(Statement on the use of personal data under articles 13 and 14 of EU Regulation 679/2016) 

Emmepi s.r.l., with headquarters in Perugia – 06128 – Via Martiri dei Lager 98/D – C.F. and P.I.V.A. 02279240069, as Data controller (hereinafter: “data controller”) pursuant to the EU Regulation 679/2016 (hereinafter: “Regulation”) – considers privacy and personal data protection one of the main objectives of its business activity. We therefore invite you, before communicating any personal data to the Data Controller, to read this Privacy Policy carefully since it contains important information regarding the protection of your personal data.  

This Privacy Policy:

Is intended in reference to the website www.e-nnovationlab.com, and not for other websites which may be accessible via links.

is an integral part of the website and the services which we offer; is pursuant to points 13 and 14 of the Regulation, for those interacting with the web services of the website; is not intended for the section of the Website dedicated to contacts or any user registration, for which it is necessary to refer to the detailed information contained therein.

The use of your personal data will be based on principles of correctness, lawfulness, transparency, limitation of purposes and conservation, minimization and accuracy, integrity and confidentiality, as well as the principle of accountability pursuant to article 5 of the Regulation. Your personal data will thus be used in accordance with the legislative provisions of the Regulation and the confidentiality obligations provided for therein.

By ‘use of personal data’ we mean any operation or series of operations, carried out with or without the assistance of automated processes and applied to personal data or groups of personal data, such as collection, registration, organization, structuring, storage, adaptation or modification, extraction, consultation, use, communication via transmission, broadcast or any other form available, the comparison or interconnection, limitation, cancellation or destruction. 

1. data controller

The data controller is: Emmepi s.r.l., with headquarters in Perugia – 06128 – Via Martiri dei Lager 98/D – C.F. and P.I.V.A. 02279240069 

2. personal data subject to use

We hereby inform you that the personal data subject to use may consist of identification like a name, an identification number, data relating to location, an online identification or one or more characteristic elements of physical, physiological, psychic, economic, cultural or social identity suitable for making the person concerned identified or identifiable, according to the type of services requested (from here on just “personal data”). The personal data used via the website are as follows:

a. Navigation data

The IT systems and software procedures used to operate the website acquire, in the course of their normal operation, some personal data the transmission of which is implicit in the use of Internet communication protocols. It is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by users connecting to the website, the URI (Uniform Resource Identifier) notation addresses of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the response status given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment.

b. Cookies

The information on the cookies served by the website is available here.  

3. purposes of use

Your personal data will be used for the following purposes:

3.1. to allow navigation of the website and provision of services therein made available by the owner, including website security management;

3.2. fulfill any obligations required by applicable law, regulations or by EU legislation, or satisfy requests from the authorities; 

3.3. for processing statistics, without it being possible to trace back to your identity.

Specific safety measures are taken in order to avoid any loss of data, illicit or incorrect use and unauthorized access. 

4. Legal basis and obligatory or optional nature of data use

The legal basis for use of personal data for the purposes referred to in section 3.1 is article 6(1)(b) of the Regulation, the details are used to allow you to navigate the website for areas of interest to you. For point 3.3 the legal basis is the legitimate interest of the data controller to obtain anonymous data relating to the use of the website by visitors.

5. recipients of personal data

Your personal data may be shared, for the aforementioned purposes, with persons acting as data controllers under article 28 of the Regulation, in other words, persons who collaborate with the Data controller for the pursuit of the purposes stated above, including persons assigned to carry out technical maintenance work (collectively “Recipients ”);persons, bodies or authorities to whom it is obligatory to communicate your personal details by law or by order of the authorities; persons authorized by the data controller, under article 29 of the Regulation, to use the personal data needed to perform activities strictly linked to the provision of services, who have pledged confidentiality or have a legal obligation of confidentiality. The updated list of persons authorized to use your personal data, as official data controllers, is available, by sending a written request to the Data controller at the address indicated in the “Contacts” section of this statement. 

