Privacy Policy

GNOWEE Sas by Cantarutti Marco & C., 
with registered office in 
via Resistenza, 27 - 33040 - Corno di Rosazzo (UD) 
VAT number 02695320305 
e-mail: info@gnoweenoleggiobarche.com 
tel. 377 457 4168,

as Data Controller (hereinafter "the "Data Controller") considers privacy and the protection of Personal Data one of the main objectives of its activity. 

This document was drawn up pursuant to art. 13 of EU Regulation 2016/679 (hereinafter: “Regulation”) in order to allow you to know our privacy policy; We therefore invite you to carefully read this Privacy Policy before communicating any personal data to the Data Controller because it contains important information on the protection of your personal data.

This Privacy Policy:

is intended for the site www.gnoweenoleggiobarche.com (hereinafter the "Site");
constitutes an integral part of the Site and the services we offer; is made pursuant to art. 13 of the Regulation to those who interact with the web services of the Site.

The processing of your personal data will be based on the principles of correctness, lawfulness, transparency, purpose limitation and conservation, minimization and accuracy, integrity and confidentiality, as well as the principle of accountability referred to in art. 5 of the Regulation. Your personal data will therefore be processed in accordance with the legislative provisions of the Regulation and the confidentiality obligations set out therein.

By processing of personal data we mean any operation or set of operations, carried out with or without the aid of automated processes and applied to personal data or sets of personal data, such as collection, recording, organisation, structuring, storage , adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, cancellation or destruction.

1. The personal data being processed

Following navigation of the Site, we inform you that Gnowee Sas will process personal data which may consist of an identifier such as the name, an identification number, an online identifier or one or more characteristic elements of its physical identity suitable for making the interested party identified or identifiable (hereinafter only “Personal Data”). The Personal Data processed through the Site are as follows:

1.1 Treatments

Requests made via the site

Your personal data may be processed by the Data Controller to satisfy your requests made by writing to one of the e-mail addresses available on the Site or by filling in the forms on the Site.

Purpose of processing: Sending requests via web platform tools.

Lawfulness of the processing and legal basis of reference: Execution of a contract of which the interested party is a party or execution of pre-contractual measures adopted at the request of the same. Failure to provide the requested data will make it impossible for the Data Controller to carry out your request.

The legal basis of the processing is the need to execute your request, in compliance with article 6, paragraph 1, letter. b), GDPR. Therefore, it is not necessary to obtain your prior consent to the processing.

Personal data retention period: The data collected for this purpose will be processed for the time strictly necessary to satisfy your request and subsequently stored for 10 years after the request has been processed, in accordance with the provisions of art. 2946 cod. civil for ordinary prescription.

Type of data processed: The data processed falls into the category of common personal data.

Recipients of the Processing: The web application and the database are installed on a server whose operating system is based on cloud computing provided by VHosting Solution srl VAT number: IT06439660827 Address: via P.pe di Belmonte, 93 e-mail: info @vhosting-it.com capable of guaranteeing high levels of integrity, availability and confidentiality of information.

1.2 Navigation data

The computer systems and software procedures used to operate the Site acquire, during their normal operation, some Personal Data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the Site, the addresses in URI (Uniform Resource Identifier) ​​notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct functioning, to allow - given the architecture of the systems used - the correct provision of services, for security reasons and to ascertain liability in the event of hypothetical computer crimes against the Site or third parties and are usually deleted after 24 hours.

1.3 Special categories of personal data

When using the "Contacts" section of the Site, there may be a provision of your Personal Data falling within the category of special categories of personal data as defined in the art. 9 of the Regulation, literally "[...] data suitable for revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership. Any processing of such data takes place pursuant to art. 9 of the Regulation, subject to your explicit consent and in compliance with the authorizations in force pro tempore regarding the protection of personal data. Extensive and specific information will be delivered to you at the time of any first useful contact as required by the art. 111 bis of the Legislative Decree. 101/2018.

1.4 Data provided voluntarily by the user

The Site offers users the possibility of voluntarily providing personal information through, for example, registering on a contact form, requesting services, information or quotes, the optional, explicit and voluntary sending of e-mails to the addresses indicated on the Site, etc. This Privacy Policy is also intended for the processing of Personal Data voluntarily provided via the Site.

1.5 Third party data provided voluntarily by the user

When using some of the Site's services, the Personal Data of third parties sent by you may be processed. With respect to these hypotheses, you act as an independent data controller, assuming all legal obligations and responsibilities. In this sense, it grants the broadest indemnity on this point with respect to any dispute, claim, request for compensation for damage caused by treatment, etc. that should reach the Owner from third parties whose Personal Data have been processed through their use of the Site's functions in violation of the applicable Personal Data protection regulations.

In any case, if it provides or otherwise processes the Personal Data of third parties when using the Site, it guarantees from now on - assuming all related responsibility - that this particular processing hypothesis is based on an appropriate legal basis pursuant to art. . 6 of the Regulation which legitimizes the processing of the data in question.

