In compliance with the obligations deriving from national (Legislative Decree 30 June 2003 n.196, Law on the protection of personal data) and European community regulations (General Data Protection Regulation n.679 / 2016, GDPR) and subsequent changes, this site respects and protects the confidentiality of visitors and users, putting in place every possible and proportionate effort to not infringe the rights of users.
Legal basis for data processing
This website processes data based on consent. By using or browsing this site, visitors and users explicitly approve this privacy statement and agree to the processing of their personal data in relation to the methods and purposes described below.
Types of data collected and purposes
This website uses log files that store information collected automatically during user visits, just like all other websites. Here is an example of the information we may collect:
- Internet Protocol (IP) address;
- type of browser and parameters of the device used to access the site;
- internet service provider (ISP) name;
- visit date and time;
- visitor’s origin (referral) and exit web page;
- possibly the number of clicks.
The aforementioned information is processed automatically and collected in an aggregate-only form in order to verify the correct functioning of the site, and for security reasons (as of May. 25 2018 this information is processed based on the legitimate interests of the owner).
For security purposes (spam filters, firewalls, virus detection), automatically recorded data may also include personal data such as the IP address, which could be used, in accordance with applicable laws, to block attempts to damage the site or to cause harm to other users, or otherwise malicious or criminal activities. This data is never used for identifying or profiling the user, but only for the protection of the site and its users (as of May 25, 2018, this information is processed based on the legitimate interests of the owner).
The data collected by the site is used exclusively for the purposes mentioned above and stored for the time strictly necessary to carry out the activities described. In any case, the data collected by the site will never be provided to third parties, for any reason, unless it is a legitimate request from the judicial authority and only if provided by the law.
Data used for security purposes (blocking attempts to damage the site) is retained for 7 days.
Place of data processing
The data collected from the site is processed at Kaiwa’s headquarters, Viale Tibaldi 21 – 20136 Milan (Italy), and at the datacenter of the web Hosting. The web hosting (Register.it S.p.A. with registered office in Viale della Giovine Italia 17, 50122 Florence), which is responsible for the processing of data, processing the data on behalf of the controller, is located in the European Economic Area and acts in accordance with European laws.
Session cookies are essential to distinguish between connected users and are useful to prevent a requested feature from being provided to the wrong user, as well as for security purposes to prevent cyberattacks. Session cookies do not contain personal data and last for the current session only, that is until the browser is closed. No consent is required for them.
This website also uses functional cookies that are strictly necessary for the use of the site. In particular, they come into play when the users request a specific functionality (such as Login). For such cookies, no consent is required.
Click on the links below for browser-specific instructions on how to disable cookies:
This site also acts as an intermediary for third-party cookies, used to provide additional services and features to visitors and to improve the use of the website itself, such as social buttons, or videos. This website has no control over third-party cookies, which are entirely managed by third parties. As a result, information about the use of these cookies and the purpose of these cookies, as well as how to disable them, is provided directly by the third parties on the following pages.
According to a specific agreement with Google, which is designated as responsible for the processing of the data, it undertakes to process the data according to the requests of the Data Controller (see at the bottom of this policy), submitted through the software settings. Based on these settings, advertising and data sharing options are disabled.
Learn more about Google Analytics cookies at Google Analytics Cookie Usage on Websites.
You can selectively disable Google Analytics data collection by installing the Google (opt out) plugin on for your browser.
Transferring data to non-EU countries
This site may share some of the data collected with services located outside the European Union area. Particularly with Google, Facebook and Microsoft (LinkedIn) via social plugins and the Google Analytics service. The transfer is authorised based on specific decisions of the European Union and the Data Protection Authority, in particular, the 1250/2016 decision, (Privacy Shield), therefore no further consent is needed. The companies mentioned above guarantee their compliance with the Privacy Shield.
This website treats user data lawfully and correctly, taking appropriate security measures to prevent unauthorized access, disclosure, modification or unauthorized destruction of data. The processing is carried out by IT and/or telematics tools, with organizational methods and logic closely related to the stated purposes. In addition to the owner, in some cases, other categories of individuals involved in the organization of the site (administrative, commercial, marketing, legal, system administrators) or external subjects (such as third party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the data.
Under European Regulation 679/2016 (GDPR) and national legislation, the user may exercise the following rights in accordance with and within the limits of the current legislation:
- request confirmation of the existence of personal data concerning them (right of access);
- know where data are coming from;
- revceive comprehensible communication;
- have information about the logic, manner and purpose of the processing;
- request their updating, rectification, integration, deletion, anonymous processing, blocking of data processed in violation of the law, including those no longer necessary for the pursuit of the purposes for which they were collected;
- in cases of consent-based processing, receive the data provided to the data controller, in a structured form readable by a computer and in a format commonly used by electronic devices at the contingent cost of the support;
- the right to file a complaint to the competent Supervisory Authority (complaint template in Italian);
- and, more generally, exercising all the rights that are granted to them by the current legal provisions..
Requests should addressed to Kaiwa.
In the event that the data are processed on the basis of legitimate interests, the rights of data subjects are guaranteed (except for the right to portability which is not provided for by the rules), in particular the right to object to the processing that can be exercised by sending a request to the data controller.
The site’s administrator, Paola Bollati & Kaiwa, is the data controller under current laws.
Google is appointed data controller, processing data on behalf of the owner (Google Analytics).