Privacy Policy

This information is provided, pursuant to art. 13 EU Regulation 2016/679 (GDPR) and Legislative Decree 196/2003 as amended by Legislative Decree 101/2018 to users who interact with the website of A.T.E.C. Srl accessible by electronic means from the address: www.tutondo.com, corresponding to the home page of the site.

This information describes the management methods of the company's official website only, but not of other external websites that may be consulted by the user via links.

Additional information may be provided within the different access channels, subdivided on the basis of the topics covered. Other information may be provided within the Site in relation to specific services.

Data Controller: A.T.E.C. Srl

VIA NOBEL 8 - 30020 NOVENTA DI PIAVE (VE) / Contact details: privacy@tutondo.com

Purpose of processing	Legal basis of processing	Period of data retention
Administrative-accounting activities in general and for the fulfilment of obligations under the law, regulations and applicable national and supranational legislation	Need to fulfil legal obligations	Contractual term and, after termination, for the ordinary limitation period of 10 years.
If necessary, to ascertain, exercise or defend the rights of the Controller in court	Interesse legittimo	Legitimate interest
Possible contact request, sending information you requested;	Performance of a contract to which the data subject is party or the performance of pre-contractual measures taken at the request of the data subject (Art. 6(1)(b) of the Regulation)	Time needed to provide feedback
After the expiry of the aforementioned retention periods, the Data will be destroyed, erased or made anonymous, compatibly with technical erasure and backup procedures.

Type of data processed and methods of collection

Navigation data - log files

It is possible to access the Site without the user being asked to provide any personal data. The computer systems and applications dedicated to the functioning of this website detect, during their normal operation, some data (whose transmission is implicit in the use of Internet communication protocols) not associated with directly identifiable users. The data collected include the IP addresses of the users who connect to the site, the URI/URL (Uniform Resource Identifier/Locator) addresses of the resources requested, the time of the request and the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment.

This information does not provide the user's personal data and is not collected in order to be associated with identified interested parties, but it is technical/informatics data collected and used in an aggregate and anonymous manner for the purposes of verifying the correct operation and monitoring the security of the Site; improving the quality of the service and providing statistics on the use of the Site; ascertaining responsibility in the event of hypothetical computer crimes to the detriment of the Site.

Data provided voluntarily by the user

The optional, explicit and voluntary sending of messages to the contact addresses, as well as the filling in and forwarding of the forms on the Owner's website, entails the acquisition of the sender's contact data, as well as all the personal data included in the communications, necessary to respond to the requests made and/or provide the requested service. We assure you, however, that such processing will be based on the principles of correctness, lawfulness and transparency and protection of confidentiality as indicated in the GDPR. In any case, before proceeding to the activation of a given service, appropriate information will be provided and, where necessary, consent to the processing of personal data will be acquired. This consent may subsequently be revoked at any time, thus forfeiting the possibility to use the service in question.

Failure to provide consent or revocation of the same shall not entail any consequences, except for the impossibility of using the Site and/or providing the requested service or obtaining more detailed information on the Company's activities.

In any case, the processing of personal data may be carried out, if it is necessary, for the pursuit of a legitimate interest of the Owner or based on a legal obligation. In particular, obtaining consent to the processing referred to in the previous point relating to navigation and log data is not necessary as the data is processed as responding to a legitimate interest (Recital 47 of the GDPR)

Provision of Data

Apart from that specified for navigation data, the provision of personal data by the interested party for certain purposes described in the preceding paragraph is optional. Failure to provide such data may make it impossible to use certain services provided by the site.

Data processing methods

Personal data are processed by automated tools for the time strictly necessary to achieve the purposes for which they are collected in accordance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 of the GDPR and in compliance with the mandatory time limits prescribed by law. Specific security measures are observed to prevent data loss, unlawful or incorrect use and unauthorised access.

Communication and/or Dissemination of Data

Your data, subject to processing, will not be disseminated but may be communicated to companies contractually linked to the company, in accordance with and within the limits of the GDPR. Personal data are stored on servers located within the European Union. In any case, it is understood that the Data Controller, where necessary, shall have the right to move the servers also outside the EU GDPR. In this case, the Data Controller assures as of now that the transfer of data outside the EU will take place in accordance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses provided for by the European Commission and the user will be informed. The data may be communicated to third parties belonging to the following categories

- subjects that provide services for the management of the information system used by the company and the telecommunications networks (including e-mail);

- firms or companies within the scope of assistance and consultancy relationships;

- authorities responsible for fulfilling legal obligations and/or provisions of public bodies, upon request.

- companies offering marketing platform management services

- companies offering website and information system maintenance services

The subjects belonging to the above categories act as Data Processors, or operate completely independently as separate Data Controllers The list of Data Processors is constantly updated and available at the company's headquarters. Any further communication or dissemination will take place only with your explicit consent.

Possible Existence of an Automated Decision Process

The owner informs the interested party that in this site there is no automated decision-making process, therefore in particular there is no profiling system.

Minors

This Site and the Owner's Services are not intended for children under the age of 16, and the Owner does not knowingly collect personal information from children. In the event that information about minors is unintentionally recorded, the Data Controller will delete it in a timely manner upon the request of users.

Rights of the data subject

Interested parties have the right to receive information from the Company regarding the processing of their personal information by email to: privacy@tutondo.com

Right of access: We are transparent about the data we collect and how we use it. You can contact us at any time by sending an email to access the information we hold.
Right of rectification: you have the right to have any inaccurate or incomplete information rectified and request that it be updated and/or amended.
Right to erasure: send us a request to erase all data relating to you and we will process your request within 30 days.
Right to restriction: you have the right to ask the data controller to restrict the processing of your data.
Right to portability: if you ask us to, we will export your data so that it can be transferred to third parties in a structured, commonly used and machine-readable format.
Right to object: you can unsubscribe at any time from all specific uses we make of your data (newsletters, automated emails, etc.).
Right to lodge a complaint: if you feel that your rights have not been respected, you may lodge a complaint with the competent authority in accordance with the instructions published on the website www.garanteprivacy.it or by e-mail at urp@gpdp.it.