INFORMATION FOR THE PROCESSING OF PERSONAL DATA

Information pursuant to and for the purposes of Article 13 et seq. of EU Regulation no. 679/2016 of 27 April 2016, (General Data Protection Regulation - G.D.P.R.)
Pursuant to and for the purposes of articles 13 and 14 of EU Regulation no. 679/2016, for a more correct management of the relationship with you, Universal Science srl informs you of the following.

*

I. Definitions
To make this information easier to read, we indicate below the recurrent terms and their meanings.
"Cookie"Small portion of data stored inside the User's device.
"Usage Data"Information automatically collected through this Application (or also from Third Party applications integrated in this Application), including: IP addresses or domain names of the computers used by the User connecting with this Application, addresses in URI (Uniform Resource Identifier) notation, the time of the request, the method used to forward the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc..) the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal connotations of the visit (e.g. the time spent on each page) and details of the itinerary followed within the Application, with particular reference to the sequence of pages consulted, the parameters relating to the operating system and the User's computer environment.
"Particular Data"According to the provisions of Article 9 of the GDPR, data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data aimed at uniquely identifying a natural person, data relating to a person's health or sexual life or sexual orientation.
"Personal Data (or Data)"any information which, directly or indirectly, even in connection with any other information, including a personal identification number, makes a natural person identified or identifiable.
"Interested": natural person to whom the Personal Data refers.
"This Application"the hardware or software tool through which the Personal Data of the Users are collected and processed.
"Data Processor (or Manager)natural person, legal person, public administration and any other entity that processes personal data on behalf of the Owner.
"Service": Service provided by this Application as defined in this privacy policy posted on this site/application.
"Data Controller (or Owner)".natural or legal person, public authority, service or other body which, individually or jointly with others, determines the purposes and means of the processing of personal data and the means adopted, including the security measures relating to the operation and use of this Application. The Data Controller, unless otherwise specified, is the Data Controller of this Application.
"European Union (or EU)"Unless otherwise specified, any reference to the European Union contained in this document is understood to extend to all current member states of the European Union and the European Economic Area.
"User"The individual using this Application which, unless otherwise specified, coincides with the Interested Party.

*

II. Who we are
1. Universal Science srl, in the person of its Sole Administrator, with registered office in Via Adige, n. 30 - 20010 Pregnana (MI), in carrying out its activities pays the utmost attention to the security and confidentiality of its Users' Personal Data.
2. The Data Controller is Universal Science srl (hereinafter referred to as "Data Controller") and may be contacted by the Data Subject by written communication to be sent to the email address info@universal-science.eu.

*

III. What personal data can be collected by the Owner
1. The data collected by the Owner will be specified in the following table.

Data categories Collected data
Personal dataFirst name, last name, e-mail, company name
Website usage dataInformation with which you use the website (such as how you open or forward our communications), Cookie
Telematic traffic dataLog, source IP address

2. The Owner does not require the Interested Party to provide any Particular Data. In the event that the service requested to Universal Science srl should require the processing of this type of Data, the interested party will receive prior notice and will be required to give consent.
3. Full details on each type of Data collected are provided in the dedicated sections of this privacy policy or through specific information texts displayed before the collection of the Data.
4. Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during the use of this Application.
5. Unless otherwise specified, all Data required by this Application is mandatory. If you refuse to provide it, it may be impossible for this Application to provide the Service. In cases where this Application indicates certain Data as optional, the User is free to refrain from communicating such Data, without affecting the availability of the Service or its operation.
6. Should the User have any doubts, he/she may contact the Data Controller at the e-mail address indicated above.
7. Any use of Cookies - or other tracking tools - by this Application or by the owners of the third party services used by this Application, unless otherwise specified, is intended to provide the Service requested by the User, in addition to the further purposes described in this document and in the Cookie Policy.
8. The User assumes responsibility for the Personal Data of third parties obtained, published or shared through this Application and guarantees that he or she has the right to communicate or disseminate them, releasing the Owner from any responsibility towards third parties.

