Privacy Policy
Information on the processing of personal data pursuant to Article 13 of Regulation (EU) 2016/679
Pursuant to Article 13 of Regulation (EU) 2016/679 (the “GDPR”), Avvale YUBIQ S.p.A. provides the following information regarding the processing of personal data carried out through its corporate website www.yubiq.com.
Data Controller
The Data Controller is Avvale YUBIQ S.p.A., with registered office at Centro Direzionale Milanofiori, Strada 1, Palazzo F8 – 20057 Assago (MI), VAT No. 11325150156, and may be contacted at the following email address: marketing@yubiq.com.
Data Protection Officer
The Data Controller has appointed a Data Protection Officer (DPO), who may be contacted at the following email address: dpo@yubiq.com.
Categories of data processed
Browsing data
During their normal operation, the IT systems and software procedures used to operate the website collect certain personal data, the transmission of which is inherent in the use of Internet communication protocols.
Such data include, by way of example, the IP addresses or domain names of the devices used by users, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server response, and other parameters relating to the user’s operating system and IT environment.
These data are processed to enable users to browse the website, obtain anonymous statistical information on its use, and verify that it is operating correctly. The data may also be used to establish liability in the event of suspected cybercrimes against the website.
Data voluntarily provided by the data subject
In certain sections of the website, users may be asked to provide personal data by completing specific forms. In such cases, a specific privacy notice pursuant to Article 13 of the GDPR will be provided in relation to the relevant processing and its intended purpose.
Cookies and other tracking technologies
Information on the cookies and other tracking technologies used by the website is available in the relevant Cookie Policy, which can be accessed through the dedicated link on the website.
Purposes of processing, legal bases and retention periods
Personal data will be processed for the purposes set out below, on the basis of the corresponding lawful grounds.
| N° | Purpose | Legal basis | Retention period |
| 1 | To enable users to access and browse the website. | Processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by third parties, pursuant to Article 6(1)(f) of the GDPR. | 6 Months |
| 2 | To enable the technical and commercial administration of the website. | Processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by third parties, pursuant to Article 6(1)(f) of the GDPR. | 6 Months |
| 3 | To enable registration for events organised by the Data Controller and registration with the restricted area. | Processing is necessary in order to respond to a request from the data subject, pursuant to Article 6(1)(b) of the GDPR. | Processing is necessary in order to respond to a request from the data subject, pursuant to Article 6(1)(b) of the GDPR. |
| 4 | To send newsletters, commercial and promotional communications, as well as information on future events, initiatives and activities organised by the Data Controller. | Processing is based on the data subject’s consent, pursuant to Article 6(1)(a) of the GDPR. | Until consent is withdrawn and, in any event, no longer than 24 months from the date consent is obtained, unless renewed. |
N°
1
Finalità
Favorire l'accesso e la consultazione de sito web da parte degli utenti.
Base giuridica
Il trattamento è necessario per rispondere ad una richiesta dell'interessato. Art.6 par. 1 comma b)
Periodo di conservazione
6 Mesi
N°
2
Finalità
Rendere possibile l'amministrazione tecnica e commerciale del sito web
Base giuridica
Il trattamento è necessario per il perseguimento del legittimo interesse del titolare o di terzi. Art.6 par 1 comma f)
Periodo di conservazione
6 Mesi
N°
3
Finalità
Per permettere l'iscrizione agli eventi organizzati dal Titolare del trattamento e la registrazione all'area riservata
Base giuridica
Il trattamento è necessario per rispondere ad una richiesta dell'interessato. Art. 6 par.2 comma b)
Periodo di conservazione
Fino alla revoca del consenso
Nature of the provision of data
The provision of personal data relating to browsing is necessary to ensure the proper operation of the website and the delivery of the related technical services. The provision of data for the purpose referred to in item 3 is optional; however, failure to provide such data may make it impossible to process the request to register for events or to allow registration with and access to the restricted area.
The provision of data for the purpose referred to in item 4 is also optional. Failure to provide consent will not affect browsing of the website or the ability to use the other services offered in any way, but will only make it impossible to receive newsletters, promotional communications and information on future events or initiatives of the Data Controller.
Processing methods
Personal data will be processed using IT and electronic tools and, where necessary, in paper form, in accordance with the principles of lawfulness, fairness, transparency, data minimisation, accuracy, integrity and confidentiality laid down in the GDPR. The data will be processed by personnel authorised by the Data Controller pursuant to Article 29 of the GDPR and Article 2-quaterdecies of Italian Legislative Decree No. 196/2003, as well as by third parties carrying out activities on behalf of the Data Controller in their capacity as data processors pursuant to Article 28 of the GDPR.
Specific security measures are adopted to prevent data loss, unlawful or improper use, unauthorised access and other risks connected with the processing.
Scope of data disclosure
Personal data may be disclosed to third parties used by the Data Controller for the management and maintenance of the website, the provision of technology services, hosting, application support, communications management and event organisation. Where necessary, such parties are appointed as data processors pursuant to Article 28 of the GDPR.
Personal data will not be disseminated, unless required by law or by orders issued by the competent authorities.
Transfers of data to third countries
Personal data are processed using automated tools and stored in data centres located within the European Union.
Should it become necessary, for technical or organisational reasons, to transfer personal data to third countries or international organisations, the transfer will be carried out in compliance with the conditions laid down in Articles 44 et seq. of the GDPR and subject to the appropriate safeguards required by applicable law.
Rights of the data subject
As a data subject, the user may exercise at any time the rights provided for in Articles 15–22 of the GDPR, including the right to obtain from the Data Controller access to personal data, rectification, erasure, restriction of processing, data portability, objection to processing and withdrawal of consent, without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise these rights, the data subject may contact the Data Controller using the contact details provided above or the DPO at dpo@yubiq.com.
The data subject also has the right to lodge a complaint with the Italian Data Protection Authority pursuant to Article 77 of the GDPR and, where the relevant conditions are met, to bring proceedings before the competent courts.
For further information on the rights granted by the GDPR, please consult the website of the Italian Data Protection Authority.
UpdatesThis privacy notice may be updated or amended, including as a result of changes in legislation or the organisation. Users are therefore invited to review it periodically.