INFORMATION NOTE ON THE PROCESSING OF PERSONAL DATA (ART. 13 – ITALIAN LEGISLATIVE DECREE N. 196 / 2003 “PRIVACY ACT”) AND EUROPEAN REGULATION 2016/679 (“GDPR”).
CREO s.p.a., hereinafter referred to as Owner, wishes to inform and reassure you about the use of personal data provided or acquired by the Owner during the interaction with the pages of this website, in respect of the fundamental rights and freedoms of individuals, as well as in compliance with the provisions on personal data protection regulation.
Piazza della Repubblica, 11/A
20124 Milan, Italy
Our users can send requests regarding the protection of personal data, privacy and security to the e-mail address firstname.lastname@example.org.
The Owner processes personal data related to the Interested party in one of the following events:
The Data of the Data Subject is collected to allow the Owner to provide its Services, as well as for the following purposes: (i) site statistics collection (e.g. Google Analytics), (ii) contacts with the Data Subject (contact forms), newsletter service and / or quote request) and (iii) displaying content from external platforms (e.g. social networks such as Facebook, YouTube, Instagram, LinkedIn etc.).
The services contained in this section allow the Data Controller to monitor and analyse traffic data and are used to keep track of the behaviour of the interested party.
Google Analytics (Google Inc.)
Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google uses Personal Information collected for evaluating the use of this Site, compiling reports and sharing them with other services developed by Google. Google may use the Personal Data to contextualise and personalize the advertisements of its advertising network.
At the following link https://tools.google.com/dlpage/gaoptout?hl=it is made available by Google the browser add-on for the deactivation of Google Analytics.
Contact form / Quote request / Newsletter
The interested party, by filling in contact forms present on the site with his / her personal data, consents to their use to respond to requests for information, quotation, or any other kind indicated by the header of the form. By consenting to the registration to the mailing list or to the newsletter, the e-mail address of the interested party is automatically added to a list of contacts to which e-mail messages containing information, including commercial and promotional, relating to this Site may be transmitted. The e-mail address of the interested party could also be added to this list because of the registration to this Site or after making a purchase.
Contents of external platforms
These services allow you to interact with social networks, or other external platforms, directly from the pages of this site or allow you to view content hosted on external platforms directly from the pages of this site and interact with them. The interactions and information acquired from this site are in any case subject to the privacy settings of the interested party relating to each social network. If an interaction service with social networks is installed, it is possible that, even if the Users do not use the service, the same collect traffic data relating to the pages in which it is installed.
LinkedIn button and social widgets (LinkedIn Corporation)
The button and social widgets of Linkedin are services of interaction with the social network Linkedin, provided by LinkedIn Corporation.
Like button and Facebook social widgets (Facebook, Inc.)
The “Like” button and Facebook social widgets are services of interaction with the social network Facebook, provided by Facebook, Inc.
Youtube Video Widget (Google Inc.)
Youtube is a video content visualization service managed by Google Inc. that allows this Site to integrate such contents within its pages.
Google Font (Google Inc.)
Google Fonts is a service of visualization of styles of character managed by Google Inc. that allows this Site to integrate such contents within its pages.
Google Maps (Google Inc.)
Google Maps is a map visualization service managed by Google Inc. that allows this site to integrate such contents within its pages.
Your data will be processed in compliance with the principles established by the legislation on personal data protection. The treatment will take place after the adoption of every measure of security, both technical and organizational, adequate to the risks for your rights and your fundamental freedoms. The data are processed at the operational headquarters of the Data Controller and in any other place where the parties involved in the processing are located. The personal data of the interested party may be transferred to a country other than the one in which the interested party is located.
The processing operations will be carried out by subjects authorized by the Company to access the information, which will be adequately trained on the protection of personal data and designated as persons in charge of processing. The data are processed and stored for the time required by the purposes for which they were collected. Therefore:
At the end of the retention period, personal data will be deleted. Therefore, at the end of this term the right of access, cancellation, rectification and the right to data portability can no longer be exercised.
The compulsory data provided will not be disseminated in any way and they will only may be communicated or made accessible, exclusively for the purposes described, to other companies that deal with the maintenance of the information systems, as well as to those who deal with specific stages of treatment, as autonomous and external Data Controllers, regularly designated by the Data Controller whose names and relative qualifications are available at the request of the interested parties, as well as to subjects to whom the right to access the data is recognized by provisions of law and secondary legislation.
The Company may also disclose your personal data to third parties (i) where required by EU or Member State legislation; (ii) in the case of legal proceedings; (iii) in response to a request from law enforcement agencies based on legitimate grounds; (iv) to protect the rights, privacy, security or property of the Company and again, to the extent permitted by law, to investigate, prevent or take measures concerning illicit activities, suspected fraud.
The GDPR grants you a series of rights (articles 15 to 22) to protect your personal data: you will always have the right to access the information concerning you and to be informed about the methods and purposes of the processing to which this data is subject to; you have the right to rectify and to modify the data, if it is inaccurate or not updated; you have the right to request cancellation, to oppose the treatment or to obtain the limitation of the use of your data, if your request meet the conditions required by law; you have the right to obtain the portability of personal data supplied, if processed by automated means on the basis of a consent or the need to execute a contract.
We also remind you that, if your treatment is based on consent, you will always have the right to revoke it: please note that this (i) does not invalidate the treatment up to then delivered by the company, and that (ii) such revocation could prevent the company from pursuing the purposes you have requested.
Last update: 17/10/2020.