Privacy

1. Data Controller

The Data Controller of your Personal Data is Akeron S.r.l., responsible for the legitimate and correct use of your Personal Data and that may be contact for any information or request at the following addresses: Data Controller:  AKERON S.R.L. Sede: VIA FARNESI, 141 – 55100 LUCCA Contacts and contact information: Telephone :  (+39) +39 0583 15284 E-mail : info@akeron.com Certified E-mail : akeron@pec.akeron.com You may also address the Data Protection Officer to have more information and request information regarding your Data or report disservices or any problem you may have encountered. AKERON SRL has appointed Dott.ssa Michela Turri as the Data Protection Officer , with registered office in Via Fontana 22, Milan, C.F. TRRMHL73A51E715K that you may contact at the following addresses: Telephone: 0583 578787 Cellular : (+39)3473674033 E-mail: dpo.turrimichela@gmail.com Certified E-mail: dpo.michela.turri@pec.it

2. Types of Data collected, purposes of the processing and legal basis.

The Personal Data processed are collected as provided directly by the User/Data Subject or collected automatically through the website.

Data provided directly by the User/Data Subject:

The Data provided directly by the User/Data Subject are all the Personal Data entered by the same within the website or which are otherwise provided to the Data Controller in any manner. Such Data will be processed in compliance with the privacy guarantees and security measures required by current legislation, including the help of IT and/or telematic tools directly and/or through third parties, for the purposes set out below together with the legal basis of reference: The User/ Data Subject assumes the responsibility of the Personal Data of third parties obtained, published or shared through this Application and guarantees to have the right to communicate or disseminate them, freeing the Data Controller from any liability to third parties.

Data collected automatically through the website:

The Data collected automatically is the information collected through the WWW.TAGETIK.COM website (including third-party applications integrated in this Application), including for example: IP addresses or domain names of computers used by the User/Data Subject in connecting with this website, the URI (Uniform Resource Identifier) ​​addresses, the time of the request, the method used to forward the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response from the server (success, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal connotations of the visit (for example the time spent on each page) and the details relating to the itinerary followed within the Application, with particular reference to the sequence of the pages consulted, to the parameters relating to the operating system and the IT environment of the User/Data Subject. Full details on each type of Data collected are provided in the dedicated sections of the cookie policy of this website. The Data collected automatically is processed exclusively for the purposes for which it is collected, as described below. The Data Controller processes the Data provided by the User/Data Subject to allow the website to function, to allow the display of content from external platforms, statistics, optimization and traffic distribution in addition to the additional purposes described in this document and in the Cookie Policy.

3. Mandatory or optional nature of the provision of Data and consequences of a refusal to do so.

The provision of the data for the purposes referred to in points a) and b) is optional but necessary to execute the contract. The provision of Data for the purposes referred to in points c) is optional and your Data may only be used with your written consent, in case of non-consent your Data cannot be processed for the purposes described in this point. Unless otherwise specified, all Data required for browsing the website is mandatory. If the User/Data Subject refuses to communicate them, it may be impossible for this Application to provide the Service. In cases where this Application indicates certain Data as optional, Users are free to refrain from communicating such Data, without this having any consequence on the availability of the Service or on its operation. Users who have doubts about which Data is mandatory, are encouraged to contact the Data Controller.

4. Processing methods

The Data Controller uses appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data. Processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the purposes indicated.

5. Recipients

Your Data may be communicated, in addition to the personnel assigned to the processing, also to the following subjects also appointed, if necessary, as Data Processors by the Data Controller:

1. consultants and companies that assist the Company from an IT and infrastructure point of view;
2. other companies, professionals and agents who collaborate with the Company for the performance of the services.

The updated list of Data Processors may always be requested from the Data Controller.. The Data will not be subject to other methods of dissemination.

6. Data processing location

The Data is processed at the Data Controller’s operating offices and in any other location where the parties involved in the processing are located.  For more information, contact the Data controller. The Data provided directly by the Data Subject and collected automatically may be transferred outside the EEC. In this case Tagetik Software S.r.l ensures that the processing of your Personal Data by these subjects to whom the Data is transferred will be done in accordance with the European Regulation 679/2016, in compliance with the principles indicated in Art. 45 of GDPR 2016/679 in relation to the existence of an adequacy decision by the European Commission, or in the absence of such decisions, in the presence of appropriate safeguards  pursuant to Art. 46 of GDPR 2016/679 or in compliance to Art. 49 paragr. 1 lett b) – transfer necessary for the execution of a contract concluded between the Data Subject and The Data Controller or for the execution of pre-contractual measures.

7. Retention period

Data provided directly by the User/Data Subject:

The Personal Data provided directly by the User/Data Subject collected for the purpose of responding to specific requests and/or for the performance of pre-contractual / contractual negotiations will be processed and stored for the period of time necessary for the pursuance of the purposes indicated above and in any case not later than  5 years from their collection. Personal Data collected for purposes related to the legitimate interest of the Data Controller will be retained until such interest is met. In the event of a pending trial, the data will be processed further until their resolution. Furthermore, the Data Controller may be obliged to keep Personal Data for a longer period in compliance with a legal obligation or by order of a supervisory authority. Personal Data collected for the purposes of direct and indirect marketing and market research, aimed at the dispatch of informative and advertising material, will be processed and kept for the time necessary for the pursuance of the aforesaid objectives and however for no more than 2 years from their collection. The automatically collected Data will be retained for the period better specified in the Cookie Policy. At the end of the retention period the Personal Data will be deleted. Therefore, at the end of this term the right of access, cancellation, rectification and the right to data portability can no longer be exercised.

Data collected automatically through the website:

The automatically collected data will be retained for the period specified in the Cookie Policy . At the end of the retention period the Personal Data will be deleted. Therefore, upon expiration of this term the right of access, cancellation, rectification and the right to the portability of the Data can no longer be exercised.

8. User/Data Subject rights

Pursuant to articles 15 to 22 of the GDPR each User/Data Subject has the right to obtain confirmation of the existence or not of his/her Personal Data, even if not yet recorded, and their communication in an intelligible form. In particular, the Data Subject has the right to obtain from the Data Controller the indication of: – the origin of Personal Data; – the purposes and methods of processing; – the logic applied in the case of processing carried out with the help of electronic/IT tools; – the identification details of the Data Controller, of the Data Processor and of the controller’s representative; – the recipients or categories of recipients to whom the data may be communicated or who can be involved in the processing as appointed Representative in the territory of the State, Data Processors or Persons in charge of the processing. Furthermore the Data Subject has the right to obtain from the Data Controller: – updating, rectification or integration of their data; – erasure, transformation into anonymous form or blocking of data processed in violation of the law; – access to his/her data, i.e. confirmation that his/her personal data is being processed or not; – the restriction of the processing, – the portability of the data, i.e. the right to receive in a structured format his/her Personal Data; – right of complaint to the Supervisory Authority. Finally, the Data Subject has the right to object, in whole or in part, based on legitimate reasons to the processing of Personal Data concerning him/her, even if pertinent to the purpose of the collection. In particular, the Data Subject has the right to object to the processing of Personal Data concerning him/her for the purpose of sending commercial advertising material or for commercial communication purposes. The rights referred to in the preceding points may be exercised by writing to the contacts indicated in point 1 of this policy.