Privacy Policy
PURSUANT TO ARTICLE 13 OF REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation)
The Data Controller is Fonti Alta Valle Po S.p.A., Via Roma 61, 12034 Paesana (CN), Italy, VAT No. 02819640042, Tel. (+39) 0175 989111 – Fax (+39) 0175 989195, email: [info@acquaeva.it](mailto:info@acquaeva.it); certified email (PEC): [pec@pec.favp.it](mailto:pec@pec.favp.it).
The Data Protection Officer (DPO) is Ambiente Sicuro Servizi Soc. Coop., Via Pascal 7, 12100 Cuneo, Italy, telephone 0171 1988931, fax 0171 451734, email: [dpo@aesseservizi.eu](mailto:dpo@aesseservizi.eu), certified email (PEC): [segreteria@pec.aesseservizi.eu](mailto:segreteria@pec.aesseservizi.eu).
2. Types of Data Collected
The categories of personal data collected and processed when you browse https://acquaeva.it/ are as follows:
- personal data that you provide when contacting our offices so that we may provide the information you have requested;
- information concerning your browsing activity on https://acquaeva.it/;
- information collected through cookies.
Please note that Fonti Alta Valle Po S.p.A. does not process personal data relating to minors. By accessing https://acquaeva.it/ and using the services offered by Fonti Alta Valle Po S.p.A., you declare that you are of legal age.
Failure by the User to provide certain personal data may prevent this Website from providing its services.
3. Purposes of the Processing and Relevant Legal Basis
- To ensure the proper operation and display of the website (Purpose) – The legitimate interest of the Data Controller in ensuring the proper operation of its website (Legal basis);
- To comply with an obligation imposed by law (Purpose) – Compliance with a legal obligation to which the Data Controller is subject (Legal basis);
- To respond to your requests and suggestions (Purpose) – Performance of a contract to which the data subject is party or implementation of pre-contractual measures taken at the data subject’s request, within the scope of customer service activities (Legal basis);
- To manage product reports and complaints (Purpose) – Performance of a contract to which the data subject is party or implementation of pre-contractual measures taken at the data subject’s request, within the scope of customer service activities (Legal basis);
- To carry out analyses and statistical surveys in order to improve our products and services (Purpose) – Consent of the data subject (Legal basis).
4. Methods of Processing
The Data Controller processes Users’ personal data by adopting appropriate security measures designed to prevent unauthorised access, disclosure, alteration or destruction of personal data.
The processing is carried out using IT and/or electronic tools, according to organisational procedures and methods strictly related to the purposes specified above. In addition to the Data Controller, in certain cases, personal data may be accessed by persons involved in the organisation and operation of the Website who have been duly authorised by the Data Controller, or by external parties, such as third-party technical service providers, postal couriers, hosting providers, IT companies and communication agencies, who may also be appointed as Data Processors by the Data Controller where necessary.
An up-to-date list of Data Processors may be requested from the Data Controller at any time.
5. Transfer of Personal Data
Where personal data is transferred outside the European Union for technical or operational purposes or in order to ensure a high level of service continuity, the Data Controller guarantees that the transfer will be carried out in compliance with the conditions set out in Chapter V of the GDPR, without prejudice to the other provisions of the Regulation.
6. Personal Data Retention Period
We retain your personal data for a limited period of time, which varies depending on the type of activity involving the processing of your personal data. Once this period has expired, your data will be permanently deleted or irreversibly anonymised.
Your personal data will be retained in accordance with the periods and criteria specified below:
- To ensure the proper operation and display of the website (Purpose) – In accordance with the provisions set out in our Cookie Policy (Data retention period);
- To carry out analyses and statistical surveys in order to improve our products and services (Purpose) – In accordance with the provisions set out in our Cookie Policy (Data retention period);
- To respond to your requests and suggestions (Purpose) – The data required to assist you will be retained until your request has been fulfilled (Data retention period);
- To manage product reports and complaints (Purpose) – The data required to assist you will be retained for the time necessary to manage the report or complaint (Data retention period);
- To comply with an obligation imposed by law (Purpose) – In accordance with the retention periods established by applicable legislation (Data retention period).
In all cases, for technical reasons, the processing will cease and the relevant personal data will be permanently deleted or irreversibly anonymised within thirty days of the expiry of the retention periods specified above.
7. Further Information on the Processing
7.1 Legal Defence
The User’s personal data may be used by the Data Controller for the purposes of legal defence in court proceedings or during the preparatory stages preceding any such proceedings, in connection with misuse of the Website or the related services by the User.
The User acknowledges that the Data Controller may be required to disclose personal data at the request of public authorities.
7.2 Specific Privacy Notices
At the User’s request, in addition to the information contained in this Privacy Policy, this Website may provide the User with additional and contextual privacy notices concerning specific services or the collection and processing of personal data.
7.3 System Logs and Maintenance
For operational and maintenance purposes, this Website and any third-party services used by it may collect system logs, namely files that record interactions and may also contain personal data, such as the User’s IP address.
7.4 Information Not Contained in This Policy
Further information concerning the processing of personal data may be requested from the Data Controller at any time using the contact details provided above.
8. Exercise of Users’ Rights
The individuals to whom the personal data relates have the right, at any time, to obtain confirmation from the Data Controller as to whether or not personal data concerning them exists and is being processed, to be informed of its content and origin, to verify its accuracy and to request its completion, deletion, updating or rectification.
They also have the right to request that personal data processed unlawfully be anonymised or blocked and, in all cases, to object to its processing on legitimate grounds.
Requests must be submitted to the Data Controller and/or the DPO.
9. Amendments
We reserve the right to amend this Privacy Policy, in whole or in part, or simply to update its content, for example following changes to applicable legislation.
Users are therefore invited to consult this Privacy Policy regularly in order to review its latest version and remain informed about how the Data Controller collects and uses personal data.
