While browsing the site, data of different types may be collected—some acquired automatically, others only with the consent of the data subject.
Specifically, the data collected through the website include the following:
Technical Data
The technical data processed include: IP address (Internet Protocol), date and time of visit, browser used, physical address of the device from which the connection is made (i.e., MAC address), the addresses of the requested resources, and cookies. The acquisition of technical data is implicit in the functioning of the website and does not involve the identification of the data subject.
Cookies
Cookies are small files that the site—or a third-party site—sends to the user’s terminal, where they are stored before being retransmitted to the same sites as needed. The site uses the following types of cookies: it does not use profiling cookies, only technical cookies. Technical cookies are anonymous and necessary to enable the data subject to navigate the site and use all its functions. Their presence also speeds up browsing and site usage. For example, they facilitate certain procedures such as online purchases, authentication in restricted access areas, or automatic recognition of preferred language settings.
Specifically, the technical cookies used include:
Functionality or preference cookies: These remember functionality choices preselected by the user, such as language or geographic region.
Browsing cookies: These ensure normal navigation and use of the website (e.g., enabling purchases or logins to restricted areas).
Technical cookies are subject to automatic deletion by the browser according to its settings.
Personal Data
All standard personal data provided by the user when using the site’s services will be processed. This may include, for example, name, surname, email address, and any other personal data entered via the “Contact” section. We recommend not entering sensitive personal data in this field.
LEGAL BASIS FOR PROCESSING
The legal basis for processing the personal data of the data subject is consent.
PURPOSE OF PROCESSING
The data collected will be used for the following purposes:
a. to allow the data subject to request and receive information, either in writing or verbally;
b. to allow the user to submit a job application to the company;
c. to allow the data subject to subscribe to the newsletter;
d. to perform anonymous statistical analysis.
NATURE OF DATA PROVISION
Providing personal data is optional. Failure to provide the requested data will prevent the data subject from using the services offered on the site, excluding basic navigation.
DATA RETENTION PERIOD
The personal data of the data subject will be retained for five (5) years.
PLACE OF DATA PROCESSING
Personal data are processed at the data controller’s headquarters but may be transferred to third parties for data security purposes. These entities, located in Italy or elsewhere within the European Union, are designated as data processors. The data subject may contact the controller for detailed information about these transfers and data processors.
PROCESSING METHODS
Data are processed both on paper and electronically. Data, including those relating to third parties, will be:
a) processed lawfully and fairly;
b) collected and recorded for specific, explicit, and legitimate purposes and not further processed in a way incompatible with those purposes;
c) accurate and, where necessary, updated;
d) relevant, complete, and not excessive in relation to the purposes for which they are collected or further processed;
e) kept in a form that permits identification of the data subject for no longer than is necessary for the purposes for which the data were collected or further processed.
SECURITY MEASURES
Specific and adequate technical and organizational measures are adopted in accordance with Article 32 of the GDPR to minimize the risk of destruction, loss, unauthorized access, or unlawful processing of personal data.
DISCLOSURE AND COMMUNICATION OF PERSONAL DATA
Personal data provided by the data subject will be disclosed only to qualified third parties where necessary for providing requested services or complying with legal obligations. These parties are appropriately designated as data processors or persons in charge of processing, or are recipients by virtue of legal or regulatory requirements. In particular, data may be disclosed to:
– entities or authorities to whom data must be communicated by law or regulation;
– professionals or companies providing accounting, administrative, tax, or legal support to the Data Controller;
– service providers necessary for operating the website;
– personnel authorized by Arca Etichette Spa, subject to confidentiality obligations (e.g., employees and collaborators).
Your personal data will not be publicly disclosed.
TRANSFER OF DATA ABROAD
In some cases (such as the use of social plugins from LinkedIn and Instagram), your personal data may be processed outside the European Economic Area. Transfers may occur:
a) to third countries deemed to offer adequate protection by the European Commission; or
b) to countries lacking such protections, provided that appropriate safeguards (such as standard contractual clauses) are in place or when necessary to fulfill a contract.
RIGHTS OF THE DATA SUBJECT
You have the right to:
– request confirmation as to whether personal data concerning you are being processed and access such data and related information;
– receive a copy of your personal data;
– rectify inaccurate data or complete incomplete data;
– request the deletion of personal data when conditions apply;
– request restriction of processing where applicable;
– obtain personal data in a structured, commonly used, and machine-readable format and transmit those data to another controller (data portability), where applicable;
– object to processing on grounds relating to your particular situation;
– withdraw consent at any time (processing conducted before withdrawal remains lawful).
Let me know if you’d like this version in Spanish or in a legal-style format for publishing.
Please contact with each Concordia Partner on the directory