The information on the treatment of personal data
Privacy Policy

Summary
•Informative Web browsing
•Customer / Suppliers Information

Dear Company,

•  Informative WEB BROWSING made according to Article 13 of the GDPR (General Data Protection Regulation) n. 2016/679

  With this page we intend to inform users about the policies observed by Cursal Srl, based in Via Bradolini 38/a, San Fior TV, regarding collection, conservation, use and possible disclosure of any personal information of users as part of the use of the services offered on the site www.cursal.com. This privacy policy is subject to updates and changes. These eventualities will be communicated through newsletter or will be highlighted in the appropriate sections of the site. In any case, we recommend checking this privacy policy periodically. Cursal Srl guarantees compliance with the aforementioned regulations, inviting users to carefully read this Privacy Policy before sending any personal information, specifying that this information is provided solely for this site. The management and ownership of the www.cursal.com site belong exclusively to Cursal Srl.

1. HOLDER OF THE TREATMENT OF THE DATA AND RESPONSIBLE FOR DATA PROTECTION
The data controller is Cursal Srl, VAT No. 03079840264, with registered office in Via Bradolini 38/a, San Fior (TV) – Italy.
Contact of the Owner: info@cursal.com

2. TYPES OF DATA COLLECTED
The undersigned subject, Data Controller, informs that, for the normal operation of the site, it will process data that by their nature can be defined as personal data. Personal data means any information concerning a natural person, identified or identifiable, even indirectly, by reference to any other information, including a personal identification number.
The personal data processed through the site are the following:
a) Navigation data: During normal operation of the site, the computer systems and the software procedures acquire certain personal data whose transmission is implied in the use of the communication Protocols of Internet. This is information that is not collected to be associated with identified stakeholders, but which by their very nature could, through elaborations and associations with data held by third parties, allow to identify users. This category of data includes IP addresses or domain names of the computers used by users connecting to the site, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system and the user’s computer environment;
b) Common personal data: To access certain services of the site, the provision of common personal data may be required. Such personal data could be, by way of example and not exhaustive: name, surname, e-mail address, telephone number, etc;
c) Cookies: See the cookies policy at the following link

3. PURPOSE OF THE TREATMENT
The data you provide, including those of a personal nature and, where appropriate, will be processed for the following purposes:
a) respond to any contact requests received by e-mail;
b) respond to any request for a quote received by e-mail or by filling out the appropriate form on the Contact page;
c) send newsletters or communications of a commercial and marketing nature;
d) carry out administrative-accounting activities in general. For the purposes of the application of the provisions regarding the protection of personal data, the processing performed for administrative-accounting purposes are those related to the performance of organizational, administrative, financial and accounting activities, regardless of the nature of the data processed. In particular, these objectives pursue internal organizational activities, those functional for the fulfillment of contractual and pre-contractual obligations and information activities.

4. LEGAL BASIS AND OBLIGATORY OR OPTIONAL NATURE OF THE TREATMENT
The legal basis of the processing of personal data for the purpose referred to in Section 3 (c) is the Art. 6 (1)(a) of the Regulations given that the treatments are subject to the acquisition of explicit consent.
The legal basis for processing personal data for the purposes set out in section 3 (a, b, d) is the Art. 6 (1)(b) of the Regulations as the treatments are necessary for the provision of services or for the response of requests by the interested party.
The conferral of personal data for these purposes is optional but the non-conferral may lead to the impossibility to activate the services provided by the site or respond to the requests of the interested party.

5. PROCESSING METHODS
The treatment will be carried out in paper form and / or computerized, but in any case with suitable measures to ensure maximum security, by specially trained and appointed persons.
The data collected for the purposes referred to in section 3 (a, b, d) will be kept for the time strictly necessary for the fulfillment of the purposes.
Regarding the retention of data according to the purpose set out in section 3 (c), the retention time was set in 24 months.
Further information about the data retention period and the criteria used to determine this period can be requested by writing to Cursal Srl at the following address: info@cursal.com.

6. RECIPIENTS OF THE PERSONAL DATA
Your personal data may be shared, for the purposes set out in section 3, with:
a) subjects acting as data controllers, that is: subjects with whom it is necessary to interact for the provision of services (for example hosting providers), or subjects delegated to carry out technical maintenance activities;
b) subjects, institutions or authorities to whom it is mandatory to communicate their personal data in accordance with the legal requirements or the orders of the authorities;
c) persons authorized by Cursal Srl to process personal data necessary to perform activities strictly related to the provision of services, which have committed to confidentiality (eg employees of Cursal Srl).