*

IV. For what purposes is the Data of the Data Subject collected?
1. The Personal Data acquired by registering or registering on our website are collected by the Owner (i) to guarantee the interested party the supply of the chosen service, (ii) to manage and execute the contact requests made by the interested party, (iii) to provide assistance and (iv) to comply with legal obligations to which the Owner is bound according to the activity carried out.
2. In particular, the Data of the Data Subject will be processed for:
- registration and requests for information material: the processing of the Personal Data of the interested party is carried out in order to carry out the activities resulting from the request for registration, the management of requests for information and contact and/or the sending of information material, as well as for the fulfilment of any other obligation arising;
- the management of the contractual relationship: the processing of the Personal Data of the interested party takes place in order to carry out the activities following the purchase of a Service and/or Product, such as the management of the relative order, the supply of the service itself and/or the production and/or delivery of the purchased product, the relative invoicing, payment management, complaint handling, assistance service as well as the fulfilment of any other contractual obligation;
- promotional activities on Services and Products similar to those purchased by the Interested Party: the Data Controller, even without your explicit consent, may use the contact data communicated by the Interested Party, for the purposes of direct sale of its Services and Products, only in the case of Services and Products similar to those purchased by the Interested Party, unless the Interested Party explicitly objects;
- commercial promotion activities on Services and Products other than those purchased by the Interested Party: the personal data of the Interested Party may also be processed for commercial promotion purposes, for surveys and market research with regard to Services and Products that the Data Controller offers only if the Interested Party has authorized the processing and does not object to it;
- computer security: the Data Controller processes, also through its suppliers (third parties and/or recipients), the personal data of the Data Subject relating to traffic to the extent strictly necessary and proportionate to ensure network and information security. The Data Controller will promptly inform the Data Subject if there is a particular risk of violation of their data, without prejudice to the obligations deriving from the provisions of art. 33 of the GDPR relating to notifications of personal data violation.
3. Under no circumstances will the Data Controller resell the Personal Data collected to third parties and/or for undeclared purposes.
4. In order to obtain further detailed information on the processing methods and on the Personal Data concretely relevant for each purpose, the User may refer to the relevant sections of this document.

