This policy describes the procedures followed by the Italian Chamber of Commerce in Western Canada (hereinafter “Chamber of Commerce” or the “Owner“) in relation to the processing of personal data collected through the website www.iccbc.com (hereinafter the “Site“).
Unless otherwise specified, this policy also applies as information – pursuant to art. 13 of Regulation (EU) no. 2016/679 (hereinafter the “GDPR“) – provided to those who interact with the Site (hereinafter the “User“).
Detailed information on the processing of personal data is provided, where necessary, in the pages relating to the individual services offered through the Site. This information is intended to define the limits and methods of the processing of personal data of each service, on the basis of which the User may freely express his/her consent, where necessary, and possibly authorize the collection of data and their subsequent processing.
Data controller. Responsible for the treatment.
The Data Controller is the Italian Chamber of Commerce in Western Canada, with registered office at 1209-409 Granville Street, T. 6046821410, e-mail firstname.lastname@example.org. The updated list of any data processors is available at the Data Controller’s registered office.
Types of data processed.
Through the Site may be collected and processed:
Cookies are small text files that the sites you visit send to your terminal, where they are stored, and then sent back to the same sites the next time you visit.
The Site uses both its own- and third-party technical cookies. These cookies, being of a technical nature, do not require the prior consent of the User to be installed and used.
The Site also uses third party profiling cookies. Regarding these cookies, the User’s consent is assumed to be given each time the User clicks on the “I accept” button, present inside the banner that appears on the homepage. The User may, in any case, revoke his/her consent to the installation of such cookies later.
In particular, the cookies used on the Site can be traced back to the following subcategories:
The following is a list of third-party cookies installed on the Site. For each of them there is a link to the relevant information on the processing of personal data carried out and on how to deactivate the cookies used. Regarding third party cookies, the Owner is only obliged to include the link to the third party’s site in this policy. It is the responsibility of this party, however, the obligation of the information and the indication of the modalities for the possible consent and/or deactivation of cookies.
Cookies may be disabled by the user by changing the settings of your browser based on the instructions made available by the relevant provider at the links listed below.
Purpose and legal basis of the processing.
Personal data collected through the Site will be processed:
The processing of personal data for the purpose of sub a) does not require the User’s consent as the processing is necessary to fulfil specific requests of the data subject pursuant to art. 6, c. 1, letter b) of GDPR.
Provision of data and consequences in case of failure to provide data.
The provision of personal data for the above purposes is optional and failure to provide them will result, as the only consequence, in the impossibility for the Data Controller to manage and process the requests of the interested party.
Recipients or categories of recipients.
Personal data may be made accessible, brought to the attention of or communicated to the following subjects, who will be appointed by as managers or appointees:
-companies of the group to which the Owner belongs (parent companies, subsidiaries, affiliates), employees and/or collaborators in any capacity of the Owner and/or companies of the group to which the Owner belongs.
-public or private entities, natural or legal persons, which the Owner makes use of for the performance of activities instrumental to achieving the above purposes or to which the Owner is required to communicate personal data, by virtue of legal or contractual obligations.
In any case, personal data will not be disclosed.
Personal data will be kept for 2 years after their registration.
Access rights, cancellation, restriction, and portability.
Interested parties are granted the rights set out in Articles 15 to 20 of the GDPR. For example, each interested party may:
Right to object.
Each interested party has the right to object at any time to the processing of his personal data carried out in the pursuit of a legitimate interest of the Owners. In case of opposition, your personal data will no longer be processed, provided that there are no legitimate reasons for processing that override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of a right in court.
Right to revoke consent.
Where consent is required for the processing of personal data, each data subject may also revoke the consent already given at any time, without prejudice to the lawfulness of the processing based on the consent given before the revocation. The consent can be revoked by writing an email to email@example.com
Right to lodge a complaint with the Guarantor.
In addition, each data subject may lodge a complaint with the Privacy Guarantor in the event he or she believes that his or her rights under GDPR have been violated, in the manner indicated on the website of the Privacy Guarantor accessible at www.garanteprivacy.it.