PRIVACY INFORMATION AND COOKIES POLICY RESA FROM PVA Italy

In accordance with art. 13 European Regulation 27/4/2016 n. 679 (G.D.P.R.) and the Italian Privacy Guarantor measure 8 May 2014 [3118884]

General information

The following gives a simple overview of what happens to your personal information when you visit our website. Personal information is any data with which you could be personally identified. Detailed information on the subject of data protection can be found in our privacy policy found below.

We at PVA Italy take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with applicable data protection regulations.

When you use this website, various personal data is collected. Personal data is information by which you can be personally identified.

We would like to point out that the transmission of data over the Internet (e.g. when communicating by e-mail) may have security gaps that cannot be attributed to PVA Italy. It is not possible to fully protect your data from access by third parties.

Scope of application

For the above reasons, this privacy policy applies only to the online activities of this site and is valid for visitors/users of the site and does not apply to third party sites. This privacy policy does not apply to information collected through channels other than this website.

Data Controller and Data Processors

The data controller is the natural or legal person who decides on the purposes and means of processing personal data (e.g. names, e-mail addresses or similar) and adopts the appropriate technical and organizational measures.

The list of the external data processors and the persons in charge/authorized for the processing is constantly updated and available at the registered office of the data controller.

Data processing methods, applicable principles and subjects to whom the data may be communicated

This site treats users' data in a lawful and correct manner, according to principles of proportionality, necessity, transparency and protection of confidentiality and rights of each user, adopting the appropriate security measures and organizational measures appropriate to the risk, aimed at preventing unauthorized access, disclosure, modification or unauthorized destruction of data.

The processing is carried out by means of computer and/or telematic tools, with organizational methods and logics strictly related to the purposes indicated and aimed at safeguarding and protecting your data. On the one hand, your data is collected because it has been communicated to us by you. This may be, for example, the data you enter in a contact form.

On the other hand, our IT systems automatically collect other data when you visit the website. This is mainly technical data (e.g. Internet browser, operating system or time of page visit). This data is automatically recorded as soon as you access our website.

Some data is collected to ensure that the website is provided correctly. Other data may be used to analyse user behavior, anonymously.

In addition to the owner, in some cases, categories of internal staff involved in the organization, management, interaction and maintenance of the site and related activities (administrative, commercial, marketing, legal, system administrators), or external parties (such as third party technical service providers, hosting providers, IT companies, web marketing companies, communication agencies, etc.), if necessary, may have access to the data.

Type of data required

Below we list the type of data acquired by the user through navigation on this site.

Our IT systems automatically collect other data when you visit the website. This is mainly technical data (e.g. internet browser, operating system or time of page visit). This data is automatically recorded as soon as you access our website.

Contacts" - "Contact us directly" section

The provision of your personal data by filling out the form available in the "Contacts" - "Contact us directly" section allows us to fulfill your request and to better meet your requirements. Among the personal data collected in the "Contacts" - "Contact us directly" section, either independently or through third parties, there are: title, surname, e-mail, subject, message.

Unless otherwise specified, all data required by the website in this section are mandatory and marked with an asterisk.

The processing of data entered in the contact form is carried out exclusively on the basis of the user's consent (art. 6 paragraph 1, letter a) of Reg. Eur. 679/2016 (GDPR). You can revoke your consent at any time or request the deletion of your data, simply send an e-mail to pva.italy(at)pvatepla.com.

The legality of data processing operations carried out before revocation remains valid until revocation. Otherwise, your data will be deleted once the purpose for which they were provided has been fulfilled, e.g. after the request has been processed.

It is represented that the content of the message inserted in the Contact Form - "Contact Us Directly" and the correspondence with the user, if they are of a commercial nature, may be kept by the owner according to the regulations in force, pursuant to art. 2220 of the Italian Civil Code, i.e. for 10 years.

Navigation data, cookies, plugins and tools

The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. These data, necessary for the use of web services, are also processed for the purpose of:

• obtain statistical information on the use of the services (most visited pages, number of visitors per time slot or day, geographical areas of origin, etc.);
• check the correct functioning of the services offered.

Analysis tools and third-party tools

When you visit our website, your browsing behavior can be statistically evaluated. This is mainly done with cookies and so-called analysis programs. Your browsing behavior is usually analyzed anonymously; the browsing behavior cannot be traced back to you. You can oppose this analysis or prevent it by not using certain tools. Detailed information on this can be found in the following data protection statement.

It is also possible to oppose this analysis, according to the modalities indicated in the policies below.

Google Analytics and cookies

The site uses through "Google Analytics", whose provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and whose privacy policy you can refer to
https://analytics.fastbase.com/Privacy_Policy
https: - //policies.google.com/privacy?hl=en

Through Google Analytics the owner collects the following data: URL and account title, properties, views on Google Analytics: accessible pages, visit time, time of last visits, IP address owner name, reverse IP address domain, referring site, application or service, including relevant search queries that led the visitor to the customer's website, operating system and device information.

Google Analytics uses so-called "cookies". These are text files that are stored on your computer and allow an analysis of your use of the website. The information generated by the cookie about your use of this website will generally be transmitted to and stored by Google on servers in the United States.

