CBI S.C.P.A. PRIVACY POLICY

The following is a disclosure pursuant to Article 13 of EU Regulation 2016/679 (General Data Protection Regulation – GDPR) regarding the website of the CBI S.c.p.a. www.cbi-org.eu.

The disclosure relates only to the content of this website.

USEFUL CONTACTS

CBI S.c.p.a. processes your data and is considered the Data Controller under law. In this capacity it is responsible for ensuring the application of the organisational and technical measures necessary and appropriate for the protection of your data. CBI S.c.p.a. headquarters is in Via del Gesù, 62, 00186 Roma - Phone: +39 06 69767767.

In order to fulfil the purposes set out below, CBI S.c.p.a. may make use of parties designated as External Data Processors or as Joint or Independent Data Controllers, the list of which is available upon request by contacting the Data Protection Officer (DPO) at the addresses below.

CBI S.c.p.a. has appointed a Data Protection Officer (DPO) who is responsible for ensuring compliance with privacy protection laws and who can be contacted for enquiries regarding the processing of your data at this email address: dpo@cbi-org.eu. You can find more information about your rights in the "Your rights” dedicated space.

TYPES OF DATA PROCESSED WITHIN THE SITE

Our website offers informative content. During website browsing, information on the user can be acquired in the following ways:

• Web browsing data 
   

The computer systems and software procedures used for the functioning of this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.

This category of data includes IP addresses, browser type used, operating system, domain name and website addresses the user has logged into or out of, information on the pages within the site visited by the user, time of access, duration of stay on a single page, analysis of internal paths and other parameters relating to the operating system and computer environment of the user.

This technical/computer data is collected and used only in an aggregated and non-identifiable manner and could be used to ascertain liability in the event of hypothetical computer crimes detrimental to the website.

• Data provided voluntarily by visitors

This refers to the personal data (name, surname, email address etc.) issued freely by the visitor on the website, in order to, for example, register and/or log on to a restricted area requiring confirmation of acknowledgement of Privacy Policy and where consent is required.

INFORMATION ON PROCESSING

Please note that all personal data that you provide to us will be processed in accordance with current privacy legislation. CBI S.c.p.a. will therefore undertake to process it in accordance with the principles of fairness, lawfulness, transparency, in compliance with the purposes set out below, collecting it only to the required and exact extent for the processing, having it handled only by personnel authorised and trained for the purpose and in order to ensure the necessary confidentiality of the information provided.

CBI S.c.p.a. collects, records, consults and generally processes your identifying data (such as name, surname, email address, etc.) needed, by way of example but not limited to, for the use of the website, implementation of your requests for registration on restricted areas, etc.

In particular, CBI S.c.p.a. will process your data for the following purposes:

• to follow up and meet the data subject's request to register on one of the sections in the "REGISTER" area as "Shareholders", "Technical providers", "Prospect" or to simply request access to the "Newsletter" area;
• to follow up and meet the data subject's request to communicate with CBI S.c.p.a. for information and contact purposes;
• for technical and operational management of the website;
• to assert or defend a right in court, as well as in administrative or arbitration and conciliation procedures in the cases provided for by law, European Union legislation or by regulations;
• to fulfil the provisions of law and of standards, codes and procedures approved by regulatory authorities and other competent institutions.

The legal bases of the processing in relation to the purposes listed above: relate to 1) and 2) the performance and fulfilment of a relationship to which the data subject is party and the performance and fulfilment of a request received from the data subject; 3) for the technical functionality of the website; 4) protection of a right of CBI S.c.p.a. in various legal proceedings; 5) a legal obligation to which the data controller is subject.

The processing of the above-mentioned data above is necessary for the handling of the specified legitimate purposes; your consent is therefore not required.

Furthermore, CBI S.c.p.a. may, only with your free, specific, informed and unequivocal consent, use your data for:

• the issue of the Newsletter where this service is accessory to the execution and fulfilment of the service requested by you

Personal details do need to be entered to access the website, but user reserved areas can only be accessed with the access codes sent individually by email following registration in the relevant section.

The site enables the optional, voluntary dispatch of emails to the addresses provided for contacting CBI S.c.p.a. In such cases the sender's email address will be acquired together with the details needed to reply to the requests received.

To access the reserved pages or receive the CBI newsletter, users must register on the site. All the information acquired, including personal data, will be processed with automated tools only for the time needed to fulfil the purpose for which it was collected.

The systems are equipped with the necessary security measures to prevent the loss of data, unauthorised or improper use, and unauthorised access.

