Privacy e Cookie Policy

 

 

Introduction
This policy outlines the procedures adopted by Mistral Italia Srl (hereinafter also Mistral or the Data Controller) for the management of the website www.mistralsrl.net (hereinafter also the Website) with reference to the processing of the personal data of users visiting the site or seeking to interact with it by spontaneously sending emails to the addresses it contains or by using the contact form published on the website. This document is therefore pursuant to article 13 of Regulation (EU) 2016/679 (hereinafter also the GDPR).

This policy applies solely to the stated website and does not cover data processing by third-party websites which may be accessible to users via links on the former.

In the event of a contractual relationship being established, the company will provide the individual with the relevant information at a different time and place.

 

  1. The data controller

In order to provide its online services, the company may process data pertaining to an identified or identifiable natural or legal person. The data controller responsible for their processing is MISTRAL ITALIA Srl, with registered offices at Via Tiziano 12, Castellarano (RE).

 

  1. Location of data processing and recipients of data

Data are stored at the premises of hosting service providers in Italy, appointed as data processors in accordance with article 28 of the GDPR. Occasionally, temporary access may be permitted to third parties for the sole purpose of technical assistance, in compliance with legal provisions and under the supervision of the data controller. Where absolutely necessary, data may be communicated or otherwise made accessible to i) public bodies for the fulfilment of a legal obligation or the protection of rights; ii) advisors to the data controller such as, for example, legal practices for the protection of rights; iii) carriers for the sending of documents or other materials expressly requested by the data subject.

No data relating to the user’s interaction with the website will be disclosed.

 

  1. Types of data processed, purposes and legal basis for processing
  1. Navigation data

In the course of their normal operation, computer systems and software processes geared to the website’s functioning acquire certain personal data whose transmission is implicit in the use of internet communication protocols. Such data are not collected in order to be linked to identified individuals, but by their very nature may allow the identification of the user through elaboration and association with data held by third parties. This category of data includes IP addresses or domain names of computers used by the data subject to connect to the website, addresses in URI (Uniform Resource Identifier) format of resources requested, the time of the request, the method used to forward the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server’s response (successful, error etc) and other parameters relating to the operating system or the user’s IT environment.

Navigation data are collected solely for the legal purpose of allowing the user to access content published on the website, and to ensure its correct administration and management. These data are stored for a few days unless there is a need to keep them for longer in order to ascertain liability for computer crimes perpetrated to the detriment of MISTRAL or third parties. After this period, data may only be stored in anonymous form for the sole purpose of statistics.

  1. Communication by spontaneous email or contact form

The optional, explicit and voluntary sending of enquiries made using a contact form or by email to the MISTRAL address published on the website entails the acquisition of the sender’s name and contact details, which are necessary to respond to the enquiry, in addition to other personal information freely provided (to this end, users are asked not to include sensitive information, details of third persons or, obviously, any statements that are harmful to the decorum or dignity of others). The legal basis for data processing in such cases is the controller’s legitimate interest in responding to the communication received or, where the request is of a commercial nature, the need to handle pre-contractual enquiries from the data subject. Data will be stored for the period necessary to respond to the sender’s request or handle issues within it addressed to the controller and, in any case, for the period stipulated by specific legal provisions relating to the particular subject of the communication. The sender nevertheless has the right to delete their data in the manner, conditions and limits stated in article 17 of the GDPR.

 

  1. Cookies

Cookies are small text files that websites send to the user’s browser, where they are memorised, and then sent back to the same websites when the same user visits again.

Technically, a cookie is a line of text containing the name of the website from which the cookie is sent, the duration of the cookie, a randomly-generated number and the date of creation and expiry.

They are called first-party cookies when the cookie is installed by the controller of the website, and third-party cookies when the cookie is sent by other websites or servers than that visited.

This website uses only one first-party technical cookie, which assigns a unique identifier (in the form of a random string generated by a hash function) to a browsing session, and is deleted when the browser is closed.

 

Cookie

Duration

PHPSESSID

browser session

 

 

No third-party analytical or profiling cookies are installed.

To delete, disable or clean up cookies on a device, users can consult the options available in the settings menu of their browser.

 

  1. Optional provision of data

Apart from the aforementioned regarding navigation data and cookies, the user is free to provide personal data through communications sent voluntarily to email addresses published on the website or by completing the contact form present on the website. Missing, partial or incorrect provision of data may prevent MISTRAL from receiving and/or responding to enquiries or handling the subject of the communication correctly. Where the contact form is used, failure to complete the obligatory fields (marked with the symbol *) prevents the sending of the form.

 

  1. Transfer of data outside the EU

No data derived from browsing and interaction with the services offered by the website will be transferred to countries outside the European Union.

 

  1. Data storage

Data will be stored in accordance with the conditions indicated in paragraph 3, points i and ii, and no. 4.

 

  1. Methods of data processing

Personal data are processed using automated tools for the period strictly necessary to carry out the purposes for which they are collected. Specific security measures are in place to prevent their loss, unlawful  or inappropriate use and access by unauthorised third parties.

 

  1. Minors

This website contains no information, function or services dedicated to minors. Any personal data provided by minors or relating to minors will immediately be deleted by the data controller.

 

  1. Rights of the data subject

The data subject has the right to request from the data controller access, rectification, erasure and restriction of processing of their data or object to processing, as well as data portability, in accordance with the conditions set out in articles 15, 16, 17, 18, 20 and 21 of the GDPR.

Furthermore, the data subject has the right to complain to the supervisory body (data protection authority) if they consider that the processing of their data violates European regulations.

To request further information from the controller regarding the processing of their data, or to exercise their rights, the data subject can email This email address is being protected from spambots. You need JavaScript enabled to view it..

 

  1. Updates to this policy

The information given here may be subject to modification following:

  • changes in the law on data protection in the aspects pertinent here;
  • technological measures or organisational changes introduced by the controller which impact current data processing methods and may be relevant to the data subject.

Users of the website are kindly invited to consult this document regularly in order to remain up to date with the latest processing methods.

 

Category: Uncategorised