Privacy Policy Site www.dottcomm.it

Described in this Privacy Policy are the methods of processing of personal data of users (hereinafter, for brevity, the "Data Subjects") who consult the site referred to at https://www.dottcomm.it// (hereinafter, for brevity, the "Site"). The information referred to in Article 13 of Regulation (EU) 2016/679 (henceforth, the "GDPR") and the "Personal Data Protection Code" i.e. Legislative Decree 196/2003, as amended by Legislative Decree 101/18, is provided in this Privacy Policy to those who interact with online services provided through the Site (henceforth, the "Services").
This information is provided only with reference to the Site.

THE DATA CONTROLLER
Consultation of the Site involves the release of information and Personal Data, of the Interested Parties. The Data Controller is: Sala Noro e Associati - via dei Tornielli 12 Novara (Italy) (hereinafter the "Data Controller").

NAVIGATION DATA
The computer systems and software procedures responsible for the operation of the Site acquire, in the course of their normal operation, some personal data of the Interested Parties who visit it (hereinafter, for brevity, the "Personal Data"), the transmission of which is implicit in the use of Internet communication protocols. The Personal Data referred to in Article 2.1. is information that is not collected in order to be associated with specific Data Subjects, but which, by its very nature, could, through processing and association with data held by third parties, allow the identification of such Data Subjects. This category of Personal Data includes the IP addresses or domain names of the computers used by the Interested Parties connecting to the Site, the URI (Uniform Resource Identifier) notation addresses of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment.
The Personal Data referred to in Article 2.1. are used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct functioning and are kept for the time periods defined by the reference legislation, and in particular Article 5 paragraph 1 letter e) of the GDPR. The Personal Data referred to in Art. 2.1. could be used to ascertain responsibility in case of hypothetical computer crimes against the Site.
The special data referred to in Art. 9, para. 1 of the GDPR cannot be processed without the explicit consent given by the Data Subject.

PURPOSE OF PROCESSING
Personal data such as unique IP address may possibly be collected for site navigation and statistical purposes, there are no other means of collection or forms of sharing. The Site was created to provide information to surfers about the structure of the firm and how it operates

LEGAL BASIS FOR PROCESSING
The legal basis for the processing of Personal Data for the purposes referred to in point a, is Article 6.1.b) of the GDPR, as the processing is necessary for the provision of the Services or for the response to requests from the Data Subject. Providing Personal Data for these purposes is optional, but failure to do so would result in the inability to activate the Services provided by the Site. The legal basis related to the purpose under b, is Article 6.1.c) of the GDPR, as the data provided is required by legal obligation.

DATA STORAGE
Personal Data are stored within the European Union in order to comply with the related purposes indicated above. The processing will be carried out in automated and manual form, with methods and tools designed to ensure maximum security and confidentiality, by persons specifically appointed for this purpose. In compliance with the provisions of Article 5 paragraph 1 letter e) of the GDPR, the Personal Data collected will be stored in a form that allows the identification of the Data Subjects for a period of time not exceeding the achievement of the purposes for which the Personal Data are processed. The retention of the Personal Data provided depends on the purpose of the processing.
Personal Data will be kept for as long as is strictly necessary to achieve those same purposes in accordance with the principles of minimization and limitation of storage under Article 5.1.e) of the GDPR.

PROCESSING METHODS
Personal Data will be processed by means of computerized/telematic tools and for purposes related and/or instrumental to the online services or for simple navigation on the Site, as established by the Italian legislation in force; in particular:
1 to make possible the provision of the Service;
2 to make possible the execution of the obligations provided by law.
The processing of Personal Data will take place by means of tools and/or methods designed to ensure the confidentiality and security of such Personal Data.
Possible Data Processors will be appointed, upon the Holder's conferral of external assignments (for the performance of which it is necessary to share the Personal Data of the Data Subjects), from among those who present sufficient guarantees to put in place adequate technical and organizational measures so that the processing meets the requirements of the GDPR and guarantees the protection of the Data Subject's rights, and upon the Data Processor's signing of the appropriate contract/addendum to the professional assignment containing the requirements and specifications of the processing itself.

RIGHTS OF THE INTERESTED PARTIES
The Data Subject has the right at any time to obtain confirmation of the existence or non-existence of the same data and to know its content and origin, verify its accuracy or request its integration or updating, or rectification ex art. 15 of the GDPR.
Pursuant to the same Article 15, one has the right to request the cancellation, transformation into anonymous form or blocking of Personal Data processed in violation of the law, as well as to oppose in any case, for legitimate reasons, their processing. Requests should be addressed to the Data Controller at its headquarters.
The Data Subject has the right to request from the Controller access to the Personal Data concerning him/her, as well as rectification, erasure, restriction, objection to their processing and portability of the same, when processed automatically on the basis of consent or for the performance of the contract.
The Data Subject has the right to revoke consent at any time without affecting the lawfulness of the processing based on the consent given before revocation.
The Data Subject has the right to lodge a complaint with the Data Protection Authority under Article 77 of the GDPR.

MODALITIES FOR THE EXERCISE OF RIGHTS UNDER ART. 12 OF THE GDPR
The Data Subject may at any time exercise the rights identified in Art. 15 and, where applicable, Art.16-21 of the GDPR, by sending:
- a registered letter with return receipt to the registered office of the Data Controller located in Novara, Via dei Tornielli 12 or by writing to the e-mail address novara@dottcomm.it

OTHER DISCLOSURES

- CUSTOMER INFORMATION HALL NORO AND ASSOCIATES

- HALL NORO AND ASSOCIATES SUPPLIER DISCLOSURE

- PMI CONSULTING CLIENT INFORMATION

- SUPPLIER INFORMATION PMI CONSULTING