Privacy notice pursuant to article 13 of Regulation (EU) 2016/679

The company N2S srl (for the sake of brevity hereinafter called "N2S"), with head office in Via A. Fogazzaro, 54/56 - 36073 Cornedo Vicentino (VI) Italy, VAT no. 03883570248 - Tax code 03883570248, Tel. 0445.952800 - e-mail info@dueessesrl.eu, hereby notifies users of the methods and conditions applied by N2S to the personal data processing operations.
In particular, this notice is provided in relation to the personal data of users who proceed to access and use N2S's website, which corresponds to the following domain: dueessesrl.eu
N2S acts as "Data Controller", meaning "the natural or legal person, public authority, service or other body which alone or jointly with others determines the purposes and means of the processing of personal data".
The processing of personal data may be carried out by persons specifically authorised to carry out processing operations on users' personal data and, duly trained by N2S for this purpose.
Pursuant to the legislation on the processing of personal data, users who access and use the N2S website become "data subjects", i.e. the natural persons to whom the personal data being processed refer.
It should be noted that this notice does not apply to other websites that may be accessed by users through links present on the Firm's website.

1. Personal data processed

Given the interaction with this website, N2S may process the following users' personal data:

a. Navigation data: the computer systems and software procedures used to operate this website acquire, in the course of normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. Such information is not collected in order to be associated with identified data subjects, although by its very nature it could, through processing and association with personal data held by third parties, enable users to be identified. This category of personal data includes the IP addresses or domain names of the computers used by users accessing the website, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and IT environment. Such personal data are only used to obtain anonymous statistical information on the use of the website and to check its correct functioning.
Navigation data shall not be retained for more than 12 months, without prejudice to any need for investigation of offences by the judicial authorities.

b. Personal data submitted voluntarily: the optional, explicit and voluntary transmission of personal data to N2S, by means of the communication and/or request sent by the user using the contact addresses on the website, entails the acquisition of the user's e-mail address or other contact data and of all further personal data voluntarily provided by the user.

Purpose and legal basis of personal data processing
With regard to the personal data referred to in point 1), letter a) of this notice, the users' personal data are processed, automatically and 'compulsorily', by N2S for the purpose of enabling navigation; in this case, the processing is carried out on the basis of a legal obligation to which N2S is subject, as well as on the basis of the company's legitimate interest in ensuring the proper functioning and security of the website; it is therefore not necessary to obtain the express consent of the users.
Regarding the personal data referred to in point 1), letter b) of this notice, the processing is carried out in order to provide information or assistance to users; in this case, the processing is based on the execution of specific requests and the fulfilment of pre-contractual measures; the express consent of users is therefore not required.

2. Nature of the provision of personal data

Without prejudice to what has been specified for navigation data in relation to which provision is mandatory as it is necessary for navigation on the N2S website, users are free to provide or not personal data in order to receive information or assistance from the company.
With reference to the processing of personal data conferred by virtue of the sending of e-mails or other forms of communication and/or requests forwarded using the addresses or the contact form present in the "contacts" section of the website, the provision of such data is necessary in order to allow the Data Controller to provide the requested service.

3. Modalities and duration of the processing of personal data

The processing of personal data is carried out by persons authorised to process personal data, specifically identified and instructed for this purpose by N2S.
The processing of users' personal data is carried out through the use of automated tools with regard to access data to the website pages.
In any case, the processing of personal data is carried out in full compliance with the provisions aimed at guaranteeing the security and confidentiality of personal data, as well as, among other things, the accuracy, updating and relevance of personal data with respect to the purposes declared in this notice.
Notwithstanding the fact that the navigation data referred to in point 1, letter a) shall not be retained for more than 12 months, personal data shall be processed for the period of time that is strictly necessary to achieve the purposes for which such data were collected or, in any case, in accordance with the deadlines provided for by law.
It should also be noted that N2S has adopted specific security measures to prevent loss, unlawful or incorrect use of personal data and unauthorised access to them.

4. Recipients of personal data

For the purposes set out in this notice only, your personal data may be disclosed in Italy or abroad, within the territory of the European Union (EU) or the European Economic Area (EEA), for the fulfilment of legal obligations.
Personal data will not be transferred outside the territory of the European Union (EU) or the European Economic Area (EEA).
Personal data will not be disseminated and therefore will not be disclosed to the public or to an indefinite number of persons.

5. Rights under Articles 15, 16, 17, 18, 20 and 21 of EU Regulation 2016/679

As data subjects, users may exercise their rights of access to personal data as provided for in Article 15 of the EU Regulation and their rights as provided for in Articles 16, 17, 18, 20 and 21 of the EU Regulation with regard to rectification, cancellation, restriction of processing of personal data, data portability, where applicable, and objection to the processing of personal data.
The aforementioned rights may be exercised by writing to the following address: info@dueessesrl.eu
In the event that N2S does not provide feedback within the deadlines envisaged by the regulations or the response to the exercise of rights is inadequate, users may submit a complaint to the Italian Data Protection Authority.
Below are the contact details:

Garante per la Protezione dei Dati Personali [Italian Data Protection Authority]
Piazza Venezia n. 11 - 00187 Roma
Fax: (+39) 06.69677.3785
Switchboard: (+39) 06.69677.1
E-mail: protocollo@gpdp.it

Last update: 29/05/2023