.png)
.png)
Summary
Data controller, purpose and legal basis for processing
Place of data processing
Categories of personal data
Principles applicable to data processing by AlbaNSI
Management of the information requests – Contact us
Promotional activities and newsletters
Methods of processing
Categories of recipients to whom the data may be communicated
Rights of the data subjects
Data controller, purpose and legal basis for processing
Albansi Shpk (hereinafter, AlbaNSI), Street Hasan Riza Pasha, N.2 – 4001 Shkoder (Albania), in the person of its pro tempore Legal Representative, e-mail info@albansi.com, is the Data Controller of the personal data of users (data subject) collected when using the services of this website. Albansi will process the personal data in compliance with the principles of lawfulness, fairness and transparency and for the following purposes:
- Website access and navigation
- Management of requests for information
- Promotional activities and newsletters
In detail, the use of personal data for access to the
site and browsing activities involves the data processing in order to implement measures taken at the request of the data subject, which is the legal basis that legitimizes the processing. The use of personal data for the management of further treatment processes, with an indication of the specific legal basis for processing, are described in the section of this policy dedicated to the principles applicable to the data processing by AlbaNSI.
Place of data processing
The data processing related to the web services of this Site takes place at the aforementioned registered office of the Data Controller, in servers located in the territory of the European Union.
Categories of personal data
Navigation data
The IT systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols.
This informations are not collected to be associated with identified data subjects, but by their real nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by users who connect to the site, URI (Uniform Resource Identifier) supplied addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the response from the server (successful, error, etc..) and other parameters regarding the operating system and the user’s computing environment.
These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of computer crimes against the site or the data controller: except for this possibility, at present, the data on web contacts do not persist beyond the terms of the law.
Data supplied voluntarily by the user
The optional, specific and voluntary sending of emails to the addresses indicated in this website involves the subsequent acquisition of the address of the sender by AlbaNSI, as it is needed to answer requests, as well as any eventual other personal data inserted in the communication.
Specific data notice will be brought back or visualized in the pages of the website provided for specific services.
Personal data
By means of the functionalities present on AlbaNSI’s website, the user may grant some of his or her own personal information which may make him or her identifiable and which may be processed in order to manage, for example, his or her requests. Among the information that may be requested, there are, by way of example but not limited to, personal data such as:
- Name and surname
- Telephone number and e-mail address
- The IP address of the device used
Principles applicable to data processing by albansi
AlbaNSI will process the personal data of data subject in a lawful, fair and transparent manner. Data Controller will collect the personal data of data subjects and will process them only for the purposes indicated in this Privacy Policy and in such a way that they are not incompatible with those purposes. The data processed by AlbaNSI are adequate, relevant and limited to what is necessary for the purposes for which they are processed.
Management of the information requests – Contact us
AlbaNSI will process the personal data of data subjects who fill in the specific online forms to request information on the products or services offered by the Data Controller in order to manage, respond to and provide what has been requested by data subject. Personal data may also be collected in order to manage and follow up on the complaint made by the data subject, in execution of contractual and legal obligations to which the Data Controller is subject. The legal basis for this treatment is the execution of a contract to which the data subject is part or the execution of pre-contractual measures taken at the request of the same (art. 6, par. 1 lett. b) Reg. UE 2016/679). The provision of data for this processing purpose is optional. However, failure, partial or inaccurate provision of data may make it impossible for AlbaNSI to manage and respond to requests from data subjects.
Promotional activities and newsletters
With the consent of the data subject, AlbaNSI will process the personal contact data of the user (name, surname and email address) for the subscription to the newsletter of AlbaNSI and in order to promote the products and/or services of the Data Controller. for this purpose, the data will be processed until such time as consent is withdrawn, which may be exercised at any time by means of the unsubscribe button contained in the digital communications or by means of a request to the e-mail address info@albansi.com. the legal basis for this processing is the consent exercised by the data subject (art. 6, par. 1 lett. a), EU Reg. 2016/679).
Methods of processing
Personal data are and will be processed by automated tools for the time strictly necessary to achieve the purposes for which they were collected. The data are processed by technical personnel authorised to process them, duly trained by AlbaNSI. Specific security measures are observed to prevent the loss of data, unlawful or incorrect use and unauthorised access. There is no automated processing of the data collected, including user profiling.
Categories of recipients to whom the data may be communicated
The recipients to whom AlbaNSI communicates the data collected act as personal data processors designated by the Data Controller through a specific contract or as persons authorised to process personal data under the direct authority of the Data Controller. The data being processed will not be disseminated under any circumstances.
Rights of the data subjects
Data subjects who are users of the Website have the right, pursuant to Articles 15-22 GDPR, to:
- Request for access to personal data:the user has the right to obtain from the Data Controller confirmation as to whether or not personal data concerning him/her are being processed and, if so, access to such data. Access may be directed at obtaining the following information:
- The purposes of processing;
- The categories of personal data concerned;
- The recipients or categories of recipients to whom the data have been or will be communicated, in particular if destined for third countries or international organisations;
- The storage period of the personal data or the criteria used to determine that period;
- The existence of the right to request from the Data Controller the rectification or erasure of the data or the restriction or opposition to the processing thereof;
- The existence of an automated decision-making process.
- Request for rectification of personal data:the data subject has the right to obtain the rectification of inaccurate personal data concerning him/her, as well as to obtain the integration of incomplete personal data.
- Request for erasure of personal data:for the reasons indicated in Article 17 GDPR, the data subject has the right to request the data controller to erase the data without undue delay and the Data Controller has the obligation to erase the personal data of the data subject, provided that there is no legal obligation to retain the data.
- Request for restriction of data processing:in the event that one of the hypotheses referred to in article 18 GDPR applies, the data subject has the right to request the restriction of data processing concerning him or her.
- Request for data portability:the data subject has the right to receive, in a structured, commonly used and readable format, the personal data concerning him/her provided to a Data Controller and has the right to transmit such data to another Data Controller if the processing is based on consent, on a contract or is carried out by automated means.
- Request to object to processing:the data subject has the right to object to the processing of personal data concerning him or her at any time, on grounds relating to his or her particular situation.
- Withdrawal of consent:the data subject has the right, at any time and as easily as he or she has given it, to withdraw consent to the processing of his or her personal data.
The data subject also has the right to lodge a complaint with the italian data protection authority (www.garanteprivacy.it). Requests for the exercise of rights may be addressed to info@albansi.com. This information notice on the processing of personal data is updated at 15.03.2022.
