In implementation of Regulation (EU) 2016/679, on the protection of individuals with regard to the processing of personal data and the free movement of such data (hereinafter “Regulation”), the information on how to handle personal data acquired through the website https://unilab.it/.

The information is provided only for the site and not for other websites that may be accessed by the user through links contained therein. The purpose of this document is to provide information on how, when and what information the Data Controller must provide to users when they connect to the website pages, regardless of the purposes of the link, according to Italian and European legislation.

The processing is based on the principles of lawfulness and fairness in accordance with the regulations. The information you choose to share through the Site will be treated in accordance with this Privacy Policy. The information collected is what is necessary to provide the Service and offer you a personalized experience.

Data controller

Identity and contact details

Unilab Laboratori Industriali S.r.l.
Via Umbria, 22 – 35043 Monselice (PD)
C.F. e P.IVA 03314040274 – SDI 7HE8RN5
Tel. 0429.781280 – Fax 0429.784527

Data Protection (D.P.O.)

Identity and contact details

Roberto Guggia

Unilab Laboratori Industriali S.r.l.

Via Umbria, 22 – 35043 Monselice (PD)

Email: segreteria@unilab.it

The data subjects/users (those to whom the data relates) you can contact the Data Protection Officer for all questions relating to the processing of your personal data and the exercise of your rights arising from Regulation 2016/679/EU of the European Parliament and of the Council of 27 April 2016.

1. Types of data collected

They consist of data that is implicitly provided by the tools used to access and use the services or can be explicitly provided by the interested party. The Data Controller may process the following categories of personal data of users: technical browsing data related to the IP address, identification codes of the devices used by the user for the use of the site or services, Type of browser and parameters of the device used to connect to the site, name of the internet service provider (ISP), date and time of visit, web page from which the visitor came (referral) and exit, possibly number of clicks.

The website collects data from users through browsing data.

The computer systems and software procedures used to operate this website acquire, in the course of their normal operation, some personal data whose transmission is implied by the use of Internet communication protocols . This is information that is not collected to be associated with identified data subjects, but that by its very nature could, through processing and associations with data held by third parties, allow users to be identified. This data category includes the IP addresses or domain names of computers used by users connecting to the site, the addresses in notation URI (Uniform Resource Identifier) of resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the reply given by the server (good end, error, etc.) and other parameters related to the user’s operating system and computer environment.

2. Purpose of the Processing of the collected data

Personal data voluntarily provided will be processed for the following purposes, until you object:

• Carrying out operations closely linked to and instrumental in managing the relationship with users or visitors of the site;
• collection, storage and processing of your data for: statistical analysis also in anonymous and/or aggregated form; statistical analysis aimed at verifying the quality of the services offered by the site.
• Legal defense: the personal data of the user can be used for the defense by the Owner in court or in the phases leading to its possible establishment, from abuse in the use of the same or related services by the User. The data could be used to establish responsibility in case of hypothetical computer crimes against the site.
• maintenance: the Personal data of the user can be processed with additional methods and purposes related to the maintenance of the systems.

The processing of personal data through the site will pursue the purposes intended for the fulfillment of obligations arising from laws, rules and regulations.

In addition, for the purposes of site security, automatically recorded data such as IP address could be used, in accordance with applicable laws, to block attempts to damage the site itself or to harm other users, or any other harmful activity or offence.

These data are never used for profiling the user, but only for the purpose of protecting the site and its users.

3. Cookie

Please refer to the section: https://unilab.it/en/cookie-policy/

4. Transfer of data to non-EU countries

The data subject’s personal data will not be transferred to third countries. In the event that personal data is transferred to third countries or international organisations, all provisions of Chapter V (EU Regulation 2016/679) will be complied with in order to ensure an adequate level of protection.

5. Transmission and diffusion

The data, subject to processing, will not be sold or exchanged with third parties without the express consent of the interested party. The data may be communicated to third parties belonging to the following categories:

Entities providing services for the management of the information system;

Studies or companies in the context of assistance and consultancy relationships;

authorities responsible for fulfilling legal obligations and/or public bodies’ orders, upon request;

External provider;

companies that carry out the regular and extraordinary maintenance of the website.

The data will not be subject to dissemination.

6. Method of processing- Storage

The processing will be carried out in an automated and manual manner, with methods and tools designed to guarantee maximum security and confidentiality, by specially authorised parties. Upon expiration, the data will be deleted or anonymised, unless there are additional purposes for the storage of the same. Data (IP address) used for site security purposes (block attempts to damage the site) are kept for 30 days. Data for analytics (statistics) purposes are kept in aggregate form for 24 months. At the end of the retention period, the Personal Data will be deleted. Therefore, at the end of this period, the right to access, delete, rectify and the right to data portability can no longer be exercised.