7. TRANSFERS OF PERSONAL DATA
The personal data of the interested party will not be transferred to outside the European Union. In any case it is understood that the Data Controller, if necessary, will have the right to transfer data in the European Union and / or in non-EU countries. In this case, the Data Controller hereby ensures that the transfer of non-EU data will take place in accordance with the applicable legal provisions, stipulating, if necessary, agreements guaranteeing an adequate level of protection and / or adopting the standard contractual clauses provided by the European Commission and / or binding corporate rules.

8. RIGHTS OF THE INTERESTED
Specific rights are granted to the interested party:
1) the interested party has the right to obtain confirmation of the existence or not of personal data concerning him / her, even if not yet recorded, and their communication in an intelligible form;
2) the interested party has also the right to obtain the indication: of the origin of personal data; of the purposes and methods of treatment; of the logic applied in case of treatment carried out with the aid of electronic tools; of the identification details of the holder, of the managers and of the designated representative and of the relative contact details; of the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the territory of the State, managers or agents;
3) the interested party has also the right to obtain: the legitimate interests pursued by the data controller or third parties, any recipients or any categories of recipients of personal data; the intention of the data controller to transfer personal data to a third country or to an international organization and the existence or absence of an adequacy decision by the Commission; the retention period of the data or, if this is not possible, the criteria used to determine this period; the existence of an automated decision-making process; the right to lodge a complaint with the supervisory authority; the right to be informed if the disclosure of the data constitutes a legal or contractual obligation or a necessary requirement for the conclusion of the contract;
4) the interested party has also the right to obtain:
a) updating, rectification i.e, when interested, integration of data;
b) the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;
c) the attestation that the operations referred to in letters a) and b) of this paragraph have been brought to the attention, also with regard to their content; the name of those to whom the data have been communicated or disseminated, except in the case where this fulfillment proves impossible or involves a use of means manifestly disproportionate to the protected right.
5) the interested party has the right to object, in whole or in part:
a) for legitimate reasons, to the processing of personal data concerning him / her, even if the purpose of the collection is pertinent;
b) to the processing of personal data concerning him for the purpose of sending advertising material or direct sales or for carrying out market research or commercial communication.

For the exercising the above rights, or for any questions or clarifications on this privacy policy, the contacts provided in section 1 of this information can be used.
Cursal Srl, will provide without delay to provide appropriate feedback, and in any case within a period not exceeding months 1. In the case of particular complexity the deadline for the reply, pursuant to the Regulations, may be 3 months. In any case the holder will inform the interested party within months 1 of the request, also to communicate the refusal in the cases specifically specified in the current regulations.

9. RIGHTS TO CLAIM AGAINST THE SUPERVISORY AUTHORITY
We also inform you that in accordance with Articles 51 and following of EU Reg. 679/2016, where it considers its rights infringed, the interested party can contact the Guarantor for the protection of personal data as well as the ordinary judicial authority.

10. LANGUAGE
Any translation of this document into a language other than Italian is provided for information purposes only. In case of discrepancies, the only legally valid and binding version is the Italian version of this document.

•  CUSTOMER / SUPPLIER information made according to Article 13 of the GDPR (General Data Protection Regulation) n. 2016/679

  With this informative we intend to inform the interested parties about the policies observed by Cursal Srl, based in Via Bradolini 38/a, San Fior TV, concerning the collection, conservation, use of any personal information.

1. HOLDER OF THE TREATMENT OF THE DATA AND RESPONSIBLE FOR DATA PROTECTION
The data controller is Cursal Srl, VAT No. 03079840264, with registered office in Via Bradolini 38/a, San Fior (TV) – Italy.
Contact of the Owner: info@cursal.com

2. TYPES OF DATA COLLECTED
The undersigned subject, Data Controller, informs that, it could process data that by their nature can be defined as personal data. Personal data means any information concerning a natural person, identified or identifiable, even indirectly, by reference to any other information, including a personal identification number.
The personal data processed are the following:
a) Common personal data: To fulfill its contractual obligations, the Data Controller may come into contact with common personal data including, by way of example and not exhaustive, name, surname, tax code, mobile phone number, address, e-mail address, below and collectively only “Personal Data”.

3. PURPOSE OF THE TREATMENT
The Personal Data provided will be collected from the interested party and will be processed for the following purposes:
a) execution of contractual or pre-contractual services signed with interested parties and management of the relative relationship;
b) completion of administrative-accounting activities in general. For the purposes of the application of the provisions regarding the protection of personal data, the processing carried out for administrative-accounting purposes are those related to the performance of activities of an organizational, administrative, financial and accounting nature, regardless of the nature of the data processed;
c) compliance with legal obligations dictated by current legislation.

