PRIVACY POLICY, COOKIES and GDPR

​

Information on the processing of personal data pursuant to Art. 13 of European Regulation no. 679/2016 on the protection of natural persons with regard to the processing of personal data (GDPR).

​

WHY THIS NOTICE

​

The information is provided only for the site www.lumiei.it (hereinafter also simply “site”) and not for other websites that may be consulted by the user via links on the site. The information is also inspired by Recommendation no. 2/2001 of 17 May 2001, Opinion no. 04/2012 on Cookie Consent Exemption of 7 June 2012, Working Document 02/2013 providing guidance on obtaining consent for cookies of 2 October 2013 that the European authorities for the protection of personal data, gathered in the Group established pursuant to art. 29 of Directive no. 95/46/CE, have adopted to identify some minimum requirements for the collection of personal data online, and, in particular, the methods, times and nature of the information that the Data Controllers must provide to users when they connect to web pages, regardless of the purposes of the connection. Furthermore, Provision no. 229/2014 of the Privacy Guarantor and the "Guidelines for cookies and other tracking tools" of 10 June 2021 were considered.

1. DATA CONTROLLER

Lumiei Impianti Srl . Registered office: Via Sauris di Sopra 51/b, 33020 Sauris UD . Operational headquarters: Via Comunità Carnica 7, 33029 Villa Santina UD t. +39 0433 86075 . f. +39 0433 866907 . info@lumieimpianti.com . lumieimpianti@pec.it . C.F. and P.I. 02361180306 guarantees maximum confidentiality in the processing of the personal data of the Interested Parties, in compliance with the provisions of the legislation in force on the protection of personal data.

The Data Controller may be contacted for questions concerning the processing of your data, at the following addresses:

- e-mail info@lumiei.it

- registered letter addressed to Via Comunità Carnica 7, 33029 Villa Santina UD- Italy.

Specific security measures are observed to prevent the loss of data, illicit or unauthorized use and unauthorized access.

The optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site, the completion of information and contact request forms, registrations and/or relating to the newsletter involves the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data entered based on the requested service.

For all information regarding: purpose of processing, processing methods and data retention times, we report the specific information prepared for each case, inviting you to read what is reported in this document.

2. PURPOSE OF THE PROCESSING AND LEGAL BASIS

Purpose and legal basis of the processing of data provided by the user.

The personal data of the interested party will be processed for the following purposes and according to the following legal bases:

Purpose / Legal basis

Management and execution of the contractual relationship and related obligations. Contractual fulfillment. Art. 6, paragraph 1, letter b) GDPR. Fulfillment of obligations established by laws, regulations, community legislation, as well as instructions prepared by authorities and supervisory bodies. Providing support to Customers / Users Contractual and pre-contractual fulfillment. Art. 6, paragraph 1, letter b) GDPR. Fulfillment of a legal obligation. Art. 6, paragraph 1, letter c) GDPR.

 

Management of access to the reserved area of ​​the site.

Contractual fulfillment. Art. 6, paragraph 1, letter b) GDPR. Legitimate interest. Art. 6, paragraph 1, letter f) GDPR. Sending newsletters. Optional consent of the interested party. Art. 6, paragraph 1, letter a) GDPR. In order to satisfy the legitimate interest of the Data Controller to maintain a communication channel with the Customer, Lumiei will use the Customer's contact details to occasionally send communications about its products and its business. The Customer may inform the Data Controller at any time if he or she no longer wishes to receive such communications. Legitimate interest. Art. 6, paragraph 1, letter f) GDPR. Art. 130, paragraph 4, Legislative Decree 196/2003.

 

Browsing data

The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes the IP addresses or domain names of computers and terminals used by users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment. Such data, necessary for the use of web services, are also processed for the purpose of: obtaining statistical information on the use of services (most visited pages, number of visitors per time slot or day, geographical areas of origin, etc.) and checking the correct functioning of the services offered. Browsing data do not persist for more than seven days and are deleted immediately after their aggregation (except in the event of the need to ascertain crimes by the Judicial Authority).

​

Data communicated by the user.

The optional, explicit and voluntary sending of messages to the contact addresses of the Data Controller, as well as the compilation and forwarding of the forms on the Data Controller's websites, entail the acquisition of the sender's contact data, necessary to respond, as well as all personal data included in the communications. Specific information will be published on the pages of the Data Controller's websites set up for the provision of certain services. The site contains various forms for collecting user data. Each form is designed to allow the user to access specific services.

​

Nature of the provision of data.

The Data Controller processes the personal data necessary for the purchase of the product, in particular name and surname, contact details such as email address and telephone number, address of residence or domicile.

The Data Controller may also save cookies, as described in more detail in the Cookie Policy.

The provision of data is optional. However, any failure to provide the requested data may make it impossible to establish or continue, in whole or in part, the contractual relationship and to follow up on requests for the provision of services.

Methods of processing and data retention period

The processing will be carried out with tools suitable for guaranteeing the security and confidentiality of the data, in compliance with the provisions of Chapter II (Principles) and Chapter IV (Data Controller and Data Processor) of the Regulation. The processing may also be carried out through partially automated methods designed to store, manage or transmit the data.

