1. Who is the Data Controller
The Data Controller is X DataNet S.r.l. (from now on “Controller” or “X DataNet”) whose headquarters are located in Via Punta 13/15, Mirandola (Modena, Italy). You can contact the Controller by sending an e-mail to privacy@xdatanet.com or a certified e-mail to amministrazione@pec.xdatanet.com or by sending a registered mail at the above-mentioned address.
X DataNet appointed a Data Protection Officer (DPO). You can contact the DPO at the following e-mail address dpo@xdatanet.com.
With regard to the processing of personal data for the purposes of providing the services supplied by X DataNet to its customers, the Customer acts as the Data Controller, while X DataNet is appointed as the Data Processor by the Customer. For information on such data processing, the user may refer to the privacy notice of the Customer acting as Data Controller.
2. Which types of data we process and for which purposes
To allow the correct functioning and security of products and services provided by the Controller, when the user visits the website related to the product or service, its server gathers information automatically stored into log files. Data gathered in logs are, for example, access date and time, IP address of client web, web browser type, pages visited on the website (http requests).
In some cases, and in compliance to specific laws which require anonymity, some of the above-mentioned data may not be processed or may be processed minimally and only in case of suspicious behavior.
Data may be processed by specifically authorised X DataNet employees and/or by automatic programs (like firewall, IDS/IPS, anti-malware, antispam filters and so on…) to prevent and/or block intrusion or damage attempts and to allow the Controller to perform proper checks, if necessary. These personal data will be processed by the Controller according to its legitimate interest in granting web security in case of unpredictable events or unlawful or criminal acts which could compromise availability, correctness, integrity and confidentiality of personal data and the security of provided services.
Furthermore, when our services are used via the app, information relating to application malfunctions (such as IP address, device information, application version, date and time of the malfunction, etc.) is collected through a provider duly authorised to carry out the data processing.
3. How we process your data
Data are processed with the support of technological systems, according to lawfulness, fairness and transparency principles only for the above-mentioned purposes and for the period of time required to achieve those purposes.
4. Who is processing your data
Data will be processed by duly authorised company employees and by eventual duly instructed external subjects, who, as Data Processors, are allowed to process personal data on behalf of the Controller (providers of information technology, technological and telematic services), for the above-mentioned purposes.
Your data may also be communicated, in compliance to existing laws, to tax authorities, law enforcement, judicial and administrative authorities to investigate and prosecute crimes, to adopt measures for prevention and safeguard against threats to public safety, to enable the Controller to check, exercise or defend a right in judicial proceedings and for other reasons connected to protection of rights and freedom of people.
Should personal data be transferred outside the territory of the European Union, such transfer shall take place exclusively in compliance with the conditions and safeguards provided for by the applicable data protection laws and, in particular, on the basis of an adequacy decision (e.g. the EU–U.S. Data Privacy Framework, for data transfers to the United States) or through the execution of the Standard Contractual Clauses adopted by the European Commission.
5. What are your rights
The user has the right to request at any time the access to, rectification or deletion of its own data, and restriction or objection to the data processing of its own Data, in case the related conditions can be applied. The user can exercise these rights by contacting the Controller using one of the points of contact specified in paragraph 1.
The user is also allowed to lodge a complaint to the dedicated Supervisory Authority, if the user considers that the processing of personal data relating to him or her infringes the personal data protection regulation.
GOVERNANCE SUITE
