We take the protection of your privacy and personal data very seriously and it is an important part of all our relations with customers, suppliers and associates. We treat your personal data as confidential and always act in compliance with the General Data Protection Regulation and this Privacy Policy.

Personal Data Processing Information (Article 13 of Regulation (EU) 2016/679)
This Privacy Policy provides information about how IRCA S.p.A. uses personal data, such as information about the users of our website. This information is collected and assessed and then used, transmitted to third parties or otherwise processed.
This Privacy Policy applies to IRCA S.p.A., but not to online services managed by third parties.
Pursuant to Article 13 of Regulation (EU) 2016/679, IRCA S.p.A. wishes to notify you that the personal data collected with reference to existing contractual relations will be processed in compliance with the aforementioned regulation; IRCA S.p.A. provides the following information in relation to this processing:

The Information We Collect
As a general rule you do not need to disclose personal data to use our online services. If personal data (name, postal address or email address) are collected in relation to our online services, this is done as far as possible on a voluntary basis. If, for example, you wish to receive the newsletter, we would ask for your email address and information that enables us to check that you are the owner of that email address.
The personal data collected with your freely given express consent pertains solely to:

• Identifying data (for example: name, surname, address, telephone number, fax, email address, etc...);
• Other data that may be required so that we can provide the service.

We also collect non-personal data in connection with the use of our online services for reasons of data security and for the purposes of optimising user experience. For example, this information may include your internet browser, operating system, the domain name of the website you last visited before accessing our website, the number of visits, the average amount of time spent on our website, and the pages you browsed.
These data are collected automatically and are not associated with data from other sources. However, we reserve the right to retrospectively check such data if any indications of unlawful usage are brought to our attention.

Personal Data Controller and Processor
The personal data controller is IRCA S.p.A., and you may contact IRCA S.p.A. at any time using one of the methods described on the website (for example, by email at [email protected]) to exercise your rights under points (b), (c), and (d) of Article 13(2) of Regulation (EU) 2016/679.

Why and How We Use the Information
In principle, the personal data you provide are processed and used solely for the following specified purposes. The purposes of processing your personal data are as follows:

• To provide, improve and support our online services: this includes data analysis, identification of user trends, and calculations and statistics about how users access the website.
• Marketing: your personal data will be used for marketing purposes, such as surveys, draws or other advertising campaigns if you have consented to such uses. In this case, your data will be stored until you unsubscribe, unless it is legally permitted to store the data for a longer period for other reasons. You may withdraw your consent to using your personal data for marketing purposes at any time.
• Mailing Newsletters: if you fill in the web form to register for our Newsletter, we use the data provided by you solely to verify that you are the owner of the email address provided and wish to receive the newsletter. In this case, your data will be stored until you unsubscribe, unless it is legally permitted to store the data for a longer period for other reasons.
• Using the contact form: if you use the contact form to request printed materials or for enquires, this information will be used to process your enquiry and saved for later use in case you have any further questions or wish to subscribe to the newsletter. If necessary, and for the purposes of processing your request, we may transmit your personal data to other companies or to relevant third parties (associates of IRCA S.p.A.). Your personal data will be stored for the time required to process your request and for a maximum of two years after this unless it is legally permitted to store the data for a longer period for other reasons.
• Job applications: job applications contain personal data (for example curriculum vitae, contact details, etc.). We may use these personal data to help us decide whether to offer the applicant a position or to reply to an application letter.

The personal data will be processed in printed, computerised and telematic format and entered into the relevant databases which can only be accessed by the data controller and the data controller’s representatives. With regard to electronically processed data, we wish to emphasise that all the appropriate security measures have been taken to protect your rights and freedoms and legitimate interests as set forth in Article 22(3) of Regulation (EU) 2016/679.

Possible Data Recipients
Depending on the type of interaction requested (for example, enquiries or requests for materials, services, the newsletter, etc.), your data may be shared with third parties involved in the performance of services, such as service providers, event organisers, etc. We may also be required to disclose personal data to fulfil legal requirements or enforce rights or agreements.

• Transmitting data to third parties: in order to provide certain services and supply certain products we work with external suppliers, such as developers. These suppliers are authorised to use or transmit the data we have collected and processed solely to perform the service commissioned by IRCA S.p.A. and for no other purpose.
• Use of data: IRCA S.p.A. may use your personal data and, in case of necessity, transmit said data to our associates in compliance with this Privacy Policy. Our data protection guidelines and procedures are designed to guarantee a very high level of protection.
• Compliance with laws and similar obligations: we would transmit your personal data for the purpose of:
  • Applying or complying with a law, a regulation, an order issued by a public authority or mandatory measures;
  • Detecting or preventing security threats, fraud or other harmful activities;
  • Protecting and/or enforcing the rights and properties of IRCA S.p.A. or third parties;
  • Protecting the rights and personal safety of our employees and of third persons.

With regard to the purposes stated in the previous paragraph, the data may also be disclosed to the following entities or categories of entity listed below:

• Partners and associates known to be involved in the provision of a service;
• Companies that provide telemarketing services.

How Long Do We Store Your Data?
Once a service has been performed or supplied, your personal data are only stored for historical or statistical purposes in compliance with the law, regulations, Community legislation and codes of ethics and conduct agreed to under to Article 40 of Regulation (EU) 2016/679 for a period specified by law (usually ten years), or, if they are not covered by law, for no longer than five years. After this period, your personal data will be stored in anonymised format or destroyed. The contact details provided for marketing purposes will be stored until you ask them to be removed or unsubscribe from such communication services.

Data Subject Rights
You have the right to request information in writing about your personal data stored by us. Furthermore, with regard to the use of your personal data, you have the right to rectify or erase personal data or restrict or object to processing. You also have the right to lodge a complaint with the data protection authority.
If you have subscribed to our newsletter, you may stop receiving our newsletters whenever you wish by clicking on the unsubscribe link at the bottom of our newsletter. If you wish to withdraw your consent to your data being saved or used, please email us at [email protected]

The Right to Withdraw Consent
Where the processing is based on consent, the data controller wishes to notify you that you have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

The Right to Lodge a Complaint
The data controller wishes to notify you that you have the right to lodge a complaint with a supervisory authority.

The Obligatory or Voluntary Nature of Providing the Requested Data
The provision of data and its processing are obligatory for purposes nos. 1 and 2 concerning fiscal obligations; this means that refusal to provide the data for these purposes may make it impossible for the controller to pursue professional relations or perform legal obligations.
The provision of data and its processing are voluntary in other cases without any consequences.

Automated Decision-Making
There is no fully automated decision-making as the profiling performed by IRCA S.p.A. is done by an operator, specifically creating user profiles and analysing consumer habits and choices in order to improve the commercial offering and available services.

Cookies
This website uses only technical, profiling and third-party cookies.
You may disable the cookies in your browser at any time without negatively impacting your browsing experience on this website. If you would like to know more about cookies, please visit the following section of our website: http://irca.eu/cookie.php

Data Security
IRCA S.p.A. employs an extensive range of data security measures to ensure the confidentiality and integrity of personal information. However, given the nature of the internet, we wish to bring to your attention that, despite the best efforts of IRCA S.p.A. in implementing the tightest security measures to minimise risk, there may be some lapses in security when transmitting information via the internet (for example, communicating via unencrypted emails) and that it is not possible to guarantee that data is completely protected against access by third parties.

Company details
IRCA S.p.A.
Via Degli Orsini 5
Gallarate (VA)
[email protected]