Who processes your data
Your data will be processed by Ristogest S.r.l. in its capacity as Data Controller.
In addition to Ristogest S.r.l., we would like to inform you that there are External Managers for the processing of personal data, who have been duly mapped, surveyed, contracted and appointed by Ristogest S.r.l. on the basis of the provisions of art. 28 of the GDPR.
The list of the External Managers for the treatment of Personal Data is available at Ristogest S.r.l.‘s head office.
Type of data processed
The processed data are the navigation data and the data voluntarily provided by the user, as better specified below.
Ristogest S.r.l. informs the users of the site that the data collected will be used exclusively for the purposes indicated below.
Navigation data
During normal operation, the computer systems and software responsible for the correct functioning of the site acquire certain data, the transmission of which is implicit in the use of Internet communication protocols: this information is not collected in order to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the URI notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment.
This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct operation and is deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes to the detriment of the site.
Data provided voluntarily by the user
The optional, explicit and voluntary sending of electronic mail to the addresses indicated on the site entails the subsequent acquisition of the sender’s address, which is necessary to reply to requests, as well as any other personal data provided. This data will be communicated to third parties only where necessary to fulfil the user’s requests.
Purpose of processing
The processing of data is directed exclusively to the achievement of the following purposes:
a) purposes related to navigation within the pages of the site;
b) activities strictly connected and instrumental to the management of relations with users and potential candidates (contact requests).
c) activities strictly connected and instrumental to the management of relations with users for the purposes of information and connection to third-party services for the purchase of tokens, gadgets and the like relating to events promoted on the site www.ricetteitaliane.net.
From what has been indicated above, it follows that the provision of personal data is strictly necessary in order to fulfil the above-mentioned purposes: failure to provide such data will make it impossible to achieve the above-mentioned purposes and therefore to fulfil the request. The extent and adequacy of the Data provided will be evaluated from time to time, in order to determine the consequent decisions and to avoid the processing of Data exceeding the purposes pursued.
Modalities of processing
By processing of personal data, pursuant to Article 4 no. 2) of the GDPR, we mean any operation or set of operations, carried out even without the use of electronic means, concerning the collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, erasure and destruction of data, even if not registered in a database.
The processing is carried out by means of automated systems for a period of time strictly necessary to achieve the purposes for which they were collected and in any case, in accordance with the legal provisions in force.
How long we will keep your data
Your personal data will be kept for a period no longer than is necessary to achieve the purposes for which it was collected and subsequently processed. Personal data will be stored for the duration of the relationship between the parties and also for a period thereafter in accordance with the following criteria:
- within the time limits set by the legislation in force;
- within the time limits laid down by legislation, including secondary legislation, requiring the retention of data (e.g. tax returns);
- within the period necessary to protect the rights of the data owner in the event of disputes relating to the provision of the service.In any case, the maximum data retention period is estimated at 10 years from the termination of the relationship between the parties.
Communication and dissemination of data
Personal data are processed by employees and/or collaborators of the Data Controller, suitably trained, and will not be disclosed, but may be communicated to third parties (including Partners, consultants and freelance professionals, banks and credit institutions, insurance companies), in order to fulfil obligations deriving from the law, regulations, EU legislation or for aspects concerning the management and execution of the existing or existing legal relationship.
For all the purposes indicated in this information notice, your data may also be communicated abroad, within and outside the European Union, in compliance with the rights and guarantees provided for by the regulations in force, subject to verification that the country in question guarantees an ‘adequate’ level of protection.
Rights of the data subject
As an interested party, you can ask for:
a) access to personal data;
b) their correction in the event of inaccuracy;
c) the cancellation;
d) the limitation of processing;
e) the right to object to data processing where the conditions are met;
d) the right to data portability, that is to receive in a commonly used and machine-readable structured format the personal data provided.
For what is not expressly provided by the provisions referred to above, please refer in full to the legislation in force on Privacy and specifically to art. 15, 16, 17, 18, 20,21 and 22 of the GDPR.
In the event of a breach, the data subject has the right to lodge a complaint with the competent supervisory authority (art. 13 para. 2 lett d) GDPR).
Withdrawal of consent
You can withdraw your consent to the processing of your personal data at any time, without this affecting:
– the lawfulness of data processing carried out in the period prior to the revocation;
– further processing based on legal bases other than consent, such as contractual and legal obligations.
For further clarification about this policy or any subject related to the protection of your personal data and the free movement thereof, or in case you wish to exercise the rights mentioned above or withdraw consent, you can write to info@ristogest.eu
Data Controller
The data controller is Ristogest S.r.l. Viale C. Cattaneo 42/H – 23900 Lecco (LC)
