EXPANDED PRIVACY POLICY STATEMENT

Cividini S.r.l. (hereinafter, also the “Company” or the “Data Controller”), as data controller wishes to inform you, pursuant to the applicable law on personal data protection, including the European Regulation 679/2016 concerning the protection of personal data (the “Regulation”), that the personal data provided by you during the establishment of the contractual relationship and during its execution, will be processed in compliance with the legislative and contractual provisions in force for the purposes and with the modalities indicated here below. In some circumstances, some data may also be collected from third parties, where necessary and always in compliance with applicable legislation.

1. Identity and contacts of the Data Controller
The Data Controller is Cividini S.r.l., with registered office in via Mazzucotelli 6/A Gorle (BG).

2. Personal Data collected and processed, purposes and legal grounds for processing
The Data Controller may process:
• identification data and contact details: by way of example name and surname or business name, fiscal code or VAT registration, residence or registered office, email address, telephone number;
• fiscal data or any data connected to payments (to make/made to receive/received).
• data related to product/s purchased.
a. to fulfil the obligations provided for by the law and/or by the existing contract with the Data Controller, and in any case stipulate and execute the sale purchase contract or any other contract in place; in this case, the data processing is lawful as it is needed to fulfil legal obligations connected to the establishment and management of the contractual relationship (Article 6, Paragraph 1, letters b) and c), of the Regulation);
b. the management of any possible litigation and the safeguard of Company’s rights; in this case, the data processing is lawful as it is needed to pursue a legitimate interest of the Company (Article 6, Paragraph 1, letter f) of the Regulation).
For these purposes your consent is not required.
c. the data can be also processed for the purposes of sending newsletters, advertisement and communications, or for marketing purposes; in this case, the data processing requires your consent (Article 6, Paragraph 1, letter a) of the Regulation) [optional].

3. Modalities of data processing and nature of data communication
Personal data will be processed by the Company through IT and paper systems, according to accuracy, fairness and transparency principles set by the applicable legal provision on data protection and safeguarding your privacy and your rights by adopting appropriate technical and organisational measures aimed at ensuring a level of safety that is adequate to the risks.
The communication to us and the updating of your personal data is mandatory according to current legislation (related to taxation or others) or for the execution of the contractual relationship. Lacking such data, it will not be possible to establish or – in some cases – proceed with the contractual relationship.
The communication of your personal data for the purposes et out at point 2.c. is facultative and not providing the connected data or revoking the consent will have no effect on the contractual relationship, but will result only in the impossibility of processing the data for the above mentioned purposes. [Optional]

4. Data retention period
All the data related to you will be retained in pursuance of the civil and fiscal obligations (e.g., civil obligation to store financial records and company mail for 10 years) and in any case only for the duration of the existent contract. After the termination of the contractual relationship, in order to safeguard Company’s rights, data will be retained – in a manner in which they will be available only in case it is necessary – for a period of time equal to the statute of limitation period of any right you may claim against the Company. This period changes depending on the kind of data and on any act interrupting or suspending such period.
In case you give your consent to the data processing for the purposes set out at point 2.c. such data will be retained for a maximum period of 24 months form the data collection.

5. Communication of the data processed
Your data will not be disclosed but, for the purposes above and pursuant to the principles set by the Regulation, they may be communicated to: the employees of the Company, its collaborators, consultants and professionals (in particular, but not limited to: accountants, company database provider etc.). In fulfilling the obligations arising from the law and from the contractual relationship or upon your request, data may be disclosed to public bodies or public authorities.

6. Data transfer
Your data will be stored at the registered office of the Company and on its servers, located in Italy. Your data will not be transferred outside the EU.

7. Rights of the Supplier
With reference to the data processing above, the Supplier may exercise the rights provided by the applicable law concerning personal data protection, including the rights to:
• obtain confirmation as to whether or not personal data concerning him/her are being processed, and, where that is the case, access to the personal data and the following information (right of access);
• update, modify and/or correct his/her personal data (right to rectification);
• ask for the erasure or the limitation of the processing of the data processed against the law, including those for which storage is not required by the purposes for which data were collected or otherwise processed (right to erasure and right to restriction of processing);
• revoke the consent, if provided, without prejudice to the lawfulness of the data processed on the basis of the consent given before the revocation;
• raise a claim in front of the Supervisory authority in case of violation of the rules concerning personal data protection;
• receive an electronic copy of the data related to him/her that the Employee provided during the employment contract (e.g., data related to salary and internal mobility services) and ask that such data are transferred to another data controller (right to data portability).
In order to exercise the rights above you can contact Data Controller at any time, sending your request to the following email address info@cividini.com via registered mail to the following address: Via Mazzucotelli 6/A, Gorle (BG).