TRANSFER OF YOUR DATA

CBI S.c.p.a. is not obliged to ask your consent to disclose your personal data to a category of parties as specified below, such as:

• third parties who perform outsourced activities on behalf of the data controller and to fulfil the purposes set out in this statement. In this context, outsourcers carry out the assigned activities in their capacity as independent data controllers or external processors or joint controllers;
• Judicial authorities and those parties to whom disclosure is mandatory by law. These parties will process the data in their capacity as independent data controllers;

The data and processing in relation to the services in this site is handled only by authorised personnel, or by persons in charge of occasional maintenance or technical management.

No data deriving from the web service is disclosed.

DATA STORAGE PERIOD

The personal data provided to CBI S.c.p.a. will be processed and retained for the time necessary to achieve the above-mentioned purposes, and also, where appropriate, for the fulfilment of tax or regulatory obligations, strictly to the extent necessary for these purposes.

YOUR RIGHTS

All the rights under the above-mentioned Regulation EU 2016/679 may be exercised at any time.

In this respect, data subjects are advised that they have the right to:

• obtain confirmation of the existence or otherwise of their personal data and access thereto
• obtaining the update, rectification and integration of their data
• request the deletion of their data, under the terms permitted by law
• object to, in full or in part, for legitimate reasons, the processing of personal data regarding them
• limit processing in the event of breach, request rectification or opposition
• request the portability of electronically processed data, provided on the basis of consent or contract
• withdraw consent to the processing of their data, if envisaged
• in case of automated decision-making, obtain the human intervention of the data controller to express their opinion and to challenge the decision.

For this purpose, CBI S.c.p.a. allows you to exercise your rights by sending an email to dpo@cbi-org.eu also in order to retrieve the forms for the exercise of rights. We inform you that CBI S.c.p.a. agrees to respond to your requests within one month, except in particularly complex cases, which may take up to 3 months. In any case, CBI S.c.p.a. will explain the reason for any delay within one month of your request.

The outcome of your request will be provided in writing. If you request the rectification, cancellation or limitation of processing, CBI S.c.p.a. agrees to communicate the results of your request to each of the recipients of your data, unless this proves impossible or involves a disproportionate effort.

CBI S.c.p.a. specifies that it may deny your request if it is manifestly unfounded, excessive or repetitive.

Finally, if deemed appropriate, you may submit a complaint to the Personal Data Protection Authority, in the manner and forms provided for by law. For more information, please consult the Data Protection Authority's website.

INFORMATION ON COOKIES

In compliance with the requirements of Measure 229/2014 of the Personal Data Protection Authority, as amended and supplemented, this Cookie Policy aims to provide information on the types, purposes and methods of use/management of cookies used by this site.

CHARACTERISTICS AND PURPOSES OF COOKIES

Cookies are small strings of text that a website sends to your device to optimise browsing and services, improve functionalities and improve use of the site itself. Cookies are used to manage authentication, track sessions and store user preferences.

Cookies can be saved on the device and remain in effect for a variable period of time, or are deleted when the browser is closed.

Some cookies are essential because they support essential functions of our website.

COOKIES WITHIN THE WEBSITE

No personal data concerning users is collected by the website. We do not use cookies to transmit personal information, nor do we use any kind of persistent cookies i.e. user tracking systems. Technical cookies, and in particular, session cookies (not permanently stored on the user's computer and automatically deleted when the browser is closed), are used only for the transmission of session identifiers (consisting of random numbers generated by the server), which are necessary for the safe and efficient browsing of the website. The session cookies used on this website do not make use of other computer techniques that may compromise the user’s privacy while browsing and do not allow the acquisition of the user's personal identification data.

TECHNICAL COOKIES

Technical cookies are used only to enable you to browse the website and use its functionalities. These are always first party cookies, as we place them directly on the website.

Some cookies are essential to optimise browsing or to allow user authentication on the website. Browsing cookies are normally session cookies and are therefore turned off automatically when you close your browser.

Other technical cookies enable you to store certain preferences (for example, language or country of origin) without having to reset them during subsequent visits (known as functionality cookies). For this reason, functionality cookies are often persistent cookies, because they are stored on your computer, even after the browser is closed, until their expiry date or until you decide to delete them.

As provided by current privacy legislation, your prior consent is not needed for installation of these cookies. You are of course free to block the installation of cookies by adjusting your browser settings. However, if you block the installation of technical cookies or subsequently delete them, you may compromise in whole or in part your ability to access the website, use all or part of the site, enable or disable certain functions or receive certain services

In this regard we indicate the relevant cookies used on the site:

TECHNICAL COOKIES