Information provided pursuant to Article 13 of EU Regulation 2016/679 (for brevity Regulation) - to users accessing the site https://www.hiway.media/
The information contains:
the nature of the personal information processed;
the purposes and legal bases of the processing of personal information (Art. 13.1.c and 13.1.d of the Regulation);
the identity and contact details of the data controller (Art. 13.1.a and 13.1.b of the Regulation);
any third parties involved in the processing activities (Art. 13.1.e and 13.1.f of the Regulation);
the storage period of the personal information (Art. 13.2.a of the Regulation);
the nature of the conferment of the data and the consequences of a possible refusal (art. 13.2.e of the Regulation);
the users' rights (art. 13.2.b, 13.2.c and 13.2.d of the Regulation).
Data Controller
The data controller is HiWay Media S.r.l., Via Francesco Melzi d'Eril 4, Milan, Italy.
Its contact details are info@hiway.media
Type of data processed, legal basis and purpose of processing
Navigation data
The site collects some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow the user to be identified. This category of data includes IP addresses or domain names of the computers used by the user who connects to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check that it is functioning correctly. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site.
Data provided voluntarily by the user
The optional, explicit and voluntary sending of messages using the "Contact us" service on the site or by sending e-mail messages to the company's address, entails the subsequent acquisition of the sender's address, which is necessary to respond to requests, as well as any other personal data included in the request. The legal basis for this processing is art. 6.1.b of the Regulation, i.e. the execution of measures requested by the user.
Website registration
Registering for an account involves entering certain personal data that must be true and accurate. The data that must be entered are clearly indicated, the other data are entered voluntarily and failure to enter them does not entail any consequences. The user is invited to keep this data up to date by logging into his personal account. The legal basis for this processing is Art. 6.1.b of the Regulation, i.e. the execution of measures requested by the user. The user who chooses to activate the account via social media must be aware that the site may collect certain data that the user has already provided to that social media (e.g. e-mail address and public profile). The data controller has no control over the social media and does not establish the privacy settings of the social media. The user should therefore refer to the privacy policy of the social media that he uses.
Newsletters and commercial communications
The user may voluntarily choose to receive newsletters and commercial communications. The site asks for explicit and free consent before undertaking such promotional initiatives and may ask the user for additional information in order to create personalized and more relevant communications. The user can always easily revoke his consent which is the legal basis of this processing (art. 6.1.a of the Regulation).
Commercial orders
In the event of an order, the site asks the user to provide personal data for the essential purpose of providing the service or good purchased, including the post-sales phase (e.g. delivery tracking, assistance services, customer satisfaction) and activities to prevent fraud and misuse of the site. The legal basis of the processing is the fulfilment of contractual obligations (art. 6.1.b of the Regulation). For payments, the site makes use of third party suppliers and does not store bank information belonging to the user. The data controller has no control over the provider of this type of service and the user must therefore refer to the privacy policy and terms of service of that provider.
Profiling
The purpose of profiling is to propose products, services and initiatives that are more suited to the preferences, habits and interests of users. Personal data may be used for remarketing, retargeting or profiling purposes also through third parties (e.g. social networks). As far as the users of the site are concerned, it is in the legitimate interest of the site to process personal data in order to offer more interesting and personalised services by improving the performance of the site itself.
Minors
The site encourages parents and guardians of minors to instruct them on how to handle personal data on the Internet in a safe and responsible manner. Minors should not transmit personal data to the site without the consent of their parents. The site undertakes not to intentionally collect personal data from minors, not to use them in any way and not to communicate them to third parties.
Cookies
For all information, please visit the specific page.
Data sharing and processing
The owner may transfer the user's personal data to third parties qualified as data processors or data controllers to perform technical or commercial operations necessary to perform the services related to the better management of the site (e.g. couriers and postal operators; advertising, commercial and social media agencies; IT service providers; payment service providers; customer service providers). In these cases, the communication of data is essential to meet contractual commitments and to improve the performance of the site. The data controller undertakes through data processing agreements to ensure that those responsible handle the data in an appropriate and secure manner. The user may request a list of the controllers using the controller's e-mail address. In addition, the controller may be obliged to share your personal data when required to do so by law or by order of a public authority or to protect its own rights or the rights of third parties. The controller does not transfer data outside the European Union.
Third party sites
This policy does not cover other sites or platforms to which the site may link (e.g. banners, advertisements and other links to third party sites or platforms) to which you are invited to refer by reading the relevant privacy policy.
Security measures
Specific security measures are observed to prevent data loss, unlawful or incorrect use and unauthorised access.
Data retention period
The controller stores personal data for the time necessary to provide the user with the requested services or to comply with legal or tax obligations or for the minimum period required by law. In order to determine the appropriate storage period for personal data stored by the website with the user's consent, the controller also takes into account the following criteria: the specific purposes set out in the notice for which the website stores personal information; the type of relationship in place with the user (how often the user accesses their account; whether the user makes requests via contact forms; whether the user continues to receive newsletters or commercial communications; how regularly the user browses the website, etc.); any specific requests made by the user; and whether the user has access to the website. ); any specific request from the user to delete their data or withdraw consent; the legitimate commercial interest of the data controller. The site will promptly delete or anonymise personal data whose storage is no longer required by law.
Provision of data
Apart from what has been specified for navigation data, the user may freely provide his or her data through contact forms or in order to receive promotional communications or to purchase goods or services, and failure to do so may make it impossible to obtain what has been requested. The various forms always specify which data is compulsory in order to respond to the user's requests.
Rights of data subjects
You have the right to receive confirmation as to whether or not your personal data is being processed by the data controller.
In this case, pursuant to the Regulation, the user has the right to:
be informed about the collection and use of your personal information;
access your personal information free of charge;
obtain the rectification or completion of inaccurate or incomplete personal information; and
obtain the deletion of personal information;
under specific conditions, obtain the restriction or deletion of their personal information;
obtain and re-use their personal information for their own purposes between different services when the processing is based on contract or consent and is carried out automatically ('the right to data portability');
in specific conditions, to object to the processing of their personal information;
the right to lodge complaints concerning the collection and processing of personal information with the competent supervisory authority;
the right to withdraw consent to the processing of personal information at any time, without prejudice to the lawfulness of the processing carried out so far on the basis of the revoked consent.
For any information, the user is invited to consult the website of the Guarantor Authority for the protection of personal data - www.garanteprivacy.it - where he will find a section dedicated to these rights.
Amendments to the information notice
Any changes to this policy will be published on the site. The user is invited to check for any updates or changes.
In case of discrepancy between the terms of this privacy policy, the Italian version shall prevail.