The purpose of this policy

This policy describes the management procedures of the official website of PlaNet S.r.l. Sistemi informatici regarding the processing of personal data of users who consult it and interact with it and with any web services possibly provided electronically.

The policy is provided in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 concerning the protection of personal data and aims to provide information regarding the methods, timing, and nature of the information that data controllers must provide to users when they connect to web pages, regardless of the purpose of the connection.

The policy is provided solely for the website of PlaNet S.r.l. Sistemi informatici starting from the address www.ippoint.it and for the pages or services contained therein.

Data Controller, Location, and Methods of Processing Data

Data Controller and Data Processing Responsible

The data controller for personal data processing is the company PlaNet S.r.l. Sistemi informatici, Legal Office: via Allori 5, Campi Bisenzio, FI, Operational Office: Via Ambrosoli 39, 50018, Scandicci, FI.

Location of Data Processing and Data Processors

The processing activities related to the web services of this site take place at the operational headquarters of PlaNet S.r.l. Sistemi informatici or on servers located in data centers in Italy or abroad. These activities are managed by personnel appointed to the processing, or by any individuals assigned to occasional maintenance operations.

No data derived from the web service is communicated or disseminated, except in cases expressly provided for by law.

Methods of Processing

Personal data is processed using automated tools for the time strictly necessary to achieve the purposes for which it was collected. Specific technical and organizational security measures are observed to prevent data loss, manipulation, accidental access, unlawful or incorrect use, and unauthorized access.

Types of Data Processed and Purposes of Processing

According to the regulations indicated, the processing of such data will be based on the principles of fairness, lawfulness, and transparency, as well as the protection of the privacy and rights of the website visitor.

Navigation Data

The computer systems and software procedures used to operate this website acquire certain personal data during their normal operation, the transmission of which is implicit in the use of Internet communication protocols.

These are pieces of information that are not collected to be associated with identified individuals, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters relating to the user's operating system and computer environment.

Navigation data is used solely to obtain anonymous statistical information about the use of the site and to check its correct functioning, and is retained for the time strictly necessary. The data may be used to ascertain liability in the event of hypothetical computer crimes against the site.

The Data Controller may use such data in aggregate and anonymous form for statistical analysis of site visits. Such data will not be communicated to third parties or disclosed in any way.

Cookies

See special extended information

Data provided voluntarily by the user

As regards e-mail messages, the Data Controller will, in compliance with the code, collect personal data (including the e-mail address) spontaneously transmitted, taking care of its subsequent storage for purposes in accordance with the interactions manifested by the Visitor and or for the time necessary for the verification and evaluation of the information provided, for the purpose of the exchange of information or contacts.

The optional, explicit and voluntary sending of e-mail to the addresses indicated on this site involves the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the letter.

The processing operations carried out concern only common data. The presence of any data that can be qualified in a different way will result in the immediate destruction of the relevant message, announcement or communication provided by the Visitor.

The personal data provided by users through the forms, are used by PlaNet S.r.l. Sistemi informatici and its staff for the sole purpose of performing the service or the service requested: request for information by form, request for information by e-mail, fulfillment of existing or future commercial and contractual relationships; fulfillment of legal obligations; commercial information; technical-scientific information; market research.

The data collected in the appropriate section of the site may be communicated to other subjects as part of the purposes of processing any requests. In such cases, consent will always be required, which can be provided online by filling in a check box.

The data is not disclosed to third parties.

Optional nature of data provision

Apart from what is specified for navigation data, the user is free to provide their personal data by filling in the request forms, or by contacting the offices of Planet srl or if you request the sending of information material, estimates or other communications.

Failure to provide data

Failure to provide data determines the impossibility of receiving the requested information.

