PRIVACY POLICY – RID NETWORK
PRIVACY INFORMATION DRAFTED IN ACCORDANCE WITH ARTICLES. 13 AND 14 OF EU REGULATION N. 2016/679 FOR THE PROCESSING OF PERSONAL DATA.
1. INTRODUCTION
B.I.T. – Business Intelligence Technology by Giuseppe Signato, C.F. SGNGPP73E29F952U and VAT number 02749900037, with headquarters in via Spreafico, 43 INT.93 28100 Novara (NO) and representative office in via Camillo Rosalba, 49 70124 Bari (BA), hereinafter also referred to as the “Owner“, phone number +39 366 478 6044, email address: bit@ridnetwork.com, as owner of the website called RID Network with URL https://www.ridnetwork.com, is aware of the importance of responsible processing of the personal data of all Web users. For this reason, the Owner wishes to inform and reassure you about the use and processing of personal data provided by each user or otherwise acquired by the Owner during the existing relationship or interaction with the pages of the website https://www.ridnetwork.com, respecting the fundamental rights and freedoms of the individual, as well as in compliance with the provisions of the legislation on the protection of personal data.
Interested parties who connect to the website are recommended to carefully read the following Privacy Policy, drawn up pursuant to articles. 13 and 14 of EU Regulation no. 2016/679 regarding the protection of personal data (hereinafter also the “GDPR” or the “Regulation”). It should be noted that this Privacy and Cookie Policy is provided exclusively for this website and not for other websites that may be consulted by the user via links published on the website itself.
Pursuant to current legislation on the processing of personal data, the processing of information concerning you will be based on the principles of correctness, lawfulness, necessity, minimisation, limitation of purposes and conservation, transparency, accuracy, integrity and confidentiality, for the guarantee of your rights.
Pursuant to art. 13 of the GDPR, we therefore provide you with the following information.
2. DATA CONTROLLER
The data controller of the personal data collected, to be contacted if the user has questions relating to this Privacy Policy or the methods and functions of the processing of their personal data, is the following:
B.I.T. – Business Intelligence Technology by Giuseppe Signato, C.F. SGNGPP73E29F952U and VAT number 02749900037;
via Spreafico, 43 INT.93 28100 Novara (NO), Italy;
Telephone: +39 366 478 6044;
Email: bit@ridnetwork.com;
Pursuant to art. 4 GDPR, “Data Controller” (hereinafter also just the “Data Controller“) means the natural or legal person, public authority, service or other body which, individually or together with others, determines the purposes and means of processing personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria applicable to its designation may be established by Union or Member State law.
3. CATEGORIES OF DATA PROCESSED
The personal data collected through the site do not have the nature of particular data (as defined by article 9 of the GDPR), but are only suitable for identifying the User (for example name, surname, tax code, residence, telephone number, email). In particular, personal data may concern:
Browsing data: information recorded by the computer systems used by www.ridnetwork.com during the normal activity of providing its services. This category of data includes, for example, all information relating to internet communication protocols, IP addresses and site access logs.
Data provided voluntarily by the User: the user, during the registration procedure or purchase of services, voluntarily communicates his personal data after completing the procedure.
Third party data provided voluntarily by the User: the user may purchase some services offered on www.ridnetwork.com on behalf of third parties who do not have a direct relationship with www.ridnetwork.com.
Browsing data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the addresses in URI notation, Uniform Resource Identifier, of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment.
These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site or third parties: except for this eventuality, data on web contacts currently do not persist for more than 24 months.
Data provided voluntarily by the user
The user can voluntarily register on the site to take advantage of the possibility of inserting comments, reviews, making reservations or purchases. The information that the user provides is used to generate and manage a profile (as usually happens in social networks), allowing you to insert a photo and a nickname (user name) even different from your name and surname.
Given that the comment service is set up in such a way that some of the data released via the form are published together with the comment, the user is asked to evaluate beforehand whether to proceed and/or use a nickname so as not to be easily recognizable by those who visit the site or web page where the comment was published.
Personal data provided voluntarily by users who forward requests for the sending of informative material, such as bulletins, newsletters or for the booking and execution of optional services offered on the site, such as commercial and advertising insertions, consultancy, answers to questions and various provisions , etc. are used only to provide the service and/or to carry out the tasks requested and are communicated to third parties only in the case strictly necessary for the aforementioned purposes.
The optional, explicit and voluntary sending of e-mails to the addresses indicated on this site entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message. Specific summary information will be progressively reported or displayed on the pages of the site set up for particular services on request.
