Privacy Policy

Privacy Policy – Information for users/visitors of the site on the processing of personal data

This information is provided to make known the principles that govern the use, in terms of confidentiality, of personal data provided by users/visitors who use our web services.

This page describes how the site operates with regard to the processing of personal data of users/visitors who consult it. This is information provided within the framework of EU Regulation 2016/679 as well as in compliance with current regulations on personal data security, for those who wish to interact electronically with the services of this site, starting from the address https://r1spa.it

This information is provided only for the website https://r1spa.it, and not for other websites that may be accessed by the user/visitor through any links present.

Data Controller and Place of Processing

The website https://r1spa.it:

• is owned by R1 S.p.A., VAT number 05231661009, at whose operational headquarters in via Monte Carmelo, 5 – 00166 Rome (RM), the processing related to the management of any services and any requests submitted through the aforementioned site is carried out by internal authorized personnel. As the data controller, R1 S.p.A. is committed to ensuring compliance with current regulations on personal data security;
• is entrusted for maintenance, for content management, to Digital Sense s.r.l.;
• is hosted on the platform called OXYGENWP – owned by Applìa società benefit s.r.l., whose data centers are all located in European territory – where processing related to technical services only takes place.

Other external parties who may need to have access to personal data present on the site will be appointed as data processors by the controller. The updated list of processors can be requested from the data controller.

Users/visitors are required to carefully read this information before submitting any type of personal information and/or filling out any electronic form present on the site itself. By visiting the website https://r1spa.it, you implicitly accept the practices described in this privacy policy.

Purpose and Legal Basis of Processing

Personal data provided by users/visitors following requests and/or use of services managed through the site are used solely for the purpose of responding to the request and/or managing the service and are communicated to third parties only if necessary. The legal basis for these processing activities is, in this case, the need to respond to a request from the data subject or manage a service specifically requested by the data subject.

If the user/visitor also expresses their consent, the data may also be used for commercial communication activities related to offers of additional services from the controller. In this case, the legal basis for processing is the consent freely expressed by the data subject.

In all other cases, navigation data is stored for the time strictly necessary for the management of processing activities within the limits provided by law.

Types of Data Processed and Purpose of Processing

• Data Derived from Navigation

The computer systems and software procedures used to operate the site may acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its nature could, through processing and association with third-party data, allow indirect identification of users (IP addresses, domain names of computers used for connection, operating system and browser used, temporal data, etc.). This data can only be used for statistical information (therefore in anonymous form) and to check the correct functioning of the site.

• Data Voluntarily Provided by Users/Visitors

If users/visitors, by connecting to the site, optionally, explicitly and voluntarily enter their personal data to make requests, access services, or subscribe to mailing lists, this will involve the acquisition of the provided personal data, which will in any case be processed exclusively to satisfy the possible request or the provision of the service. The personal data provided by users/visitors may be communicated to third parties only if this is implicitly necessary to satisfy the requests themselves.

• Data relating to cookies

Cookies are small text strings that visited sites deposit on users’/visitors’ computers to improve navigation and, possibly, monitor their use. Some can be retransmitted to the same sites on the subsequent visit of the same user, to allow recognition and improve the functioning of the site, such as cookies that make navigation faster or show content of greater interest to the user in light of previous choices. During navigation on a site, the user may receive on their device also cookies that are sent by different sites or web servers (so-called “third parties”).

The site https://r1spa.it uses two different types of cookies: it uses session cookies, to allow safe and efficient site navigation, to recognize from which country the user/visitor is connecting, to keep the user/visitor connected during the session, to allow the user/visitor to register and access their account and to allow them to complete their requests. These cookies are not permanently stored on the computer and disappear when the session is closed.

The website may also use persistent cookies to personalize the user’s/visitor’s navigation based on the device used (computer, tablet or smartphone), as well as to create a user profile based on the preferences expressed while browsing the site; cookies to analyze accesses and cookies to allow sharing of content through social networks or emails. These cookies are permanently stored on users’/visitors’ computers and have a variable duration.

The user/visitor, on first access, has the possibility to confirm the installation or not of available cookies, and/or to view the Cookie Policy, containing all the details and methods of expressing or denying consent.

Links to third-party sites

The owner reserves the right to use and/or present, on their own site, third-party services. Regarding the management of personal data, the sites of these subjects may adopt different and independent criteria. Therefore, here, the owner declines any responsibility for the activities and contents of said linked sites.

Optional nature of data provision

Apart from what is specified for navigation data, users/visitors are free to provide or not provide their personal data. Failure to provide such data may only result in the impossibility of obtaining the requested service.

Processing methods

Each processing is carried out through automated tools (e.g., using electronic procedures and supports) and/or manually (e.g., on paper) for the time strictly necessary to achieve the purposes for which the data was collected and, in any case, in compliance with the current regulatory provisions on the matter.

Specific security measures are implemented to prevent the loss, illicit or incorrect use of data, as well as any unauthorized access.

Rights of the interested parties

The subject to whom the personal data refers has the right at any time, within the limits and conditions provided by law, to obtain confirmation of whether or not personal data processing concerning them is in progress and in this case, to obtain access to their data and the following information:

• purposes of the processing;
• categories of personal data processed;
• recipients or categories of recipients to whom the personal data is or may be communicated, particularly if located in third countries or if they are international organizations;
• expected retention period of personal data or, if not available, criteria used to determine this period;
• all available information on their origin, if it is data not collected from the interested party;
• existence of any automated decision-making process, including profiling.

The data subject also has the right to obtain, without undue delay, from the data controller:

• The rectification of inaccurate personal data;
• The completion of incomplete personal data, including by providing a supplementary statement;
• The erasure of personal data (within the limits and cases provided for by current legislation);
• The limitation of processing;
• The possibility to lodge a complaint with a supervisory authority.

In the aforementioned cases, the controller also communicates to each of the recipients to whom the data subject’s personal data have been transmitted, any rectifications, additions, erasures or limitations of processing, within the limits and in the forms provided for by current legislation.

The data subject also has the right to receive from the controller the personal data concerning him or her in a structured, commonly used and machine-readable format, and has the right to transmit such data to another controller without hindrance.

The relevant requests should be sent directly to the controller via the email address gdpr.gruppor1@r1spa.it.

The data subject has the option to contact the Company’s Data Protection Officer (DPO) directly by email at dpo.r1@figurati.it.

This document, published at https://r1spa.it/privacy-policy constitutes the Privacy Policy of this site and may be periodically modified. The use of the information collected is subject to the policy in effect at the time of use.