4. LEGAL BASIS AND MANDATORY OR OPTIONAL NATURE OF THE PROCESSING
The legal basis of the processing of Personal Data for the purposes set out in Section 3 (a, b) is the Art. 6 (1) (b) of the Regulations as the treatments are necessary for the execution of a contract signed with the interested party. The provision of Personal Data for these purposes is mandatory as necessary to implement the contract in question.
With regard to the purpose referred to in Section 3 (c), the legal basis is the Article 6 (1)(c) of the Regulations for the fulfillment of specific legal obligations. The conferral of data is also mandatory in this case.

5. METHODS OF TREATMENT
The treatment will be carried out in paper form and / or computerized, but in any case with suitable measures to ensure maximum security, by specially trained and appointed persons. The data collected for the purposes referred to in section 3 (a-c) will be kept for the time strictly necessary for the fulfillment of the purposes, without prejudice to further preservation required by applicable law. Further information is available from the Data Controller at the addresses indicated in section 1 of this document.

6. RECIPIENTS OF THE PERSONAL DATA
The Personal Data of the interested party may be shared, for the purposes set out in section 3, with:
a) subjects acting as Data Processors (eg Confartigianato Imprese Conegliano, Viale Italia 259, Conegliano TV);
b) subjects, institutions or authorities to whom it is mandatory to communicate their personal data in accordance with the legal requirements or orders of the authorities;
c) other parties acting as autonomous Data Processors to implement the developments deriving from the contract signed (eg banks);
d) persons authorized by Cursal Srl to process Personal Data necessary to carry out activities strictly related to the execution of the contract, which have committed confidentiality (eg employees of Cursal Srl).

In reference to what is expressed in point a) of the current section, we inform you that it is possible to consult the updated list of the Data Processors at the owner’s office, or request a copy through a request to be sent to the addresses indicated in section 1 of this document.

7. TRANSFERS OF PERSONAL DATA
The personal data of the person concerned will not be transferred to outside the European Union. In any case it is understood that the Data Controller, if necessary, will have the right to transfer data in the European Union and / or in non-EU countries. In this case, the Data Controller hereby ensures that the transfer of non-EU data will take place in accordance with the applicable legal provisions, stipulating, if necessary, agreements guaranteeing an adequate level of protection and / or adopting the standard contractual clauses provided by the European Commission and / or binding corporate rules.

8. RIGHTS OF THE INTERESTED
Specific rights are granted to the interested party:
1) the interested party has the right to obtain confirmation of the existence of personal data concerning him / her, even if not yet registered, and their communication in intelligible form;
2) the interested party also has the right to obtain the indication: of the origin of the Personal Data, of the purposes and methods of treatment, of the logic applied in case of treatment carried out with the aid of electronic tools, of the identity of the holder, of the persons in charge and of the designated representative and of the relative contact data, of the subjects or categories of subjects to whom the Personal Data may be communicated or who may become aware of it as appointed representative in the territory of the State, managers or agents;
3) the person concerned also has the right to obtain: the legitimate interests pursued by the Data Controller or third parties, any recipients or any categories of recipients of Personal Data, the intention of the data controller to transfer Personal Data to a third country or to an international organization and the existence or absence of a decision on the adequacy of the Commission, the retention period of the data or, if this is not possible, the criteria used to determine this period, the existence of a process automated decision-making, the right to lodge a complaint with the supervisory authority, the right to be informed if the disclosure of the data constitutes a legal or contractual obligation or a necessary requirement for the conclusion of the contract;
4) the interested party has also the right to obtain: a) updating, rectification or, when interested, integration of data; b) the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed; c) the attestation that the operations referred to in letters a) and b) of this paragraph have been brought to the attention, also with regard to their content; the name of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment proves impossible or involves a use of means manifestly disproportionate to the protected right;
5) the party has the right to object, in whole or in part: for legitimate reasons to the processing of personal data concerning him, even if relevant to the purpose of collection, to the processing of personal data concerning him for purposes of sending advertising material or direct sales or for carrying out market research or commercial communication. For the exercising the above rights, or for any questions or clarifications on this privacy policy, the contacts provided in section 1 of this information can be used.

Cursal Srl will provide without delay to provide appropriate feedback, and in any case within a period not exceeding months 1. In the case of particular complexity, the deadline for the reply, pursuant to the Regulations, may be 3 months. In any case the holder will inform the interested party within months 1 from the request, also to communicate the refusal in the cases specifically contemplated in the current regulations.

9. RIGHTS TO CLAIM AGAINST THE SUPERVISORY AUTHORITY
We also inform you that in accordance with Articles 51 and following of EU Reg. 679/2016, where it considers its rights infringed, the interested party can contact the Guarantor for the Protection of Personal Data as well as the ordinary judicial authority.