Cookies
No personal data of users is acquired by the site for this purpose. Cookies are not used to transmit information of a personal nature, nor are so-called cookies used. persistent cookies of any kind, or systems for tracking users.
The use of session cookies, which are not stored permanently on the user’s computer and disappear (according to the user’s browser settings) when the browser is closed or after the maximum period of 24 hours has elapsed, is strictly limited to the transmission of user identifiers session (consisting of random numbers generated by the server) necessary to allow fast, safe and efficient exploration of the site.
The session cookies used on this site avoid the use of other IT techniques potentially prejudicial to the privacy of users’ browsing and do not allow the acquisition of personal identification data of the user. However, on our site there are also cookies for language management (Italian and English) which are used by the platform to manage and/or memorize the default site language or one chosen by the user. These cookies have an expiry period of 11-12 months.
If you want more information on the use of cookies on our site visit this link.
4. TREATMENT PURPOSE
The personal data collected on the website www.ridnetwork.com are processed by the Data Controller for the following purposes:
- manage the registration procedure and access to the reserved area;
- operational, technical and administrative management of the services purchased by the User;
- respond to requests for assistance or information sent via the communication channels permitted by the Owner;
- fulfill legal, accounting and tax obligations;
- carry out direct marketing via email for services similar to those purchased or for the pursuit of the legitimate interest of the Owner in promoting products or services in which the User is reasonably interested;
- security and prevention of fraudulent conduct.
Legal requirements
In compliance with the provisions of article 6 of the GDPR, the Data Controller carries out the processing on the basis of:
- consent to processing;
- execution of a contract;
- fulfillment of a legal obligation;
- pursuit of legitimate interest.
5. NATURE OF DATA COLLECTION AND CONSEQUENCES OF ANY FAILURE TO PROVIDE
The provision of navigation data is mandatory in order to provide the navigation service on the website, with the clarification that failure, partial or incorrect provision of personal data, as necessary for the execution of the requested service, does not make such execution possible, while failure, partial or incorrect provision of unnecessary optional personal data does not entail any consequences.
The installation of technical, analytical and third-party cookies is optional (it can be prevented via browser settings), but could make the website or some of its services unusable.
6. PROCESSING METHODS AND STORAGE PERIOD
The personal data of users of the Site will be processed in electronic and/or paper form, in compliance with the principles established by the personal data protection legislation. The processing will take place following the adoption of all security, technical and organizational measures, appropriate to the risks to the fundamental rights and freedoms of the interested party. The data is processed at the operational offices of the Data Controller and in any other place where the parties involved in the processing are located. The personal data of the interested party may be transferred to a country other than the one in which the interested party is located.
The processing operations will be carried out by subjects authorized by the Data Controller to access the information, who will be adequately trained regarding the protection of personal data and designated as data processors.
The personal data collected will be kept for the entire period of provision of the service and for a period of time not exceeding that necessary to achieve the purposes for which they are collected and will be deleted within a maximum period of no. 15 days from the completion of these activities. The data collected through services attributable to Google (for example Google AdWords) will be retained for a period of 14 months.
7. COMMUNICATION AND DISSEMINATION OF DATA
Your personal data, collected for the purposes indicated in point 3 and 4, as well as for technical, operational, practical, market, advertising and promotion needs, strictly connected to the Data Controller’s activity, may be communicated to third parties, and in particular :
– to all natural and legal persons, or partner companies or connected to the Data Controller, operating in the same product sector, in cases where communication is necessary for the purposes illustrated above;
– as regards the service of sending mailing lists to external companies, if the Data Controller makes use of external platforms for this activity;
– to collaborators and employees specifically designated as data processors and within the scope of their duties, including the help desk service, who will operate under the direct authorization of the Data Controller and who will receive adequate operational and safety instructions in this regard;
– to the public authorities and administrations of the State for purposes related to the fulfillment of legal obligations, for reasons of investigation, assessment and repression of administrative, fiscal, accounting, tax and criminal offences;
– to companies that offer IT services and/or software and website development and maintenance and updating and revision of IT tools.
Their list is constantly updated and can be found easily and free of charge by sending a written communication to the Data Controller at the address indicated above or an email to the following address: bit@ridnetwork.com.
Users’ non-personal data may be provided to third parties in direct contact with the Owner, with the aim of monitoring and improving the performance of the platform.
Personal data may also be known, in relation to the performance of assigned tasks, by the Data Controller’s staff, including interns, temporary workers, consultants, employees of companies external to the Data Controller, all specifically appointed as data processors.
