INFORMATION ON THE PROCESSING OF PERSONAL DATA of users visiting the sites rainbow.it, www.carnet.it

pursuant to Article 13 of Regulation (EU) 2016/679

WHY THIS INFORMATION

Pursuant to Regulation (EU) 2016/679 (hereinafter the "Regulation"), this page describes the methods for processing the personal data of users who visit the website that is accessible electronically at the following addresses: rainbow.it and www.carnet.it.

This information does not pertain to other sites, pages or online services that may be reached via hypertext links published on the sites but which refer to resources outside the Ratti Spa Società Benefit domains.

DATA CONTROLLER

When identified or identifiable natural persons visit the sites listed above, data relating to them may be processed.

The data controller is Ratti Spa Società Benefit with head office in Guanzate (province of Como), via Madonna 30 – 22070 GUANZATE (province of Como) (email: public.relations@ratti.it, telephone no. +39-031-35351).

LEGAL BASIS OF PROCESSING

The personal data indicated on this page are processed by the data controller since they are necessary for managing the site and, on the basis of specific information, and where necessary and based on the consent of the user, for offering and carrying out services offered by the site itself.

TYPES OF DATA PROCESSED AND PURPOSE OF PROCESSING

Browsing data

During their normal operation, the computer systems and software procedures used to operate this site acquire certain personal data whose submission is implicit in the use of Internet communication protocols.

This category of data includes the IP addresses or domain names of the computers and terminals used by the users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment.

These data, which are necessary in order to use the web services, are also processed for the purpose of:

1. obtaining statistical information on the use of the services (most visited pages, number of visitors per time slot or per day, geographical areas of origin, etc.);
2. checking that the services offered are functioning correctly.

Browsing data are not retained for longer than is necessary to ensure the operation of the site and are deleted immediately after their aggregation (except in the event of the need to detect criminal offences by the judicial authorities).

DATA SUBMITTED BY THE USER

The optional, explicit and voluntary sending of messages to the contact addresses, as well as the completing and submitting of the forms on the sites, entail the acquisition of the sender's contact data, which are necessary in order to reply, as well as all the personal data included in the communications.

Specific information will be published on pages set up for the provision of specific services.

USE OF COOKIES AND TRACKING SYSTEMS

For the use of website cookies, please see the Cookie Policy page.

RECIPIENTS OF THE DATA

The recipients of the data collected following a visit to the websites listed above may be individuals designated, pursuant to Article 28 of the Regulation, as data processors, for the performance of the services for developing, delivering and managing the operation of the technological platforms used.

The personal data collected are also processed by the data controller's staff, who act on the basis of specific instructions given regarding the purposes and methods of processing.

RIGHTS OF THE DATA SUBJECTS

Data subjects have the right to obtain, in the cases provided for, access to and rectification or erasure of their personal data or restriction of processing concerning them or to object to such processing (Art. 15 et seq. of the Regulation). The appropriate application may be submitted to the contacts specified above.

RIGHT TO COMPLAIN

Data subjects who consider that the processing of their personal data carried out on this website is in breach of the provisions of the Regulation have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), as provided for in Article 77 of the Regulation, or to seek judicial remedy (Article 79 of the Regulation).