Google Analytics cookies are stored on the basis of Article 6 (1) (f) GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

This website uses cookies, which are small text files that are stored on your computer and saved by your browser. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more "user-friendly", more effective and safer. Most of the cookies we use are so-called "session cookies". They will be automatically deleted after your visit. Other cookies remain on your device until you delete them. These cookies allow us to recognize your browser the next time you visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies in certain cases or in general and enable the automatic deletion of cookies when you close your browser. If cookies are disabled, the functionality of this website may be limited or compromised.

The cookies are necessary to perform the electronic communication process or to provide certain technical functions required for the operation of the site and are set on the basis of Article 6 paragraph 1, letter f of Reg. Eur. 679/2016 (GDPR). The operator of the website has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services.

IP Anonymization

We have activated the IP Anonymization feature on this website. This means that your IP address will be abbreviated by Google within the Member States of the European Union or other contracting states of the Agreement on the European Economic Area before it is transmitted to the United States. The full IP address is transferred to a Google server in the USA and shortened there in exceptional cases.

Plugins and tools

Browser Plugin

You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available at the following link and installing it: https://tools.google.com/dlpage/gaoptout?hl=en.

Objecting to the collection of data

You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie is set to prevent the collection of your data on future visits to this website:

You can find more information about user data management on Google Analytics in the Google Data Protection Statement: https://support.google.com/analytics/answer/6004245?hl=en.

Outsourced data processing

We have entered into a contract for the processing of order data with Google and when we use Google Analytics, we do so in full compliance with the GDPR (Teg. Eur. 679/2016).

Demographic data collection by Google Analytics

This website uses the "demographic features" function of Google Analytics. This allows you to create reports containing information about the age, gender and interests of visitors to the website. This data comes from advertising based on Google's interests and visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described under "Objection to data collection".

Server log files

The website provider automatically collects and stores the information in so-called server log files, which the browser automatically transmits to us. These are:

• Browser type and version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

These data will not be combined with data from other sources. The basis for data processing is Article 6 paragraph 1 lit. b GDPR, which allows data processing to fulfil a contract or pre-contractual measures.

YouTube

Our website uses plug-ins from the YouTube site operated by Google. The website is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit one of our pages equipped with a YouTube plug-in, a connection to YouTube servers will be established. The YouTube server will be informed about which of our pages you have visited. If you are logged into your YouTube account, allow YouTube to assign your browsing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

YouTube is used in the interest of an interesting presentation of our online offers. This represents a legitimate interest within the meaning of Article 6 paragraph 1 lit. (f) GDPR. Further information on the management of user data can be found in YouTube's data protection statement at the address:  https://www.google.de/intl/de/policies/privacy.

Google Web Fonts

This page uses so-called web characters provided by Google for the uniform display of characters. When you call up a page, the browser loads the required web characters into the browser cache to display texts and characters correctly.

For this purpose, your browser must connect to Google's servers. This gives Google the knowledge that you have accessed our website via your IP address. Google web fonts are used in the interest of a uniform and attractive presentation of our online offers. This represents a legitimate interest within the meaning of Article 6 (1) (f) GDPR.

If your browser does not support web fonts, a standard font will be used from your computer.

Further information about handling user data, can be found at https://developers.google.com/fonts/faq and in Google's privacy policy at https://www.google.com/policies/privacy/.

Google Maps

This site uses Google Maps map service via an API. The supplier is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use Google Maps features, you need to save your IP address. This information is generally transferred to a Google server in the United States and stored there. The provider of this page has no influence on this data transmission.

The use of Google Maps is in the interest of an interesting presentation of our online offers and to facilitate the search for the places we have indicated on the website. This represents a legitimate interest within the meaning of Article 6 (1) (f) GDPR.

You can find more information about user data management in Google's data protection declaration:

 https://www.google.de/intl/de/policies/privacy/.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content, such as the inquiries you send to us as the site operator. You can recognize an encrypted connection by the fact that the browser address line changes from "http: //" to "https: //" and the lock symbol in the browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Legal basis for the processing

The data controller processes personal data relating to the user when one or more of the following conditions are met, situations that occur for the data collected through the use of this site and in the "Contact Us" - "Contact Us Directly" section.

• the owner has expressed his consent to the processing, pursuant to art. 6 paragraph 1 letter a) GDPR (Reg. Eur. 679/2016);
• the processing is necessary for the execution of a contract with the user and/or the execution of pre-contractual measures, pursuant to art. 6 paragraph 1 letter b) GDPR (Reg. Eur. 679/2016);
• the processing is necessary to fulfil a legal obligation to which the owner is subject, pursuant to art. 6 paragraph 1 letter c) GDPR (Reg. Eur. 679/2016);
• the processing is necessary for the pursuit of the legitimate interest of the owner pursuant to art. 6, paragraph 1, letter f) GDPR (Reg. Eur. 679/2016).

However, it is always possible to ask the owner to clarify the concrete legal basis of each processing.

Consequences of not providing personal data

Personal data may be freely provided by the user or, in the case of usage data, collected automatically during the use of the website.