8. TRANSFER OF DATA OUTSIDE THE EUROPEAN UNION
The Data Controller does not transfer the personal data of interested parties, collected through the site https://www.ridnetwork.com and the tools provided therein, to countries located outside the European Union.
9. LINK TO THIRD PARTY SITES OR SERVICES
This information is provided only for the processing of personal data carried out through this website or the tools provided by it, and not for other websites that may be consulted by the user via links, whose managers operate as independent data controllers. treatment. Users are therefore invited to carefully read their privacy policies before accessing third-party services.
10. RIGHTS OF THE INTERESTED PARTY
Articles 12, 15, 16, 17, 18, 20 and 34 of the Regulation give interested parties the possibility to exercise specific rights.
The interested party may at any time exercise his rights towards the owner or data controller.
In particular, the interested party can obtain:
a) confirmation of the existence or otherwise of personal data concerning him, even if not yet registered, and their communication in an intelligible form;
b) information on the purposes and methods of processing;
c) information on the categories of personal data in question;
d) the identification details of the owner and, if designated, of the data controller
e) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if recipients are from third countries or international organisations;
f) when possible, the expected retention period of personal data, or, if this is not possible, the criteria used to determine this period;
g) the updating, rectification or, when interested, the integration and limitation of personal data;
h) the cancellation, transformation into anonymous form or blocking of data processed in violation of the law or to fulfill a legal obligation provided for by European Union law or Italian law, including those whose conservation is not necessary in relation to the purposes for which the data were collected or subsequently processed (so-called right to be forgotten);
i) the revocation of the consent given, when this is based on the hypothesis provided for by the art. 6, par. 1, letter. to. (when “the interested party has expressed consent to the processing of their personal data for one or more specific purposes”), or by art. 9, par. 2, letter. to. (when “the interested party has given explicit consent to the processing of such personal data for one or more specific purposes”) of the GDPR, at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation;
j) the limitation of processing, in the cases provided for by the Regulation;
k) communication of any violation of personal data, when this is likely to present a high risk for the rights and freedoms of natural persons, unless the Data Controller has implemented technical and organizational measures to make the data incomprehensible to anyone was not authorized to access it, or has subsequently adopted measures to avoid the occurrence of such a high risk, or such communication would require disproportionate efforts;
l) the receipt, in a structured format, commonly used and readable by automatic device, of the personal data provided to the Data Controller, as well as the transmission of the same to another data controller, and this at any time, even upon termination of the relationship if necessary entertained with the Owner, and, if technically feasible, to obtain direct transmission, provided that consent has been requested.
The interested party also has the right to object at any time, in whole or in part, without prejudice to the possible consequences referred to in the art. 2, c. 1, of the Regulation:
– for legitimate reasons to the processing of personal data concerning him, even if pertinent to the purpose of the collection;
– to the processing of personal data concerning him carried out pursuant to art. 6, par. 1, letter. And. (“the processing is necessary for the execution of a task of public interest or connected to the exercise of public powers vested in the data controller”) or letter. f. (“processing is necessary for the pursuit of the legitimate interest of the data controller or third parties”) of the GDPR, including profiling on the basis of these provisions;
– to the processing of personal data concerning him for the purposes of sending advertising or direct sales material or for carrying out market research or commercial communication (direct marketing), including profiling to the extent that it is connected to it.
The interested party, in the event that he believes that the processing concerning him violates the legislation in force, has the right to lodge a complaint with a supervisory authority, in particular that of the Member State in which he habitually resides, works or the place where the alleged violation occurred. The Italian Supervisory Authority can be reached at the contact details on its website.
The rights referred to in the art. 8 GDPR are exercised with a request addressed without formalities to the Data Controller or data processor, also through a person in charge, to which suitable feedback is provided without unjustified delay and in any case within one month, extendable by one month, from receipt of the request.
The request addressed to the Data Controller can also be sent by registered mail to the Data Controller’s headquarters or to the email address: bit@ridnetwork.com
We also remind you that, if the processing of the user’s data is based on consent, the user will always have the right to revoke it: we also remember that the revocation does not invalidate the processing carried out up to then by the Data Controller, and that it could prevent the Owner from pursuing the purposes requested by the user.
11. CHANGES TO THIS PRIVACY POLICY
The Data Controller reserves the right to make changes to this information by adapting it to any organizational and technological regulations. In case of modification, the new version of the same will be published on the websites belonging to the Owner and, therefore, the user is invited to periodically monitor the information contained therein.
Last update: 10 May 2024