The purpose of this Privacy Policy is to describe the methods of collecting the personal data of the users as performed through the website www.eposrl.com (the “Website“) pursuant to Articles 13 and 14 of European Regulation 2016/679 concerning the protection of personal data (the “Regulation“).
1) Data Controller
The Data Controller of collected data on the Website pursuant to the Regulation, is the company EPO Estratti Piante Officinali S.r.l. (the “Company“), with its registered office in Via Stadera, n. 19 – 20141, Milano (MI) and with operational offices in Via Friuli, n. 12/14 – 20090 and Via Norma Parenti, n. 20 – 20090, Fizzonasco di Pieve Emanuele (MI), VAT Registration no. and Tax Code 00714770153, tel. +39.02895571, fax +39.0289557490, e-mail address epo@eposrl.com, CEM (certified email address) eposrl@legalmail.it.
2) Types of Processed Data
Browsing data: The computer systems on which the operation of the website is based acquire some personal data whose forwarding is implied transmission is implicit in the use of Internet Communication Protocol. This data is not collected to be associated with identifiable users of the Website, but by its very nature could, through the processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users who connect to the Website, URI addresses (Uniform Resource Identifier) of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.), and other parameters relating to the operating system and the user’s computing environment.
3) Purpose and legal basis of the processing
Personal data provided through the Site are processed by the Company in order to:
Personal data are processed on the basis of the consent of the data subject during the browsing experience and expressed on the occasion of the consultation of the Website which can be revoked at any time.
Users may provide their personal data for the use of other services offered on the Website, for which they may refer to the specific Privacy Policy.
4) Categories of recipients of personal data
The Company shall communicate the personal data of the users only within the limits permitted by law and in accordance with what is illustrated below. In particular, the personal data of the user may be processed or known by:
Personal data will not be disclosed. The possible transfer of data abroad, also in countries outside the EU, will only take place ensuring adequate standards of protection and safeguarding according to the applicable law.
5) Methods of processing of personal data and retention period
The processing will be carried out with the logics of organization and elaboration of personal data, also relating to logs originated from access and use of the web services, related to the purposes mentioned above, however, in such a way as to ensure appropriate security and confidentiality of data processed.
The personal data processed will be retained for the time strictly necessary to achieve the purposes described above and, in any case, in full respect of the criteria and the principles of necessity, opportunity and not excessive.
6) Mandatory or optional nature of the provision
The provision of personal data collected through the Website is optional. However, in case of refuse to provide it the experience of browsing the Website could be compromised.
7) Rights granted to the user
The users have the right to:
The user may exercise the rights listed above by writing to the e-mail address epo@eposrl.com, or by sending a registered letter to EPO Estratti Piante Officinali S.r.l., Via Stadera, n. 19, Milano – 20141.
8) Right to make a complaint
The user has the right to make a complaint, pursuant to art. 77 of the Regulation, to the national supervisory Authority (for Italy the “Garante per la protezione dei dati personali” [Italian Data Protection Authority] www.garanteprivacy.it).
9) Final Clause
Given the current state of development of the legislation on the protection of personal data, please note that this Privacy Policy may be subject to updates.
INFORMATION CONCERNING COOKIES: a Cookie is a small text file that a website stores on the computer browser of the connected user. Usually cookies enable the preferences expressed by the user to be stored in order to avoid needing to re-enter them numerous times. The browser saves the information and retransmits it to the Server of the Website when the user visits that web site again.
Cookies can be first or third party, where “first party” refers to Cookies that contain the site domain, and where “third party” refers to cookies that are related to external domains. Third party Cookies are necessarily installed by an external party, always defined as “third party”, and are not managed by the website. These external parties may also possibly install first party Cookies, saving their own cookies on the Website domain.
Cookies also have a duration dictated by the expiry date (or by a specific action, such as the closure of the browser) which is set up at the time of installation.
Cookies can be:
With regard to the nature of the Cookies, there are different types:
a) Technical cookies: only used in order to provide the service requested by the user who connects to the website and installed directly by the manager of the website.
They can be divided into:
The prior consent of users is not required to install these types of Cookies.
b) Profiling cookies: are designed to create profiles on the user and are used to send advertising messages in line with the preferences expressed by the user when browsing the Internet.
The data subject’s consent is not required to use these Cookies.
The applicable legislation provides that the user may authorize or refuse consent to the installation of Cookies.
In case of third-party Cookies, the website does not have a direct control of individual cookies and cannot check them (nor can it install them directly or delete them). In any case, it is possible to manage these cookies through the browser settings.
The users can:
The website www.eposrl.com is provided by the following Cookies:
In general, www.eposrl.com main cookies originate from:
The table above is not to be considered exhaustive for third party cookies because they can vary in number, duration and name in an independent way from the www.eposrl.com website.
In the light of the above, it is possible to acquire more information about Cookies and verify the installation of the same on the browser/device used and, where supported, change preferences in relation to the “third party cookies” at the link: www.youronlinechoices.com/it/.