Privacy Policy

This policy is pursuant to Art. 13 of EU Regulation no. 679/2016 “General Data Protection Regulation (GDPR)”

The address of our website is: de.studiokosmos.com

The data controllerand processor is KOSMOS Srl, with VAT no. 01723340350, with registered office at Via Guido da Castello 29 – 42121 Reggio Emilia – Italy, contactable via email at [email protected]

This Privacy Policy aims to inform you about how we collect and useyour personal data.

The data controller, in line with Legislative Decree no. 196/2003 (hereinafter “Privacy Code”) and EU Regulation no. 2016/679 (“GDPR”), intends to guarantee the privacy and security of the personal data of each visitor coherently as dictated by the information laid out herein. This policy should be understood as being pursuant to Art. 13 of the Privacy Code and to Arts. 13 and 14 of the GDPR.

When visiting and using our company website, the following information may be collected and processed for security purposes and to improve the service offered:

1. Access page to the website (by means of query parameters in the URL);
2. The source page that directsvisitors to our site;
3. Time and date of access;
4. Amount of data transferred;
5. State of access (translated page, page not found, etc.);
6. Operating system of the browser used;
7. IP address of the client and potentially the name of the domain or service provider;
8. Registration data, statistics on the pages visited, traffic and advertising data (for more detail see the company Cookie Policy).

What kind of data we collect and why

Types of data processed

The website studiokosmos.com offers informative and some interactive content. In navigating the website, Kosmos Srl could, therefore, acquire information about the visitor in the following ways:

Browsing data

The computer systemsand software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the communication protocols of the Internet. This data category includes: IP addresses, type of browser used, operating system, name of domain and website addresses from which the site was accessed, information on the pages visited by the user within the site, time of access, length of stay on a single page, analysis of internal navigation route and other parameters related to the user’s operating system and computer environment.

Other data categories

This includes all of the personal data provided by the visitor through the site, for example in filling out a form within the site and/or participating in an initiative launched by Kosmos Srl or writing to an email address owned by Kosmos Srl in order to request information.

Contact form

There are various contact forms available on our website for different purposes:

• Quote form: to allow users to request a quote from Kosmos Srl, which uses the data received to respond to requests and potentially send commercial offers at a later date
• Contact form: to allow users to request information from Kosmos Srl, which uses the data received to respond to requests and potentially send commercial offers at a later date

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles etc.).Embedded content from other websites behaves in the exact same way as if the visitor had visited the other site.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Analytics

We use the statistical analysis service Google Analytics to analyse traffic to the site and to improve the user experience.

Managing your data

How your data is processed

The processing of personal data is primarily carried out using electronic tools (DB, CRM platforms, etc.), only for the time strictly necessary in order to fulfil the purposes for which the data were collected and in accordance with the principles of lawfulness, correctness, pertinence and non-excess, as laid out in the existing privacy policy.

Data retention

The data related to the navigation logs, if registered, will be stored by the data controller for a period of 3 months. Furthermore, the data you provide will be processed for the entire duration of the contractual relationship and further stored exclusively for a period necessary for the fulfilment of the legal obligations, as long as it is not necessary to store them for a longer period of time in order to defend or assert a right or to fulfil potential further legal obligations or authority orders.

Rights of the data subject

The subjects to whom the above-cited personal data refer (the “data subjects”) have the power to exercise their rights according to the procedures and within the limits foreseen by the existing privacy policy.

With regards to the processing of their personal data, they have the following rights against Kosmos Srl:

• Access: pthey may obtain confirmation as to whether or not personal data concerning them are being processed, as well as clarity on the information present in this policy, and receive the data itself, within the limits of reason.
• Rectification: they may obtain the rectification or integration of data that they have provided us with or that is in our possession, in the case that they are inaccurate.
• Erasure: they may obtain the erasure of the data acquired or processed by Kosmos Srl, in the case that they are no longer necessary for our aims or where there are no disputes or litigation, in the case of withdrawal of consent to the data processing, in the case of unlawful processing, or in the case that there is a legal obligation to erase them.
• Restriction of processing: they may obtain the restriction of the processing of their personal data, citing one of the conditions present in Art. 18 of the GDPR; in such a case, their data will not be processed, unless for storage purposes, without the consent of the data subject, excepting the terms laid out under subsection 2 of the same Article.
• Objection: they may object to the processing of their data at any time on the basis of our lawful interest, unless ourlegitimate grounds for the processingoverride their interests, for example for exercising our defence in the court of law; their opposition will always prevail over our legitimate grounds for the processing of their data for marketing purposes.
• Data portability: they may receive their personal data, or have them transmitted to another data processor as indicated by them, in an electronically useable format. Furthermore, pursuant to Art. 7, Paragraph 3 of the GDPR, they may exercise their right to withdraw consent at any time, without affecting the lawfulness of the processing based on the consent previously given. Finally, they have the right to lodge a complaint before the Italian Data Protection Authority(“Garante per la Protezione dei Dati Personali”).

The right to be forgotten

Thispolicy exclusively concerns the processing of personal data that you have provided or will provide Kosmos Srl with – possibly acquiring our products and/or services provided through payment or participating in our promotions and/or offers – and those that Kosmos Srl may acquire in the course of the present relationship and/or further relations between yourself and our company.

If you wish, however, to apply the “right to be forgotten” to your personal data that we may hold, you are advised to contact Kosmos Srl, the data controller.

Amendments to the policy

The potential introduction of new policies to the sector, like the constant examination and updating of user services, could bring about the need to modify the terms and procedures contained herein. It is therefore possible that this policy will undergo modifications over time. For this reason, we invite you to periodically consult this page. We will publish any modifications to this policy on this page and, in the case that the modifications are relevant, they will be reported to you by means of more visible communication. The preceding versions of this policy, in any case, will be archived in order to be consulted at a later time.

Data controller and processor

The data controller and processor is KOSMOS Srl, with VAT no. 01723340350, with registered office at Via Guido da Castello 29 – 42121 Reggio Emilia – Italy, contactable via email at [email protected]

Updates

This privacy policy was last updated on 03-04-2019