This information notice, provided in accordance with current national and EU legislation on the processing of personal data, concerns the website https://www.lan-system.it.(hereinafter also “Site”).

The notice is intended for all individuals who access the Site (hereinafter also “Users” or, individually, “User”) and is made only for data acquired as a result of consulting the Site. This policy also does not refer to other websites that may be reached and consulted by the user through hyperlinks (links) that may be contained in the Site.

Data controller

The “owner” of the processing of data, relating to identified or identifiable persons who access this Site is LAN SYSTEM S.r.l., PIVA. 0030820710, in the person of the legal representative , with registered office in Foggia , Via A.Fraccacreta 31

Type of data processed, purpose and legal basis for processing

• Navigation data

Computer systems and computer programs used for the operation of the site collect certain personal data whose transmission is implicit in the use of Internet communication protocols (e.g. IP addresses or domain names of computers used by users connecting to the site, the URI -Uniform Resource Identifier- addresses of the requested resources, time of the request, method used in submitting the request to the server, size of the file obtained in response, numeric code about the status of the response rendered by the server -good end, error, etc.- and other parameters related to the user’s operating system and computer environment). Although this information is not collected to be associated with identified data subjects, by its nature it could, through processing and association with data held by third parties, allow users to be identified.

This data is used for the sole purpose of obtaining statistical information not associated with any user identification data on the use of the site and to check its correct operation and is deleted immediately after processing. The data could be used to ascertain liability in case of hypothetical computer crimes against the Site.

• Data voluntarily provided by the user

No provision of personal data by the user is required to consult the site.

However, any contact with the data controller, or the optional, explicit and spontaneous sending of messages, electronic or traditional mail, to the addresses indicated on the site entails the subsequent acquisition of the address, including e-mail, of the sender or the relevant telephone number, necessary to respond to requests, as well as any other personal data included in the relevant communications.

This data will be used only for the purpose of following up the user’s request and may be disclosed to third parties only if it is necessary for that purpose.

The processing of data for such purposes does not require consent because the processing is necessary for the performance of a contract to which the data subject is a party or the execution of pre-contractual measures taken at his or her request (Art. 6(1)(b) of the Regulation), as well as, where applicable, to fulfill a legal obligation (Art. 6, para. 1, lett. (a) of the Regulation), as well as on the legitimate interest of the data controller (Art. 6(1)(f) of the Regulation) (taking into account the reasonable expectations of the data subject at the time and in the context of the collection of personal data, when the data subject could reasonably expect processing to take place for that purpose).

The processing of data for the purpose of sending newsletters or promotional communications via e-mail will be carried out only where the user has given specific consent for this purpose.

Place of data processing

Processing related to the services of the Site takes place at the aforementioned location of the Data Controller.

Method of treatment

The processing of data will be carried out, by personnel appointed by the owner with procedures, technical and computer tools suitable to protect the confidentiality and security of your data and consists of their collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, cancellation, destruction of the same including the combination of two or more of the above activities.

Mandatory or optional nature of providing data

The Owner will use the data voluntarily provided by the User to fulfill the User’s requests.

The User is not required to provide his/her personal data, however in case of refusal, the Owner may not be able to fulfill his/her requests.

Period of data retention

Personal data will be retained in a form that allows the identification of the user for a period of time not exceeding the achievement of the purposes for which they are processed, and in any case in compliance with legal obligations regarding data retention times (tax assessments and limitation periods for the exercise of rights).

In particularpersonal data will be kept until the user requests deletion of their data. In some cases, personal data may be stored that can prove the management of services and the exercise of your rights.

Data disclosure and dissemination

For the pursuit of the purposes set forth in this statement and within the limits of what is strictly necessary for this purpose, the data will be processed by the Data Controller and its employees, collaborators and/or specially appointed officers.

As part of its activities and for the purposes indicated above, the Data Controller may make use of services rendered by third parties operating on its behalf and in accordance with its instructions, as data processors (or autonomous data controllers): these are entities that provide the Data Controller with processing or instrumental services (e.g., computer services for the operation of the site), of which the user may request a complete and updated list by contacting the following address lansystem@lan-system.it

Except for specific legal obligations, the data are not intended for dissemination.

Rights of data subjects

Pursuant to Articles 15 et seq. of the GDPR and current legislation, the User has the right, in addition to lodging a complaint with the Data Protection Authority and to revoke any consent given at any time, to:

a) obtain confirmation of the existence or otherwise of personal data concerning him/her and their communication in an intelligible form, receiving them in a structured, commonly used and readable format with the possibility of transmitting them to another owner (“Right to portability”);

(b) Obtaining directions: (i) on the origin of personal data, the purposes and methods of processing, the logic applied in case of processing carried out with the aid of electronic instruments; (ii) on the identification details of the Data Controller, the Data Processor(s) and the Data Protection Officer; (iii) on the subjects or categories of subjects to whom the data may be communicated or who may become aware of the data in their capacity as designated representative in the territory of the State, managers or designees.

(c) obtain (i) the updating, rectification or supplementation of the data concerning him or her or, in case of dispute as to the correctness of the data, the restriction of the processing of the data for the time necessary for appropriate verification, (ii) the transformation into anonymous form or blocking of data processed in violation of the law, including data whose retention is necessary in relation to the purposes for which the data were collected or subsequently processed, (iii) certification of the fact that the operations referred to in the preceding points have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except where this proves impossible or involves the use of means manifestly disproportionate to the protected right.

(d) oppose, in whole or in part (i) to the processing of data concerning him/her, even if relevant to the purpose of collection, (ii) to the processing of personal data concerning him or her, provided for the purposes of commercial information or sending advertising or direct sales material or for carrying out market research or commercial communication.

(e) obtain erasure without undue delay (“Right to be forgotten“) if the data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, have been processed unlawfully, or if the User (i) request it or (ii) objects in whole or in part to the processing.

(f) obtain the restriction of processing in the event that the data (i) are processed unlawfully but the User objects to their deletion, (ii) are necessary for the User to establish, exercise or defend a right, (iii) an assessment about the legitimate grounds for processing by the Controller is pending.

The above rights can be exercised with a request to the Holder, at the e-mail address lansystem@lan-system.it