7. Location

The Data are processed at the operating locations of the Controller and in any other place where the parties involved in the processing are located, as well as in any other place where it will be processed by the services linked to the site. In order to obtain more precise information, the User can refer to the respective sections of this document or ask for information from the Owner by contacting him at the details shown in the opening.

8. Security measures

The data of visitors/users are treated in a lawful and correct manner, taking appropriate security measures to prevent the unauthorized disclosure, modification or destruction of the data. The processing is carried out using computer and/ or telematic tools, with organizational methods and logic strictly related to the purposes indicated. In addition to the Owner, in some cases, categories of data subjects involved in the organization of the site or external entities (such as third-party technical service providers, hosting providers) may have access to the data.

9. Rights of the User/data subject

Users may exercise certain rights with respect to the Data processed by the Controller. In particular, the User has the right to:

• revoke the consent at any time. The User can withdraw the consent to the processing of their personal data previously expressed.

• oppose the processing of your Data. The User may object to the processing of their Data in whole or in part, when it takes place on a legal basis other than consent. Further details on the right of opposition are indicated in the section below.

• access your Data. The User has the right to obtain information about the Data processed by the Controller, on certain aspects of the processing and to receive a copy of the Data processed (right of access).

• verify and request rectification. The User may verify the correctness of their Data and request its update or correction.

• obtain the restriction of processing. When certain conditions are met, the User can request the limitation of the processing of their Data. In this case, the Data Controller will not process the Data for any other purpose than their storage.

• obtain the deletion or removal of your Personal Data. When certain conditions are met, the User can request the deletion of their data by the Owner (right to be forgotten).

• receive your Data or have it transferred to another owner. The User has the right to receive his Data in a structured format, commonly used and readable by automatic device and, where technically feasible, to obtain its unhindered transfer to another owner. This provision is applicable when the Data are processed with automated tools and the processing is based on the User’s consent, on a contract of which the User is a party or on contractual measures related to it (right to data portability).

• to file a complaint. The User may lodge a complaint with the competent data protection supervisory authority or take legal action.

How to exercise rights

To exercise the rights of the User, Users may address a request to the contact details of the Owner indicated in this document. The requests are filed free of charge and processed by the Owner as soon as possible, in any case within three months.

With reference to the new procedure for notification of data breaches to the Data Protection Authority (Data breach), please refer to the following link: https://servizi.gpdp.it/databreach/s/scelta-aut.h

10. Definitions and legal references

Personal Data (or Data)

Personal data is any information which, directly or indirectly, including in connection with any other information, including a personal identification number, identifies or can identify a natural person.

Data use

Information collected automatically through this website (including from third party applications integrated into this website), including: IP addresses or domain names of the computers used by the User that connects to this site, the addresses in URI notation (Uniform Resource Identifier), the time of the request, the method used to forward the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response from the server (good end, error, etc.) the country of origin, the characteristics of the browser and operating system used by the visitor, the various time-related connotations of the visit (for example the length of time spent on each page) and details of the route taken within the website, with particular reference to the sequence of pages consulted, parameters related to the operating system and computer environment of the User.

Data Controller

The natural or legal person, public authority, department or other body which, individually or jointly with others, determines the purposes and means of processing personal data and the instruments used, including safety measures relating to the operation and use of this site. The Data Controller, unless otherwise specified, is the owner of this site.

Data Controller (or Data Controller)

The natural person, legal entity, public administration and any other entity that processes personal data on behalf of the Controller, as set out in the privacy policy.

This website

The hardware or software tool by which Personal Data of Users is collected and processed.

User

The individual who uses this website that, unless otherwise specified, coincides with the Data Subject.

Person concerned

The individual to whom the Personal Data relates.

Service

The Service provided by this website as defined in its terms (if any) on this website/application.

Unione Europea (o UE)

Unless otherwise specified, any reference to the European Union contained in this document is understood to include all current member states of the European Union and the European Economic Area.

Cookie

Small portion of data stored within the User’s device.

Legal information

This privacy policy is based on the GDPR as set out in Reg. (EU) n. 2016/679. Unless otherwise specified, this privacy policy applies exclusively to this website and, in general, the data controller “Unilab Laboratori Industriale S.r.l.”, its ancillary and related services. This Privacy Policy may be updated and amended from time to time. Therefore, it is recommended to regularly check the appropriate section of the Site to verify the introduction of any changes.