Personal data protection applied in the ANIA website

ANIA - Ufficio privacy

Via di San Nicola da Tolentino, n. 72

00187 ROME

e-mail privacy@ania.it

 

The following information is provided pursuant to art. 13 and 14 of EU Regulation n. 679/2016 (referred to as “GDPR”) and to the national implementation provision (jointly with GDPR “Privacy law provision”) to users who use the services accessible from the web address www.ania.it. In fact, during site navigation, information relating to users may be collected which constitute personal data pursuant to the privacy law provision. The term personal data refers to the definition delivered by article 4, point 1) of GDPR, that is “any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person; (“Personal Data”).

The GDPR establishes that it is necessary that the person such Personal Data belongs to is informed about the reasons why such data are requested and how they will be used before proceeding with the processing of Personal Data. The expression “processing of personal data” refers to the definition delivered by article 4, point 2) of GDPR, that is “any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction” (“Processing”).

In this regard, the purpose of this document is to provide users with all the useful and necessary information in a simple and intuitive way, so that they can provide their Personal Data in a conscious and informed way and request and obtain clarifications. and / or corrections at any time.

Therefore, this information has been drawn up on the basis of the principle of transparency and of all the elements required by article 13 of GDPR and is divided into single sections, each of which deals with a specific topic in order to make the reading faster, easier and understandable (“Information”). The information is provided exclusively for the aforementioned website and does not concern any other site that can be reached by the users through any link present on the ANIA website.

 

DATA CONTROLLER

The Personal Data Controller is ANIA - Associazione Nazionale fra le Imprese Assicuratrici – based in Rome (Italy), via di San Nicola da Tolentino, n. 72 – 00187 (RM).

 

TYPES OF DATA PROCESSED AND PURPOSES OF THE PROCESSING

Navigation data

During their normal operations, IT systems and software procedures responsible for the operation of this website acquire some Personal Data of those users who connect to the site and whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified data subjects, but which could allow the aforementioned users to be identified by their very nature through processing and association with data held by third parties.

This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment.

These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning. The data could be used to ascertain liability in case of IT crimes against the site: except for this possibility, the data on web contacts shall not be maintained for more than seven days.

Data provided voluntarily by the users

Sending e-mails to the addresses indicated on this site involves the subsequent acquisition of the sender's address, necessary to reply to requests, as well as any other personal data included in the message.

Where necessary, specific summary information will be indicated or displayed on the pages of the site, possibly drafted for particular services on request.

Images relating to events organized by ANIA

The information, as specified below, that will be collected in the context of events organised by ANIA may refer to the identity of participants and / or to images that can portray the participants themselves: such Personal Data will be processed by virtue of ANIA's legitimate interest – disclosing the Association’s activities and documenting the progress of events –  always respecting the rights and freedoms of the data subjects.

The Personal Data collected by ANIA in relation to organized events will be processed using manual, IT, telematic tools and, in relation to images, through photoshootings and / or footages. The images, together with the possible audio tracks, may be broadcast on the ANIA website and / or ANIA social media (Linkedin, Twitter, Instagram). The images will be kept as long as they are considered by ANIA as current and of public interest, i.e. of public utility.

 

COOKIES

Cookies are text strings ("data files") that some websites can send to the user while being visited in order to trace their paths within the site and collect data anonymously, to improve the offer and usability of the site itself.

ANIA does not use IT techniques for the direct acquisition of users’ personal identification data. Cookies are not used to transmit personal information, or systems for tracing users.

ANIA uses the so-called technical cookies for the sole purpose of making it possible to browse the site and allow users to use its features. Some technical cookies are essential to offer an optimal browsing experience or to allow users to log in to access members’ areas on the site (so-called navigation cookies). Navigation cookies are session cookies and, therefore, once the browser is closed, they are automatically deactivated. For the installation of these cookies it is not necessary to obtain users’ consent.