In cases where this website indicates certain data as optional, users are free to refrain from communicating such data, without this having any effect on the availability of the service or its operation.

If you do not intend to allow the processing of your data for the above purposes, please do not enter the requested data, with the warning that we could not, through these tools, process your request and provide you with the service of response, advice and / or feedback requested.

If you do not wish to consent to the processing, please do not enter any data and contact us by phone. We will be happy to answer your questions.

Storage period and cessation of processing

The data are processed and stored for the time required by the purposes for which they were collected and for purposes related to the execution of a contract between the data controller and the user and will be retained until the execution of such contract is completed and in any case for a period of not less than 10 years in accordance with art. 2220 of the Italian Civil Code.

In case of termination of processing for any reason, except for the case of a request for cancellation pursuant to art. 17 of Reg. Eur. 679/20016 and withdrawal of consent, your data will be:

a) destroyed, once the storage obligations imposed by Article 2220 of the Italian Civil Code, Articles 19 and 22 of Presidential Decree no. 600/1973 (10 years) or other specific regulations have expired; b) transferred to another data controller, provided that they are intended for processing in compatible terms for the same purposes, for which the data are collected (pre-bankruptcy and similar or similar procedures, transfer of business or branch of business; etc..) pursuant to Article 6, paragraph 1, letter b) Eur. Reg. 679/2016; c) stored for statistical purposes, in compliance with technical and organizational measures, in particular to ensure compliance with the principle of data minimization, provided that the statistical purpose can be achieved in this way, in accordance with Article 89 Reg. Eur. 679/2016.

Rights of the interested party

At any time, as an interested party in the processing, you may exercise your rights against the data controller pursuant to 15 of Reg. Eur. 679/2016, which are summarized below:

1. obtain confirmation as to whether or not personal data concerning him/her exist, regardless of their being already recorded, and communication of such data in intelligible form;
2. obtain the indication:
   1. of the origin of the personal data;
   2. the purposes and methods of processing;
   3. the logic applied in case of processing carried out with the aid of electronic instruments;
   4. the identity details of the owner and any persons responsible;
   5. of the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative(s) in or outside the State's territory, data processor(s) or person(s) in charge of the processing;
3. get:
   1. updating, rectification or, where interested therein, integration of data;
   2. erasure, anonymization or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed, unless the processing is necessary for the fulfilment of a legal obligation requiring the processing as provided for by Union law or the law of the Member State to which the data controller is subject;
   3. certification to the effect that the operations as per point 3) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected;
   4. copy of the data that we process automatically on the basis of your consent or in fulfilment of a contract in a common and readable format. If you request the direct transfer of the data to another responsible person, this will only take place if this is technically feasible;
4. to oppose, in whole or in part:
   1. for legitimate reasons, to the processing of personal data concerning him/her, even if pertinent to the purpose of the collection, without prejudice to the possible consequences at the point of inexecutability of the requested service;
   2. to the processing of personal data concerning him/her for the purpose of sending advertising materials or direct selling or for carrying out market research or commercial communication. The above mentioned rights are exercised with a request addressed without formality to the owner or to the external managers, also through an appointed person, to whom suitable feedback is provided without delay.

      Recourse to the Italian supervisory authority or to the judicial authority

      If it is considered that the processing may have been carried out in a manner that does not comply with the Regulation, the Supervisory Authority may also be contacted, pursuant to art. 77 of the same Regulation, or the judicial authority.

The owner of the regulation PVA Italy

Social Media

PVA TePla AG and its subsidiaries use the technical platform and services of Facebook Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland for the information service offered here.

Please note that you use this Instagram site and its features on your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating).

When you visit our Instagram page, Facebook collects your IP address and other information available on your PC in the form of cookies. This information is used to provide us, as the operator of the site, with statistical information about the use of the site. Facebook provides more information about this at the following link:

https://www.facebook.com/help/instagram/788388387972460

You will also find information on joint responsibility under the following link:

https://www.facebook.com/legal/terms/information_about_page_insights_data

The data collected about you in this context will be processed by Facebook Ltd. and may be transferred to countries outside the European Union. Facebook describes in general terms what information Facebook receives and how it is used in its data use guidelines. There you will also find information about how to contact Facebook and about the settings for advertisements. The data use guidelines are available at the following link:

https://help.instagram.com/519522125107875

The complete Facebook data guidelines can be found here:

https://www.facebook.com/policy.php

The manner in which Facebook uses data from visits to Instagram pages for its own purposes, the extent to which activities on the Instagram page are assigned to individual users, how long Facebook stores this data, and whether data from a visit to the Instagram page is passed on to third parties is not conclusively and clearly stated by Facebook and is not known to us. To exercise your rights under the DSGVO, please contact the service provider directly.

For information on how to manage or delete existing information about you, please visit the following Facebook support pages:

https://www.facebook.com/about/privacy

As the provider of the information service, we do not collect or process any additional data from your use of our service.
You will find the current version of this privacy policy under the "Privacy Policy" section on our Instagram page.

This privacy policy is updated as of November 10, 2020.