Privacy policy

PRIVACY DISCLAIMER

In compliance with the obligations deriving from national legislation (Legislative Decree June 30, 2003, No. 196, Personal Data Protection Code, as updated by Legislative Decree 101/2018) and EU regulations (European Regulation 2016/679, GDPR) and subsequent amendments, this website respects and protects the privacy of visitors and users, making every possible and proportionate effort to avoid infringing users' rights.
This privacy policy applies exclusively to the online activities of this website and is valid for visitors/users of the site. The purpose of this privacy policy is to provide maximum transparency regarding the information the site collects and how it is used.

COLLECTED DATA

This website collects and processes Personal Data, as defined by the GDPR, either autonomously or through third parties, or voluntarily provided by the user, including:
• Internet protocol (IP) address; browser type and device parameters used to connect to the site; name of the Internet service provider (ISP); date and time of visit; referring and exit web pages; possibly, the number of clicks. Cookies and usage data, collected through automated processes.
Internet protocol (IP) address; browser type and device parameters used to connect to the site; name of the Internet service provider (ISP); date and time of visit; referring and exit web pages; possibly, the number of clicks. Cookies and usage data, collected through automated processes.
For security purposes (spam filters, firewalls, virus detection), automatically recorded data may also include personal data such as the IP address, which could be used, in compliance with current legal regulations, to block attempts to damage the site or harm other users, or otherwise engage in harmful or criminal activities. Such data is never used for identifying or profiling the user but only for protecting the site and its users; this information is processed based on the legitimate interests of the owner.
• Personal and identification data ("contact" and "get started" section) – voluntarily provided by the user and not essential for the website’s functionality.
The possible use of Cookies or other tracking tools by this Site or the owners of third-party services used by this Application, unless otherwise specified, is intended to provide the Service requested by the User, in addition to the other purposes described in this document and in the Cookie Policy, to which reference is made.
The User assumes responsibility for third-party Personal Data obtained, published, or shared through this Application and guarantees the right to communicate or disclose it, releasing the Owner from any liability towards third parties.

DATA PROCESSING METHODS

The Data Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data. Processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the indicated purposes. In addition to the Data Controller, in some cases, other internal or external parties (such as third-party technical service providers, hosting providers, IT companies, communication agencies) appointed as Data Processors by the Data Controller may have access to the Data.

DATA PROCESSING LOCATION

The data collected by the site is processed by the Data Controller and is handled only by technical personnel authorized for processing or appointed as external Data Processors under Article 28 of EU Regulation 2016/679. The server hosting the site is located in Italy. This site may share some of the collected data with services located outside the European Union, always in compliance with the rights and guarantees provided by current regulations, pursuant to Articles 44 and following of EU Regulation 2016/679.

DATA RETENTION PERIOD

Data is processed and stored for the time required for the purposes for which it was collected. Personal Data collected for purposes related to the execution of the service requested by the User will be retained until the completion of such service. Regarding any Personal Data collected for purposes based on the User's consent, the Data Controller may retain the Personal Data for a longer period until such consent is revoked. Additionally, the Data Controller may be required to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority. At the end of the retention period, Personal Data will be deleted. Therefore, once this period expires, the right to access, delete, rectify, and the right to data portability can no longer be exercised.

PURPOSE OF DATA PROCESSING

User Data is collected for the following purposes:

  • Monitoring the infrastructure;
  • Contacting the User in response to contact requests.

SECURITY MEASURES

This website processes user data lawfully and fairly, adopting appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of data. Processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the indicated purposes. In addition to the data controller, in some cases, other categories of appointees involved in the site’s organization or external entities (such as third-party technical service providers, hosting providers, IT companies, communication agencies) may have access to the data.

USER RIGHTS

Regarding personal data, the data subject may exercise the rights provided for in Articles 15 and following of the GDPR, specifically:

• Right of access (Art. 15) – Obtain confirmation from the Data Controller whether personal data concerning them is being processed and, if so, access such data and specific information as described in the article.
• Right to rectification (Art. 16) – The possibility for the data subject to modify their data if inaccurate.
• Right to erasure (Art. 17) – The possibility for the data subject to delete their data held by the Data Controller when, for example, consent to processing is revoked, the purpose pursued has been achieved, or processing is unlawful. However, this right is not absolute and may be denied if the data is necessary for legal obligations or for the defense of a right in court.
• Right to object (Art. 21) – The ability to oppose processing when the legal basis is legitimate interest or the execution of a task in the public interest. This right has limitations when the legitimate interest of the Data Controller outweighs that of the data subject or when processing is necessary for a public interest task or legal proceedings.
• Right to data portability (Art. 20) – If processing is based on a contract or consent, upon request, the data subject has the right to receive their personal data in a structured and machine-readable format (json, xml, csv). This right applies only to data voluntarily provided and not to inferred or derived data.
• Right to withdraw consent (Art. 7) – If the Data Controller requires consent for processing, the data subject may revoke it at any time, subject to legal obligations in effect at the time of the request. The request should be sent via the contact details provided, specifying the request's subject, the right being exercised, and including a copy of an identity document.

The data subject has the right to file a complaint with the competent supervisory authority in the Member State where they reside, work, or where the alleged violation occurred.

DATA CONTROLLER AND DATA PROTECTION OFFICER

The Data Controller is Immersiva S.r.l., with registered office at Via Roberto Lepetit 8/10 - 20124 MILANO (MI). You can contact the Data Controller by email at info@immersiva.com or by phone at 0481.483737.
The Data Protection Officer (DPO), pursuant to Articles 37 and following of the GDPR, is PRATIKA S.R.L. (contact person: Alex Stellini), located at Via Carnia, n. 1, Rodeano Alto, Rive D'Arcano (UD). The DPO can be contacted at the following email: dpo@gruppopk.com; PEC: info@pec.pratikasrl.com.