6. transfer of personal data

Some of your personal data may be shared with Recipients located outside the European Union. The data controller hereby gives assurance that any use of your personal data by these Recipients is carried out in compliance with articles 44 – 49 of the Regulation. Further information is available by sending a written request to the Data controller at the address indicated in the “Contacts” section of this statement. 

7. storage of personal data

The personal data used for the purposes indicated will be stored for the time strictly necessary for achieving the said purposes, with the exception of any different periods established by current legislation.

Further information regarding the data retention period and the criteria used to determine such period may be obtained by sending a written request to the data controller at the address indicated in the “Contacts” section of this statement.

8. rights of the person concerned

YOUR RIGHTS

As the person concerned, you have the rights under articles 15 et seq. GDPR, and specifically the rights to: 

a) obtain confirmation or otherwise from the data controller that use of your personal data that concern you is ongoing and in this case, to obtain access to the personal data and to the following information: the purposes of the use; the categories of personal data concerned; the recipients or categories of recipients to whom the personal data has been or will be communicated, in particular if the recipients are third party countries or international organizations; when possible, the expected retention period of personal data or, if this is not possible, the criteria used to determine this period; if the details are not collected directly from the person concerned, all the information available about their origin; the existence of an automated decision-making process, including profiling, and, at least in such cases, significant information about the logic used, as well as the importance and the foreseeable consequences of such use for the person concerned.

b) obtain from the data controller, the correction of inaccurate personal data which concern you without undue delay. Taking into account the purposes of the processing, the person concerned has the right to obtain the integration of incomplete personal data, also by providing a supplementary statement.

c) obtain from the data controller the cancellation of personal data that concern you without undue delay, if there exists one of the following reasons: a) the personal data are no longer required for the purposes for which they were collected or otherwise used; b) the person concerned withdraws the consent on which the data use is based in accordance with article 6, paragraph 1, letter a), or with article 9, paragraph 2, letter a), and if there exist no other legal grounds for the use; c) the person concerned opposes the use under article 21, paragraph 1, and there exists no prevailing legitimate reason to proceed with the use, or opposes the use under article 21, paragraph 2; d) the personal data have been used illegally; e) the personal data must be cancelled to fulfill a legal obligation under the law of the EU or a member State to which the data controller is subject; f) the personal data have been collected relative to the services offer of the information company referred to in article 8, paragraph 1.

d) obtain the limitation of use from the data controller when one of the following hypotheses occurs: a) the person concerned disputes the accuracy of the personal data, for the period needed for the data controller to check the accuracy of such personal data; b) the use is illegal and the person concerned opposes the cancellation of the personal data and instead requests that the use of the data is limited; c) although the data controller no longer needs the data for use, the personal data is needed by the person concerned for the verification, the exercising or defense of a right in court; d) the person concerned has opposed the use under article 21, paragraph 1, awaiting verification regarding the possible prevalence of legitimate reasons of the data controller with respect to those of the person concerned.

e) to receive in structured form, commonly used and legible by automatic devices the personal data that concern you provided to a data controller and transmit such data to another data controller without hindrance by the data controller that has provided the data if: a) the use is based on the or a contract b) the use is carried out by automated means. In exercising your rights regarding data portability, the person concerned has the right to obtain direct transmission of the personal data from one data controller to the other, if technically possible.

f) oppose at any time, for reasons relating to your particular situation, the use of personal data concerning you under article 6, paragraph 1, letters e) or f), including profiling on the basis of these provisions. Should the personal data be used for purposes of direct marketing, the person concerned has the right to oppose at any time the use of personal data that concern them for such purposes, including profiling to the extent that it is connected to such direct marketing.

g) the right to not be subject to a decision based solely on automated data processing, including profiling, which produces legal effects concerning it or that has a similar significant effect on your person.

h) the right to make a complaint to a supervisory authority

All requests should be sent via e-mail to the address:  info@e-nnovationlab.com

Privacy Policy updated on 14th October 2019