Full notice pursuant to Articles 12 and 13 of EU Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”) relative to the protection of personal data of Site users
Swiss Chamber – Camera di Commercio Svizzera in Italia (Schweizerische Handelskammer in Italien) is committed to protecting and respecting the personal data collected in the scope of its institutional activities.
The purpose of this notice is to describe the methods for managing the website at www.swisschamber.it (the “Site”) in relation to the processing of the personal data of users who visit it and use its services and functions (the “User”), in accordance with the provisions of Articles 12, 13 and, where applicable, 14 of the GDPR.
This notice does not apply to other sites that the User may visit via links provided on its Site.
The Data Controller is Swiss Chamber – Camera di Commercio Svizzera in Italia (Schweizerische Handelskammer in Italien), with registered office at Via Palestro 2, 20121, Milan, telephone +39 02 7632031 and email firstname.lastname@example.org (the “Controller” or “Swiss Chamber”).
Since the Controller is established in Italy, no representative has been named.
Type of personal data processed
Browsing data and environmental variables
The computer systems and procedures used to run the Site automatically acquire, in the course of their normal operation, some personal data relating to the user’s browsing history, including environmental variables. This category of data includes, but is not limited to:
Personal data voluntarily provided by the User
The personal information that Users provide on such occasions may involve the Controller collecting their general personal data, such as email addresses, first and last names, home address or place of residence, telephone or mobile phone numbers or other personal data voluntarily provided by Users in their CV or request.
In particular, within the scope of ordinary or electronic correspondence or if a Customer submits a request to the Controller using the Form, in addition to the email address necessary for a reply, any other personal data contained in the correspondence will be processed. In this case, the data collected in this way will be stored and processed solely for the purpose of retaining correspondence and will not be used for any other purpose.
The Site allows Users to subscribe to the newsletter that the Controller periodically prepares and sends, by entering their email address in the box “Stay up-to-date Subscribe to our newsletter” after accepting this notice.
In the newsletter subscription process, the User’s email address is the only data collected by the Site and the Controller.
To provide the newsletter service, the Controller will upload each User’s email address to the email marketing platforms of third-party partners based in the EU.
Sending requests using the Form
The User’s personal data collected via the Form are:
No special categories of personal data will be processed pursuant to Article 9 of the GDPR. If received, any such data will be deleted. Therefore, Users are asked to avoid including data that fall into special categories, including sensitive or highly sensitive personal data (e.g. data relating to one’s state of health), in the correspondence sent to the Controller using the Form.
Swiss Chamber membership application form
Users may download the membership application form – Swiss Chamber on the Site at https://www.swisschamber.it/chi-siamo/soci/ in order to join.
The only way to join is by duly completing the form and sending a copy to postal addresses indicated therein.
The membership application form may not be submitted on the Site.
The notice regarding the processing of the applicants’ personal data is given at the bottom of the application form.
Principles of processing
In accordance with the requirements of the GDPR, the Controller works continuously to ensure that personal data are:
The Controller implements appropriate technical and organisational measures to secure personal data by design and to ensure that, by default, only the data necessary for each specific processing purpose are processed.
Types of cookies and tracking tools used
Cookies are strings of text that the websites ( “publishers”, or “first parties”) visited by the user or other sites or web servers ( “third parties”) install and store – directly, in the case of publishers, and indirectly, i.e. through publishers, in the case of “third parties” – on a terminal device available to the same user.
The main types of cookies that this Site uses are:
Since cookies are normal text files, they can be accessed using word processing programmes. However, you can configure your browser to prevent it from processing cookies and delete or desable cookies by visiting the following web pages:
Method of processing data voluntarily provided by Users
Purpose and legal basis of processing. Optional nature of consent and consequences of non-consent
Purpose of processing and legal basis for processing
In relation to technical cookies and browsing data, the User’s personal data are processed so the Site can be properly used. These cookies are necessary to browse the Site and for it to function perfectly. In this case, the legal basis of the processing is the Controller’s legitimate interest and no prior consent from the User is necessary.
The processing of the personal data voluntarily provided by email makes it possible to respond to requests from Users. The legal basis of the processing is the Controller’s legitimate interest in responding to the data subjects and no prior consent from the User is necessary.
The personal data voluntarily provided by Users via the Form is processed on the basis of acceptance of this notice. The legal basis of the processing is the Controller’s legitimate interest in responding to the data subjects’ requests via the Form and no prior consent from the User is necessary.
The legitimate interests of the Controller or third parties may constitute a valid legal basis for the processing, provided that the interests or fundamental rights and freedoms of the data subject do not prevail. In general, such legitimate interests may exist when there is a relevant and appropriate relationship between the Controller and the data subject, for instance when the data subject is the Controller’s customer.
Methods of obtaining consent
Consent to the processing of personal data by means of non-technical cookies must be expressed
by clicking, in the specific banner on the Site, either on (i) the “Accept All” button, or (ii) the “Accept Selected” button after having selected the “Statistics and Analysis” option in the list.
By merely scrolling or browsing the Site, you do not give your consent to the use and installation of tracking tools, with the sole exception of technical cookies.
Consent to the processing of personal data necessary to subscribe and subsequently receive the Swiss Chamber newsletter, for promotional and marketing purposes, must be given:
by clicking on the appropriate box in the “Stay up-to-date Subscribe to our newsletter”.
Source of personal data
Data from publicly accessible sources will not be processed.
Transfer of personal data to third parties
The Controller may transfer personal data subject to Processing for the above-mentioned purposes:
Except as specified below, the transfer of personal data to such parties in a third country or to an international organisation, is carried out subject to an adequacy decision of the European Commission, which has verified that the third country, the territory or one or more specific sectors within the third country or the international organisation in question ensure an adequate level of protection of the rights of data subjects. In any event, the Controller – where it deems it appropriate – reserves the right to conclude specific separate agreements obliging such parties to adopt adequate security measures, including organisational measures, aimed at offering appropriate safeguards with regard to its rights.
The data may thus be transferred to the following countries: European Union and Switzerland. To obtain a copy of these data or the place where they were transferred, simply send your request to: email@example.com.
Under current EU law, the United States is a third country that does not provide an adequate level of protection under Article 45 of the GDPR and does not offer a similar level of data protection and protection of data subjects’ rights as within the EU. In particular, data, including personal data, collected by Google and regarding data subjects residing in the EU territory will be accessible by the Federal Public Security Agencies of the US Government.
Personal data retention period
However, the Controller reserves the right to ask the data subject to renew their consent to the processing and/or to verify the previously granted consent.
Rights of the data subject
Pursuant to Article 7 of the Privacy Code and Articles 15 et seq. of the GDPR, the Controller wishes to inform the User of the existence of the following rights:
Exercise of rights
Requests to exercise the rights set out in this notice should be sent directly to the Controller at the following email address: firstname.lastname@example.org.
Alternatively, you can exercise your rights by sending a registered letter with notice of receipt to Swiss Chamber – Camera di Commercio Svizzera in Italia, Via Palestro, 2 20121 Milan.
Accessibility of the notice
The notice is accessible at www.swisschamber.it and at the Controller’s registered office.
Receive updates on new events, the latest news and much more
Grazie per esserti iscritto alla nostra newsletter
Siamo spiacenti si è verificato un errore
WRITE TO US
Grazie per averci contattato
Siamo spiacenti si è verificato un errore