These pages contain a description of site management methods with regard to the processing of the personal data of users who consult the site. This information is also given pursuant to art. 13 of Legislative Decree 196/2003 (the so-called Personal Data Protection Code), to those who interact with the areasana web services, which can be accessed by telematic means at the address: www.areasana.com.
The information is also given in implementation of Recommendation n. 2/2001, which the European authorities for the protection of personal data, meeting in the Group formed pursuant to art. 29 of Directive n. 95/46/EC, adopted on 17 May 2001 to identify the minimum requisites for the on-line collection of personal data and, in particular, the methods, timing and nature of the information that the data controller must provide for users when these latter link up to web pages, regardless of the purpose of the link.
Subsequent to consultation of this site, data of identified or identifiable persons may be processed: the Data Controller is the company areasana, with head office in Unterfeldring 3a, D-85256 Vierkirchen.
Place of data processing
The data processing linked to the web services of this site takes place at the areasana head office; it is carried out only by authorised personnel or subjects that may be appointed to carry out occasional maintenance operations. No data acquired through this web service shall be circulated.
The personal data that users supply by e-mail are, for that matter, used solely to carry out the services or performances requested.
Type of data processed
A) Surfing data
During normal functioning, the computerised systems and software procedures involved in the functioning of this website acquire certain personal data, the transmission of which is implicit in the use of the internet communications protocols.
This information is not collected in order to be linked to identified parties concerned; however, by its very nature, it could, through processing and association with data held by third parties, allow for identification of users.
This type of information includes IP addresses or dominion names of the computers used by those who link up to the site, URI (Uniform Resource Identifier) information relative to the addresses of the requested resources, the time of the request, the method used in presenting the request to the server, the size of the file obtained in response, the numeric code indicating the state of the answer given by the server (successful, error, etc.) and other parameters relative to the user’s operating system and computer environment.
These data are used solely to extract anonymous statistical information on site use and to check on the correct functioning of the same. The data may also be used for ascertaining responsibility in the case of possible information technology crimes that are prejudicial to the site.
B) Data supplied voluntarily by the user
The optional, explicit and voluntary forwarding of electronic mail to the addresses in this site involves the successive acquisition of the sender’s address, which is indispensable for answering the requests, as well as any other personal data included in the message.
If the user fails to confer these data, even partially, it may be impossible to fulfil the user’s requests.
To this regard, no user’s personal data is acquired by the site. No persistent cookies of any kind, nor user tracing systems, are used. However, the cookies of the so-called “session” (which are not memorised permanently in the surfer’s computer, since they disappear when the browser is closed), avoid resorting to other IT techniques that do not allow for acquisition of the user’s personal identification data but which could be potentially prejudicial for the confidentiality of the user’s surfing.
On-line collection of personal data – Optional Conferment of the data
With regard to the collection of data carried out directly at the website, it is hereby declared that the essential information relative to processing by this means is supplied within the context of the collection (e.g. at the end of each registration form). However, it is always possible to go to the webpage containing fuller information on privacy.
Conferment of the requested data is optional, but may be strictly necessary in order to take advantage of the services offered by areasana. Failure to confer the said data may therefore make it impossible to obtain what you have requested.
For that matter, please note that the optional and voluntary forwarding of electronic mail to the address email@example.com or to any other e-mail address of this company, as also the filling in of the “contact” and “information request” forms at the areasana.com site, involves the successive acquisition of the sender’s address, needed to answer his/her requests, and of any other personal data included in the letter.
Data processing methods
The personal data are processed with automated instruments for the period of time strictly necessary to achieve the purposes for which they have been collected. Specific security measures are taken to prevent loss and illicit or incorrect use of the data, and unauthorised access to the same.
The rights of those concerned
We lastly inform you that Lgs. Decree n. 196/03 confers specific rights on those whose data are collected and processed. In particular, the person concerned can obtain from the data controller confirmation of the existence of inexistence of his/her own personal data and can demand that such data be communicated to him/her in an intelligible form.
The person concerned also has the right to know the source of his/her personal data, the processing purposes and methods, the logic applied in the case of data processing with electronic instruments, the identification details of the data controller and of the data processing managers and of the subjects or categories of subjects to whom the personal data may be communicated or who may gain knowledge of the same.
The person concerned also has the right to obtain updating and correction of the data or, if so desired, he/she may demand additional details to be added or that the data be cancelled or transformed into an anonymous form or blocked if processed in breach of the law, as well as certification that the said operations have been notified to those to whom the data have been communicated or circulated.
Lastly, the person concerned has the right to oppose processing of his/her data if legitimate reasons for such opposition exist, and also when processed for the forwarding of advertising or direct marketing material, or for market research or commercial communications.
For all the above, he/she may contact the data controller areasana, by simple letter, fax or e-mail.