PRIVACY POLICY

Pursuant to Article 13 of the General Data Protection Regulation 2016/679 (GDPR) and to Provision No. 229 of 8 May 2014 on the use of cookies, visitors to the website are informed about the use of the data they enter and of the cookies used by the website. This information is also provided in accordance with Recommendation No. 2/2001 of the Working Party set up under Article 29 of Directive 95/46/EC. This information applies exclusively to the websites and portals of Fewo Service Südtirol, but not to other websites that may be reached via links.

THE CONTROLLER AND THE RIGHTS OF THE DATA SUBJECT
When the website is accessed, personal data, or data that can be attributed to the user through the use of cookies, may be processed. The controller is Fewo Service Südtirol GmbH, with registered office at Bahnhofstraße 30, 39025 Naturns, South Tyrol (Italy). The controller can be contacted at: info@fewo-service.it

PURPOSES AND METHODS OF PROCESSING
For data collected by means of cookies, please refer to the corresponding section.

NAVIGATION DATA
The information systems and software procedures required to operate this website collect, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.

This information is not collected in order to be associated with identified data subjects, but by its very nature it could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes the IP addresses or domain names of the computers used by users who access the website, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system or computer environment.

These data are used solely for the purpose of compiling anonymous statistics on the use of the website and to check that it is functioning correctly; they are deleted immediately after processing. Except where the data are used to establish liability in the event of hypothetical computer crimes against the website, data on web contacts are currently not kept for longer than seven days.

DATA COLLECTED VIA CONTACT FORMS AND CORRESPONDING SECTIONS
This information refers to data voluntarily provided by the user (e.g. enquiries by e-mail, phone or WhatsApp).

Please note that the data provided will be used exclusively to process the request. Any further purpose requires separate information and a specific, separate consent. Processing is carried out mainly electronically, although paper-based processing is not excluded.

MANDATORY OR OPTIONAL PROVISION OF DATA
The data collected to process contact requests are necessary in order to provide the requested service: in this case, providing the data is mandatory. Any refusal will make it impossible to provide the service.

Providing data for any further advertising purposes (except in the corresponding sections) is optional. A refusal does not affect the use of the requested service.


TRANSFER OF DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANISATIONS
The website is hosted by Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA) and delivered via its network. In the process, technically necessary connection data (e.g. the IP address) may also be processed on servers outside the EU. Cloudflare is certified under the EU-U.S. Data Privacy Framework. Beyond this, we do not transfer your data to third countries or international organisations.

DURATION OF STORAGE OF PERSONAL DATA
Data collected via the web are stored only for as long as is strictly necessary to process the requests or to fulfil the specific purposes.

COMMUNICATION AND DISSEMINATION
The data collected via the website are neither communicated nor disseminated in any way.

AUTOMATED DECISION-MAKING
The controller does not in any way use automated decision-making procedures concerning your personal data.

RIGHTS OF THE DATA SUBJECT
With regard to your personal data, we inform you that you may exercise the following rights provided for by Article 15 et seq. of Regulation (EU) 2016/679:

  1. Right of access to the following information:
    a. the purposes of the processing,
    b. the categories of personal data being processed,
    c. the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations,
    d. the existence of the right to request rectification or erasure of personal data or restriction of processing of personal data concerning you, or to object to such processing

2. Right to rectification, i.e.:
a. the rectification without undue delay of inaccurate personal data concerning you,
b. the completion of incomplete personal data, including by means of a supplementary statement;


3. Right to erasure without undue delay of the data concerning you, where:
a. the data are no longer necessary for the purposes for which they were collected or otherwise processed,
b. consent is withdrawn and there is no other legal ground for the processing,
c. you object to the processing and there are no legitimate grounds for the processing,
d. the personal data have been unlawfully processed,
e. the personal data have to be erased for compliance with a legal obligation,
f. the personal data have been collected in relation to the offer of information society services


4. Right to restriction of processing:
a. where the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data,
b. where the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
c. where the data subject requires the personal data for the establishment, exercise or defence of legal claims, even though the controller no longer needs the personal data for the purposes of the processing,
d. where the data subject has objected to processing by virtue of the right to object;


5. Right to be notified of any rectification or erasure of personal data or restriction of processing;


6. Right to data portability, i.e. to receive the personal data concerning you in a structured, commonly used and machine-readable format and to transmit those data to another controller, provided that:
a. the processing is based on consent given by the data subject for one or more specific purposes, or on a contract concluded with the data subject, and
b. the processing is carried out by automated means;


7. Right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you. You have the right to lodge a complaint with a supervisory authority if you consider that the rights listed here have been infringed.

To exercise the above rights, you can contact the controller by registered letter with acknowledgement of receipt or by e-mail at the addresses given above. You will receive a written reply within 30 days (unless an oral reply is expressly requested), which may also be sent electronically.

UNDERAGE VISITORS (16 years)

The website governed by this privacy policy is not intended for use by minors. We are aware of the need to protect data concerning minors, particularly in the online environment. We therefore do not collect or store any data of underage visitors – except inadvertently.