Privacy Notice pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”)

This privacy notice is provided pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”) to those who access the website https://winterhouse.hereslab.it/. This page describes the rules governing the management of this website with regard to the processing of the personal data of users who browse it.

 

1. DATA CONTROLLER

Heres Lab S.r.l., with registered office at Via Gastone Nencini, 6 – 52028 – Terranuova Bracciolini (Arezzo), Italy (Tax Code and VAT No. 02494420512), acts as Data Controller and can be contacted by email at info@hereslab.it.

 

2. TYPES OF DATA PROCESSED

User data are collected through various methods:

a. Browsing data collected automatically
During browsing, the following information relating to Users may be collected and stored in the server (hosting) log files of the Website: IP address (Internet Protocol), browser type, device parameters used to connect to the Website, name of the Internet Service Provider (ISP), date and time of visit, referring web page (referral) and exit page, and possibly the number of clicks.

b. Personal data voluntarily provided by users
The website may collect other personal data voluntarily provided by Users when registering in the eCommerce section of the site (first name, last name, email address, phone number, address), when requesting information through contact forms (first name, last name, email address, phone number, and any other information included in the request), or when requesting information about products (first name, last name, email address, phone number, and any other information included in the request). Specific privacy notices will be published on the pages prepared for the provision of specific services.

c. Cookies
The website uses cookies, small text files that are stored on the User’s device or that allow access to information on the User’s device. Cookies make it possible to store information about visitors’ preferences and are used to verify the correct functioning of the website and to improve its functionality by customizing page content based on the type of browser used, to simplify navigation by automating certain procedures, and finally to analyze how visitors use the website.

 

3. PURPOSE AND LEGAL BASIS OF PROCESSING

Browsing data are collected and processed in order to carry out all activities related to the management of the Website, including IT security management. They may also be used to obtain anonymous statistical information on website usage and to monitor its correct functioning. Browsing data also include cookies.

 

4. DATA RECIPIENTS

The data may be processed by employees of the Data Controller who are responsible for pursuing the purposes indicated above, who have been expressly authorized to process the data and have received appropriate operational instructions from the Data Controller. For the execution of security checks or website optimization activities, the data may also be transferred to external companies that provide Heres Lab S.r.l. with development, delivery, and operational management services for the technological platforms used, and that have been duly appointed as Data Processors by Heres Lab S.r.l.

 

5. DATA RETENTION PERIOD

Browsing data are retained only for the time necessary to ensure the functioning of the website and are deleted immediately after aggregation (except where required for the investigation of criminal offenses by the Judicial Authority).

 

6. RIGHTS OF DATA SUBJECTS

Pursuant to Regulation (EU) 2016/679 (GDPR), Users may, in accordance with the procedures and within the limits set by applicable law, exercise the following rights:

  • right of access, to obtain confirmation as to whether or not personal data concerning them are being processed and to receive information relating to such processing;
  • right to rectification, to obtain the correction of personal data held by the Data Controller if they are incomplete or inaccurate;
  • right to erasure, in certain circumstances, to obtain the deletion of data stored in the archives;
  • right to restriction of processing, under certain conditions, to obtain restriction of processing of personal data;
  • right to data portability;
  • right to object to the processing of data;
  • right to lodge a complaint with the Supervisory Authority, which in Italy is the Italian Data Protection Authority (www.garanteprivacy.it).

 

7. CONTACT DETAILS OF THE DATA CONTROLLER

To obtain further information regarding their rights, Users may contact the Data Controller at the email address info@hereslab.it, or by express courier sent to the following address: Heres Lab S.r.l. – Via Gastone Nencini, 6 – 52028 – Terranuova Bracciolini (Arezzo), Italy.