STATEMENT FOR THE PROCESSING OF PERSONAL DATA IN ACCORDANCE WITH ART.13 ITALIAN LEGISLATIVE DECREE no. 196 of 2003 CONCERNING THE PROTECTION OF PERSONAL DATA

Following consultation of this website, personal data relating to identified or identifiable persons may be processed. This page describes the methods with which the website manages the processing of personal data of users who consult the site.
This information is also rendered pursuant to art. 13 of Italian Legislative Decree no. 196 of 2003 – Personal data protection code, to those who interact with the web services accessible by electronic means from the following address:

www.dikom.it
corresponding to the homepage of the website.

• Data controller
  The data controller is ICAL spa V.le Certosa 138, 20156 Milan, in the person of its legal representative, hereinafter referred to as "Controller".
  
  
• Location of the data processing
  Data processing connected to the web services of this site takes place at the aforementioned address and is carried out only by technical staff of the office assigned to processing, or by those responsible for occasional maintenance operations.
  
  
• Purposes and methods of data processing
  Here below we summarise all the operations performed by us that involve collection, storage and/or processing of your personal data, and the aims we pursue with each of these.
  
  a. collection and storage of your personal data in order to supply the services offered in the website www.ical.it and to supply any information requested to the Judicial Authorities.
  
  b. processing of personal data supplied by you and those gathered from your navigating on the website for the purpose of improving the availability of the content of the same site (only for registered users).
  
  c. collection, storage and processing of your personal data for administrative purposes, including the possible transmission by e-mail and/ or postal mail of communications concerning institutional aims.
  
  The personal data are processed with IT tools for the time strictly necessary to achieve the purpose for which they were collected; the processing procedures may be both automated and manual. Specific security measures have been observed to prevent the loss of data, unlawful or incorrect use and unauthorised access.


• Types of data processed
  
  a. Navigation data
  Information systems and the software procedures for running this web site acquire, in the course of normal operation, certain personal data, the transmission of which is implicit in the use of internet communication protocols. This information, on account of its very nature, could however, by processing and association with data held by third parties, lead to the user being identified. This category of data includes IP addresses or domain names of computers used by users who connect to the site, addresses of the required resources in URI (Uniform Resource Identifier) notation, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server’s response (successful, error, etc.) and other parameters pertaining to the user’s operating system and information technology environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the website and to verify that it is functioning correctly. The data could be used to ascertain responsibility in the case of hypothetical information technology offences committed against the site: except in this case, at present information regarding web contacts does not persist for more than six months. Anonymous statistics (aggregated data) on the use of the site could be communicated to organisations and/or external subjects for accounting purposes and, however, not for commercial promotion purposes.
  
  b. Data provided voluntarily by the user
  The optional, explicit and voluntary sending of electronic mail using the relevant forms to the contacts given on this site results in the subsequent acquisition of the sender’s address, required to answer requests, and any other personal data included in the message.
  
  c. Cookies
  None of the users’ personal data is acquired intentionally by the site. Cookies are not used to transmit information of a personal nature. The use of so-called session cookies (which are not stored permanently on the user's computer and disappear when the browser is shut down) is strictly limited to transmission of session IDs (made up of random numbers generated by the server) necessary to allow safe and efficient exploration of the site. The so-called session cookies used on this site avoid the need to resort to other information technology methods that could potentially compromise the confidentiality of users’ browsing, and do not allow acquisition of the user's personal information. Persistent cookies (not session) are used solely for the purpose of improving the availability of the site and simplifying the methods of interaction with the same. The settings of your browser can be changed so that persistent cookies are not received. Refusal to receive these cookies, however, could limit your opportunities to interact with the site.


• Nature of data collection and the consequences of failure to provide data
  With the exception of that specified for navigation data, the user is free to provide the personal data stated in the forms present in this site. The provision of personal data is obligatory for registering to gain full access to the website’s public content and to the advanced functions present in the same. Failure to provide data will make it impossible to access certain site contents and its advanced functions.


• Rights of the data subject
  In any moment the data subject may exercise his/her rights toward the data controller pursuant to art. 7 of Italian Legislative Decree no. 196 of 30 June 2003, which we report hereunder for your convenience.
  a. The data subject has the right to obtain confirmation of the existence or otherwise of personal data concerning him/her, even if as yet unrecorded, and the communication of such data in intelligible form.
  
  b. The data subject has the right to be informed:
  • of the source of the personal data
  • of the purposes and methods of the processing
  • of the logic applied to processing carried out with the assistance of electronic tools
  • of the identification data concerning the data controller, data processors and the representative designated as per article 5, paragraph 2
  • of the subjects or categories of subjects to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative(s) in the territory of the State, data processor(s) or person(s) in charge of the processing.
  
  c. The data subject has the right to obtain:
  • updating, rectification or, where interested therein, integration of the data
  • deletion, transformation into anonymous form or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed
  • a declaration that the operations as per letters a) and b) have been communicated, also as regards their contents, to those to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.
  
  d. The data subject has the right to object, in whole or in part:
  • for legitimate reasons, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection
  • to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.
  • The rights referred in Article 7 may be exercised by making a request to the data controller or processor without formalities, also through the intermediary of a person in charge of the processing. A suitable response shall be provided to said request without delay.
  • The request, made to the Processor, can also be sent by registered letter, fax or e-mail.
  For further information or clarification, please write to the e-mail address: privacy@ical.it


• Data controller
  
  Data controller is:
  
  ICAL spa
  V.le Certosa 138
  20156
  Milano (MI)
  
  It should be noted that this document, published at the address http://www.dikom.it/privacy.shtml constitutes the “Privacy Policy Statement” of this site and is subject to updating.