INFORMATION NOTE FOR THE PROTECTION OF PERSONAL DATA

(pursuant to Art.13 EU Regulation No.2016/679)

INDRA s.r.l., with registered offices in Magenta (MI), Via Novara n. 10 B/C, as the data processing controller and pursuant to Art. 13 of the EU Regulation no. 2016/679 (henceforth, “GDPR”), wished to inform you about the means of processing of the data of users who consult and use the services via telematic means through the web site. As such, the data controller, guaranteeing the respect of the prescriptions of the European and national norm for the protection of personal data, offers the following information:

1. Type of data collected and processed. The processed data is of two types:
- identifying common data (including: email address, name and surname) and information contained in the body of the message, directly and voluntarily by the user when sending messages or communications via mail to the controller, via the "contact" section of the web site;
- navigation data collected autonomously (e.g.: IP address, type of browser, information about the computer, the domain names of the computers used by users that connect to the site, the URI notation addresses of the requested resources, the time of the request and other parameters concerning the operating system and the user's IT environment). This data is used only to source statistical anonymous statistical information on the use of the site and to control its correct functioning. It is canceled immediately after processing. The data can be used to ascertain responsibility in the case of potential IT crimes causing damage to the site.

The controller will not collect nor process, in any case, specific (or "sensitive" data) or that of a legal nature pursuant to Art. 9 and Art. 10 of the GDPR.

With respect to the use of "Cookies" please refer to the specific information note.

2. Aims and legal basis of processing. Your personal data is processed to:
- permit navigation on the Web site;
- answer questions and/or respond to communications sent voluntarily via mail from the user to satisfy requests in the message. The legal basis of the processing is the need to respond to specific requests by the interested party.

3. Means of processing. Your personal data us subjected to processing that is manual (e.g. on paper) and electronic, computer based and telematic, with methods that are strictly required to meet the about noted aims, in complete respect of the laws and pursuant to the principle of legality, correctness, non-excessiveness and transparency.

4. Access to data. Access to data is permitted exclusively to personnel authorised for processing under the direct authority of the controller and the manager, pursuant to the laws for the protection of personal data. The processing is executed with the use of suitable security measures to prevent unauthorised access to data by third parties and to guarantee your privacy.

5. Communication and diffusion of data. The collected data is not subjected to diffusion or completely automated decision process, including profiling.
Communication to third parties may occur via public institutions or for legal requirements, as well as companies providing services (e.g. company providing assistance and maintenance of the IT system), operating in the correct and regular pursuance of the described aims. In every case, the processing by third parties must take place strictly as required by their commission, pursuant to the disposition of the laws in force. The updated list of the processing managers is stored at the data processing office.

6. Transference of data. Your data will not be transferred to a non-EU country or an international organisation.
In any case it is understood that, if required, Indra s.r.l. has the option of transferring data outside of the EU pursuant to the applicable laws.

7. Storage period. The processing controller will conserve the data for the time strictly required to achieve the aims indicated in point 2 (pursuant to the "principle of limitation of storage" under Art. 5 of the GDPR). This data will be eliminated when it is no longer required for the above-stated aims, with the exception of other storage obligations under the law.

8. Obligatory or optional nature of provision of data and consequences of refusal to provide such data. The provision of data is optional. Nevertheless, the non-provision of this data will make it impossible for the controller to provide the information and responses requested by the user via email.

9. Rights of the interested party. Pursuant to Art. 7, paragraph 3 of the GDPR, you have the right to revoke your consent to processing at any moment. The processing based on consent and executed prior to the revocation will continue to be considered legal.
Pursuant to Art. 15 of the GDPR, you have the right to access your personal data. In this case, the data controller will provide a copy of the personal data to be transferred. If the interested party presents a request via electronic means, and without further indication, the information will be provided in a commonly used electronic format.
Where applicable, you are also guaranteed the following rights under Art. 16-21 of the GDPR: the right to rectify if the data is not exact; the right to removal (that is the cancellation of your personal data without unjustified delay); the right to limit the processing; the right to oppose the processing of the data if processed for the execution of a legitimate interest of the controller, if the interested party considers that his/her rights and fundamental liberty has been violated; the right to the portability of the data (that is the right to receive the data in a structured and commonly used format even if to communicate this data to another controller); the right to opposition; the right to complain to the Guarantor for the protection of personal data.

10. Processing controller and means of execution of rights. You can exercise your rights at any time by contracting the processing controller: Indra s.r.l., with registered offices in Via Novara n. 10 B/C Magenta (MI), that can also be contacted at the following mail: privacy@indra.it  

This information note can be modified with additional elements and indications to more effectively meet your information requirements for "privacy" and to adapt to legislative changes.