1.6 Cookies: definitions, characteristics and application of the legislation

Cookies are small text files that the sites visited by the user send and record on their computer or mobile device, to be then re-transmitted to the same sites on the next visit. Thanks to cookies, a site remembers the user's actions and preferences (such as, for example, login data, the chosen language, font size, other display settings, etc.) so that they do not have to be indicated again. when the user returns to visit said site or navigate from one page to another of it. Cookies, therefore, are used to perform computer authentication, monitor sessions and store information regarding the activities of users who access a site and can also contain a unique identification code that allows tracking of the user's navigation within of the site itself for statistical or advertising purposes. While browsing a site, the user may also receive cookies on their computer from sites or web servers other than the one they are visiting (so-called "third party" cookies). Some operations could not be carried out without the use of cookies, which in certain cases are therefore technically necessary for the functioning of the site.

There are various types of cookies, depending on their characteristics and functions, and these can remain on the user's computer for different periods of time: so-called session cookies, which are automatically deleted when the browser is closed; so-called persistent cookies, which remain on the user's equipment until a pre-established expiry date.

Based on current legislation in Italy, express user consent is not always required for the use of cookies. In particular, "technical cookies" do not require such consent, i.e. those used for the sole purpose of transmitting a communication over an electronic communications network, or to the extent strictly necessary to provide a service explicitly requested by the user. In other words, these are cookies that are essential for the functioning of the site or necessary to carry out activities requested by the user.

Complete information on the use of cookies and interaction services with external platforms (e.g. social networks) by this site is available at the following link: Cookie Policy of the gnoweenoleggiobarche.com site

2. Purpose of the processing

Your Personal Data will be processed, with your consent where necessary, for the following purposes:

- allow the provision of the requested services (request for contact, a quote), as well as navigation on the Site;

- find specific requests addressed to the Data Controller;

- carry out marketing activities, such as processing anonymous statistics and market research, sending you information and promotional material relating to the Data Controller's activities, products and services. In accordance with the provision of the Personal Data Protection Authority "Guidelines on promotional activities and the fight against spam - 4 July 2013 [2542348]", if you decide to give your consent to receiving information relating to promotional activities , including market research by the Data Controller, we inform you that these activities can be carried out, as required by current regulations, by means of paper mail, telephone contacts via operator ("traditional methods"), e-mail, sending of text messages and use of social networks (“automated methods”). We also inform you that at any time you can decide to revoke the consent previously given by traditional or automated means by communicating it to the Data Controller, without any formality, by writing to: info@gnoweenoleggiobarche.com . If you wish to object to the processing of your data for marketing purposes carried out with the means indicated above, you can do so at any time by contacting the Data Controller at: info@gnoweenoleggiobarche.com , without prejudice to the lawfulness of the processing based on the consent given before the revocation;

- create user profiles, analyzing the preferences, interests and choices expressed through the use of the Site and the services offered in order to be able to send personalized commercial and promotional material and communications on the services offered by the Owner ("profiling");

- fulfill any obligations established by current laws, regulations or community legislation, or satisfy requests from the authorities;

- statistical purposes, without it being possible to trace your identity;

- carry out direct marketing via e-mail for products and services similar to those requested by you (including: demos, material or documentation downloadable on the Site), unless you expressly refuse to receive such communications, which you may express when requesting services or on subsequent occasions by writing to info@gnoweenoleggiobarche.com

Your Personal Data, including those falling within particular categories (such as, for example, data relating to your state of health), will be processed using automated and non-automated tools.

3. Lawfulness criteria and mandatory or optional nature of the processing 

The legal basis for the processing of Personal Data for the purposes referred to in section 3.a. and 3.b. it's the art. 6.1 letter b) of the Regulation ("[...] the processing is necessary for the execution of a contract of which the interested party is a party or for the execution of pre-contractual measures adopted at the request of the same"), as the processing is necessary for the provision of the services or to respond to requests from the interested party. The provision of Personal Data for these purposes is optional but failure to provide it would make it impossible to activate the requested services or respond to your requests.

The processing carried out for the marketing purposes described in section 3.c. is based on the release of your consent pursuant to art. 6.1 letter a) (“[…] the interested party has expressed consent to the processing of his/her personal data for one or more specific purposes”).

The processing carried out for the profiling purposes described in section 3.d. is based on your consent pursuant to art. 6.1 letter a) (“[…] the interested party has expressed consent to the processing of their personal data for one or more specific purposes”), which can be collected via specific check-boxes or the cookie banner. The provision of your Personal Data for these purposes is therefore completely optional and does not affect the use of the services. If you wish to object to the processing of your Personal Data for marketing and profiling purposes, you may do so at any time by writing to info@gnoweenoleggiobarche.com

The processing of your Personal Data referred to in section 3.e. represents legitimate processing of personal data pursuant to art. 6.1 letter c) of the Regulation (“[…] the processing is necessary to fulfill a legal obligation to which the data controller is subject”).

