This page describes the methods of management of the “www.idraflot.com” website in relation to the processing of personal data of users who consult it.

This information notice is provided pursuant to art. 13 of EU Regulation 2016/679 for the protection of personal data (“GDPR”) to those who interact with the web services accessible through this website, and is only valid for the same and not for any other websites consulted by user via link.

THE DATA CONTROLLER
The Data Controller, relating to identified or identifiable persons who consult this site, is Veolia Water Technologies Italia S.p.A., with registered office in Via Lampedusa no. 13 in Milan.

LOCATION OF THE PROCESSING OF DATA
The processing connected to the web services of this site take place at the aforementioned and at all the local units and operational offices in which the Company carries out its activities and is only handled by technical personnel specifically appointed for processing, or by any persons in charge of occasional processing, maintenance operations. This site shares some of the data collected with services located in a country other than that in which the user is located, even outside the European Union.

PURPOSE AND LEGAL BASIS OF THE PROCESSING
The purposes for which personal data are processed, are attributable to:

  • execution of the services requested and agreed between the parties;
  • commercial communication and information services through electronic tools or paper documents, regarding products and services provided by the Company; this service is carried out – pursuant to art. 4 of the GDPR – also from external suppliers in possession of all the legal requirements and appointed for this purpose pursuant to art. 28 of the same GDPR, subject to specific and distinct consent from the user.
  • obligations deriving from laws and provisions issued by parties and authorities legally authorised by the Law;
  • administrative and organisational management of the relationship between the parties;
  • protection of the Company in litigation.

MODALITIES OF THE PROCESSING AND STORAGE
The personal data acquired are processed in paper form, computerised and electronically in compliance with the provisions of the law to ensure the confidentiality and security, as well as the accuracy, updating and relevance of the same with respect to the purposes stated. Personal data will be kept for the time necessary to achieve the purpose for which they were collected, except for longer periods set by binding legal provisions. When the processing is based on the consent of the User, the Data Controller may retain the Personal Data until such consent is revoked.

COOKIE POLICY
Cookies are small text strings installed within the browser that assist us in providing the service according to the purposes described. Some of the purposes of installation of Cookies may also require the consent of the User. When the installation of Cookies takes place on the basis of consent, this consent can be freely revoked at any time by following the instructions contained in this document.

Cookies used
Technical session cookies
They are strictly necessary Cookies that allow you to browse the site and use all the features and are automatically deleted when the browser is closed.

Permanent technical cookies
Permanent Cookies, on the other hand, are used to maintain the information that is used in the period between access to the website, or used for technical purposes and to improve navigation on the site. This data allows sites to recognise that you are an already known user or visitor and adapt accordingly.

Technical tracking cookies
They are Cookies used for statistical purposes only. On our site we use the Google Analytics service with anonymised IP (Google Inc.).

Sharing cookies
Suppliers of the sharing tools implemented on the site can install proprietary cookies. These cookies are to be considered as third party cookies and for the related privacy policies, please refer to the information provided by each party.

Decline consent to Cookies
You can decline consent to the processing of personal data carried out by cookies in different ways, as indicated by the Authority.

Block third-party cookies
You can refuse third-party cookies through the appropriate function in the browser.

Delete Cookies directly
Each browser allows you to delete cookies and many even allow you to automate this operation. Here are the links to the guides for using the most common browsers:

We remind you however that the refusal of cookies could compromise the correct functioning of your navigation on this site.

TYPES OF DATA PROCESSED
Navigation data.
The computer systems and software procedures used to operate the website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified data subjects, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users connecting to the site, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system and the user’s computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning, and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site.

OPTIONAL PROVISION O DATA
The optional, explicit and voluntary sending of e-mails to the addresses indicated on this site entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message. Through the forms of communication, request for services or other communications (for e.g. Curriculum Vitae) consent related to the specific purpose of the service are collected. Except as specified for navigation data, the user is free to provide or not the personal data contained in these forms. However, failure to provide such data may make it impossible to obtain what has been requested.

RIGHTS OF THE DATA SUBJECT – ART. 15 et seq. GDPR
Pursuant to articles 15 et seq. of the GDPR, the data subject to whom the personal data refer have the right at any time to obtain confirmation of their existence at the Data Controller, to know the content and the origin of the acquisition, as well as the logic and purposes on which their processing is based, to verify their accuracy and to request the integration, updating, correction or cancellation or transformation into anonymous form or blocking of data processed in violation of the law, and finally to object, for legitimate reasons, to the processing of personal data concerning him/her, even if pertinent to the purpose of collection, with the risk, however, that it will not be possible to execute the requests.

Requests should be addressed to: Veolia Water Technologies Italia S.p.A., with registered office in Via Lampedusa no. 13, 20141 Milan and e-mail address: privacy.vwtit@veolia.com

June 2018