WEBSITE DATA PRIVACY – EU Reg 2016/679 – (European Data Protection Regulation)

1. Introduction

This privacy policy (« Privacy Policy ») describes the personal data processing activities carried out by Lab68 S.r.l. (« Lab 68 ») through the website lab68.eu (Site).

Lab68 may process the user’s personal data when the user visits the Site and uses the services and functions on the Site. In the sections of the Site where the user’s personal data are collected, a specific information notice is published pursuant to Article 13 of the EU Reg. 2016/679.

Where required by EU Reg. 2016/679, the user’s consent will be requested before processing his/her personal data. If you provide personal data of third parties, you must ensure that the communication of the data to Lab68 and the subsequent processing for the purposes specified in the applicable privacy policy is in accordance with EU Reg. 2016/679 and the applicable legislation.

2. Identification details of the data controller, data processor and Privacy Officer

The data controller is LAB68 S.r.l., P.IVA 04443990231, with registered office in via dell’Oreficeria n. 36, 36100 Vicenza (VI), pec: lab68srl@pec.it

3. Type of data processed

Visiting and consulting the Site does not generally involve the collection and processing of the user’s personal data except for navigation data and cookies as specified below. In addition to the so-called ‘surfing data’ (see below), personal data voluntarily provided by the user when interacting with the Site’s functions or requesting to use the services offered on the Site may be processed.

4. Cookies and navigation data

The Site uses « cookies ». By using the Site, you consent to the use of cookies in accordance with this Privacy Policy. Cookies are small files stored on the hard disk of the user’s computer. There are two macro-categories of cookies: technical cookies and profiling cookies.

Technical cookies are necessary for the correct functioning of a website and to allow the user to navigate; without them the user may not be able to view pages correctly or use certain services.

Profiling cookies have the task of creating user profiles in order to send advertising messages in line with the preferences expressed by the user while browsing.

Cookies can also be classified as:

_ « session » cookies, which are deleted immediately when the browser is closed; _ « persistent » cookies, which remain in the browser for a certain period of time. They are used, for example, to recognise the device connecting to a site by facilitating authentication operations for the user;

_ « own » cookies, generated and managed directly by the operator of the website on which the user is browsing;

 _ « third party » cookies, generated and managed by parties other than the operator of the website on which the user is browsing.

5. Cookies used on the Site

The Site uses the following types of cookies

a. own, session and persistent cookies, necessary to enable you to browse the Site, for internal security and system administration purposes;

b. third-party, session and persistent cookies, necessary to allow the user to use multimedia elements on the Site, such as images and videos;

c. third-party, persistent cookies, used by the Site to send statistical information to the Google Analytics system, through which Lab68 can perform statistical analysis of access/visits to the Site. The cookies used are for statistical purposes only and collect information in aggregate form. By means of a pair of cookies, one of which is persistent and the other a session cookie (expiring when the browser is closed), Google Analytics also saves a log with the start time of the visit to the Site and the exit time from the Site. You can prevent Google from collecting the data by means of cookies and the subsequent processing of the data by downloading and installing the browser plug-in from the following address: http://tools.google.com/dlpage/gaoptout?hl=it.

The Site may contain links to other sites (so-called third-party sites).

6. Storage of personal data

Personal data are stored and processed through computer systems owned and operated by Lab68 or by third party technical service providers. The data is only processed by specifically authorised personnel, including personnel in charge of extraordinary maintenance operations. 

In accordance with EU Reg 2016/679the data are kept for the time necessary to achieve the purposes for which they are processed. 

7. Purposes and methods of data processing

Lab68 may process the user’s common personal data for the following purposes: use by users of services and functions on the Site, management of requests and reports from its users, sending newsletters, management of applications received through the Site, etc.

Furthermore, with the further and specific optional consent of the user, Lab68 may process personal data for marketing purposes, i.e. to send the user promotional material and/or commercial communications relating to the Company’s services, at the addresses indicated, either by email or telephone call.  

Personal data are processed both in paper and electronic form. 

Processing is not carried out through automated decision-making processes.

8. Security and quality of personal data

Lab68 is committed to protecting the security of the user’s personal data and complies with the security provisions set out in the applicable legislation in order to avoid loss of data, illegitimate or unlawful use of data and unauthorised access to them. Moreover, the information systems and computer programmes used by Lab68 are configured in such a way as to minimise the use of personal and identification data; such data are processed only for the achievement of the specific purposes pursued from time to time. Lab68 uses a number of advanced security technologies and procedures to promote the protection of users’ personal data; for example, personal data are stored on secure servers located in places with protected and controlled access. 

9. Scope of data communication and access

The user’s personal data may be communicated to: i) all subjects who may have access to such data by virtue of regulatory provisions; ii) our collaborators, employees, within the scope of their duties; iii) third parties who may have to come into contact with the personal data for the purposes of carrying out the activity for which they have been appointed by Lab68.

10. Nature of provision of personal data

The provision of certain personal data by the user is obligatory in order to allow the Company to manage communications, requests received from the user or to contact the user in order to follow up on his/her request. This type of data is marked with an asterisk symbol [*] and in this case the provision of such data is obligatory in order to allow the Company to follow up on the request, which, failing this, cannot be processed. On the contrary, the collection of other data not marked with an asterisk is optional: failure to provide such data will have no consequences for the user.

The provision of personal data by the user for marketing purposes, as specified in the section « Purposes and methods of processing » is optional and refusal to provide it will have no consequences. The consent given for marketing purposes is understood to extend to the sending of communications by both automated and traditional methods and/or means of contact, as exemplified above.

11. Rights of the data subject

Pursuant to Articles 15 et seq. of the GDPR, the data subject has the right to obtain from the data controller, with reference to each specific processing operation, confirmation as to whether or not personal data concerning him or her are being processed and, if so, to obtain access to the personal data and information relating to the processing as well as rectification of the information. 

In addition, the data subject has the right to obtain from the data controller: i) the erasure of personal data concerning him/her; ii) the restriction of processing when one of the cases provided for by the aforementioned legislation occurs; iii) the personal data being processed in a structured, commonly used and machine-readable format (portability). 

Lastly, the data subject has the right to withdraw consent to the processing of his/her personal data, if consent is the sole legal basis for the processing, by sending an email to info@lab68.eu or by pec to lab68srl@pec.it, attaching a copy of his/her identity document.

The same channels may be used by the data subject to request further information on the processing of his/her personal data, or to exercise his/her rights.

Before proceeding with the processing of the request received, it may be necessary to verify the identity of the data subject and answer a few questions.