*

V. Come, perché, dove e per quanto tempo vengono raccolti i dati dell’Interessato
A) Modalità di trattamento
1. Il Titolare adotta le opportune misure di sicurezza volte ad impedire l’accesso, la divulgazione, la modifica o la distruzione non autorizzate dei Dati Personali.
2. Il trattamento viene effettuato mediante strumenti informatici e/o telematici, con modalità organizzative e con logiche strettamente correlate alle finalità indicate e mediante l’utilizzo di misure tecniche ed organizzative necessarie ed idonee a ridurre al minimo i rischi di distruzione e le perdite, gli accessi e i trattamenti non autorizzati.
3. Oltre al Titolare, in alcuni casi, potrebbero avere accesso ai Dati altri soggetti coinvolti nell’organizzazione di questa Applicazione (personale amministrativo, commerciale, marketing, legali, amministratori di sistema) ovvero soggetti esterni (come fornitori di servizi tecnici terzi, corrieri postali, hosting provider, società informatiche, agenzie di comunicazione) nominati anche, ove richiesto, Responsabili del Trattamento da parte del Titolare.
4. L’elenco aggiornato dei Responsabili potrà sempre essere richiesto al Titolare del Trattamento.
B. Ulteriori dettagli sulle modalità di trattamento dei Dati Personali
I Dati Personali sono raccolti per le finalità indicate nella presente informativa ed utilizzando i seguenti servizi.
Contattare l’Utente: questo tipo di servizio permette al Titolare di mettersi in contatto con l’Utente. In particolare, il nostro sito utilizza:
– Mailing list o newsletter (ossia questa Applicazione): con la registrazione alla mailing list o alla newsletter, l’indirizzo email dell’Utente viene automaticamente inserito in una lista di contatti a cui potranno essere trasmessi messaggi email contenenti informazioni, anche di natura commerciale e promozionale, relative a questa Applicazione. L’indirizzo email dell’Utente potrebbe anche essere aggiunto a questa lista come risultato della registrazione a questa Applicazione o dopo aver effettuato un acquisto. In tale caso vengono raccolti quali Dati Personali: cognome, email e nome.
– Modulo di contatto (ossia questa Applicazione): l’Utente, compilando con i propri Dati il modulo di contatto, acconsente al loro utilizzo per rispondere alle richieste di informazioni, di preventivo, o di qualunque altra natura indicata dall’intestazione del modulo. In tale caso vengono raccolti quali Dati Personali: città, cognome, email, nome, ragione sociale e sito web.
Protezione dallo SPAM: questo tipo di servizio analizza il traffico di questa Applicazione, potenzialmente contenente i Dati Personali degli Utenti, al fine di filtrarlo da parti di traffico, messaggi e contenuti riconosciuti come SPAM. In particolare, il nostro sito utilizza:
Google reCAPTCHA è un servizio di protezione dallo SPAM fornito da Google Inc.
L’utilizzo del sistema reCAPTCHA è soggetto alla privacy policy e ai termini di utilizzo di Google. In tale caso vengono raccolti quali Dati Personali: Cookie e Dati di utilizzo ed il Luogo del trattamento: è negli Stati Uniti (Privacy Policy. Soggetto aderente al Privacy Shield).
Statistica: i servizi contenuti nella presente sezione permettono al Titolare del Trattamento di monitorare e analizzare i dati di traffico e servono a tener traccia del comportamento dell’Utente. In particolare, il nostro sito utilizza:
– Google Analytics (Google Inc.): è un servizio di analisi web fornito da Google Inc. (“Google”). Google utilizza i Dati Personali raccolti allo scopo di tracciare ed esaminare l’utilizzo di questa Applicazione, compilare report e condividerli con gli altri servizi sviluppati da Google.
Google potrebbe utilizzare i Dati Personali per contestualizzare e personalizzare gli annunci del proprio network pubblicitario. In tale caso vengono raccolti quali Dati Personali: Cookie e Dati di utilizzo ed il Luogo del trattamento: Stati Uniti (Privacy PolicyOpt Out. Soggetto aderente al Privacy Shield).
C. Base giuridica del trattamento
1. Il Titolare tratta Dati Personali relativi all’Utente in caso sussista una delle seguenti condizioni:
• l’Utente ha prestato il consenso per una o più finalità specifiche; il trattamento è necessario all’esecuzione di un contratto con l’Utente e/o all’esecuzione di misure precontrattuali;
• il trattamento è necessario per adempiere un obbligo legale al quale è soggetto il Titolare;
• il trattamento è necessario per l’esecuzione di un compito di interesse pubblico o per l’esercizio di pubblici poteri di cui è investito il Titolare;
• il trattamento è necessario per il perseguimento del legittimo interesse del Titolare o di terzi.
2. E’ comunque sempre possibile richiedere al Titolare di chiarire la concreta base giuridica di ciascun trattamento ed in particolare di specificare se il trattamento sia basato sulla legge, previsto da un contratto o necessario per concludere un contratto.
D. Luogo
1. I Dati sono trattati presso le sedi operative del Titolare ed in ogni altro luogo in cui le parti coinvolte nel trattamento siano localizzate (per ulteriori informazioni, è possibile contattare il Titolare).
2. I Dati Personali dell’Interessato sono conservati in archivi cartacei, informatici e telematici situati presso la sede del Titolare.
3. I Dati Personali dell’Utente potrebbero essere trasferiti in un Paese diverso da quello in cui l’Utente si trova (per ottenere ulteriori informazioni sul luogo del trattamento, l’Utente può fare riferimento alla sezione relativa ai dettagli sul trattamento dei Dati Personali).
4. L’Utente ha diritto a ottenere informazioni in merito alla base giuridica del trasferimento di Dati al di fuori dell’Unione Europea o ad un’organizzazione internazionale di diritto internazionale pubblico o costituita da due o più paesi, come ad esempio l’ONU, nonché in merito alle misure di sicurezza adottate dal Titolare per proteggere i Dati (qualora abbia luogo uno dei trasferimenti appena descritti, l’Utente può fare riferimento alle rispettive sezioni di questo documento o chiedere informazioni al Titolare).
E. Periodo di conservazione
1. I Dati sono trattati e conservati per il tempo richiesto dalle finalità per le quali sono stati raccolti.
• I Dati Personali raccolti per scopi collegati all’esecuzione di un contratto tra il Titolare e l’Utente saranno conservati sino a quando sarà completata l’esecuzione di tale contratto.
• I Dati Personali raccolti per finalità riconducibili all’interesse legittimo del Titolare saranno conservati sino al soddisfacimento di tale interesse. L’Utente può ottenere ulteriori informazioni in merito all’interesse legittimo perseguito dal Titolare nelle relative sezioni di questo documento o contattando il Titolare. I Dati personali raccolti sul consenso dell’Utente potranno essere conservati sino a quando detto consenso non venga revocato. Inoltre il Titolare potrebbe essere obbligato a conservare i Dati Personali per un periodo più lungo in ottemperanza ad un obbligo di legge o per ordine di un’autorità.
• I Dati Personali trattati per finalità di marketing saranno conservati per un periodo di 36 mesi dalla data in cui è stato ottenuto il consenso.
• I Dati Personali che potrebbero essere utilizzati nel caso di controversie (così come verrà specificato in seguito) verranno conservati per il tempo necessario per il raggiungimento delle pretesa azionata o per la difesa in giudizio.
2. Al termine del periodo di conservazioni i Dati Personali saranno cancellati.
3. Pertanto, allo spirare di tale termine il diritto di accesso, cancellazione, rettificazione ed il diritto alla portabilità dei Dati non potranno più essere esercitati.

