Information document pursuant to and for the purposes of Article 13 Regulation (EU) 2016/679 (GDPR)
In compliance with the provisions of Reg. EU 2016/679 (European Regulation for the protection of personal data) we provide you with the necessary information regarding the processing of personal data provided. The information is not to be considered valid for other websites that may be consulted through links on the domain websites of the owner, which is not to be considered in any way responsible for the websites of third parties.
This information is provided pursuant to Art. 13 of EU Reg. 2016/679 (European Regulation for the Protection of Personal Data) and is also inspired by the provisions of Directive 2002/58/EC, as updated by Directive 2009/136/EC on Cookies, as well as the provisions of the Measure of the Guarantor Authority for the Protection of Personal Data of 08.05.2014 on Cookies and the EDPB 05/2020 Guidelines on consent under the GDPR, adopted on 04.05.2020.
Personal data that can be processed
“Personal data” means any information relating to an identified or identifiable natural person (“data subject”); an identifiable person is any natural person who can be identified, directly or indirectly, by reference in particular to an identifier such as a name, an identification number, location data, an online identifier or to one or more features of his or her physical, physiological, genetic, mental, economic, cultural or social identity; (C26, C27, C30).
Navigation data
Computer systems and software procedures used to operate a website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses or domain names of computers and terminals used by users, URI/URL (Uniform Resource Identifier/Locator) of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the response from the server (successful, error, etc..) and other parameters regarding the operating system and computer environment of the user (for more information see Cookies policy of this site).
Data communicated by the interested party
The optional, explicit and voluntary sending of messages to contact addresses, as well as the completion and submission of forms on the site of the owners, involves the acquisition of contact details of the sender, necessary to respond, and all personal data included in the communications.
Specific information
Specific information will be present in the pages of the Site in relation to particular services or processing of Data provided.
Cookies
For further information on the cookies used by this website see the Cookies policy.
Who is the Data Controller? How to contact him?
Best Surface Holding S.r.l. with registered office in Via Camperio Manfredo, 14 – 20123 Milan and operational headquarters in Via San Clemente, 1 – 20122 Milan Tel. +39 02 58215360 – Fax +39 02 588215368 Tax code and VAT 10463820968;
Best Surface SL. with registered office in Carretera de Castellón, 117, DS Foyes 5D en partida Foyes Ferraes, CP 12110 Alcora, España, número de NIF B44513752 y Tel. +34 964 784545- Fax +34 964 784500
having jointly determined the purposes and means of processing, act as “Joint Data Controllers” (henceforth “Data Controllers“) pursuant to Article 26 of the GDPR.
To contact the Data Controllers: email privacy@idylium.com
Purposes of processing, legal basis, period of data retention and nature of conferment
Purpose A)
Navigation on the website.
– LEGAL BASIS: Legitimate interest (Art. 6(1)(f) and recital 47 GDPR): processing is necessary for the purposes of pursuing the legitimate interests of the data controller or third parties, provided that the interests or the fundamental rights and freedoms of the data subject which require the protection of personal data do not prevail, taking into account the reasonable expectations of the data subject based on his/her relationship with the data controller. Activities strictly necessary for the operation of the site and the provision of the navigation service on the platform.
– DATA STORAGE PERIOD: until the duration of the browsing session. See Cookies policy.
– NATURE OF SUBMISSION: necessary in order to allow the navigation of the website.
Purpose B)
Activation of the legal guarantee through the specific form published on the website www.idylium.com and management of any assistance interventions.
– LEGAL BASIS: the processing is necessary for the execution of a contract with the interested party and/or the execution of pre-contractual measures, fulfilling legal obligations to which the Holders are subject.
– DATA STORAGE PERIOD: The data collected will be stored for a period of time not exceeding the achievement of the purposes for which they are processed (“principle of limitation of storage”, art.5, GDPR) or according to the deadlines prescribed by law.
