Privacy policy statement
This privacy policy document describes the purposes of, and methods implemented for, the processing of the personal details of clients or users of the carnext.it website (referred to from now on as the “Site”) managed by CarNext Italia S.r.l. (this document does not cover the processing operations carried out on other websites that may be reached by the user if he or she clicks on links found on the Site).
This general document gives information on the criteria applied for the correct processing of personal details carried out on or through the Site – criteria that the user can examine in greater detail within the statements published in the various sections of the Site (based on Article 13 of Italian Legislative Decree No. 196 of 30 June 2003, also referred to as the Italian Data Protection Act), which are intended to specify the methods and purposes of the processing operations associated with the provision of specific services and/or information of various types.
This document deliberately draws on the content of the Privacy Policy applied by the relevant Italian Authority for the protection of personal details in relation to the processing of the personal details of users who visit the Authority’s official website: www.garanteprivacy.it. It is CarNext Italia S.r.l.’s intention to ensure the compliance of its own privacy protection policies not only with the Italian Data Protection Act but also with the policy set out by the Authority in its Privacy Policy document as shown on its official website. These provisions encompass the guidelines set out in Recommendation No. 2/2001 that the European Authorities for the protection of personal data, working jointly through the Group established by Article 29 of Directive No. 95/46/CE, adopted on 17 May 2001 in order to identify a number of minimum requirements for the collection of personal details online and, specifically, the methods, timescales and nature of the information that the Data Controllers must provide to users when the users visit a given website, regardless of the purpose of that visit.
Data Controller (Art. 28 of the Italian Data Protection Act)
Following consultation of this Site, data on identified or identifiable individuals may be processed.
The Data Controller is CarNext Italia S.r.l., a company that has its registered offices at No. 2/A, Via Guido Miglioli, Cernusco sul Naviglio, Postal Code 20063, Italy, tel. +39 06 59 627 627 – fax +39 06 59 627 396 – e-mail: privacy@leaseplan.it.
Location of the processing of personal details.
The processing operations associated with the web services of this Site take place at the aforementioned registered offices of CarNext Italia S.r.l. and/or at the facilities of the suppliers of the company’s electronic communication services, and are dealt with exclusively by the technical personnel charged with the responsibility of carrying out the operations, or by those personnel responsible for conducting occasional maintenance operations.
The communication and disclosure of personal details may occur only on the basis of the guidelines set out by the Italian Data Protection Act – i.e. with the consent of the interested parties or in cases where communication and disclosure are legally required on the basis of the regulations contained in Articles 24 and 25 of the Data Protection Act.
Categories and types of personal details subject to processing.
Browsing data
The IT systems and software procedures deployed to ensure the functionality of the Site acquire, during the normal execution of their operations, a number of pieces of personal data,
the transmission of which is implicit in the use of communication protocols on the internet.
The pieces of information in question are not compiled in order to be associated with specifically identified individuals, but due to their very nature they could – by processing and associating them with data held by third parties – allow the identity of users to be revealed.
This category of details includes: the IP addresses or domain names of the computers used by the users to connect to the Site; the web addresses, in the form of URIs (Uniform Resource Identifiers), of the requested resources; the time of the request; the method used to submit the request to the server; the size of the file received in response; the numerical code indicating the status of the response given by the server (success, fail, etc.) and other parameters relating to the user’s operating system and IT environment.
These details are used for the sole purpose of providing anonymous statistical information on the use of the Site and to check its correct functionality. They are cancelled immediately after they have been processed. The details may be used to ascertain responsibility in cases of computer crimes against the Site, but at present – except in relation to this eventuality – the details on web hits will not be stored permanently, unless the user requests for them to be stored permanently (e.g. access to the pages of the Site that summarise the services used, the information requested, etc.).
Details supplied voluntarily by the user
The optional, explicit and voluntary sending of e-mail to the addresses stated on this Site connotes the subsequent acquisition of the e-mail address of the sender – which is required in order to respond to the requests – along with any other personal details included in the message.
Specific informative statements will be displayed on the pages of the Site that provide particular services available on request.
Use of cookies or systems for the permanent monitoring/tracing of users.
Cookies are used on the Site for the transmission of personal information. A cookie is a text file that remains on the users’ hard drive, to where it has been sent through the webpage of our server. The user can at any time choose to activate or deactivate cookies by changing the settings of his or her browser. Normally, the use of cookies makes using the Site easier and faster. No systems are used on the Site for the permanent tracing of users.
The use of so-called session cookies (which are not stored permanently on the user’s computer and are deleted when the browser is closed) is strictly limited to the transmission of the session-identifier data (constituted by random numbers generated by the server), which is necessary to allow for the secure and efficient exploration of the Site.
The session cookies used on this Site do not have recourse to other IT techniques that could potentially compromise the confidentiality of users’ browsing operations, and moreover, they do not allow the acquisition of personal details that identify the user.
Sensitive data
CarNext does not request or collect sensitive personal data through the Site (such as, for example, information that would make it possible to reveal the user’s racial or ethnic origin, his or her political, philosophical or religious beliefs, sexual habits or health details). If it becomes necessary to request or collect sensitive data, the prior written (or equivalent) consent of the user will always be required.
Optional nature of the supplying of personal details.
Aside from those details collected during browsing, the user is at liberty to provide his or her personal details for the purposes associated with his or her decision to access the Site (e.g. requesting information through the filling out of forms, registering for specific services, purchasing goods or services, etc.). In any case, the refusal to provide said details may make it impossible for the requested service to be provided.
Purposes of the processing operations
CarNext collects and processes the personal details of clients and users of the Site in order to: implement its own business operations: to make available information, products and services that may be of interest; and for purposes of statistical analysis of the use of the Site. The information supplied by the user will be used to contact him or her when necessary – for example to notify him or her about modifications to the functionality of the Site or to inform him or her about services being offered that may be of interest (conditional on prior consent being granted).
If the user is a consumer, the processing of his or her personal details for commercial or marketing purposes will be based on the acquisition of prior, specific consent. If the user is a professional and does not wish to receive any publicity message from CarNext, he or she can contact us at the following address: CarNext Italia S.r.l. Cernusco sul Naviglio, Via Guido Miglioli, n. 2/A – CAP 20063, Italy, tel. +39 06 59 627 627 – fax +39 06 59 627 396 – e-mail: privacy@leaseplan.it. For any questions or requests in relation to this Privacy Policy Statement, our processing of personal details or the browsing of this Site, please contact CarNext.
Methods used for processing.
The personal details are processed using automated tools, and the processing operations last only as long as is strictly necessary to fulfil the purposes for which the details were collected.
Specific safety measures are put in place to prevent the loss of the details, their illegal or unfair use, or unauthorized access to them.
Rights of the data subjects.
The subjects to whom the personal details relate have the right to request at any time confirmation as to the presence or absence of any details concerning them, to be informed as to the source and content of those details, to verify their accuracy and to request their integration, updating or correction (Article 7 of Italian Legislative Decree No. 196/2003).
In accordance with the terms of the aforementioned article, the data subjects also have the right to request the cancellation, making anonymous or blocking of access to any details processed illegitimately, and in any case to oppose their processing for legitimate reasons.
All requests should be forwarded to the Data Controller at the following e-mail address: privacy@leaseplan.it.