1. This Privacy Notice is provided in accordance with Article 13 of EU Regulation No. 2016/679 on the protection of natural persons with regard to the processing of personal data, and applies to users who interact with Idrostudi Srl. It is available at the homepage of the website: www.idrostudi.it.

2. This Privacy Notice applies exclusively to the website www.idrostudi.it and not to any other websites that may be accessed by the user through links contained therein.

3. All collected data will be processed in accordance with the principles of fairness, lawfulness and transparency, as well as data minimisation, purpose limitation and storage limitation. Appropriate technical and organisational measures are implemented to ensure the integrity and confidentiality of the data and to prevent unauthorised access by third parties or personnel not duly authorised, in order to protect the user’s privacy and rights.

4. This Privacy Notice may be subject to updates as a result of the introduction of new applicable regulations; users are therefore invited to review this page periodically.

1 - Data Controller

The Data Controller is IDROSTUDI S.R.L. Unipersonale, with registered office at c/o Area Science Park - Building L2, Loc. Padriciano no. 99 - 34149 Trieste, Tax Code and VAT No. 01039560329, represented by its legal representative pro tempore.

2 - Data Protection Officer

Idrostudi S.r.l. has appointed Datasec Project Srls as its Data Protection Officer (“DPO”), who may be contacted at: idrostudi@privacy-dpo.eu

3 - Purposes of processing and legal bases

1. The data collected by the website during its operation is used for the purposes indicated above and for the following purposes:

operation and security of the website;
responding to specific requests for services and/or information;
to develop a frequently asked questions (FAQ) database

2. The information systems and software procedures used to operate this website acquire, during their normal operation, certain personal data the transmission of which is implicit in the use of Internet communication protocols.

Such information is not collected in order to be associated with identified data subjects; however, by its very nature it may, through processing and association with data held by third parties, allow users/visitors to be identified.

These data are used solely for the purpose of obtaining anonymous statistical information on the use of the website and for monitoring its proper functioning, and they are deleted immediately after processing. Data may be used to ascertain liability in the event of unlawful acts to the detriment of the website.

3. The optional, explicit and voluntary sending of e-mails to the addresses indicated on this website entails the subsequent acquisition of the sender’s address, which is necessary to respond to requests, as well as any other personal data included in the message. Since the provision of data is optional and voluntary, no user consent is required.

4. Where forms are completed in order to request particular services, a specific information notice on the processing of the required data will be provided at the bottom of the relevant form and the user’s consent may be required.

5. The collected data shall be retained for a period not exceeding that necessary for the purposes for which it was collected, in order to fulfil contractual or pre-contractual obligations (without prejudice to statutory limitation periods and legal requirements, in compliance with the relevant rights and obligations arising therefrom).

4 - Methods of processing

Data shall be processed - by persons authorised to process it - using manual, IT and telematic tools, within and for the purposes specified above and, in any event, always ensuring the security and confidentiality of such data, also in accordance with the law and the decisions of the Italian Data Protection Authority (Garante per la protezione dei dati personali).

5 - Categories of recipients to whom data may be disclosed

The processing of personal data shall be carried out by persons expressly and specifically appointed as authorised persons and duly instructed; such persons shall process the data in accordance with the instructions received from the Data Controller, on the basis of operational roles assigned to them in relation to the functions performed.

Data may also be processed by third parties (outsourcers) used for the provision of services connected to the pursued purposes, which our organisation evaluates from time to time, in order to ensure greater protection, including whether to appoint them as external data processors in

respect of processing operations carried out by them. In all cases, such parties shall process the data in accordance with the instructions received from the Data Controller, on the basis of operational roles assigned to them in relation to the functions performed, limited to what is necessary and instrumental for the execution of specific operations within the requested services, and exclusively in order to pursue the purposes indicated in this information notice.

6 - Transfers of data abroad

Your personal data may be transferred abroad, including to non-EU countries, in order to be processed through the use of tools or software of third-party companies using cloud technologies, provided that such countries ensure adequate levels of protection under applicable laws.

Transfers of personal data to countries outside the European Union which do not ensure adequate levels of protection shall be carried out only after entering into specific agreements between the Data Controller and such third parties containing safeguard clauses and appropriate guarantees for the protection of personal data (e.g. standard contractual clauses approved by the European Commission), or only where another requirement compliant with applicable Italian and European legislation is met.

7 - Social network plugins

This website incorporates plugins and/or buttons for social networks in order to allow easy sharing of content on your preferred social networks. Such plugins are designed so as not to set any cookies upon access to the relevant page, in order to protect users’ privacy. Any cookies are set, where provided for by the relevant social networks, only when the user effectively and voluntarily makes use of the plugin.

The collection and use of information obtained through plugins are governed by the relevant social networks’ respective privacy policies, which users are invited to consult.

Social plug-ins create a connection between the website visit and the social media platform of a social network service provider, communicating any installed cookies.

8 - Data subject rights

The data subject is entitled to:

obtain erasure, anonymisation or blocking of data processed in breach of the law;
obtain updating, rectification and completion of data;
obtain confirmation that such operations have been brought to the attention of those to whom the data has been disclosed;
object, on legitimate grounds, to the processing of data or to any automated decision-making process (including profiling);
·obtain restriction of processing or data portability to another controller. To exercise such rights, a request must be submitted by sending an e-mail to: privacy@idrostudi.it, or by registered letter with acknowledgement of receipt to: IDROSTUDI SRL Unipersonale - c/o Area Science Park Building L2 - Loc. Padriciano no. 99 - 34149 Trieste (TS), or by contacting the Data Protection Officer at: idrostudi@privacy-dpo.eu

Please note that the data subject always has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) in order to exercise their rights or in relation to any other matter concerning the processing of their personal data.

IDROSTUDI Srl Unipersonale

Registered and operational office
Area Science Park, Padriciano 99 - 34149 Trieste
Tel: +39 040.375.5800 | Fax: +39 040.375.5801
Email: contact@idrostudi.it | PEC: idrostudi@legalmail.it | www.idrostudi.it
VAT No. 01039560329