CHECK OUR TRAININGS

Privacy Policy

This notice, issued pursuant to current national and EU regulations on the processing of personal data, concerns the website www.kaleasrl.it (hereinafter also referred to as the “Website”).

This notice is intended for all individuals who access the Website (hereinafter also referred to as the “Users” or individually as “User”) and refers only to data collected as a result of browsing the Website. This information does not apply to other websites that may be accessed and consulted by the user through hyperlinks (links) possibly contained on the Website.

Data Controller

The data “controller” of personal data, relating to identified or identifiable individuals who access this Website, is KALEA INGEGNERIA S.r.l., represented by its legal representative pro tempore, with registered office in Turin, Via Giuseppe Pomba, 1.

Types of Data Processed, Purpose, and Legal Basis of Processing

Browsing data

The IT systems and software procedures used to operate this Website acquire certain personal data, the transmission of which is implicit in the use of Internet communication protocols (e.g., IP addresses or domain names of the computers used by users connecting to the site, URI – Uniform Resource Identifier – addresses of requested resources, time of request, method used to submit the request to the server, size of the file obtained in response, numerical code indicating the status of the response from the server – successful, error, etc. – and other parameters related to the user’s operating system and IT environment). Although these data are not collected to be associated with identified individuals, by their nature they could, through processing and association with data held by third parties, allow users to be identified.

These data are used solely for the purpose of obtaining anonymous statistical information on the use of the Website and to check its proper functioning, and are deleted immediately after processing. The data may be used to ascertain responsibility in the event of hypothetical computer crimes against the Website.

Data provided voluntarily by the user

No personal data is required from the user to consult the Website.

However, any contact with the data controller, or the optional, explicit, and voluntary sending of messages, whether by email or otherwise, to the addresses indicated on the Website entails the subsequent acquisition of the sender’s address, including email, or telephone number, necessary to respond to requests, as well as any other personal data included in such communications.

These data will be used solely for the purpose of responding to the user’s request and may only be disclosed to third parties if necessary for that purpose.

For such purposes, user consent is not required, as the processing is necessary for the execution of a contract to which the data subject is a party or for the execution of pre-contractual measures adopted at their request (Art. 6, para. 1, lett. b of the Regulation), and, where applicable, to comply with a legal obligation (Art. 6, para. 1, lett. a of the Regulation), as well as based on the legitimate interest of the controller (Art. 6, para. 1, lett. f of the Regulation), taking into account the reasonable expectations of the data subject at the time and in the context of data collection, when the data subject could reasonably expect such processing to occur for that purpose.

The processing of data for the purpose of sending newsletters or promotional communications via email will only take place where the user has given specific consent for such purposes.

Place of Data Processing

The processing operations connected to the services of the Website take place at the aforementioned registered office of the Controller. Data are processed via the servers of the Website hosting provider, which is currently Ergonet (https://www.ergonet.it).

Processing Methods

Data will be processed by personnel authorized by the controller using procedures, technical tools, and IT systems suitable to safeguard the confidentiality and security of the data. Processing may consist of collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, deletion, or destruction, including any combination of two or more of the above operations.

Mandatory or Optional Nature of Data Provision

The Controller will use data voluntarily provided by the User to meet their requests.

The User is not obliged to provide personal data; however, refusal may prevent the Controller from fulfilling such requests.

Data Retention Period

Personal data will be stored in a form that permits user identification for no longer than is necessary to achieve the purposes for which the data are processed, and in any case in compliance with legal obligations regarding data retention (tax assessments and statutory limitation periods for exercising rights).

In particular, personal data will be retained until the user requests deletion of their data. In some cases, personal data necessary to prove the provision of services and the exercise of rights may be retained.

Data Communication and Disclosure

For the purposes described above and within the limits strictly necessary, data will be processed by the Controller and by employees, collaborators, and/or representatives specifically appointed.

In the course of its activities and for the purposes indicated, the Controller may use services provided by third parties acting on its behalf and according to its instructions, as data processors (or independent controllers): these are entities that provide the Controller with processing or instrumental services (e.g., IT services for Website operation). The user may request a complete and updated list of such parties by contacting the Controller at info@kaleasrl.it.

Except as required by law, data will not be disseminated.

Data Transfer Abroad

Personal data are not transferred outside the territory of the European Union.

Rights of Data Subjects

Pursuant to Articles 15 et seq. of the GDPR and applicable legislation, the User has the right, in addition to lodging a complaint with the Data Protection Authority and withdrawing consent at any time, to:

  1. Obtain confirmation as to whether or not personal data concerning them exist and their communication in intelligible form, receiving them in a structured, commonly used, and machine-readable format with the possibility of transmitting them to another controller (“Right to portability”);
  2. Obtain information regarding: (i) the source of personal data, the purposes and methods of processing, and the logic applied in case of processing carried out with the aid of electronic tools; (ii) the identification details of the Controller, the Data Processor(s), and the Data Protection Officer; (iii) the parties or categories of parties to whom the data may be communicated or who may become aware of them as designated representatives in the State, processors, or persons in charge;
  3. Obtain: (i) the updating, rectification, or integration of data, or, in case of dispute regarding accuracy, restriction of processing for the time necessary for verification; (ii) the anonymization or blocking of data processed unlawfully, including those whose retention is unnecessary for the purposes for which the data were collected or subsequently processed; (iii) certification that the operations referred to in the above points have been notified, including with regard to their content, to those to whom the data were communicated or disclosed, unless this requirement proves impossible or involves disproportionate effort;
  4. Object, in whole or in part: (i) al trattamento dei dati che lo riguardano, ancorché pertinenti allo scopo della raccolta, (ii) al trattamento dei dati personali che lo riguardano, previsto ai fini di informazione commerciale o di invio di materiale pubblicitario o di vendita diretta ovvero per il compimento di ricerche di mercato o di comunicazione commerciale.
  5. Obtain erasure without undue delay (“Right to be forgotten”) where the data are no longer necessary for the purposes for which they were collected or otherwise processed, have been processed unlawfully, or where the User (i) requests it or (ii) objects in whole or in part to the processing; (i) lo richieda o
  6. ottenere la limitazione del trattamento nel caso in cui i dati (i) siano trattati illecitamente ma l’Utente si opponga alla cancellazione degli stessi, (ii) siano necessari all’Utente per l’accertamento, l’esercizio o la difesa di un diritto, (iii) sia pendente una valutazione circa i legittimi motivi di trattamento da parte del Titolare.

The above rights may be exercised by contacting the Controller at info@kaleasrl.it, or, with regard to the rights under point d), also through the appropriate link at the bottom of any promotional or informational email.