WHY THIS PRIVACY NOTICE

Browsing the website involves sending cookies and similar tools to the user's terminal.

Therefore, with this document, we provide users who browse on the site information about cookies and similar tools used or allowed to install.

CATEGORIES OF DATA THAT WE PROCESS

A "cookie" is a small text file created on the user's computer when he accesses a particular site, with the purpose of storing and transporting information. Cookies are sent by a web server (which is the computer on which the visited website is running) to the user's browser (Internet Explorer, Mozilla Firefox, Google Chrome, etc.) and stored on the computer of the latter; they are then sent back to the website at the time of subsequent visits.

During navigation, the user may receive cookies from different sites on his terminal (so-called "third-party" cookies), set directly by the operators of said websites and used for the purposes and according to the procedures defined by them.

The regulation concerning the use of cookies also concerns other similar tools (such as pixels, web beacons, web bugs, clear GIFs or others) that allow user identification.

WHICH COOKIES ARE USED?

The Site uses technical cookies, as well as third-party analytics cookies and similar third-party profiling cookies and tools. The cookies used are indicated below in detail. 

Technical cookies, session or storage cookies

In compliance with current laws, consent to the use of session cookies by users is not required. More precisely, the site uses:

— ‘has_js’ (Allows using javascript), expiration: end of the session;
— ‘_gat’ (Associated with Google Analytics, allows to limit the connection band before the profiling), expiration: end of the session;
— ‘cookie-agreed’ (Associated with cookie acceptance), expiration: 365 days;

— ‘webform-*[*]’ (Associated with the application form), expiration: 24 hours;

— ‘SSESS*’ (Associated with the application form), expiration: 1 month.

(*) Asterisk is a 'wildcard character'.

Third-party cookies

Through the site are installed some third-party cookies, analysis and profiling, which are activated by clicking “OK, I Agree” on the consent banner.

The individual cookies of third parties are reported in detail, as well as links through which the user can receive more information and request the deactivation of cookies.

List of third-party cookies:

— ‘_gid’ (Associated with Google Analytics, details follow), expiration: 2 days;
— ‘_ga’ (Associated with Google Analytics, details follow), expiration: 24 months;

— ‘__stripe_sid’ (Associated with Stripe, details follow), expiration: 24 hours;

— ‘__stripe_mid’ (Associated with Stripe, details follow), expiration: 12 months;

The site uses Google Analytics for analysis purposes. The data generated by Google Analytics are stored by Google as indicated in the information available here https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage. The retention time has been set at 14 months. To consult the privacy policy of Google, please refer to the website http://www.google.com/intl/en/analytics/privacyoverview.html

The website uses Stripe for online payment. The data generated by Stripe are stored by Stripe as indicated in the information available here https://stripe.com/it/privacy#translation.

WHAT HAPPENS IF YOU PREVENT THE INSTALLATION OF COOKIES?

Except for technical cookies strictly necessary for normal navigation, the installation of the other cookies is left to the user's will, who can authorize it by clicking on the "ok" button in the banner containing the short information.

The installation of cookies other than technical cookies can also be avoided through the appropriate functions available on your browser.

In the event that the user decides not to authorize the installation of cookies other than technical cookies, he will still be able to browse the site.

HOW TO DISABLE COOKIES?

Without prejudice to the foregoing in relation to technical cookies, the user may delete the other cookies through the functions indicated in this statement, in the part in which the cookies used are listed, or directly through their browser.

Please note that each browser has different procedures for managing settings. The user can obtain specific instructions through the links below.

> Windows Explorer
> Google Chrome
> Mozilla Firefox
> Safari

With regard to users browsing from mobile, it is specified that the system configurations to exclude the storage of cookies or to delete them vary depending on the brand and/or model of the device used and it is, therefore, necessary to consult the indications provided by the manufacturer.

To get information about the cookies stored on your terminal and disable them individually, please refer to the link: http://www.youronlinechoices.com/it/le-tue-scelte.

DATA CONTROLLER

The data controller is Rosario Gagliardi Srl, Via Cairoli 20, Syracuse - VAT 01826720896

As regards the ownership of the processing of data acquired through third-party cookies, please refer to the information given in the list in this document.

WHAT ARE THE RIGHTS OF THE INTERESTED?

