This general document gives information on the criteria applied for the correct processing of personal details carried out on or through the Site – criteria that the user can examine in greater detail within the statements published in the various sections of the Site (based on Article 13 of Italian Legislative Decree No. 196 of 30 June 2003, also referred to as the Italian Data Protection Act), which are intended to specify the methods and purposes of the processing operations associated with the provision of specific services and/or information of various types.
Data Controller (Art. 28 of the Italian Data Protection Act)
Following consultation of this Site, data on identified or identifiable individuals may be processed.
The Data Controller is CarNext Italia S.r.l., a company that has its registered offices at No. 2/A, Via Guido Miglioli, Cernusco sul Naviglio, Postal Code 20063, Italy, tel. +39 06 59 627 627 – fax +39 06 59 627 396 – e-mail: firstname.lastname@example.org.
Location of the processing of personal details.
The processing operations associated with the web services of this Site take place at the aforementioned registered offices of CarNext Italia S.r.l. and/or at the facilities of the suppliers of the company’s electronic communication services, and are dealt with exclusively by the technical personnel charged with the responsibility of carrying out the operations, or by those personnel responsible for conducting occasional maintenance operations.
The communication and disclosure of personal details may occur only on the basis of the guidelines set out by the Italian Data Protection Act – i.e. with the consent of the interested parties or in cases where communication and disclosure are legally required on the basis of the regulations contained in Articles 24 and 25 of the Data Protection Act.
Categories and types of personal details subject to processing.
The IT systems and software procedures deployed to ensure the functionality of the Site acquire, during the normal execution of their operations, a number of pieces of personal data,
the transmission of which is implicit in the use of communication protocols on the internet.
The pieces of information in question are not compiled in order to be associated with specifically identified individuals, but due to their very nature they could – by processing and associating them with data held by third parties – allow the identity of users to be revealed.
This category of details includes: the IP addresses or domain names of the computers used by the users to connect to the Site; the web addresses, in the form of URIs (Uniform Resource Identifiers), of the requested resources; the time of the request; the method used to submit the request to the server; the size of the file received in response; the numerical code indicating the status of the response given by the server (success, fail, etc.) and other parameters relating to the user’s operating system and IT environment.
These details are used for the sole purpose of providing anonymous statistical information on the use of the Site and to check its correct functionality. They are cancelled immediately after they have been processed. The details may be used to ascertain responsibility in cases of computer crimes against the Site, but at present – except in relation to this eventuality – the details on web hits will not be stored permanently, unless the user requests for them to be stored permanently (e.g. access to the pages of the Site that summarise the services used, the information requested, etc.).
Details supplied voluntarily by the user
The optional, explicit and voluntary sending of e-mail to the addresses stated on this Site connotes the subsequent acquisition of the e-mail address of the sender – which is required in order to respond to the requests – along with any other personal details included in the message.
Specific informative statements will be displayed on the pages of the Site that provide particular services available on request.
The use of so-called session cookies (which are not stored permanently on the user’s computer and are deleted when the browser is closed) is strictly limited to the transmission of the session-identifier data (constituted by random numbers generated by the server), which is necessary to allow for the secure and efficient exploration of the Site.
The session cookies used on this Site do not have recourse to other IT techniques that could potentially compromise the confidentiality of users’ browsing operations, and moreover, they do not allow the acquisition of personal details that identify the user.
CarNext does not request or collect sensitive personal data through the Site (such as, for example, information that would make it possible to reveal the user’s racial or ethnic origin, his or her political, philosophical or religious beliefs, sexual habits or health details). If it becomes necessary to request or collect sensitive data, the prior written (or equivalent) consent of the user will always be required.
Optional nature of the supplying of personal details.
Aside from those details collected during browsing, the user is at liberty to provide his or her personal details for the purposes associated with his or her decision to access the Site (e.g. requesting information through the filling out of forms, registering for specific services, purchasing goods or services, etc.). In any case, the refusal to provide said details may make it impossible for the requested service to be provided.
Purposes of the processing operations
CarNext collects and processes the personal details of clients and users of the Site in order to: implement its own business operations: to make available information, products and services that may be of interest; and for purposes of statistical analysis of the use of the Site. The information supplied by the user will be used to contact him or her when necessary – for example to notify him or her about modifications to the functionality of the Site or to inform him or her about services being offered that may be of interest (conditional on prior consent being granted).
Methods used for processing.
The personal details are processed using automated tools, and the processing operations last only as long as is strictly necessary to fulfil the purposes for which the details were collected.
Specific safety measures are put in place to prevent the loss of the details, their illegal or unfair use, or unauthorized access to them.
Rights of the data subjects.
The subjects to whom the personal details relate have the right to request at any time confirmation as to the presence or absence of any details concerning them, to be informed as to the source and content of those details, to verify their accuracy and to request their integration, updating or correction (Article 7 of Italian Legislative Decree No. 196/2003).
In accordance with the terms of the aforementioned article, the data subjects also have the right to request the cancellation, making anonymous or blocking of access to any details processed illegitimately, and in any case to oppose their processing for legitimate reasons.
All requests should be forwarded to the Data Controller at the following e-mail address: email@example.com.