Privacy Notice for Tirrena

Browsing, operation and security data

The technical systems collect browsing data required to make pages available, protect the website and diagnose possible anomalies.

Categories of personal data

• IP address
• date and time of the request
• requested URL or resource
• technical information about browser and device
• technical, diagnostic and security logs

Source of personal data

• Collection: from the data subject - Source type: data subject - Data generated while browsing the website

Purposes and related legal basis

• allow the display of requested pages and resources - art. 6, par. 1, lett. f GDPR - legitimate interest of the Controller
• keep the website secure, operational and protected against abuse - art. 6, par. 1, lett. f GDPR - legitimate interest of the Controller in website security

Legitimate interests pursued

• keeping the website available and secure
• preventing abuse, unauthorised access and automated submissions
• diagnosing technical errors and protecting the Controller's rights

Retention period

Criteria: For the time strictly necessary for technical, diagnostic and security purposes; any further retention occurs only in case of anomalies, abuse, legal obligations or the need to protect a right.

Recipients or categories of recipients

• hosting, maintenance, security and technical infrastructure providers - processors, where applicable
• personnel authorised by the Controller - authorised persons

Transfers to third countries

• No transfers to third countries carried out by the Controller are envisaged within this activity.

Necessity of processing and consequences

Provision required - The processing of technical and browsing data is necessary to make the website available. - Consequences: Without the necessary technical data, the website or some essential features may not be available correctly.

Contact requests and communications

Collection and management of data voluntarily sent through contact forms, email, telephone or other contact details published on the website, including commercial requests, quotation requests and spontaneous applications.

Categories of personal data

• name and surname, if provided
• company name or employer, if provided
• contact details provided, such as email and telephone
• subject, content and details of the request
• any information contained in CVs or attachments sent spontaneously
• technical data essential for sending the request

Source of personal data

• Collection: from the data subject - Source type: data subject - Data provided directly by the data subject through the contact channels

Purposes and related legal basis

• reply to information, quotation, support or contact requests - art. 6, par. 1, lett. b GDPR - pre-contractual or contractual measures taken at the request of the data subject
• manage spontaneous applications sent through the published contact details - art. 6, par. 1, lett. b GDPR - pre-contractual measures taken at the request of the data subject
• keep evidence of communications in case of administrative, legal or defensive needs - art. 6, par. 1, lett. f GDPR - legitimate interest of the Controller in managing and protecting received communications

Legitimate interests pursued

• managing the operational follow-up to received communications
• keeping evidence of requests in case of disputes or protection needs

Retention period

Criteria: For the time necessary to manage the request and any subsequent developments. Data sent through the website is not stored permanently inside the website; further retention may occur for legal obligations or for the establishment, exercise or defence of a right.

Recipients or categories of recipients

• personnel authorised by the Controller - authorised persons
• technical website and email providers - processors, where applicable
• consultants or professionals - independent controllers or processors, where necessary for administrative obligations or protection of a right

Transfers to third countries

• No transfers to third countries carried out by the Controller are envisaged within this activity.

Necessity of processing and consequences

Provision required - Providing the data needed for the request is necessary to receive a reply or the requested service. - Consequences: Failure to provide the data may make it impossible to process the request.

Technical cookies and other technical identifiers

The current website uses only cookies and technical identifiers strictly necessary for operation, security and delivery of the features requested by the user. No profiling, advertising, analytics or other third-party cookies are used.

Categories of personal data

• technical session identifiers
• preferences or technical information required for essential operation
• information required to protect requests and forms

Source of personal data

• Collection: from the data subject - Source type: data subject - Data generated while using the essential website features

Purposes and related legal basis

• manage session, security and essential website features - art. 6, par. 1, lett. f GDPR - legitimate interest of the Controller in essential website operation
• protect forms, requests and technical infrastructure against abuse - art. 6, par. 1, lett. f GDPR - legitimate interest of the Controller in website security

Access to or storage on the terminal

Rule: Article 122 of the Italian Privacy Code - Category: strictly necessary technical cookies and identifiers - Prior consent: not required - Access to or storage on the terminal is limited to what is necessary to provide features requested by the user, ensure security and maintain the correct operation of the website. - The website does not use profiling, advertising, analytics or other third-party cookies.

Declared cookies or technical identifiers

• Name or category: technical session or security identifier - Type: technical cookie or equivalent identifier - Purpose: maintain the session, protect requests and enable the essential features requested by the user - Duration: session or different period strictly necessary for the technical feature - Provider: first party or technical website provider

Legitimate interests pursued

• keeping the essential website features available and secure
• protecting forms, requests and technical infrastructure against abuse or abnormal use

Retention period

Criteria: Browsing session or different period strictly necessary for the specific technical purpose.

Recipients or categories of recipients

• hosting, maintenance and technical infrastructure providers - processors, where applicable
• personnel authorised by the Controller - authorised persons

Transfers to third countries

• No transfers to third countries carried out by the Controller are envisaged within this activity.

Necessity of processing and consequences

Provision required - The use of technical identifiers is necessary for the features to which they relate. - Consequences: Their unavailability may prevent or compromise the correct operation of the website.

Information on declared cookies and technical identifiers is provided in this notice. Prior consent is not required for strictly necessary technologies.