PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA OF WEBSITE USERS

(pursuant to Articles 13 and 14 of EU Regulation 2016/679 – GDPR)

In accordance with the principles of fairness, lawfulness, transparency, protection of privacy, and the rights of data subjects with regard to the processing of their personal data, pursuant to Article 13 of EU Regulation 2016/679 (hereinafter the "GDPR"), this page describes how the personal data of persons who visit the website of HOLZHOF S.R.L. (hereinafter the "Data Controller"), accessible online at the following address: www.holzhof.com, are processed.

This information does not concern any other websites, pages, or online services that may be accessed through hyperlinks published on the website but relating to resources outside the Data Controller's domain.

1. DATA CONTROLLER

The Data Controller is HOLZHOF S.R.L., represented by its pro tempore Legal Representative, with registered office at Via Rupe, 33 – 38017 Mezzolombardo (TN), Italy, E-mail: info@holzhof.com, Certified E-mail (PEC): info@pec.holzhof.com, Telephone: +39 0461/601501.

2. PURPOSES OF THE PROCESSING

In particular, personal data will be processed for the following purposes:

• Advanced browsing or management of personalized content;
• Responding to a request expressly submitted to the contact details provided on the Website;
• Performing a contract and fulfilling the related obligations;
• Sending communications by e-mail (newsletters) containing information and/or commercial content relating to the activities carried out by the Data Controller;
• Fulfilling legal and/or regulatory obligations or responding to requests from Public Security and/or Judicial Authorities;
• Establishing, exercising, or defending the Data Controller’s rights in judicial proceedings or whenever judicial authorities exercise their functions;
• Conducting research and statistical analyses on aggregated or anonymized data, without the possibility of identifying the user, in order to measure the operation of the Website and its traffic and to assess interest in the Website itself.

3. LEGAL BASIS FOR THE PROCESSING

The legal bases for the processing are the provision of the requested service, the performance of the contract, Article 130, paragraph 4, of Legislative Decree No. 196/2003, and the legitimate interest of the Data Controller.

4. TYPES OF DATA PROCESSED AND PURPOSES OF THE PROCESSING

Browsing data: The IT systems and software procedures responsible for the operation of this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.

This category of data includes the IP addresses or domain names of the computers used by persons connecting to the Website, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the response provided by the server (successful, error, etc.), and other parameters relating to the user’s operating system and IT environment. This data is used solely for the purpose of monitoring the proper functioning of the Website.

Such data, which is necessary for the use of web services, is also processed for the purpose of:

• Obtaining statistical information on the use of the services (most frequently visited pages, number of visitors by time or day, geographical areas of origin, etc.);
• Monitoring the proper functioning of the services provided.

Data provided voluntarily: The optional, explicit, and voluntary sending of messages to the Data Controller’s contact addresses entails the acquisition of the sender’s contact details necessary to respond, as well as any personal data included in the communications.

5. COOKIES AND OTHER TRACKING SYSTEMS

No cookies are used for user profiling, nor are any other tracking methods employed. Session cookies (non-persistent cookies) are used, however, strictly to the extent necessary for safe and efficient browsing of the websites. For information on the types of cookies used, please refer to the specific Cookie Policy, available at the following link: www.holzhof.com/cookie-law.

6. RECIPIENTS OF THE DATA

The personal data collected may be processed by the employees of HOLZHOF S.R.L., acting on the basis of specific instructions provided by the Data Controller regarding the purposes and methods of such processing, as well as by external parties formally appointed as Data Processors.

7. LOCATION OF DATA PROCESSING

As a general rule, personal data will be processed within the European Union. However, some applications of the services used by the Data Controller may involve the transfer of data to the United States. Such processing is lawful pursuant to Article 45 of EU Regulation 2016/679, by virtue of the adequacy decision adopted by the European Commission (Data Privacy Framework).

Where necessary, the Data Controller may relocate its IT archives to other non-EU countries, while ensuring that any transfer of data will take place exclusively to countries capable of providing a level of protection adequate to the standards established by applicable legislation, in compliance with Articles 45, 46, and 49 of EU Regulation 2016/679.

8. RIGHTS OF THE DATA SUBJECT

Pursuant to Articles 15, 16, 17, 18, 19, 20, 21, and 77 of EU Regulation 2016/679, the Data Subject is hereby informed that:

• They have the right to request access to their personal data, rectification or erasure thereof, or restriction of the processing concerning them, to object to the processing, and to request data portability to another Data Controller in the cases provided for by law;
• Any rectification, erasure, or restriction of processing carried out at the request of the Data Subject – unless this proves impossible or involves disproportionate effort – will be communicated by the Data Controller to each Data Processor to whom the personal data has been transmitted;
• They have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), following the procedures and instructions published on the Authority’s official website at www.garanteprivacy.it.

To exercise the above rights, the Data Subject may contact the Data Controller at the following e-mail address: info@holzhof.com.

The exercise of these rights is not subject to any formal requirements and is free of charge.

RELATED DOCUMENTS

For completeness, the privacy notices concerning the processing of personal data relating to other relationships with HOLZHOF S.R.L. are also available:

• Customer Privacy Notice
• Customer Privacy Notice (Marketing Purposes)
• Supplier Privacy Notice