The law grants the interested party the right to request the data controller to access personal data and to correct or cancel it or limit its processing or to oppose its processing, in addition to the right to data portability.

The interested party can assert his rights at any time, without formalities, by contacting the owner through the email address privacy@madeprogram.it

Below are detailed the rights recognized by current legislation regarding the protection of personal data.

• The right of access, i.e. the right to obtain from the data controller confirms whether or not a personal data treatment is being processed and in this case, to obtain access to personal data and the following information:

a) the purposes of the processing;

b) the categories of personal data in question;

c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular, if recipients of third countries or international organizations;

d) where possible, the retention period of the personal data provided or, if not possible, the criteria used to determine this period;

e) the existence of the right of the interested party to request the data controller to rectify or delete personal data or limit the processing of personal data concerning him or to oppose their treatment;

f) the right to lodge a complaint with a supervisory authority;

g) if the data are not collected from the data subject, all information available on their origin;

h) the existence of an automated decision-making process, including profiling and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the data subject. Where personal data are transferred to a third country or to an international organization, the data subject shall have the right to be informed of the existence of adequate guarantees relating to the transfer.

• The right of rectification, i.e. the right to obtain from the data controller the correction of inaccurate personal data concerning him without undue delay. Taking into account the purposes of the processing, the data subject has the right to obtain the integration of incomplete personal data, also by providing an additional declaration.

• The right to cancel, i.e. the right to obtain from the data controller the cancellation of personal data concerning him without undue delay if:

a) personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;

b) the interested party revokes the consent on which the treatment is based and if there is no other legal basis for the processing;

c) the interested party opposes the processing carried out because it is necessary for the execution of a task of public interest or connected to the exercise of public authority for which the holder is invested or for the pursuit of legitimate interest and there is no legitimate overriding reason to proceed with processing, or opposes processing for direct marketing purposes;

d) personal data have been processed unlawfully;

e) personal data must be deleted to fulfil a legal obligation under Union or Member State law to which the controller is subject;

f) personal data have been collected in relation to the provision of information society services to minors.

However, the cancellation request can not be accepted if the treatment is necessary:

a) for exercising the right to freedom of expression and information;

b) for the fulfilment of a legal obligation requiring treatment under Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of the official authority of which the data controller is invested;

c) for reasons of public interest in the public health sector;

d) for archiving purposes in the public interest, for scientific or historical research or for statistical purposes, insofar as the cancellation risks making it impossible or seriously prejudices the achievement of the objectives of such treatment;

e) for the assessment, exercise or defence of a right in court.

• The right of limitation, i.e. the right to obtain that the data are processed, except for storage, only with the consent of the interested party or for the assessment, exercise or defence of a right in court or for protecting the rights of another natural or legal person or for reasons of significant public interest of the Union or a Member State if:

a) the interested party disputes the accuracy of personal data for the period necessary for the data controller to verify the accuracy of such personal data;

b) the processing is illegal and the interested party opposes the cancellation of personal data and asks instead that its use is limited;

c) although the data controller no longer needs it for processing purposes, personal data are necessary for the data subject to verify, exercise or defend a right in court;

d) the interested party opposed the processing carried out because it was necessary for the performance of a task carried out in the public interest or in connection with the exercise of official authority vested in the holder or for the pursuit of the legitimate interests of the data controller or third parties, pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.

• The right to portability, i.e. the right to receive, in a structured, commonly used and automatically readable form, personal data concerning him / her provided to the holder and has the right to transmit such data to another holder without impediments by the the holder to whom he has provided them, as well as the right to obtain direct transmission of personal data from one holder to another, if technically feasible, if the processing is based on consent or on a contract and the processing is done by automated means. This right is without prejudice to the right to cancellation.

• The right to object, that is, the right of the interested party to oppose at any time, for reasons connected with his particular situation, the processing of personal data concerning him or her as necessary for the performance of a public or related task. 'exercise of public authority for which the holder is invested or for the pursuit of the legitimate interest of the data controller or third parties. If personal data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him/her for such purposes, including profiling in so far as it is related to such direct marketing.

The interested party is then informed that, if he/she considers that the processing of his / her personal data takes place in violation of the provisions of the RGDP, he/she has the right to lodge a complaint with the Guarantor, as foreseen by art. 77 of the Regulation itself or to take appropriate judicial offices (Article 79 of the Rules).