Info privacy | hygienio

As required by Article 13 of the European Union General Data Protection Regulation 2016/679 (hereinafter also referred to as the "Regulation" or "General Data Protection Regulation" or "GDPR"), before proceeding with the processing of personal data (hereinafter also "Data" or "the Data"), the Data Subject (user of the website https://hygienio.it) must be informed that their Data collected through the website are processed by Hygienio Srl using IT and/or telematic tools, for the purposes indicated in this privacy policy. To this end, the Data Subject is provided with the privacy policy prepared by Hygienio Srl (hereinafter also "the Data Controller").

1. Data Controller and Data Protection Officer
The Data Controller is Hygienio Srl, with its registered office at Via Scipione Lapi 2H - 06012 Città di Castello - PG (Italy). For further information regarding the rights of the Data Subject, please refer to the section entitled "Rights of the Data Subjects" in this policy.

2. Legal Basis and Purposes of the Processing
The Data you provide while browsing the website https://www.hygienio.it are processed by the Data Controller in accordance with current regulations. The legal basis for the processing is identified in the provision of its services by Hygienio Srl, the management and facilitation of the website, the management of the reserved areas on the site, and your consent, where provided, to the processing of your Data. The processing of your Data by Hygienio Srl is aimed at achieving the following purposes:

"Contact Hygienio Srl" Section: should you decide to contact us through the specific area of the Hygienio Srl website, the Data you provide by filling out the appropriate form may be processed by the Data Controller to handle your request and provide you with a response. In this context, the legal basis for the processing is identified as the Controller's legitimate interest in fulfilling your request for information.
"Subscribe to the newsletter" Section: should you decide to subscribe through the specific section of the website https://www.hygienio.it, the Data you provide will be processed by the Data Controller to send you commercial data and related updates. In this context, the legal basis for data processing is identified in the relationship established between you and Hygienio Srl through your subscription to the Newsletter service.

3. Processed Data
On the website, in particular:

Name, surname, e-mail address: in case you wish to contact us via the "Contact" section.
E-mail address: in case you request a subscription to the Newsletter service.
Personal details: for information requests or to opt-in to marketing campaigns.

4. Nature of the Processing
In relation to the purpose referred to in point 1) of section 2 "Legal basis and purposes of the processing," the provision of Data is mandatory. Any refusal to provide the Data would result in the inability to receive and subsequently process your request for information.
In relation to the purpose referred to in point 2) of section 2 "Legal basis and purposes of the processing," the provision of Data is mandatory. Any refusal to provide the data would result in the inability to subscribe to the newsletter service.

5. Methods of Processing and Data Retention
The processing of Data is carried out by the Data Controller in compliance with the provisions of current legislation. The Data Controller processes the Data using IT and/or telematic tools and with organizational and logical methods strictly related to the achievement of the purposes indicated in this policy, as well as by adopting appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of the Data, their loss, and their illicit and incorrect use. Hygienio Srl also commits to processing the Data according to the principles of fairness, lawfulness, and transparency, to collect them to the extent necessary and accurate for the processing, and to allow their use only by personnel authorized for this purpose. The management and storage of the acquired Data will take place in archives or on servers located within the European Union owned by the Data Controller and/or third-party companies appointed as External Data Processors and, in any case, currently located in Italy.

In relation to the different purposes for which they are collected, the Data will be kept for the time strictly necessary to achieve them and, in any case, in accordance with current regulatory provisions. In any event, Hygienio Srl will take care to avoid the use of data for an indefinite period by proceeding, on a regular basis, to verify the continued interest of the subject to whom they refer.

6. Recipients and Data Processors
The collected Data will not be disseminated or communicated to Third Parties in any way, except in the cases provided for by this policy and/or by law and, in any case, in the manner permitted by it. The Data will be processed within the limits and for the purposes described by the employees of Hygienio Srl. Certain Data processing may also be carried out by third parties, acting as Data Processors, specifically designated by the Data Controller and whose services the Data Controller uses or may use in the management of the contractual relationship, the provision of the services offered, and for the organizational needs of its activities. In particular, the Data may be communicated, by way of example, to:

Subjects who need to access the Data for purposes related to the existing contractual relationship between the parties, within the limits strictly necessary to perform auxiliary tasks (such as, for example, banks and credit institutions, technical service providers, hosting providers, IT companies, communication agencies, postal couriers, and shipping companies).
Consultants, within the limits necessary for the performance of their professional assignment.

Public and private entities may also access the Data if access to them is mandatory pursuant to provisions of law, regulations, or community legislation, within the limits established by these rules.

7. Transfer of Data Abroad
The Data will not be transferred outside the European Union. It is understood in any case that the Data Controller, should it become necessary, will have the right to move the location of its servers to non-EU countries. In this case, the Data Controller ensures from now on that the transfer of non-EU Data will take place in accordance with Articles 44 et seq. of the GDPR and applicable legal provisions, stipulating, if necessary, agreements that guarantee an adequate level of protection.

8. Rights of the Data Subjects
As the Data Subject of the processing, we inform you that you have the right to exercise the rights provided for by the GDPR, and specifically:

The right, pursuant to Art. 15, to obtain confirmation as to whether or not Data concerning you are being processed and, where that is the case, to obtain access to the Data and the following information: i) the purposes of the processing; ii) the categories of Data concerned; iii) the recipients or categories of recipients to whom the Data have been or will be disclosed, in particular recipients in third countries or international organizations; iv) where possible, the envisaged period for which the Data will be stored, or, if not possible, the criteria used to determine that period; v) the existence of the right to request from the Data Controller rectification or erasure of the Data or restriction of processing concerning the Data Subject or to object to such processing; vi) the right to lodge a complaint with a supervisory authority, pursuant to Articles 77 et seq. of the GDPR; vii) where the Data are not collected from the Data Subject, any available information as to their source; viii) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) of the GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the Data Subject; ix) the right to be informed of the appropriate safeguards pursuant to Article 46 of the GDPR relating to the transfer if the Data are transferred to a third country or to an international organization.
The Data Subject will also have (where applicable) the possibility to exercise the rights set out in Articles 16-21 of the GDPR (right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object).

The Data Subject may exercise the aforementioned rights at any time and request the updated list of Data Processors by sending an e-mail request to the following address: info@hygienio.com.

Hygienio Srl is committed to responding to the Data Subject's requests within one month from the receipt of the request, except in cases of particular complexity where it could take up to three months. In any case, the Data Controller will provide the Data Subject with evidence of the reason for the delay within one month of the request. The outcome of the request will be provided in writing or in electronic format. In case of a request for rectification, erasure, and restriction of processing, the Data Controller undertakes to communicate the outcomes of the requests received by the Data Subject to each recipient of your Data, unless this proves impossible or involves a disproportionate effort.

9. Changes to this Policy
The Data Controller reserves the right to make changes to this Privacy Policy at any time by notifying users on the Hygienio Srl website. Therefore, please consult this page frequently, referring to the date of the last modification indicated at the bottom of the document.

Hygienio Srl