The processing of your Personal Data for the purposes described in section 3.f. it's the art. 6.1 letter b) of the Regulation ("[...] the processing is necessary for the execution of a contract of which the interested party is a party or for the execution of pre-contractual measures adopted at the request of the same"). The provision of your data is optional, but failure to provide it would make it impossible for the Data Controller to evaluate your profile or be able to schedule interviews. The possible processing of special categories of personal data as defined by the art. 9 of the Regulation takes place pursuant to art. 9(2) of the Regulation, therefore subject to your explicit consent and in compliance with the authorizations in force pro tempore regarding the protection of personal data. In this regard, unless strictly necessary we ask you not to provide this type of information. Otherwise, if you decide to provide them, you are required to give specific consent in compliance with current legislation on the protection of personal data. In the absence of your consent to the processing of special categories of personal data relating to you, if you provide this type of data, your application cannot be taken into consideration.

It is specified that the processing of your Personal Data referred to in section 3.g. it is not carried out on personal data and therefore can be freely carried out by the Data Controller.

The processing of your Personal Data for the purpose described in section 3.h represents legitimate processing pursuant to the current applicable legislation on the protection of personal data, which does not require your consent. You may object to the processing of your Personal Data for this purpose both when requesting the products and services available on the Site and during subsequent communications from the Data Controller by writing to info@gnoweenoleggiobarche.com .

4. Recipients of Personal Data

Your Personal Data may be shared, for the purposes referred to in section 3 above, with:

- subjects who typically act as data controllers, i.e.: i) people, companies or professional firms who provide assistance and consultancy to the Data Controller in administrative and legal matters, in relation to the provision of services; ii) subjects with whom it is necessary to interact for the provision of services (for example hosting providers, including Aruba Spa, which operates as data controller); iii) or subjects delegated to carry out technical maintenance activities (including maintenance of network equipment and electronic communications networks); collectively “Recipients”;

- subjects, bodies or authorities to whom it is mandatory to communicate your Personal Data pursuant to legal provisions or orders of the authorities or in case of reports to investigate complaints and identify the source of messages received from users;

- people authorized by the Data Controller to process Personal Data necessary to carry out activities strictly related to the provision of services, who are committed to confidentiality or have an adequate legal obligation of confidentiality (e.g. employees);

- commercial partners only if you have given specific consent to this effect.

5. Transfer of Personal Data

The Data Controller has no intention of transferring your Personal Data outside the European Economic Area.

6. Storage of Personal Data

Personal Data processed for the purposes referred to in section 3.a. and 3.b. they will be kept for the time strictly necessary to achieve those same purposes. In any case, since these are treatments carried out for the provision of services, the Data Controller will process the Personal Data for up to the time permitted by Italian legislation to protect its interests (Art. 2946 cc et seq.).

Personal Data processed for the purposes referred to in section 3.c. and 3.d. will be processed until your consent is revoked.

Personal Data processed for the purposes referred to in section 3.e. they will be kept until the time required by the specific obligation or applicable law.

As regards the processing referred to in section 3.f., the CVs transmitted will be kept for 24 months from their provision and can be used for contacts and any future interviews. At the end of this period, you will receive a request to update your Personal Data: in the absence of a reply, after 15 days from the sending of the request, your Personal Data will be deleted; in case of feedback they will be kept for a further 12 months and subsequently deleted.

Personal Data processed for the purposes referred to in section 3.h. will be processed until you object to such processing.

Further information regarding the data retention period and the criteria used to determine this period can be requested by writing to the DPO at the following address: info@gnoweenoleggiobarche.com . In any case, the possibility for the Data Controller to retain his Personal Data for the time foreseen and permitted by Italian law to protect his interests (art. 2947 co.1 and 3 cc) is reserved.

7. Rights of interested parties

Pursuant to articles 15 and following of the Regulation, you have the right to ask the Data Controller, at any time, to access your Personal Data, to rectify or delete them or to oppose their processing pursuant to art. 21 of the Regulation, you have the right to request the limitation of processing in the cases provided for by the art. 18 of the Regulation, as well as to obtain the data concerning you in a structured format, commonly used and readable by automatic device, in the cases provided for by the art. 20 of the Regulation.

Requests must be sent in writing to the following address: info@gnoweenoleggiobarche.com

In any case you always have the right to lodge a complaint with the competent Supervisory Authority (Guarantor for the Protection of Personal Data), pursuant to art. 77 of the Regulation, if you believe that the processing of your Personal Data is contrary to the legislation in force.

8. Changes

The Owner may modify or simply update this Privacy Policy of the Site, in part or completely, also due to changes in the legislative and regulatory provisions that govern this matter and protect your rights. These changes and updates to the Privacy Policy will be notified to users on the home page of the Site. We therefore invite you to regularly visit this section to become aware of the most recent and updated version of this Privacy Policy so that you are always updated on the information we collect and the use we make of it.