INFORMATIONS ABOUT PERSONAL DATA PROCESSING

This page describe how the page is managed in relation of user’s personal data processing who consult it.
Informations are also provided by us pursuant the article 13 Regulation UE 2016/679, General Data Protection Regulation (GDPR), to whom that interact with the Xilo-Teak s.r.l’s website starting from that address:
http://www.xilo-teak.com
Informations are provided only for the website indicated upon and not even other websites eventually visited by link ad they are also ispired by the Recommendation n. 2/2001 that the article 29 Working Party adopted in May 27, 2001 in order to identify minimum request for the online collect of personal data, particularly methods, timing and nature of the informations that data controllers must provide to user when they connect to webpages.

DATA CONTROLLER
Following consultation of this site, data relating to identified or identifiable persons may be processed.
The data controller is  Xilo-Teak Srl, based in Faenza (RA), via Righi 126 , 48018, phone +39 0546 623117, fax +39 0546 620973, e-mail amministrazione@xilo-teak.com

PLACE OF PROCESSING
Processings related to this web service take place at Data controller’s base in Ravenna and they are processed with automated and telematic tools by specifically authorized personnel and in the event that external subjects are used to carry out a processing activity on our behalf, they will be appointed as Data Processors as established by art. 28 of the Regulation.
No data processed by this website are communicated to third party or widespread intentionally; however Internet provider receive user’s navigation data because they are functionally linked to their activities, while companies that provide to us assistance and maintenance on our IT systems can come into contact with user’s personal data in case of maintenance intervention.

KIND OF PERSONAL DATA PROCESSED

Navigation data
IT systems and software procedures used to operate this website acquire, during their normal operations, some personal data whose transmission is implicit in Internet communication protocols.
This information is not collected to be associated with identified subject, but by their very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes the IP addresses or websites’ domain names used by users in order to connecting the site, the URI (Uniform Resource Identifier) ​​addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system (fingerprint) and the user's computer environment .
These data are used only to obtain statistical information about the use of the site, to allow navigation within the site and to check its correct functioning. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site, and for the same reason kept by the ISP (Internet Service Provider) and the web host.

E-mail sending trough contact indicated at the specific page
The optional, explicit and voluntary sending of e-mail to the addresses indicated on this site entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the message. The e-mail address thus acquired is used to respond to requests sent to us and the simple sending of an e-mail for the purpose of contact does not entail the registration of mailing lists for the purpose of sending advertising material. For the treatment in question it is not necessary to acquire your prior consent as responding to the requests sent to us represents a legitimate interest of the Data Controller.
The processing of the requested data is therefore optional but necessary for the formalization of your request: if you refuse to provide such data Xilo-Teack s.r.l. you will not be able to take your request into consideration.
Your data will be stored no later than the exhaustion of the request.

 

Contacts form
In the Contacts section there is a form in which it is possible to insert a series of data in order to request informations about our services and our activities.
With regards to this processing, it is not necessary to obtain your consent because responding to the requests sent to us represents a legitimate interest of the controller.
Data requested are strictly connected to the processing at issue and it’s conferment are optional but necessary to answer your request: if you refuse to provide such data, Xilo-Teak Srl will not be able to take your request into consideration. For more information, please refer to the information that can be navigated by link on the form.

PROVISION OF DATA
Except that specified for navigation data, the user is free to provide personal data using the contacts indicated on the site to request the dispatching of informative material or other communications.
Failure to provide such data may make it impossible to obtain what it is requested.

WAY OF PROCESSING
User’s navigation data are processed by the ISP as an autonomous controller; other data, sending to us in order to submit requests, are processed with automated and telematic tools by specifically authorized personnel and in the event that external subjects are used to carry out a processing activity on our behalf, they will be appointed as Data Processors as established by art. 28 of the Regulation.
Personal data acquired through the site are kept for the time strictly necessary to achieve the purposes for which they were collected.
Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
SUBJECT’S RIGHTS
In relation to the aforementioned processing and the relative data existing in our archives, the subject’s rights  are listed and explained in Chapter III, Articles 15 to 22 of the EU Regulation 2016/679, specifically:
- Right of access (art.15);
- Right to rectification (art.16);
- Right to erasure (so-called right to be forgotten, art. 17);
- Right to restriction of processing (art.18);
- Right to data portability (Article 20);
- Right to opposition (art.21).
In order to exercise your rights, you may contact the Controller  by telephone, e- mail or fax using the contacts  indicated at the top of this information.
RIGHT TO LODGE A COMPLAINT TO A SUPERVISORY AUTHORITY
You are also informed about the right to lodge a complaint to a supervisory authority (for example Italian Garante per la protezione dei dati personali), in case you find a violation about your rights as data subject or for questions relating to the processing of your personal data.