Personal data collected for purposes related to the execution of a contract or a pre-contractual request between the Data Controller and the User/Customer will be retained until the complete execution of such contract and also subsequently for legal obligation or to protect the rights of the Data Controller.

Data processed on the basis of a legitimate interest are subject to processing until the interested party expresses his opposition (e.g. sending commercial communications to its customers - Art. 130 paragraph 4 Legislative Decree 196/2003).

When the processing is based on the User's consent, the Data Controller may retain personal data for a longer period, until such consent is revoked. Furthermore, the Data Controller may be obliged to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority. Please note that consent is optional and may be revoked subsequently at any time and free of charge by writing to the Data Controller's contacts.

At the end of the retention period, personal data will be deleted. Therefore, upon expiration of such period, the right of access, cancellation, rectification and the right to data portability can no longer be exercised.

​

3. SCOPE OF KNOWLEDGE AND COMMUNICATION OF DATA

Your data may be made accessible, for the purposes indicated above, to the following subjects:

1. a. Personnel of the Data Controller authorised to process pursuant to Article 29 of the Regulation;

2. b. Suppliers of services instrumental to the correct fulfillment of the contract (e.g. couriers or freight forwarders);

3. c. Third parties who carry out outsourcing activities on behalf of the Data Controller (for example: professional firms, consultants and/or external system administrators for the time strictly necessary for the optimal execution of such service), who, if applicable, will process the data as Data Processors pursuant to Article 28 of the Regulation, duly appointed by means of a dedicated appointment deed, with an indication of the processing methods and security measures that they must adopt for the management and storage of personal data of which the Company is the Data Controller.

Without your express consent (pursuant to art. 6 letters b) and c) of the Regulation), the Data Controller may communicate your data for the purposes referred to in art. 1 to judicial authorities as well as to all other subjects to whom communication is mandatory by law for the fulfillment of the aforementioned purposes. The complete list of subjects to whom your personal data have been or may be communicated is available to you upon your request to be made by email to info@lumiei.it

​

4. TRANSFER OF DATA ABROAD

The management and storage of personal data will take place on servers, located within the European Union, of the Data Controller and/or third-party companies appointed and appointed, if applicable, as Data Processors.

The data are not currently transferred outside the European Union. In any case, it is understood that the Data Controller, if necessary, will have the right to move the location of the servers within the European Union and/or to non-EU countries. In this case, the Data Controller hereby ensures that the transfer of data outside the EU will take place in accordance with Articles 44 et seq. of the Regulation and the applicable legal provisions, stipulating, if necessary, agreements that guarantee an adequate level of protection. In any case, the interested party will be notified before the transfer.

​

5. RIGHTS OF THE INTERESTED PARTY

The subjects to whom the personal data refer may exercise at any time the rights referred to in Articles 15 to 22 of the GDPR. In particular:

The interested party has the possibility to obtain from the Data Controller confirmation of the existence or otherwise of personal data concerning him/her, and in this case, access to the following information:

• Purpose of the processing,

• Categories of personal data processed,

• Recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if recipients in third countries or international organizations;

• Expected period of retention of personal data or, if this is not possible, the criteria used to determine that period;

• Where the data are not collected from the interested party, all available information on their source;

• The existence of an automated decision-making process and, in such cases, meaningful information on the logic involved, as well as the significance and the expected consequences of such processing for the interested party;

• The existence of adequate guarantees pursuant to Article 46 relating to the transfer to third countries or international organizations.

In addition, the interested party has the right to:

• Obtain the updating, rectification or integration of your data, the cancellation, within the terms permitted by the law, or ask for them to be anonymized, the limitation of the processing, and has the right to object, in whole or in part, for legitimate reasons, to the processing of personal data concerning you;

• Obtain the portability of data processed electronically, provided on the basis of consent or contract;

• Revoke your consent, if provided, without prejudice to the lawfulness of the processing based on consent before the revocation;

• Submit a complaint to a Supervisory Authority (in Italy it is the Guarantor for the protection of personal data).

The interested party may at any time exercise his rights in the following ways:

- e-mail to info@lumiei.it

registered letter with return receipt Lumiei impianti addressed to Via Comunità Carnica 7, 33029 Villa Santina UD

The Data Controller will provide information on the action taken regarding the request pursuant to Articles 15 to 22 without undue delay and, in any case, no later than one month after receipt of the request. This period may be extended by two months, if necessary, taking into account the complexity and number of requests. The Data Controller will inform the data subject of such extension, and of the reasons for the delay, within one month of receipt of the request.

​

6. CHANGES TO THIS DOCUMENT

This document may be subject to changes. It is therefore advisable to check this document regularly and refer to the most up-to-date version.

