial functions; c) purposes of statistical research/analysis on aggregated or anonymous data, without the possibility of identifying the user, aimed at measuring the functioning of the Site, measuring traffic, and evaluating usability and interest.

Your personal data may also, with your consent (via a dedicated cookie banner), be used for the following purposes: management of non-technical marketing cookies for the portal (marketing cookies are used to track visitors on websites. The intention is to display ads that are relevant and engaging to the individual user and therefore more valuable to publishers and third-party advertisers; management of non-technical statistical cookies for the portal (statistical cookies help website owners understand how visitors interact with sites by collecting and reporting information anonymously).

Method of processing: your personal data may be processed in the following ways: using electronic computers with software systems managed or programmed directly or by third parties; entrusted to third parties for processing operations; temporary processing in anonymous form. All processing is carried out in accordance with Articles 6 and 32 of EU Regulation 2016/679 and through the adoption of appropriate security measures.

Data processors: your data will only be processed by personnel expressly authorized by the Data Controller and, in particular, by the following categories of employees: administrative staff; sales staff; programmers and analysts.

Data communication: your data may be disclosed to external parties for the proper management of the relationship and, in particular, to the following categories of recipients, including all data processors duly appointed as data processors: parties necessary for the provision of the services offered, such as, by way of example, the sending of emails and communications and the analysis of the functioning of the Website; web service providers for the management and maintenance of the site; subcontractors; communication to third parties (see Cookie Policy).

Data diffusion: your personal data will not be disclosed.

Data transfer: your personal data may be transferred, limited to the purposes mentioned above, to the following countries: countries belonging to the European Union.

Data retention period: In accordance with the principles of lawfulness, purpose limitation, and data minimization, pursuant to Art. 5 of EU Regulation 2016/679, the retention period for your personal data is set for a period of time not exceeding the performance of the services provided (see also Cookie Policy).

Identification details of the Data Controller and The Data Protection Officer:

Data Controller: Route220 S.r.l. (VAT 08671940966) with registered office in Milano (MI) Via Carducci n. 12 (info@route220.it).

Data Protection Officer: Avvocato Luca Gambirasio (lg@studiolegalelg.com).

Rights of the Data Subject: the data subject has the right to obtain from the data controller the erasure (right to be forgotten), restriction, updating, rectification, portability, and opposition to the processing of personal data and to exercise all rights under Articles 15, 16, 17, 18, 19, 20, 21, 22 of EU Regulation 2016/679.  The data subject has the right to obtain confirmation of the existence or otherwise of personal data concerning him/her, even if not yet recorded, its communication in intelligible form and the possibility of lodging a complaint with the Supervisory Authority. Specifically, the data subject has the right to obtain information on: the origin of the personal data; the purposes and methods of processing; the logic applied in the case of processing carried out with the aid of electronic instruments; the identification details of the data controller, data processors, and designated representative pursuant to Art. 5.2. EU Reg. 2016/679; the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it in their capacity as designated representative in the territory of the State, managers, or agents. Furthermore, the data subject has the right to obtain: the updating, rectification or, where interested therein, integration of the data; the erasure, anonymization or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed; certification that the operations referred to in the previous points have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the case where this proves impossible or involves a manifestly disproportionate effort compared to the right being protected; data portability. Finally, the data subject has the right to object, in whole or in part: on legitimate grounds, to the processing of personal data concerning him/her, even if pertinent to the purpose of collection; to the processing of personal data concerning him/her for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication.