Personal data processing policy

The following privacy regulation – also understood to be disclosure pursuant to Article 13 of the European Regulation 2016/679 “General Data Protection Regulation” – has the purpose of describing the procedures for the collation and use of personal data via this website and addresses the users and consumers of “EI Towers SpA” web services, which can be accessed on-line using the address:
www.eitowers.it
corresponding to the initial page of the EI Towers SpA official website.

The Data controller

The “Data controller” is EI Towers SpA, represented by the pro temporary legal representative domiciled care of the headquarters of the company (hereinafter the “Data controller”).
The Data controller has appointed Mr. Cosimo Calabrese as Data Protection Officer.
The Data controller may appoint other parties as “Data Supervisors” (hereinafter referred to as the “Supervisors”), internal or external, as well as Persons authorised to carry out processing operations (data processors).
You can contact the Data controller using the following e-mail address: sgp-EIT@eitowers.it.

Purpose of the processing

The data controller processes personal data, exclusively of a non-sensitive nature, communicated by the data subject via the website, in the areas:

• “Website Map”: by filling in the appropriate form;
• “Contacts”: by forwarding by means of e-mail.

The collation and processing of data are carried out for the purpose of:

1. meeting the requests made by the data subject and providing the services requested.
In accordance with Article 6 of the GDPR, the legal basis for the processing is the fulfilment of the services requested by the user (let. b)).
2. fulfilling a legal obligation to which the Data Controller is subject; fulfilling the obligations deriving from the law, regulations, national and EU legislation or an order of the Authority.
In accordance with Article 6 of the GDPR, the legal basis of the processing is the fulfilment of a legal obligation (let. c)).

In addition to this data, freely entered by the user on the website, navigation data, collected following the use of our services by the user, may also be processed and, in particular:

• information on the device used by the user to connect up;
• device-specific information (e.g. device type, mobile network information);
• Log information. When you use our services or view content provided by the Data controller, we may automatically collect and store certain information in the server logs. This information may include: data on how you use our service, such as search queries; Internet connection data information such as IP address and all data associated with it; device event information such as system activity, hardware settings, browser type and language, date and time of requests and the reference URLs; cookies that may uniquely identify your browser or account.

We and our partners may use various technologies to collect and store information when you visit the Website and/or use a Company service that may involve sending one or more cookies or anonymous identifiers to your device.

Subject matter and type of data processing carried out

The Data Controller processes personal data, exclusively of a non-sensitive nature, communicated by the data subject via the website in the “Website Map” and “Contacts” areas.
The processing of data for the purposes set out above takes place by automated means, on electronic mediums, in compliance with the rules on confidentiality and security envisaged by the law, the consequent regulations and internal provisions issued specifically.
EI Towers undertakes not to disclose the data to unauthorized persons, nor to use the same for purposes other than those indicated above. Such data may only be shown at the request of the authorities authorised by law.
The data is processed and stored at the administrative headquarters of the Company, in Lissone (MB) and care of outsourcing companies.

 

Nature of the conferral of the date and consequences of consent to processing

All the data entered in the “Website Map” and “Contacts” areas are indispensable for the provision of the services requested. Therefore, the user’s personal identification data and e-mail address are mandatory, as they are strictly connected to the nature of the services requested.
It follows that also the consent to processing is mandatory and any refusal would mean that the Company would be unable to provide the requested services.

Communication and transfer of data

The data may be communicated to public and private entities, natural persons and/or legal entities (legal, administrative and tax consultancy firms, IT companies and others) to whom the communication is necessary for the pursuit of contractual, administrative and accounting ends, as well as to ensure the use and enjoyment of the website.
The data can also be communicated to other parties, when the communication is envisaged or mandatory by law.
Personal data is processed within the territory of the European Union.

Duration of the data processing

The personal data will be processed for the period of time necessary for achieving the purposes for which it was collated. Please note in particular that the navigation data will be deleted within 2 years after its processing.
In any event, a longer conservation period may apply, if required by legal or regulatory provisions.

Rights of the data subjects

Pursuant to Articles 13, 15-22 of the GDPR, the data subject in particular has the right:

• to obtain confirmation as to whether or not personal data concerning him or her is being processed;
• to obtain access to the data and the following information (purpose of the processing, categories of personal data, recipients and/or categories of recipients, period of conservation);
• to obtain the rectification or integration of inaccurate personal data concerning him or her;
• to obtain the cancellation of personal data concerning him or her in the cases envisaged by Article 17 of the GDPR;
• to withdraw their consent to the processing, without prejudicing the lawfulness of processing based on consent before its withdrawal;
• to make sure that the personal data concerning him or her is only kept without it being used in any other way in the following cases envisaged by Article 18 of the GDPR;
• to receive the personal data which concerns him or her processed on an automated basis, in commonly used form, legible by means of automatic and interoperable device, if said data is processed by virtue of a contract or on the basis of their consent.

With regard to any request or communication, or to exercise your rights, you can contact the Data controller by sending an e-mail to: sgp-EIT@eitowers.it.

Amendments to this disclosure

The Data controller reserves itself the faculty to up-date this disclosure at any time. Therefore, you are advised to periodically check the same, for the purpose of being up-to-date on the Company’s privacy policy. If there are material changes to the policy, a notice will be posted on the Website, together with the updated Privacy Policy.