Personal Data Processing Notice
01Data Controller
The Controller of personal data processing is:
- Massimo Dallavalle
- Via C. A. Dalla Chiesa n. 6, 29029 Rivergaro (PC), Italy
- VAT ID 01513590339 — Fiscal Code DLLMSM77M29G535C
- Email: info@vexilsystem.com
- Phone: +39 338 830 5294
02Categories of collected data
The website collects and processes the following categories of personal data:
Navigation data
The IT systems and software procedures responsible for the operation of this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols:
- IP addresses or domain names of computers used by users connecting to the site
- URI (Uniform Resource Identifier) addresses of the requested resources
- Time of the request
- Method used to submit the request to the server
- Size of the response file
- Numeric code indicating the response status of the server
- Other parameters relating to the operating system and the user's IT environment
This data is used solely to obtain anonymous statistical information on the use of the site and to verify its correct operation, and is deleted immediately after statistical processing.
Data provided voluntarily by the user
The optional, explicit and voluntary sending of communications to the email addresses
indicated on the site (e.g. info@vexilsystem.com,
demo@vexilsystem.com) involves the subsequent acquisition of the sender's
address, necessary to respond to requests, as well as any other personal data included
in the communication.
03Purposes and legal basis of processing
| Purpose | Legal basis |
|---|---|
| Respond to requests for information or demo submitted by the user | Performance of pre-contractual measures at the request of the data subject (Art. 6.1.b GDPR) |
| Comply with legal obligations (tax, accounting) | Legal obligation (Art. 6.1.c GDPR) |
| Defend the Controller's rights in legal proceedings | Legitimate interest (Art. 6.1.f GDPR) |
| Anonymous statistical analysis of website traffic | Legitimate interest in website maintenance (Art. 6.1.f GDPR) |
04Processing methods
Personal data is processed by means of the operations indicated in Art. 4 GDPR (collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, erasure and destruction of data).
Processing is carried out using electronic tools (servers, computers, email software) and without automated decision-making tools. Appropriate technical and organizational security measures are adopted to guarantee the confidentiality and integrity of the data.
05Communication and dissemination of data
The user's personal data is not subject to dissemination. It may only be communicated to:
- Subjects authorized to process under the authority of the Controller (e.g. collaborators)
- Subjects providing technical and maintenance services for the website (hosting provider Aruba SpA)
- Competent public authorities in the event of a motivated request
06Transfer of data outside the EU
Personal data is not transferred outside the European Union. The hosting infrastructure (Aruba SpA) is located in Italy. The website's typographic fonts are self-hosted and do not involve transfer to external servers.
07Retention period
Personal data is retained for the following periods:
- Commercial contact data: up to 24 months from the last interaction, unless different consent is given
- Data for tax obligations: 10 years as required by law
- Navigation data: deleted immediately after statistical processing
08Rights of the data subject
Pursuant to articles 15-22 of the GDPR, the data subject has the right to:
- Access their personal data (Art. 15)
- Rectify inaccurate data or complete incomplete data (Art. 16)
- Erasure ("right to be forgotten") of their data (Art. 17)
- Restriction of processing (Art. 18)
- Data portability in a structured format (Art. 20)
- Object to processing for legitimate reasons (Art. 21)
- Withdraw consent at any time, if processing is based on consent
- Lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it)
To exercise their rights, the data subject may contact the Controller at info@vexilsystem.com.
09Changes to this notice
The Controller reserves the right to make changes to this notice at any time, giving notice to users on this page. Please check this page periodically, taking the last update date shown at the top as reference.
10Contact
For any request regarding the processing of your personal data:
- Email: info@vexilsystem.com
- Post: Massimo Dallavalle, Via C. A. Dalla Chiesa 6, 29029 Rivergaro (PC), Italy