In accordance with Articles 13 and 14 of EU Regulation No. 679/2016 (GDPR) and Legislative Decree 196/2003 and amendments (Personal Data Protection Code)
This notice outlines the rules applied by CN GROUP (hereinafter referred to as the “Data Controller”) for the collection and processing of your personal data as an individual through the website www.cn-group.it (hereinafter referred to as the “website”). This commitment is part of the broader data protection system regulated at the corporate level for data processed with IT systems.
The purpose is to comply with current regulations regarding the processing of personal data, including the obligations to protect the personal information provided during online consultations or the use of services offered by the website.
This notice does not extend to processing carried out by third parties through websites that may be linked via links present on the site. The Data Controller disclaims any responsibility or obligation regarding the content of such external sites.
Identity and contact details of the Data Controller
The Data Controller (i.e., the entity that determines how your personal data is “used”) is:
CN Group
info@cngroup.it
Type of personal data subject to processing
Among the personal data collected by the site are name, surname, and email address.
Purpose of processing, legal basis, retention periods: why we process the data, how we do it lawfully, and for how long
The processing of your personal data will be based on principles of fairness, legality, and transparency, protecting confidentiality and rights. The collected data may also be processed by third-party companies appointed as Data Processors.
The Data Controller commits to processing the collected data in accordance with the principle of “data minimization,” meaning that data will be collected and processed only to the extent necessary for the purposes described below, and in compliance with the principle of “storage limitation” as outlined in Article 5 of EU Regulation 679/2016.
Browsing through our website does not involve the processing of personal data, as data collection via plugins and back-end tools occurs in an anonymous form, except in the following case:
- Data collection from the contact form: Your contact request involves the collection of personal information such as name, surname, phone number, and email address. This data will be processed solely to provide the requested service with your consent. Consent can be withdrawn as described later in this notice. This data will be retained until the purposes for which it was collected are fulfilled.
To whom we transmit the data and why:
Your personal data may be disclosed, in strict relation to the purposes outlined above and for the performance of activities related to the established relationship and/or to comply with legal obligations, to the individuals or categories of individuals listed below:
- Suppliers of goods and services, including outsourced providers, for the delivery of services related to the relationship established with you (assistance, site maintenance, supply of networks, and electronic communication services)
Such parties will process your data as Data Processors (Article 28 of the Regulation). The list of Data Processors is available at the Data Controller’s office and can be consulted upon request to the Data Controller.
The personal data used will not be transferred to countries outside the EU.
Cookies and Profiling
The website does not use any computer techniques for the direct acquisition of personal identifying data from users or for user profiling; however, to make navigation easier and faster, “technical” cookies are used. Cookies are small pieces of software code that allow us to distinguish between new and returning visitors and to understand how users navigate through our site. Cookies do not record any personal information. The use of so-called session cookies is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to ensure secure and efficient browsing of the site.
For its operation, this site uses only technical cookies, and their use is not aimed at collecting personal identifying data from users.
Widget Video YouTube (Google Inc.)
YouTube is a video content viewing service managed by Google Inc. that allows this site to integrate such content within its pages.
On this site, videos are accessed using the specific URL `https://www.youtube-nocookie.com`, which does not use profiling cookies.
Google Analytics with anonymized IP (Google Inc.)
Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google uses the personal data collected to track and analyze the use of this site, compile reports, and share them with other Google services. Google may use personal data to contextualize and personalize ads in its advertising network. This integration of Google Analytics anonymizes your IP address. The anonymization works by truncating the IP address within the boundaries of EU member states or other countries adhering to the European Economic Area agreement. Only in exceptional cases will the IP address be sent to Google servers and truncated within the United States.
Personal Data collected: Cookies and Usage Data.
Location of processing: United States – Privacy Policy – Opt Out.
Api Google Maps (Google Inc.)
Google Maps is a map visualization service managed by Google Inc. that allows this site to integrate such content into its pages.
On this site, maps are included using the Google Maps API, which calls the specific URL http://maps.googleapis.com, and does not use profiling cookies.
Rights of the Data Subject
As a data subject, you have the right to request the data controller to access your personal data and to rectify or delete it, or to limit the processing of your personal data, provided that the conditions set out by the GDPR (Articles 15-18) are met.
In the case of rectification, integration, or deletion, you have the right to request a list of recipients of these actions (Art. 19).
You have the right to receive, in a clear and readable format, the personal data held by the Data Controller and to transmit such data to another Data Controller without hindrance (Art. 20).
You have the right to object to the processing of personal data concerning you if the conditions specified by the GDPR apply (Art. 21).
You have the right to file a complaint with the Data Protection Authority – www.garanteprivacy.it.
You can also withdraw any consent previously given for the processing of your data at any time. The withdrawal of consent does not affect the lawfulness of processing based on the consent provided before its withdrawal.
You may at any time exercise the rights listed above by sending a request and contacting the Owner by e-mail.
The Data Controller has not appointed a Data Protection Officer.
This notice will be subject to updates in the event of regulatory changes or new purposes. The Data Controller will inform you if such changes are relevant to you. To facilitate this verification, the notice includes the date of the last update.
Trieste, 20 August 2024