INFORMATION ON THE USE OF COOKIES

1. What are Cookies?

Cookies are small text strings that the sites visited by the user send to his terminal (usually to the browser), where they are stored before being re-transmitted to the same sites on the next visit by the same user. While browsing a site, the user may also receive cookies on his terminal that are sent from different sites or web servers (so-called "third parties"), on which some elements may reside (such as, for example, images, maps, sounds, specific links to pages of other domains) present on the site that the user is visiting. Cookies, usually present in users' browsers in very large numbers and sometimes with characteristics of long temporal persistence, are used for different purposes: execution of computer authentications, monitoring of sessions, storage of information on specific configurations regarding users who access the server, choice of the consultation language, storage of the shopping cart, etc.

2. What are the main types of Cookies?

In this regard and for the purposes of provision no. 229/2014 of the Privacy Guarantor and the "Guidelines for cookies and other tracking tools" of 10 June 2021, two macro-categories are therefore identified: "technical" cookies and "profiling" cookies.

1. a. Technical cookies. Technical cookies are those used for the sole purpose of "carrying out the transmission of a communication on an electronic communications network, or to the extent strictly necessary for the provider of an information society service explicitly requested by the subscriber or user to provide this service" (see art. 122, paragraph 1, of the Privacy Code). They are not used for other purposes and are normally installed directly by the owner or manager of the website. They can be divided into navigation or session cookies, which guarantee normal navigation and use of the website (allowing, for example, to make a purchase or authenticate to access reserved areas): our site uses non-persistent technical cookies for the sole purpose of improving your browsing experience and allowing you faster subsequent access; analytics cookies, assimilated to technical cookies when used directly by the site manager to collect information, in aggregate form, on the number of users and how they visit the site; functionality cookies, which allow the user to navigate according to a series of selected criteria (for example, the language, the products selected for purchase) in order to improve the service provided to the same. The prior consent of users is not required for the installation of these cookies.

2. b. Profiling cookies. Profiling cookies are designed to create profiles relating to the user and are used in order to send advertising messages in line with the preferences expressed by the user while browsing the web. Due to the particular invasiveness that such devices may have in the private sphere of users, European and Italian legislation requires that the user must be adequately informed about their use and thus express their valid consent. Art. 122 of the Privacy Code refers to them where it provides that "the storage of information in the terminal device of a contractor or user or access to information already stored are permitted only on condition that the contractor or user has expressed his consent after being informed with the simplified methods referred to in Article 13 of the Privacy Code, paragraph 3". Our site does not use profiling cookies.

Session and Persistent Cookies.

Session Cookies, also used by our Site, contain information that is used in your current browser session. These cookies are automatically deleted when you close your browser. Nothing is stored on your computer beyond the time of use of the site.

Persistent Cookies are used to maintain information that is used in the period between one access and another to the website, or used for technical purposes and to improve navigation on the site. This data allows sites to recognize that you are a user or visitor already known and adapts accordingly. "Persistent" cookies have a duration that is set by the website and can vary from a few minutes to two years. Our site uses this type of cookies only to allow faster and easier subsequent access and have a duration of one month.

First-party and third-party cookies It is necessary to take into account the different subject that installs the cookies on the user's terminal, depending on whether it is the same operator of the site that the user is visiting (so-called "first party") or a different site that installs cookies through the first (so-called "third parties"). First-party cookies are created and readable by the site that created them. Third-party cookies, on the other hand, are created and readable by domains external to the site and whose data are stored by the third party. This site uses first-party cookies of a technical nature, for which, as mentioned, consent is not required, but only this information.

For more information about this type of advertising based on user tastes, resulting from third-party cookies, you can visit the third-party sites at the links below. At the links www.youronlinechoices.com and www.aboutads.info/choices/ you will also find information on how behavioral advertising works and a lot of information on cookies as well as the steps to follow to protect your privacy on the internet.

If you want to know more about cookies and how to manage them, you can also visit the website www.aboutcookies.org.

Third-party cookies

This site uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). For more information, you can visit the Google page on the use of cookies for Analytics (Link).

Google Analytics uses cookies to allow anonymous collection and analysis of information on your use of the site (including your IP address). This information is transmitted to Google, which processes it for the purpose of drawing up reports regarding your activities on the website itself. Through the initial banner, you can refuse the use of analytical cookies. In any case, Google, in order to offer website visitors the possibility of preventing the use of their data by Google Analytics, has developed the browser add-on for deactivating the Google Analytics JavaScript (https://tools.google.com/dlpage/gaoptout?hl=it).

The Owner does not guarantee that the links to the aforementioned policies are always functional, and this is due to any updates that do not depend on his will, therefore the user is required to consult and personally verify the current text on the websites of the companies indicated above. The owner is not responsible for any malfunctions or conditions that do not allow the consultation of the policies of the aforementioned applications.

​

COOKIE MANAGEMENT IN THE CONFIGURATION OF THE MOST USED BROWSERS

Manage cookies in Google Chrome

Manage cookies in Internet Explorer

Manage cookies in Mozilla Firefox

Manage cookies in Safari

Manage cookies in IOS

​

The following site is indicated again to analyze, more generally, and manage your preferences regarding "online behavioral advertising" (online behavioral advertising) https://www.youronlinechoices.com.

Current version: May 15, 2023.

​
​

Privacy and DGPR Manager

        Indira Fabbro