ANIA also uses the so-called analytical cookies of third parties which, allowing to obtain information on how visitors interact with the contents of the site (most visited pages, browsing time, etc.), provide useful statistics that enable the site to be optimised and to improve navigation. For this type of cookie it is not necessary to obtain users’ consent, as ANIA has taken steps both to disguise a significant portion of the IP addresses of the latter and to establish agreements that oblige third parties not to use the information collected for purposes other than statistical analysis and not to cross them with other data they own. In particular, the site uses Google Analytics, a web analysis service provided by Google Inc. Google: in this case, the information generated by the cookie on the use of the website by users is transmitted and recorded on Google's servers. and will be managed in compliance with Google privacy policy. For further information please refer to Google Analytics privacy policy information, available here:

https://www.google.com/intl/it_ALL/analytics/learn/privacy.html

If users still want to disable the cookies already installed, they will have to change the settings of their browsers. However, it should be noted that in this case, malfunctions of the site or some of its features may occur. The procedure changes according to the type of browser used. Users can get more information by selecting the link of their browser: they will find information on how to manage cookies in their browsers at the following addresses: Google Chrome, Mozilla Firefox, Apple Safari and Microsoft Windows Explorer. If the browser used is not among those proposed, users can consult the site www.aboutcookies.org or select the "Help" function on their browsers.

The cookie used on the website www.ania.it are:

JSESSIONID (Persistent Cookie)

language (Session Cookie)

Google Analytics Cookie:

__utma (Persistent Cookie)

__utmb (Persistent Cookie)

__utmc (Session Cookie)

__utmt (Persistent Cookie)

__utmz (Persistent Cookie)

youtube.com

GEUP (Persistent Cookie)

PREF (Persistent Cookie)

VISITOR_INFO1_LIVE (Persistent Cookie)

YSC (Session Cookie)

 

PURPOSES AND LEGAL BASIS OF THE PERSONAL DATA PROCESSING

ANIA uses the types of cookies identified above to keep track of browsing preferences and possibly optimise the users’ browsing experience; to acquire – in an aggregate and anonymous form – statistical information regarding users' browsing methods, as well as to activate specific features of this site.

As previously indicated, technical cookies do not require specific user consent to be installed and their use will be legally based on the legitimate interest of the Data Controller.

 

OPTIONAL DATA PROVISION

With the exception of navigation data, the user is free to provide their Personal Data to request information or other communications. Failure to provide them, therefore, may make it impossible to obtain what is requested.

 

DATA DISCLOSURE BY TRANSMISSION AND DISSEMINATION

Personal data can be disclosed by transmission to specific subject considered as recipients of such personal data. In fact, article 4 point 9) of GDPR, defines as recipients of personal data “a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not” (“Recipient”). In this perspective, in order to correctly carry out all the processing activities necessary to pursue the purposes referred to in this privacy policy, the following subjects may be in a position to process Personal Data: (i) third parties who carry out part of the processing activities and / or activities connected and instrumental to them on behalf of the Data Controller. These subjects have been appointed as data processors; (ii) individuals, employees and / or collaborators of the Data Controller, who have been entrusted with specific and / or more processing activities on Personal Data and who have been given specific instructions as to security and correct use of Personal Data; as well as (ii) where required by law or in order to prevent or suppress the commission of a crime, Personal Data may be disclosed to public bodies or judicial authorities without these being defined as Recipients. In fact, pursuant to article 4 point 9), of GDPR, “public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipient”.

The data collected shall in no case be disseminated apart from the images, relating to events organized by ANIA that may be broadcast on the ANIA website and / or ANIA social media.

 

RIGHTS OF THE DATA SUBJECTS

Users may exercise the rights acknowledged by the Privacy Law provisions including, by way of example only, the right (i) to access their own personal data (and know the origin, purpose and extent of the processing, the data of the recipients to whom their personal data have been disclosed, the envisaged period for which the personal data will be stored or e criteria used to determine that period), (ii) to ask for rectification, (iii) erasure (“right to be forgotten”), if no longer necessary, incomplete, erroneous or collected in breach of the law, (iv) to ask that processing be limited to a part of the information concerning the data subjects; (v) insofar as it is technically possible, to receive the information that concern them in a structured format or to transmit such information to users or to third parties indicated by the users (so-called “portability”). In this case, it will be the data subject’s responsibility to provide us with all the exact details of the new data controller to whom the data subject intends to transfer their Personal Data by providing us with written authorisation; (vi) to withdraw their consent at anu time, in the event that this constitutes the basis of the treatment. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

The aforementioned rights may be exercised by means of a written request addressed without formalities to the Data Controller at the indicated office or by sending a communication to the following e-mail address: privacy@ania.it.

In any case, the right to lodge a complaint with the Privacy Authority is granted – Piazza Venezia n. 11, Rome.

It should be noted that this document, published at www.ania.it is an expression of the "personal data protection policy" applied by ANIA on this website, subject to constant verification and updating.