INFORMATION ON THE PROCESSING OF PERSONAL DATA RELATED TO NAVIGATION AND THE USE OF COOKIES
Identity and contact details of the process Controller
Brand Park s.r.l. with single shareholder, hereinafter also “Brand Park” or “Controller” with registered office in via Fonderia, 39 – 31100 – Treviso (TV), who can also be contacted at the e-mail address info@lumberjack.com, at the PEC (certified email) info.brandpark@legalmail.it or at the phone number 04221580650.
Purpose and legal basis
- A. Check how the services work and thus enable navigation: during normal operations, the computer systems and software procedures used to run this website acquire some personal data whose transmission is implicit in the use of internet communication protocols. For example this category includes: IP addresses or domain names of computers, tablets and other tools used to connect to the site; URI (Uniform Resource Identifier) addresses; the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the reply status given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment.
- B. Statistics: information is collected to understand how the visitor interacts with the website in order to obtain statistics.
- C. Profiling: visitor tracking information is acquired in order to draw up a profile based on the interests expressed during browsing and, consequently, to propose ads in line with the preferences detected.
- D. Responding to communications conveyed via the contact details published: when the visitor contacts the Controller at one of the contact details published on the website, the information transmitted spontaneously is collected to process and deal with the request.
- E. Defence purposes: the Controller may need to process personal data to manage any disputes and out-of-court or legal litigation.
| Purposes | Legal basis (common data) |
|---|---|
| A. | Contract Execution |
| B. | Consent |
| C. | Consent |
| D. | Execution of pre-contractual measures; Legitimate interest of the Controller in responding to requests received. |
| E. | Legitimate interest of the Controller to ascertain, exercise or defend a right. |
Cookies
Storage period
| Purposes | Storage time |
|---|---|
| A. | Please refer to the Cookie section |
| B. | Please refer to the Cookie section |
| C. | Please refer to the Cookie section |
| D. | Time needed to process incoming requests and subsequent interlocution. |
| E. | 10 years from the final resolution of the dispute. |
Nature of data provision and the consequences of a refusal
| Purposes | Nature | Consequences |
|---|---|---|
| A. | Needed | Inability to access and use the website. |
| B. | Optional | Inability of the Controller to carry out processing for statistical purposes. |
| C. | Optional | Inability for the Controller to carry out analytical processing to understand the visitor's preferences and for the visitor to receive ads in line with interests shown. |
| D. | Needed | Inability to receive the information requested. |
| E. | Needed | Impossible to manage the dispute. |
Area of communication
All data collected and processed can be communicated to internal parties authorised to process data for their respective jobs; and to the following external party categories, related to the processing purposes:
| Purposes | External recipient categories |
|---|---|
| A. | Companies belonging to the same business group, parties other than the Controller indicated in the “Cookie” section |
| B. | Companies belonging to the same business group, parties other than the Controller indicated in the “Cookie” section |
| C. | Companies belonging to the same business group, parties other than the Controller indicated in the “Cookie” section |
| D. | Agents, sales consultants. |
| E. | Legal firms; Legal authorities. |
Seeing that the data are also processed using computer tools, they could be visible to parties performing assistance/maintenance on those systems.
Transfer of data to a third country or an international organisation
The Controller transfers personal data to the countries and under the conditions summarised below:
| Purposes | Country - Lawfulness of the transfer |
|---|---|
| A. | The owner uses the services of another company in the same business group based in Turkey. |
| B. | Transfers are lawful as they are based on Standard Terms and Conditions approved by the European Commission. |
| C. | With regard to the transfers made with confirmation of the installation of third-party cookies, please refer to the section on “Cookies”. |
Rights of Data Subjects
Data subjects are entitled to the following rights:
- Access: they can be informed as to whether their personal data are being processed and, if so, have access to them and request a copy.
- Rectification: they may ask for the personal data to be updated, corrected (if incorrect) and integrated if not complete.
- Erasure: they may have the personal data erased in certain situations (for more information contact the Controller).
- Restriction: : they may ask for their data to be marked, in order to restrict any further processing, in certain situations (for more information contact the Controller).
- Objection: they may object to the processing of their personal data, for reasons connected to a specific situation, when processing is based on legitimate interest or is needed to perform a task of public interest or connected to exercising the public powers that the Controller is assigned.
- Portability: they can receive the personal data supplied to the Controller in a structured form and transmit them to another processing controller if the processing is based on consent or contract and is performed by automated means.
- Revoke Consent: they may revoke consent for purposes that required it, without prejudice to the legality of processing performed until that moment.
The rights effectively exercisable for the processing actions performed are:
| Purposes | Right to be exercised | ||||||
|---|---|---|---|---|---|---|---|
| Access | Rectification | Erasure | Restriction | Objection | Portability | Revoke consent | |
| A. | X | X | X | X | X | ||
| B. | X | X | X | X | X | X | |
| C. | X | X | X | X | X | X | |
| D. | X | X | X | X | X | ||
| E. | X | X | X | X | X | ||
To exercise the above rights, the form available at the following link may be used https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1089924 and send it to the following address: privacy@lumberjack.com. The data subject may ask the same address to obtain further details in relation to the above information (e.g. balancing test of legitimate interest or list of data controllers).
A complaint may be lodged with a supervising Authority: for Italy, the Authority for the Protection of Personal Data www.garanteprivacy.it.