*

VI. User Rights
1. The user may exercise certain rights with reference to the Data processed by the Data Controller. In particular, the User has the right to:
- revoke consent at any time: the User may revoke the consent to the processing of his/her Personal Data previously expressed;
- object to the processing of his/her Data: the User may object to the processing of his/her Data when this is done on a legal basis other than consent (as specified in point 2 below);
- access to his/her own Data: the User has the right to obtain information on the Data processed by the Data Controller, on certain aspects of the processing and to receive a copy of the Data processed;
- verify and ask for correction: the User can verify the correctness of his/her Data and ask for it to be updated or corrected;
- obtain the limitation of the processing: when certain conditions are met, the User may request the limitation of the processing of his/her Data. In this case, the Data Controller will not process the Data for any other purpose than their storage;
- obtain the deletion or removal of his/her Personal Data: when certain conditions are met, the User may request the deletion of his/her Data by the Data Controller;
- receive his/her Data or have it transferred to another Data Controller: the User has the right to receive his/her Data in a structured, commonly used and machine-readable format and, where technically feasible, to obtain its transfer without hindrance to another Data Controller (it is clarified that this right is applicable when the Data is processed by automated means and the processing is based on the User's consent, on a contract to which the User is a party or on contractual measures connected to it);
- lodge a complaint: the User may lodge a complaint with the competent personal data protection supervisory authority or take legal action.
2. When Personal Data are processed in the public interest, in the exercise of public powers vested in the Data Controller or for the pursuit of a legitimate interest by the Data Controller, the User has the right to object to the processing for reasons related to their particular situation.
3. The User is reminded that, if his Data were processed for direct marketing purposes, he may object to the processing without giving any reasons. To find out whether the Data Controller processes data for direct marketing purposes, the User may refer to the respective sections of this document.
4. To exercise his or her rights, the User may address a request to the contact details of the Data Controller indicated in this document. Requests are deposited free of charge and will be processed by the Owner as soon as possible and in any case within one month.

*

VII. Communication to third parties and categories of recipients
1. The communication of the Personal Data of the Interested Party also takes place towards third parties and/or recipients whose activity is necessary to carry out the activities inherent to the relationship established and to meet certain legal obligations, according to the table below.

Category of recipients Purpose
Universal Science srlAdministrative and accounting compliance related to the contractual service
Credit and payment institutions - Banking institutionsCollections, payments and refunds related to the contractual service
Professionals/Consultants Fulfillment of legal obligations and exercise of rights
Financial administration - Public bodies - Judicial AuthorityFulfilment of legal obligations, exercise of rights of defence, regular maintenance of public registers

2. The Data Controller requires its Third Party suppliers and the Data Processors to comply with security measures equal to those adopted in relation to the Data Subject, restricting the scope of action of the Data Processor to processing strictly related to the requested service.
3. The Data Controller does not transfer your Personal Data to countries in which GDPR is not applied (non-EU countries) unless specifically indicated otherwise, for which it will be informed in advance and if necessary your consent will be requested.

*

VIII. Further information on data processing
A. Defence in court
1. The User's Personal Data may be used by the Owner in court or in the preparatory stages to its possible establishment for the defense against abuse in the use of this Application or related Services by the User.
2. The User declares to be aware that the Owner may be obliged to disclose the Data by order of the public authorities.
B. Additional information
Upon your request, in addition to the information contained in this privacy policy, this Application may provide you with additional and contextual information regarding specific Services, or the collection and processing of Personal Data.
C. System log and maintenance
For operational and maintenance needs, this Application and any third party services used by it may collect System Logs, i.e. files that record interactions and may also contain Personal Data, such as the User IP address.
D. Information not contained in this policy
Further information in relation to the processing of Personal Data may be requested at any time from the Data Controller, using the contact details indicated at the beginning of the information notice.
E. Do Not Track" requests
1. This Application does not support "Do Not Track" requests (the purpose of which is to request a specific web application to suspend the collection of information about the User who is visiting the page).
2. In order to find out whether any third party services used support them, the User is invited to consult the respective privacy policy.
F. Changes to this privacy policy
1. The Data Controller reserves the right to make changes to this privacy policy at any time by informing Users on this page and, if possible, on this Application and, if technically and legally feasible, by sending a notification to Users through one of the contact details in the Data Controller's possession.
2. Therefore, please consult this page regularly, referring to the date of the last modification indicated at the bottom.
3. If the changes involve treatments whose legal basis is the consent, the Owner will again collect the User's consent, if necessary.

*

IX. Cookies information
1. The Universal Science srl website collects information that may be about you, your preferences, or your Internet access device and is used primarily to tailor the operation of the site to your expectations, to provide you with a better browsing experience and to send you personalized promotional messages (see Cookie Policy for more information).
2. By continuing with the navigation, the user automatically consents to the use of cookies in accordance with this "Cookie policy".

*

x. Legal references Final details
This privacy policy is drawn up in accordance with the provisions of Articles 13 and 14 of Regulation (EU) 2016/679.
Unless otherwise specified, this Privacy Policy applies exclusively to this Application.

***

Having received the information, made aware of the type of data collected and the methods relating to their processing, the User authorises Universal Science srl (i.e. the Data Controller) to process Personal Data for the above purposes.