Privacy Policy
Privacy policy for personal data processing
We take your privacy very seriously and are committed to protecting it.
The following is the privacy policy adopted by Spindox. Namely, the information for the processing of personal data, pursuant to and in accordance with Article 13 et seq. of EU Regulation No. 679/2016 of April 27, 2016, (General Data Protection Regulation - GDPR). The aim is to clarify the purposes and methods of processing personal data we collect when you access our website.
Data Controller
Purpose and Nature of the treated Data
Treatment Modalities
Rights of the Data Subject
Data Controller
Data protection officer
Purpose and Nature of the treated Data
Data provided by users
If visitors of the website send their personal data to access certain services of this site, i.e., to make e-mail requests, this will result in the acquisition of such data by Spindox. It will be processed exclusively for the purpose of responding to the query, i.e., for the provision of the service in accordance with this policy and the specific Privacy Information provided when subscribing to individual services.
Possible purposes for processing personal data provided include:
- Responding to requests for information about services provided by the Controller and/or presenting a commercial offer and/or drafting and managing a contract.
- Inviting users, including via email, to participate in training courses, conferences, events, and exhibitions organized by the Controller.
Possible personal data processed include:
- Name and surname
- Company affiliation
- Phone number (landline and/or mobile)
Navigation Data
The IT systems and software procedures responsible for the operation of this website collect, during normal operation, certain data that is implicitly transmitted through the use of Internet communication protocols.
These data are not collected with the intention of associating them with users, but they could allow identification through processing and association with data held by third parties. These data are used solely to obtain anonymous statistical information on the use of the site and to verify its proper functioning. Additionally, in the event of hypothetical computer crimes against the site, the data may be used to ascertain any liability.
Categories of these data include:
- IP addresses
- Domain names of computers used by users who connect to the site
- URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the server's response (success, error, etc.), and other parameters related to the user's operating system and IT environment.
The data described above are referred to as technical cookies, and they do not require the user's consent. For more clarification on the data collected during navigation and the purposes, please refer to the "COOKIE POLICY" section.
Treatment Modalities
Legal Basis for processing
Aside from what is specified for navigation data classified as technical cookies, the personal data indicated on this page are processed by the Controller based on the user's consent to processing or for fulfilling a contract. Failure to provide such data may only result in the inability to obtain the requested service.
Recipients
The data will be processed exclusively by personnel and collaborators of Spindox and, if necessary, by companies expressly appointed as data processors (e.g., for the technological maintenance of the site). If necessary, a complete list of data processors can be requested by contacting the Data Controller via e-mail.
Personal data provided by users will only be communicated to third parties if the communication is necessary to fulfill the user's requests, without prejudice to what is provided in specific privacy notices for individual services.
For more information on navigation data, refer to our “COOKIE POLICY” section for details about recipients.
Data Tranfers
The processing of personal data takes place at the Data Controller's headquarters. However, the Controller reserves the right to use cloud services for security purposes. The processing of such data, if transferred outside the EU, is regulated by specific agreements: DPA and SCC, in which security measures and procedures required by the GDPR are defined.
In general, in the case of transfers outside the EU, service providers will be selected from those providing adequate guarantees as specified in Ar