– NATURE OF SUBMISSION: necessary in order to enable the purpose of processing.
Purpose C)
Response to requests for information, quotes or any other nature following the completion of the contact form on the website www.idylium.com by the Data Subject.
– LEGAL BASIS: the processing is necessary for the execution of a contract with the interested party and/or the execution of pre-contractual measures, to fulfill legal obligations to which the Holders are subject.
– DATA STORAGE PERIOD: The data collected will be stored for a period of time not exceeding the achievement of the purposes for which they are processed (“principle of limitation of storage”, art.5, GDPR) or according to the deadlines prescribed by law.
– NATURE OF SUBMISSION: necessary in order to enable the purpose of processing.
Purpose D)
Subscription to distribution lists for the periodic sending of Newsletters, Commercial and/or promotional communications relating to products and services offered by the Holders or third parties.
– LEGAL BASIS: the interested party has given his consent for this purpose
– DATA STORAGE PERIOD: The data collected will be stored for a period of time not exceeding the achievement of the purposes for which they are processed (“principle of limitation of storage”, art.5, GDPR) or according to the deadlines prescribed by law.
– NATURE OF SUBMISSION: necessary in order to allow the purpose of treatment
To whom will the personal data collected be communicated?
The data of a personal nature provided will be shared with entities that will process the data as data controllers (art. 28 of EU Reg. 2016/679) and/or as natural persons acting under the authority of the Data Controller and Data Processor (art. 29 of EU Reg. 2016/679), for the purposes listed above.
Precisely, the data will be shared with:
– companies contractually linked to the Data Controllers
– subjects that provide services for the management of the information system used by the Holders and of the telecommunication networks;
– freelancers, studies or companies in the context of assistance and consulting relationships;
– subjects that provide services for the management of the activities indicated above in the purposes (subjects for communication, printing brochures, flyers, websites, movies), only with prior consent;
– managers of platforms for the services listed above (hosting sites, Youtube);
– business partners / sponsors, only with prior consent;
– competent authorities for the fulfilment of legal obligations and / or provisions of public bodies.
The list of Data Processors is constantly updated and available by writing to privacy@idylium.com or at the registered offices of the Data Controllers.
Transfer of data outside the EU?
Personal data processed for the purpose of browsing the website and for other purposes will not be disclosed or transferred to countries outside the European Economic Area (EEA). The servers connected to the website and to the Information Systems of the Data Controllers are located in Europe.
Is there an automated process?
We do not use decision-making processes based on automatic processing, including profiling.
What are your rights? How can you exercise them?
You may assert your rights as expressed in Articles 15 et seq. of EU Regulation 2016/679 by contacting the Data Controllers at the email address privacy@idylium.com. You have the right, at any time, to ask the Data Controllers for access to your personal data, rectification, deletion of the same, restriction of processing and, if applicable, portability of your data. In addition, you have the right to object, at any time, to the processing of your data based on legitimate interest and, in the cases provided for, you have the right to withdraw your consent without affecting the lawfulness of the processing based on the consent given before the revocation.
To unsubscribe from the newsletter service (e-mail) will be sufficient to write at any time an e-mail to privacy@idylium.com with the subject “unsubscribe from automated” or use our automatic unsubscribe systems within the communication e-mails.
Without prejudice to any other administrative and judicial remedy, if you believe that the processing of data concerning you, violates the provisions of EU Reg. 2016/679, pursuant to art. 15 letter f) of the aforementioned EU Reg. 2016/679, you have the right to lodge a complaint with the Guarantor for the protection of personal data (Supervisory Authority www.garanteprivacy.it). In the case of a request for data portability, the Data Controller will provide you with the personal data concerning you in a structured, commonly used and machine-readable format.
Further information
The controller reserves the right to modify, update, add or remove parts of this privacy policy at its own discretion and at any time. In order to facilitate such verification, the policy will contain the date of updating.
Date of update: 15/07/2021