(EU REGULATION 2016/679 GDPR)

1. Type of data processed

This website offers informative content. While browsing the site it is possible to acquire information about the visitor through navigation data. The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes: IP addresses, the type of browser used, the operating system, the domain name and the addresses of websites from which access was made, information on the pages visited by users within of the site, the time of access, the stay on the single page, the analysis of the internal path and other parameters relating to the operating system and the user’s IT environment.

2. Purpose of data processing and related legal basis

The data processing is directed to:

  • WITHOUT CONSENT
    A. To guarantee the navigability of the site
    In this case the provision is optional and indispensable for the achievement of the purpose
  • ONLY WITH SPECIFIC CONSENT
    B. Perform statistical analysis in aggregate and anonymous form (this consent is issued upon access to the page) through third party companies (Google Analytic)
    In this case, the provision is optional but not essential, you will still be able to browse the site; vice versa, it will not be possible for our organization and third parties to carry out the processing subject to the aforementioned consent.

3. Legal basis of the processing

The legal basis of the processing consists of:

  • Legitimate prevailing interest of the owner or third parties to whom the data are communicated (for the treatment referred to in letter A of point 2)
  • Consent (for the treatment referred to in letter B of point 2)

4. Processing methods:

Your personal data may be processed in the following ways:

  • Treatment by electronic procedures and supports
  • Processing in an automated form (automated collection of navigation data) in compliance with the confidentiality and rights of the person through the systematic application, by our Organization, of specific protection and guarantee measures commensurate with the specificity of the data.

5. Categories of recipients of the Data

The data may be transferred within the scope of the above to Information Technology Companies

6. Data Retention

  • for the purposes referred to letter A of point 2, the data are processed for the time necessary to achieve the purpose
  • for the purposes referred to in letter B of point 2, consult the policies of third parties (Google – http://www.google.com/intl/en/analytics/privacyoverview.html

7. Data Transfer Abroad

  • Transfers outside the EU are not foreseen by the Data Controller. Any transfers outside the EU take place only with the specific consent of the interested party or in accordance with art. 45 and 46 of the GDPR.
  • For the Data generated by Google Analytics, consult the relative policies (Google – http://www.google.com/intl/en/analytics/privacyoverview.html)

8. Rights of the interested party

The GDPR establishes the following rights of the interested party:

  • to be made aware that the Data Controller holds and / or processes his personal data, to be able to access it in full and obtain a copy (art. 15 Right to access),
  • enjoy the rectification of inaccurate personal data or the integration of incomplete personal data (Article 16 Right of rectification);
  • see your personal data held by the Data Controller deleted if one of the reasons provided for by the GDPR exists (Article 17, Right to Cancellation);
  • ask the Data Controller to limit the processing to only some personal data, if one of the reasons provided for by the GDPR exists (Article 18, Right to limit the processing);
  • request and receive personal data processed by the Data Controller, in a structured format, commonly used and readable by an automatic device or request transmission to another data holder without obstacles (only in the case of automated processing) (Art. 20, Right to Portability);
  • object in whole or in part to the processing of data for the purpose of sending advertising material and market research (so-called Consent) (Article 21 Right to object);
  • propose a complaint to a supervisory authority in the event of alleged violations of the GDPR

9. How to exercise the rights of the interested party

The exercise of the rights of the interested party (where applicable) may take place by sending a request by e-mail to the address info@iris-green.com. The request will be handled within the times provided by the GDPR.

10. Holder of the treatment

The Data Controller is IRIS GREEN S.R.L Via Frediani, 34 – 59100 PRATO (Italy)
REV.0 – 21/05/2018