Privacy Notice Pursuant to Article 13 of Regulation (EU) 2016/679
Through this document (“Privacy Notice”), the Data Controller, as defined below, wishes to inform you about the purposes and methods of processing your personal data, as well as the rights granted to you under Regulation (EU) 2016/679 concerning the protection of natural persons with regard to the processing of personal data and the free movement of such data (“GDPR”).
This Privacy Notice exclusively pertains to the processing of personal data related to the website www.horm.it (the “Website”).
1. Who is the Data Controller
The Data Controller is Horm Italia Srl (“Horm Italia Srl” or the “Data Controller”), with its registered office at Via Antonio Carpenè 17, Brugnera (PN), Italy.
2. What Personal Data We Process
2.1 Common Personal Data
Upon your specific request, and for the purposes outlined in Article 3 of this Privacy Notice, the Data Controller processes the following personal data:
2.2 Browsing Data
The IT systems and software used to operate the Website collect certain personal data whose transmission is implicit in the use of Internet communication protocols (e.g., IP addresses or domain names of the computers used by users connecting to the Website, the URIs – Uniform Resource Identifiers – of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, numeric codes regarding the status of the server’s response – success, error, etc. – and other parameters related to the user’s operating system and IT environment). Although this information is not collected to be associated with identified individuals, due to its nature it could, through processing and association with data held by third parties, allow the identification of users.
Such data are used solely to obtain anonymous statistical information on the use of the Website and to ensure its proper functioning, and they are deleted immediately after processing. The data may be used to ascertain liability in the event of hypothetical cybercrimes affecting the Website; aside from this possibility, web contact data do not persist for more than seven days.
2.3 Cookie
In some cases, personal data are collected by Horm Italia Srl through the use of various technologies, including “cookies.” Cookies are small text files created by certain websites and sent to the user’s browser when they access the site. This information can then be stored on your computer via a tag that identifies the device but not the individual user.
Some pages of the Website use cookies, either sent by Horm Italia Srl or by third parties, as well as other technologies, to enable the technical operation of the Website, enhance the user experience, and carry out statistical analysis of Website usage.
For more information on this topic, please refer to the Cookie Policy.
3. What Are the Purposes and Legal Bases of Processing
3.1 Performance of the Contract and Compliance with Legal Obligations
Your personal data will be processed by the Data Controller for purposes strictly connected and instrumental to the performance of the contract you have entered into with Horm Italia Srl, as well as for compliance with obligations established by laws, regulations, and/or EU legislation, or by supervisory and regulatory authorities or other competent authorities.
For the processing of your personal data for the purposes outlined in this paragraph, your consent is not required, as the legal basis for processing, under current legislation, consists of the performance of a contract and the fulfillment of a legal obligation.
Your personal data will be processed for the time necessary to achieve the purpose indicated and, thereafter, will be retained solely for the period required to comply with the applicable legal obligations.
3.2 Handling Your Request
Your personal data will be processed to respond to the requests you submit from time to time through the Website, such as, by way of example but not limitation, requests for information via the “Contact” form or registration on the Website.
The legal basis for processing your data, under current legislation, is the fulfillment of your request. Therefore, the Data Controller does not require your consent to carry out this processing.
For the purpose of handling your request, your personal data will be processed only for the time strictly necessary and, in any case, will not be retained for more than [6] months. However, if you request to register on the Website, your personal data will be retained for as long as you choose to remain registered. For the fulfillment of legal obligations, your personal data will be processed for the time strictly necessary and subsequently retained solely for the period required by applicable law, including statutory limitation periods.
3.3 Marketing
Upon your request, Horm Italia Srl may also process your personal data to send you commercial or editorial communications via the newsletter.
For this type of processing, your consent is required, which constitutes the legal basis for processing under current legislation.
The data collected will be processed by the Data Controller until you decide to withdraw your consent and/or request the cessation of processing.
Even if you have provided your consent, you have the right at any time to withdraw your consent and/or object to direct marketing activities by contacting the Data Controller at the following address: privacy@horm.it.
4. Nature of Personal Data Processing and Consequences of Refusal
For the purposes outlined in the preceding Article 3.1, the provision of your personal data is mandatory. Therefore, any refusal on your part will prevent the Data Controller from fulfilling the requested services.
Conversely, for the purposes outlined in the preceding Article 3.2, the provision of your personal data is optional. Therefore, any refusal on your part will not prevent Horm Italia Srl from responding to the requests you submit, but will only limit the Company’s ability to inform you about potential offers, new products, or initiatives.
5. Methods of Processing Your Personal Data
The processing of your personal data will be carried out, in compliance with the provisions of the GDPR, using paper-based, IT, and telematic tools for the purposes indicated, and in any case, in a manner suitable to ensure their security and confidentiality in accordance with the provisions of Article 32 of the GDPR.
6. Recipients of Your Personal Data and Parties Who May Have Access
For the purposes described in the preceding Article 3, your personal data will be shared with employees, external consultants, and, more generally, the personnel of Horm Italia Srl, who will act as individuals authorized to process personal data.
Additionally, Horm Italia Srl may need to disclose your personal data to third parties, in particular to the following categories:
The entities belonging to the categories listed above will, in some cases, act as independent Data Controllers, and in other cases, as Data Processors specifically appointed by the Data Controller pursuant to Article 28 of the GDPR. You may request a list of the appointed Data Processors at any time by contacting the Data Controller at the addresses indicated in Article 1 above.
Your personal data will not be disclosed to the public.
7. Your Rights as a Data Subject
In relation to the processing described in this Privacy Notice, you may exercise the rights listed in this section, as established by Articles 15 to 21 of the GDPR. In particular:
right of access: you have the right to obtain confirmation as to whether or not personal data concerning you is being processed and, if so, to access your personal data – including a copy – and to receive, among other information, the following details: the purposes of processing; the categories of personal data being processed; the recipients to whom the data has been or will be disclosed; the retention period of the data or the criteria used to determine it; the rights of the data subject (rectification, erasure of personal data, restriction of processing, and the right to object to processing); the right to lodge a complaint; the right to receive information about the origin of your personal data if it was not collected directly from you; and the existence of automated decision-making, including profiling.
you have the right to obtain the correction of inaccurate personal data concerning you and/or the completion of incomplete personal data.
you have the right to obtain the deletion of personal data concerning you when: the data are no longer necessary for the purposes for which they were collected or otherwise processed; you have withdrawn your consent and there is no other legal basis for processing; you have successfully objected to the processing of your personal data; the data have been processed unlawfully; the data must be erased to comply with a legal obligation; or the personal data were collected in relation to the offer of information society services referred to in Article 8(1) of the GDPR.
you have the right to obtain the restriction of processing when: the data subject contests the accuracy of the personal data; the processing is unlawful and the data subject opposes the erasure of the personal data, requesting instead that their use be restricted; or the personal data are required by the data subject for the establishment, exercise, or defense of legal claims.
you have the right to object to the processing of personal data concerning you, unless there are legitimate grounds for the Data Controller to continue the processing.
you have the right to receive the personal data concerning you, which you have provided to the Data Controller, in a structured, commonly used, and machine-readable format, and the right to transmit such data to another controller without hindrance, where the processing is based on consent and carried out by automated means. Additionally, you have the right to have your personal data transmitted directly by Horm Italia Srl to another controller, where technically feasible.
you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali), located at Piazza di Montecitorio No. 121, 00186 Rome (RM), Italy.
The rights described above may be exercised with respect to the Data Controller by contacting the references indicated in Article 1 above.
