Privacy notice

01Data controller

IA Consulting Engineering S.r.l.

Via Pio Foà 55 — 00152 Rome, Italy, Italia
VAT IT13482721001
Phone +39 06 87.93.1680
Email q.silvestri@iaconseng.it

The Controller has not appointed a Data Protection Officer, as the conditions set out in Article 37 of the Regulation do not apply. For any matter concerning data processing you may write to the email address given above.

02Data processed

This is a static website: it requires no registration, hosts no restricted areas and contains no data collection forms.

• Browsing data. The computer systems and software procedures that operate this website acquire, in the course of their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols: IP address, browser type and operating system, date and time of the request, address of the resources requested, server response code, size of the file returned. This data is recorded in the log files of the hosting server.
• Data provided voluntarily. Sending an email to the addresses shown on the site is optional and entails the acquisition of the sender’s address and of any other personal data contained in the message.

The site uses no profiling cookies and carries out no traffic analytics. Details are given in the cookie policy.

03Purposes and legal basis

• Delivery and security of the website — browsing data. Legal basis: the Controller’s legitimate interest in ensuring the proper functioning of the site and in detecting abuse or intrusion attempts (Art. 6.1.f GDPR).
• Response to requests received by email — contact details and message content. Legal basis: performance of pre-contractual measures requested by the data subject, or legitimate interest in responding to the communication (Art. 6.1.b and 6.1.f GDPR).
• Compliance with legal obligations — where processing is required by law, by public authorities or by supervisory bodies (Art. 6.1.c GDPR).

Providing data is optional. However, without contact details it is not possible to receive a reply to any request sent.

04Recipients

The data may be processed by the Controller’s staff, authorised and instructed pursuant to Article 29 of the Regulation, and disclosed to the following parties:

• the hosting and email service provider, appointed as processor pursuant to Article 28 of the Regulation [provider name to be inserted]
• consultants and professionals assisting the Controller, within the limits of their respective remits
• public authorities and supervisory bodies, in compliance with legal obligations

The data is neither disseminated nor sold to third parties for commercial purposes.

05Transfers outside the EU

The pages call their typefaces from the Google Fonts service. Viewing a page therefore involves a connection to Google’s servers and the transmission of the visitor’s IP address, with a possible transfer to third countries on the basis of the safeguards set out in Chapter V of the Regulation. Apart from this case, data is processed within the European Economic Area.

06Retention period

• Server log files — retained for the period technically necessary for the management and security of the service, according to the provider’s configuration [period to be inserted, normally 7 to 30 days], except where required to investigate possible offences.
• Email correspondence — retained for as long as necessary to handle the request and, where a professional relationship follows, for the duration of that relationship and for the limitation and record-retention periods laid down by law.

07Rights of the data subject

You may exercise the rights set out in Articles 15 to 22 of the Regulation at any time:

• access to your personal data and to information about the processing
• rectification of inaccurate data and completion of incomplete data
• erasure of data, in the cases provided for
• restriction of processing
• data portability, in the cases provided for
• objection to processing based on legitimate interest

Requests should be addressed to q.silvestri@iaconseng.it. The Controller replies within one month of receipt, extendable by two months where the request is particularly complex.

Anyone who believes that the processing of their data infringes the Regulation may lodge a complaint with the Italian Data Protection Authority, Piazza Venezia 11 — 00187 Rome, www.garanteprivacy.it, or bring proceedings before the courts.

08Automated decision-making

The Controller carries out no profiling and applies no automated decision-making within the meaning of Article 22 of the Regulation.

09Children

The site is not directed at children under sixteen and does not knowingly collect data relating to them. Should the Controller become aware of any such processing, the data will be erased.

10Changes

This notice may be updated following changes in legislation or in how the site works. The version in force is always the one published on this page, showing the date it was last updated.