Dear User,

LEGUR S.R.L., with registered office in Via Orzinuovi 73, 25125 Brescia, VAT No. 04034610982 (hereinafter the “Controller”), pursuant to EU Regulation No. 2016/679 (hereinafter the “Regulation” or GDPR), is required to provide certain information regarding the use of personal data collected and processed through this website.

This notice applies to the website www.legur.it (hereinafter the “Website”) and not to any other websites that may be consulted by the user via links. It forms an integral part of the Website and the services we offer. The notice is provided pursuant to Article 13 of the Regulation to those who interact with the Website’s web services.

You may contact us by writing to privacy@legur.it for questions, comments, to request the updated list of Data Processors appointed by the Controller, or for any request concerning your personal data rights. To contact the company’s appointed DPO, you may write to dpo@legur.it .

Your personal data will be processed in accordance with the provisions of the Regulation and the confidentiality obligations provided therein. Processing will be based on principles of lawfulness, fairness, transparency, purpose limitation, storage limitation, data minimization, accuracy, integrity, confidentiality, and accountability pursuant to Article 5 of the Regulation.

What types of personal data do we collect?

Browsing Data
The IT systems and software procedures used to operate this site acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified individuals, but by its nature could, through processing and association with data held by third parties, allow users to be identified. This category includes IP addresses or domain names of users’ devices, URI addresses of requested resources, request time, method used to submit the request to the server, file size obtained in response, numerical code indicating the status of the server response (success, error, etc.), and other parameters relating to the user’s operating system and IT environment. These data are used solely to obtain anonymous statistical information on site usage and to ensure correct functioning. For this purpose, the last triplet of visitors’ IP addresses is masked before navigation data are stored in the management database.

Data Voluntarily Provided by the User

Contact Section and Emails Sent to Addresses on the Site
The optional, explicit, and voluntary submission of personal data in the “Contacts” section (name, surname, email address, phone number), as well as any other personal data included in the message, will be processed exclusively for purposes strictly related to the request (e.g., responding to information requests). Except for mandatory legal processing, any other purpose is excluded.

Sending voluntary emails to the addresses indicated on this site entails the subsequent acquisition of the sender’s email address and any other personal data included in the message (including CVs for spontaneous applications), necessary to respond to the requests addressed to the Controller.

Cookies
For information regarding cookies used on the site, please refer to the specific cookie policy

Purposes and Legal Basis of Processing

• Operational management and related purposes for website access; legal basis: consent and/or contract performance.
• Anonymous and aggregated statistical processing on site usage and verification of correct functioning; legal basis: consent or legitimate interest of the Controller.
• Compliance with legal obligations, regulations, EU legislation, and requests from authorities; legal basis: legal obligation.
• Purposes related to responding to information requests; legal basis: consent of the data subject.

Nature of Data Provision and Consequences of Refusal
Providing personal data, although not mandatory, may be necessary to allow the Website to function and/or to provide our services.

For the purposes referred to above relating to information requests, provision is always optional. You may decide not to provide any data or later withdraw consent by sending a request to the Controller as described in this notice. However, refusal may make it impossible to respond to your requests.

Processing Methods and Retention Period
Your personal data will be processed using paper and/or electronic automated tools by authorized personnel or appointed Data Processors pursuant to Article 28 GDPR (e.g., professionals, legal consultants).

Data will be retained for the time necessary to achieve the purposes for which they are collected or for any other related legitimate purpose (unless consent is withdrawn). After this period, data may be retained to comply with legal or contractual obligations, administrative purposes, or to establish or defend rights in legal proceedings.

The Controller undertakes to adopt appropriate technical and organizational security measures pursuant to Article 32 GDPR to prevent data loss, unauthorized use, or access.

Your data will not be disclosed but may be communicated to third parties where required by law (e.g., administrative or judicial authorities).

No automated decision-making processes, including profiling pursuant to Article 22(1) and (4) GDPR, are carried out.

Transfer of Personal Data
Personal data are not currently transferred outside the European Union. Should transfers outside the EU occur, they will comply with applicable legal provisions.

Data Subject Rights

• Right of access (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure (Art. 17)
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object (Art. 21)
• Rights related to automated decision-making (Art. 22)

If processing is based on consent (Art. 6(1)(a)), you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

You also have the right to lodge a complaint with the Data Protection Authority.

Changes to this Privacy Notice
We may occasionally update this notice. In case of significant changes, we will provide clear and visible notice to users.

Last updated: 16/02/2021