PRIVACY POLICY DATA SITE WEBSITE

updated to EU Reg 2016/679
(European regulation on personal data protection)

1) Introduction
Idrogrow S.r.l. takes the user's privacy seriously and undertakes to respect the same. This privacy policy ("Privacy Policy") describes the processing of personal data carried out by Idrogrow S.r.l. through the website www.idorgrow.com and the related commitments undertaken in this sense by the Company. Idrogrow S.r.l. can process your personal data when you visit the Site and use the services and features on the Site. In the sections of the Site where the user's personal data is collected, a specific disclosure is normally published pursuant to art. 13/15 of the EU Reg. 2016/679. Where required by the EU Regulation 2016/679, the user's consent will be required before proceeding to the processing of his personal data. If the user provides personal data of third parties, he must ensure that the communication of the data to Idrogrow and the subsequent processing for the purposes specified in the applicable privacy policy is in compliance with EU Regulation 2016/679 and the applicable legislation.

2) Identification details of the owner, manager and Privacy Officer Idrogrow S.r.l. Srl, Via Lombardia, 23, 41012 Carpi (MO)
3) Type of data processed
The visit and consultation of the Site do not generally involve collection and processing of personal data of the user except for navigation data and cookies as specified below. In addition to the so-called "navigation data" (see below), personal data voluntarily provided by the user may be processed when he interacts with the functions of the Site or requests to use the services offered on the Site. In compliance with the Privacy Code, Idrogrow may also collect the user's personal data from third parties in the course of their business.

4) Cookies and navigation data
The Site uses "cookies". By using the Site, you consent to the use of cookies in accordance with this Privacy Policy. Cookies are small files stored on the hard disk of the user's computer. There are two macro-categories of cookies: technical cookies and profiling cookies. Technical cookies are necessary for the proper functioning of a website and to allow user navigation; without them, the user may not be able to view the pages correctly or use some services. Profiling cookies have the task of creating user profiles in order to send advertising messages in line with the preferences shown by the same while browsing. Cookies can also be classified as:
_ "session" cookies, which are deleted immediately when the browser is closed; _ "persistent" cookies, which remain in the browser for a specific period of time. They are used, for example, to recognize the device that connects to a site facilitating authentication operations for the user;
_ "own" cookies, generated and managed directly by the manager of the website on which the user is browsing; _ "third party" cookies, generated and managed by subjects other than the website manager on which the user is browsing.
5) Cookies used on the site
The Site uses the following types of cookies:
1) own cookies, session and persistent cookies, necessary to allow browsing on the Site, for internal security purposes and system administration;
2) third-party cookies, ession and persistent cookies, necessary to allow the user to use multimedia elements present on the Site, such as images and videos;
3) third-party cookies, persistent cookies used by the Site to send statistical information to the Google Analytics system, through which Idrogrow S.r.l. can perform statistical analysis of accesses / visits to the Site. The cookies used are exclusively for statistical purposes and collect information in aggregate form. Through a pair of cookies, one of which is persistent and the other of session (with expiration at the end of the browser), Google Analytics also saves a register with the starting times of the visit to the Site and its exit. We can prevent Google from collecting data through cookies and from processing the data by downloading and installing the browser plug-in from the following address: http://tools.google.com/dlpage/gaoptout?hl=it

4) third-party cookies,persistent cookies used by the Site to include on its pages the buttons of some social networks (Facebook, Twitter and Google+). By selecting one of these buttons, the user can publish the contents of the website of the website he is visiting on his personal page of the relevant social network.
Here is a detail of the cookies on the site
Nome del cookie: _utma
Purpose: Number of visits
First or third part: Third parties
Web reference: www.google.it

Cookie name: _utmb
Purpose: Timestamp access to the website
First or third part: Third parties
Web reference: www.google.it

Cookie name: _utmc
Purpose: Timestamp out of the website
First or third part: Third parties
Web reference: www.google.it

Cookie name: _utmz
Purpose: Visitor's origin
First or third part: Third parties
Web reference: www.google.it

Cookie name: _utmz
Purpose: Statistics in anonymous form
First or third part: Third parties
Web reference: www.google.it

Cookie name: _PHPSESSION
Purpose: Navigation session
First or third part: First
Web reference: www.idrogrow.com

The Site may contain links to other sites (c.d. third party sites). Idrogrow does not make any access or control over cookies, web beacons and other user tracking technologies that could be used by third party sites that the user can access from the Site; Idrogrow does not carry out any control on contents and materials published by or obtained through third party sites, nor on the relative modalities of treatment of the personal data of the user, and expressly declines every relative responsibility for such eventualities. The user is required to check the privacy policy of the third party sites accessed through the Site and to inform himself about the conditions applicable to the processing of his personal data. This Privacy Policy applies only to the Site as defined above.

6) How to disable cookies in browsers
You can disable cookies on websites by downloading special software such as Ghostery (https://www.ghostery.com) for your browser and disabling the use of individual cookies. Or you can activate the "anonymous browsing" mode: it is a function that allows you to navigate without leaving a trace in the browser of the navigation data.
Alternatively, you can disable / delete cookies by accessing the browser configuration panel.

7) Storage of personal data
Personal data is stored and processed through IT systems owned by Idrogrow S.r.l. and managed by Idrogrow S.r.l. or by third party technical service providers; for more details please refer to the "Communication and data access area" section below. The data is processed exclusively by specifically authorized personnel, including the personnel responsible for carrying out extraordinary maintenance operations.

