Information on the protection of personal data for website users
This page provides users with information regarding the processing of their personal data collected while browsing the website www.gruppoveritas.it, pursuant to Article 13 of EU Regulation No. 679/2016 (GDPR). This notice is provided only for the domain mentioned above and not for any other websites that may be consulted by the user through links to other domains. Therefore, following consultation of this site, data relating to identified or identifiable persons may be processed, and users are informed that:
Data Controller
The Data Controller is Veritas S.p.A., a joint-stock company with its registered office at Santa Croce 489, Venice.
Data Protection Officer
The Data Protection Officer (DPO) can be contacted at the registered office of Veritas S.p.A., Santa Croce 489, Venice.
Place and purpose of data processing
The processing operations for which Veritas S.p.A. is the Data Controller, related to the web services of this site, take place at the Controller’s address as well as at other Group offices. All data collected and processed are handled only by technical staff of the department in charge of processing or by persons appointed for occasional maintenance operations. These persons are formally authorized to perform such tasks, identified, trained, and made aware of the legal constraints.
No data derived from the web service are communicated or disclosed to third parties. Personal data provided by users who submit requests for the sending of informational material or other services are used solely for the purpose of performing the requested service or task and are not communicated or disclosed to third parties unless the communication is required by law or is strictly necessary to fulfill the requests.
Types of data processed
Browsing data and data retention period
The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified individuals, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users connecting to the site, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server’s response (success, error, etc.), and other parameters related to the user’s operating system and IT environment.
These data are used solely to obtain anonymous statistical information about the use of the site and to check its correct functioning, and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site; except for this eventuality, web contact data do not persist for more than seven days.
Data voluntarily provided by the user
The optional, explicit, and voluntary sending of emails to the addresses indicated on this site entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message.
Specific summary information will be progressively reported or displayed on the pages of the site prepared for particular on-demand services.
Cookies
The use of so-called cookies is limited to what is indicated in the cookie policy notice, drafted in compliance with the provision of the Italian Data Protection Authority of May 8, 2014.
Optional nature of providing data
Except as specified for browsing data, users are free to provide personal data included in the request forms to request the sending of informational material or other communications. Failure to provide such data may, in some cases, make it impossible to fulfill the requested service.
Processing methods
Personal data are processed using automated tools for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures are observed to prevent data loss, unlawful or incorrect use, and unauthorized access.
Data subjects’ rights
Data subjects, pursuant to Article 15 of the GDPR, have the right to:
- request from the Data Controller access to personal data and the rectification or erasure of such data or the restriction of processing concerning them, or to object to such processing;
- request data portability from the Data Controller, as provided for in Article 20 of the GDPR;
- lodge a complaint with the competent supervisory authority (for example, in the Member State where the data subject habitually resides, works, or where the alleged violation occurred), pursuant to Article 79 of the GDPR, without prejudice to any other administrative or judicial remedy.
Form for exercising data subject rights
To exercise these rights, including the right to erasure, use the appropriate form and send it to VERITAS through one of the following contact channels:
Specific information on personal data processing