Pursuant to Regulation (EU) 2016/679, therefore, we provide the visitor with the following information:

the data provided by the Visitor may be processed for the following purposes: personal data management contacts/ customers/ suppliers, commercial and administrative management, information on the services offered, legal obligations. It is the responsibility of the visitor to verify the correctness of the personal data concerning him and possibly proceed to the correction, updating or, in any case, modification of the wrong data and/or no longer during the processing;

the processing will be carried out both manually and with the help of telematic systems. In fact, data may be stored both in paper archives and in electronic archives, in order to allow, where necessary, the identification and selection of aggregated data, for the time not exceeding the duration and purposes of the processing;

the provision of data is optional, however any refusal would make it impossible to continue any type of relationship, as the processing of data is essential to comply with legal obligations;

the data may be communicated, within the scope of the purposes explained above, to the following categories of subjects: law firms, commercial, data processing and consulting, state bodies, public bodies and other institutions for legal obligations or contractual commitments, credit institutions and factoring companies, customers, suppliers, couriers, shippers, subsidiaries, associates and controlling companies;

The Visitor who sends his personal data through the dedicated sections on the site and/ or the electronic mail of the Data Controller, may at any time exercise the rights against the Data Controller that for clarity we reproduce in full.

What rights do you have as a data subject:
In relation to the processing described in this Policy, as a data subject you may, as provided for by European Regulation 679/2016, exercise the rights enshrined in articles 15 to 21 and, in
particular:

• right of access - Article 15 GDPR: right to obtain confirmation that personal data concerning you are being processed or not and, in this case, to obtain access to your personal data,
  including a copy thereof.
• right of rectification - Article 16 GDPR: right to obtain, without undue delay, the rectification of inaccurate personal data concerning you and/or the integration of incomplete personal data;
• right to erasure (right to be forgotten) - Article 17 GDPR: right to obtain, without undue delay, the erasure of personal data concerning you.
• right to limitation of processing - article 18 GDPR: right to obtain limitation of processing, when:
  1. the data subject disputes the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of the data;
  2. the processing is unlawful and the data subject opposes the deletion of personal data and instead requests that its use be restricted;
  3. personal data are necessary for the data subject to establish, exercise or defend legal claims;
  4. the interested party has opposed the treatment according to art. 21 GDPR, in the period of waiting for the verification of the possible prevalence of legitimate reasons of the data controller compared to those of the person concerned.
• right to data portability - article 20 GDPR: right to receive, in a structured format, commonly used and readable by an automatic device, the personal data concerning you provided to the Data Controller and
  the right to transmit them to another data controller without hindrance, if the processing is based on consent and is carried out by automated means In addition, the right to obtain that your personal data is
  transmitted directly by the Bank to another holder where technically feasible;
• right to object - Article 21 GDPR: right to object, at any time for reasons related to your particular situation, to the processing of your personal data based on condition of lawfulness of the legitimate interest or the performance of a task in the public interest or the exercise of public authority, including profiling, unless there are legitimate reasons for the Controller to continue processing that takes precedence over the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of a right in court; may object in any at the time of processing where personal data are processed for direct marketing purposes, including profiling, to the extent that it is related to such direct marketing;

The above rights may be exercised against the Data Controller by contacting the above mentioned references.

The exercise of your rights as a data subject is free of charge in accordance with Article 12 GDPR. However, in the case of manifestly unfounded or excessive requests, also for their repetitiveness, the Data Controller could charge a reasonable fee, in light of the administrative costs incurred in processing your request, or deny your request.

• RIGHT OF REVOCATION:
  You have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of the processing based on consent prior to the revocation.
• RIGHT TO COMPLAIN:
  The data subject has the right to lodge a complaint with the Italian Data Protection Authority, Piazza di Montecitorio n. 121, 00186, Rome (RM).

In order to exercise the rights mentioned above, the Visitor concerned must address his request to the Data Controller:
DATA CONTROLLER

PlaNet S.r.l. Sistemi informatici, Sede Legale: via Allori 5, Campi Bisenzio, FI, Sede Operativa: Via Ambrosoli 39, 50018, Scandicci, FI