8) Purposes and methods of data processing
Idrogrow S.r.l. can process the common and sensitive personal data of the user for the following purposes: use by users of services and features present on the Site, management of requests and reports by their users, sending of newsletters, management of applications received through the Site, etc. Furthermore, with the further and specific optional consent of the user, Idrogrow S.r.l. you will be able to process personal data for marketing purposes, that is, to send you promotional material and / or commercial communications relating to the Company's services, at the addresses indicated, both through traditional methods and / or means of contact (such as paper mail, calls with operator, etc.) that automated (such as, communications via internet, fax, e-mail, sms, applications for mobile devices such as smartphones and tablets -cd. APPS-, social network accounts - eg via Facebook or Twitter -, telephone calls with automatic attendant, etc.). Personal data is processed both in paper and electronic form and entered into the company information system in full compliance with EU Reg 2016/679, including security and confidentiality profiles and based on principles of correctness and lawfulness of processing. In compliance with EU Reg. 2016/679 the data are kept and stored for 5 years.

9) Security and quality of personal data
Idrogrow S.r.l. undertakes to protect the security of the user's personal data and complies with the provisions on security provided for by the applicable legislation in order to avoid loss of data, illegitimate or illegal use of data and unauthorized access to the same, with particular reference to the Disciplinary Technician on minimum safety measures. Furthermore, the information systems and computer programs used by Idrogrow S.r.l. they are configured to minimize the use of personal and identification data; these data are processed only for the achievement of the specific purposes pursued from time to time. Idrogrow S.r.l. uses multiple advanced security technologies and procedures to promote the protection of users' personal data; for example, personal data is stored on secure servers located in places with protected and controlled access. The user can help Idrogrow S.r.l. to update and maintain their personal data by communicating any changes relating to their address, their qualifications, contact information, etc.

10) Scope of communication and data access
Your personal data may be disclosed to:
- all the subjects to whom the faculty of access to such data is recognized by virtue of legislative measures;
- to our collaborators, employees, within the scope of their duties;
- o all those natural and / or legal persons, public and / or private when the communication is necessary or functional to the performance of our activity and in the ways and for the purposes described above;

11) Nature of providing personal data
The provision of some personal data by the user is required to allow the Company to manage communications, requests received by the user or to recontact the user to respond to his request. This type of data is marked with the asterisk symbol [*] and in this case the conferment is obligatory to allow the Company to follow up the request which, in default, cannot be processed. On the contrary, the collection of other data not marked with an asterisk is optional: failure to provide it will have no consequence for the user. The provision of personal data by the user for marketing purposes, as specified in the â € œFinality and methods of processingâ € section is optional and the refusal to grant them will have no consequence. The consent given for marketing purposes is intended to be extended to sending communications through automated and traditional methods and / or contact means, as exemplified above.

12) Rights of the interested party
12.1 Art. 15 (right of access), 16 (right of rectification) of the EU Reg. 2016/679 The interested party has the right to obtain from the controller the confirmation that the processing of personal data is in progress or not. concern and in this case, to obtain access to personal data and the following information:
a) the purposes of the processing;
b) the categories of personal data in question;
c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if they are recipients of third countries or international organizations;
d) the period of storage of personal data provided or, if this is not possible, the criteria used to determine this period;
e)the existence of the data subject's right to request the data controller to rectify or delete personal data or limit the processing of personal data concerning him or to oppose their processing;
f)the right to lodge a complaint with a supervisory authority;
h)the existence of an automated decision-making process, including profiling and, at least in such cases, significant information on the logic used, as well as the expected importance and consequences of such treatment for the data subject.

12.2 Right referred to in art. 17 of the EU Reg. 2016/679 - right to cancellation (right to be forgotten) The interested party has the right to obtain from the data controller the deletion of personal data concerning him without unjustified delay and the data controller has the obligation to cancel personal data without unjustified delay, if one of the following reasons exists: a)personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;
b) the data subject withdraws the consent on which the processing is based in accordance with Article 6, paragraph 1, letter a), or Article 9, paragraph 2, letter a), and if there is no other legal basis for the processing ;
c) the data subject opposes the processing pursuant to Article 21, paragraph 1, and there is no legitimate prevailing reason to proceed with the processing, or he opposes the processing pursuant to Article 21, paragraph 2;
d) personal data have been unlawfully processed;
e) personal data must be deleted in order to fulfill a legal obligation established by Union law or the Member State to which the data controller is subject;
f)personal data has been collected regarding the offer of information society services pursuant to Article 8, paragraph 1 of EU Regulation 2016/679

12.3 Right referred to in art. 18 Right to limitation of treatment
The interested party has the right to obtain the treatment limitation from the data controller when one of the following hypotheses occurs:
a) the data subject disputes the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
b) the processing is unlawful and the data subject opposes the deletion of personal data and requests instead that its use be limited;
c) although the data controller no longer needs it for the purposes of processing, personal data is necessary for the data subject to ascertain, exercise or defend a right in court;
d) the interested party has opposed the processing pursuant to Article 21, paragraph 1, EU Reg 2016/679 pending verification regarding the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.

12.4 Right referred to in Article 20 Right to data portability
The interested party has the right to receive in a structured format, commonly used and readable by automatic device, the personal data concerning him provided to a data controller and has the right to transmit such data to another data controller without hindrance by part of the data controller

13. Withdrawal of consent to treatment
The interested party has the right to revoke the consent to the processing of your personal data by sending a registered letter with return receipt to the following address: Idrogrow S.r.l. Via Lombardia, 23, 41012 Carpi (MO) accompanied by a photocopy of your identity document, with the following text: - consent to the processing of all my personal data -. At the end of this operation your personal data will be removed from the archives as soon as possible.
SIf you wish to have more information on the processing of your personal data, or exercise the rights referred to in point 7 above, you can send a registered letter with return receipt to the following address: Idrogrow S.r.l. Via Lombardia, 23, 41012 Carpi (MO). Before being able to provide, or change any information, it may be necessary to verify your identity and answer some questions. A reply will be provided as soon as possible.