COOKIE POLICY – EXTENDED STATEMENT

Cookies are small text strings that the websites visited by users send to their devices, where they are saved in order to be resent to the same websites when the users visit the website again. On the other hand, the third party cookies are set up by a website which is different from the visited one. And this is because on any website could be present items (such as images, maps, sounds, specific links to web pages on other domains) which are stored on a server which is different from the one of the visited site.
Cookies may perform different purposes: logging-in procedures, session monitoring, saving information about users who use the server, saving user preferences etc.
Cookies used on this site fall into the categories described below. If you continue browsing you consent to the use of all cookies.
At any time you can disable cookies on the browser; we remind you that this option could limit many of the site’s navigation features.

What are technical cookies?
Technical cookies are those used in order to allow the web navigation or to provide services requested by the user. They are not used for further purposes and are usually installed directly by the website manager.
Without using these cookies some operations could not be completed or would be more complex and / or less secure, for these activities the cookies, which allow to identify and keep the identification of the user during the whole session, are essential.
The web site of Cividini uses these cookies. In particular, their duration is strictly limited to any work session (at the browser’s closing they will be deleted).

What are profiling cookies?
These are cookies used to monitor the user’s navigation experience and create profiles on its preferences, habits, choices etc. With these cookies advertisements compliant with the preferences expressed by the user during navigation can be transmitted to the user’s device. The web site of Cividini does not use these cookies.

Instructions to turn cookies off
If you use Internet explorer: open Internet Explorer, click on “Tools” and then on “Internet Option”. Select the “Privacy” tab and move the mouse slider to the privacy level you want to set (up to block all cookies or down to allow all of them), then click on “OK”.
If you use Firefox: Go to the “Tools” menu of the browser and select the “Options” menu. Click on the “Privacy” tab and then uncheck the “Accept cookies” box. Click on OK.
If you use Safari: from Safari Browser select the “Edit” menu and then click “Preferences”. Click on “Privacy”. Set the setting “Block cookies always” and then click on ok.
If you use Google Chrome: Click on the Chrome menu in the browser toolbar. Select “Settings”. Click on “Show advanced settings”. In the “Privacy” section, click on the “Content settings” button. In the “Cookies” section, select “Do not allow sites to save data” and “block cookies and third-party site data”, and then click ok.
If you use any other kind of browser, check in the browser settings how to manage cookies.

Third Party cookies – Google Analytics
The web site of Cividini also includes some components transmitted by Google Analytics, a web traffic analysis service provided by Google, Inc. (“Google”). Here again, this is third-party cookies that are collected and managed anonymously in order to monitor and improve the performance of the host site (performance cookies).
Google Analytics uses “cookies” to collect and analyze anonymously the information about the Cividini website’s usage behaviors (including the user’s IP). This information is collected by Google Analytics, which processes them for the purpose of drafting reports for the operators of Cividini regarding activities on the website itself. This site does not use (and does not allow third parties to use) the Google Analysis Tool to monitor or collect personal identification information. Google doesn’t associate the IP address with any other data held by Google or attempts to link an IP address to a user’s identity. Google may also disclose this information to third parties where this is required by law or where such third parties refer the above information to Google.
For more information, please refer to the following link: https://www.google.it/policies/privacy/partners/.
The user can selectively disable Google Analytics action by installing on its browser the opt-out component provided by Google. To disable Google Analytics, please refer to the following link: https://tools.google.com/dlpage/gaoptout

Manage cookies – cookies settings
The user can decide whether to accept cookies using the settings of their browser or the banner which is visible at the opening of the web site. The total or partial disabling of technical cookies could compromise the use of the websites’ features reserved to registered users. On the contrary, the availability of the public contents is also possible by completely disabling cookies. Disabling “third party” cookies does not affect the possibility of browsing the website in any way.

List of Cookie on this Website

Cookie: Google Analytics
Name: _ga
Purpose: This cookie name is asssociated with Google Universal Analytics – which is a significant update to Google’s more commonly used analytics service. This cookie is used to distinguish unique users by assigning a randomly generated number as a client identifier. It is included in each page request in a site and used to calculate visitor, session and campaign data for the sites analytics reports.
Expiration: 2 years
Google Cookie Policy

Cookie: Google Analytics
Name: _gat
Purpose: This cookie name is associated with Google Universal Analytics, according to documentation it is used to throttle the request rate – limiting the collection of data on high traffic sites.
Expiration: 10 minutes
Google Cookie Policy

Cookie: Google Analytics
Name: _gid
Purpose: Used to distinguish users.
Expiration: 24 hours
Google Cookie Policy

Cookie: cividini.com
Name: _icl_current_admin_language
Purpose: Contains the current language of the admin user.
Expiration: 2 hours

Cookie: cividini.com
Name: euCookie
Purpose: Stores the user’s cookie consent state for the current domain
Expiration: 1 year

Cookie: cividini.com
Name: redux_current_tab, redux_current_tab_get
Purpose: set by WordPress, supports the website theme settings
Expiration: 1 month

Cookie: cividini.com
Name: wordpress_sec, wp-settings-1, wp-settings-time-1
Purpose: The number on the end is your individual user ID from the users database table. This is used to customize your view of admin interface, and possibly also the main site interface.
Expiration: 1 month