Privacy and cookies

Attinà & Forti Srl, in line with Regulation (EU) 2016/679 (hereinafter "GDPR"), aims to ensure the privacy and security of personal data of each visitor consistent with the provisions of this Policy.
This Policy is intended as information pursuant to Articles 13 and 14 of the GDPR.

Type of data processed

The website offers informative and sometimes interactive content. While browsing the site Attinà & Forti Srl may, therefore, acquire information about the visitor, in the following ways.

Navigation data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes: IP addresses, the type of browser used, the operating system, the domain name and the addresses of the websites from which the access was made, information on the pages visited by users within the site, the time of access, the stay on the individual page, the analysis of internal path and other parameters relating to the operating system and computer environment of the user.

Additional data categories

This is all the personal data provided by the visitor through the site, for example, by registering and/or accessing a reserved area and/or a service and/or participating in one of the initiatives launched by Attinà & Forti Srl alone or in partnership with third parties, by writing to an email address of Attinà & Forti Srl to request information to have a direct contact, filling out the contact form.

Purpose of the treatment

Provide the goods and/or services requested by the user, manage the contracts entered into by the user, carry out the related administrative, accounting, tax and legal obligations, and process the requests submitted by the user.
To record your experience of using our platforms, products and services that we offer and to ensure the proper functioning of the web pages and their contents.
To carry out profiling activities, i.e. the analysis and processing of information relating to the user, his/her preferences, habits, consumption choices and/or browsing experiences. This activity is also carried out through the use of technologies such as cookies (for more information see the section on Cookies).

Legal basis of the treatment

The processing operations carried out for these purposes are necessary for the fulfilment of contractual obligations and do not require specific consent from the data subject.
The processing carried out for these purposes is based on the legitimate interest of the Data Controller.
The processing operations carried out for these purposes are carried out with the specific consent provided by the user, with the exception of commercial communications relating to products and/or services similar to those already purchased and/or subscribed to by the user for which the processing is based on a legitimate interest of the Holder.
The processing operations carried out for these purposes are carried out with the specific consent provided by the user, with the exception of the analysis of basic information relating to the user's consumption preferences.

Age limits

If you are under the age of 13 (USA) or 16 (EU and elsewhere), please request your parent's/guardian's consent before submitting your personal information to this site. If we have reason to believe that one of our users is a minor and that we have obtained your personal information without your consent, we will delete that information within a reasonable period of time.

Data transfer outside the EU

Pursuant to art. 43 of the Privacy Code and art. 44 of the GDPR, Attinà & Forti Srl may transfer your personal data to third parties located in countries outside the European Union or the European Economic Area.
In this case, Attinà & Forti Srl ensures the adoption of adequate guarantees (such as the signing of standard contractual clauses approved by the EU Commission) with the foreign company receiving the data; these clauses guarantee a level of data protection corresponding to that established by European legislation.

Roles and responsibilities in the area of privacy

Your personal data are processed by Attinà & Forti Srl, in its capacity as data controller.
More detailed information on the names of the data processors can be requested by sending an email to the following address: info@attinaeforti.it.

Methods of data processing

The processing of personal data is carried out mainly using procedures and electronic media (DB, CRM platforms, etc..) for the time strictly necessary to achieve the purposes for which the data were collected and, in any case, in accordance with the principles of lawfulness, correctness, not exceeding and relevance provided for by current legislation privacy.

Redirect to external sites

The website may use so-called "social plug-ins". Social plug-ins are special tools that allow you to incorporate social networking features directly into your website (e.g. Facebook's Like function).
All social plug-ins on the website are marked with the respective logo of the social networking platform (e.g. Facebook, Google, Twitter, Linkedin, etc.).
When you visit a page on our website and interact with the plug-in (e.g. by clicking on the "Like" button) or decide to leave a comment, the corresponding information is transmitted from the browser directly to the social networking platform and stored by it.
For information on the purpose, type and manner of collection, processing, use and storage of personal data by the social networking platform, as well as how to exercise your rights, please refer to the privacy policy adopted by the individual social network.

Data retention and protection

We inform you that the data relating to the navigation logs, if registered, will be kept by the Owner of this website for a period of 2 months.
We also inform you that the data you provide will be processed for the entire duration of the contractual relationship between us and further stored exclusively for the period provided for the fulfillment of legal obligations, unless it is necessary to store them further to defend or enforce a right or to fulfill any other legal obligations or orders of the authorities.
For data protection we follow industry standard practices, such as firewalls and encryption, to protect your personal data from unauthorized access, alteration, disclosure, misuse or destruction. We take reasonable steps to ensure that cross-border data transfers comply with applicable data protection laws, such as working with third party processors certified under the EU-US Privacy Shield and Swiss-US Privacy Shield or using standard contractual clauses that oblige the parties to protect data privacy and security.

Rights of data subjects

The subjects to whom the aforementioned personal data refer (the so-called "interested parties"), have the right to exercise their rights in the manner and within the limits provided by current privacy legislation.

In relation to the processing of your personal data, you have the right to ask Attinà & Forti Srl:

-access: you can ask for confirmation that there is or is not a processing of data concerning you, as well as further clarification about the information referred to in this statement, and to receive the data itself, within the limits of reasonableness;
-rectification: you may request to rectify or supplement the data you have provided or in our possession, if inaccurate;
-cancellation: you may request that your data acquired or processed by Attinà & Forti Srl be deleted, if they are no longer necessary for our purposes or where there are no disputes or controversies in place, in case of revocation of consent or your opposition to processing, in case of unlawful processing, or if there is a legal obligation to cancel;
-the limitation: you may request the limitation of the processing of your personal data, when one of the conditions set forth in art. 18 of the GDPR is met; in this case, your data will not be processed, except for storage, without your consent except as set forth in the same article in paragraph 2.
-opposition: you can object at any time to the processing of your data on the basis of our legitimate interest, unless there are our legitimate reasons to proceed with the processing that prevail over your, for example for the exercise or our defense in court; your opposition will always prevail over our legitimate interest to process your data for any marketing purposes;
-portability: you may request to receive your data, or to have it transmitted to another holder indicated by you, in a structured format, commonly used and readable by automatic device.

Furthermore, pursuant to art. 7, par. 3, GDPR, we inform you that you may exercise your right to revoke your consent at any time, without prejudice to the lawfulness of the processing based on your prior consent.
Finally, we inform you that you have the right to lodge a complaint with the Control Authority, which in Italy is the Guarantor for the Protection of Personal Data.

To exercise these rights, report problems or ask for clarification on the processing of personal data can send an email to info@attinaeforti.it.

Right to be forgotten

We inform you that this Privacy Policy only concerns the processing of personal data that you have provided or will provide to Attinà & Forti Srl - possibly also by purchasing our products and / or services provided against payment or by participating in our promotions and / or offers - and those that, if any, Attinà & Forti Srl will acquire during this relationship and / or further relations between you and us.

Changes to the Information

The possible entry into force of new sector regulations, as well as the constant review and updating of user services, may entail the need to modify the terms and conditions described in this Policy. It is therefore possible that this document may change over time. We therefore encourage you to consult this page periodically.
We will post any changes to this Policy on this page and, if the changes are material, we will notify you with a more visible notice.