Privacy Policy

Information pursuant to Articles 13-14 of the RGPD (General Data Protection Regulation) – EU Regulation 2016/679

Dear User,

this text is intended to make you understand how much we care about the protection of personal data of those who visit our site.

Our company is committed to ensuring that any information or personal data that will be provided by you during your stay on our website or that will be automatically collected by means of computer systems in charge of its operation, will be processed in accordance with the principles of lawfulness, fairness, transparency, purpose limitation and storage, data minimization, accuracy, integrity and confidentiality, as established by the EU Regulation 679/2016 – General Data Protection Regulation (“RGPD”) and the applicable National Legislation (hereinafter RGPD and National Legislation are collectively referred to as “Applicable Legislation”).

Therefore, before communicating any personal data, Vayu invites you as a user to carefully read this Privacy Policy, as it contains important information on the protection of personal data and the security measures taken to ensure their confidentiality in full compliance with the

The policy may change due to the introduction of new regulations in this regard, so please check this page periodically.

By using our services, you consent to our use of your information in accordance with this Privacy Policy.

DATA CONTROLLER

With regard to this website, the Data Controller is Vayu S.r.l. with registered office in via Cornelia n.
498, 00166 – Rome (Rm), Italy (“Vayu”).

In turn, Vayu has appointed a Data Protection Officer (“DPO” or “Data Protection Officer”), available at privacydpo@vayu.it, for any information pertaining to the processing of personal data carried out by the Data Controller, including requesting the list of data processors who process data on behalf of the Data Controller.

The data of users/visitors of this Site will be processed by our employees and/or contractors who manage the Site itself.
These have been authorized to process personal data and have received appropriate operational instructions in this regard.

DEFINITIONS

“Processing” of personal data means any operation or set of operations, performed with or without the aid of automated processes and applied to personal data or set of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, comparison or interconnection, restriction, erasure or destruction.

“Personal Data” means any information relating to an identified or identifiable natural person with particular reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more features of his or her physical, physiological, mental, economic, cultural, or social identity.

PERSONAL DATA BEING PROCESSED

When you visit our site you may provide us with some of your personal information in order to take advantage of certain content on the site, to receive a contact from us, or to request information about our services.

Specifically, the Personal Data collected are as follows:

  1. Automatically collected data

The computer systems and software procedures used to operate the website www.vayu.itacquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified interested parties, but by its very nature could, through processing and association with other data, allow users to be identified.

This category of data includes navigational data such as the Internet Protocol (IP) address used to connect your computer to the Internet; computer and connection information such as browser type and version; the URI (Uniform Resource Identifier) notation addresses of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.); other parameters related to the user’s operating system and computer environment.

For all the above cases, the data are used for the sole purpose of obtaining anonymous statistical information on the use of the site, to check its correct operation, to allow the proper provision of the various features requested by the user, for security reasons and to ascertain responsibility in case of computer crimes and are deleted immediately after processing.

  1. Data voluntarily provided by the user

Personal data provided by users/visitors will be disclosed to third parties only if the disclosure is necessary to comply with the requests of users/visitors.

We will process these data in compliance with the Applicable Legislation, assuming that they refer to the user or to third parties who have expressly authorized him/her to confer them.
With respect to such assumptions, the user stands as an autonomous Data Controller, assuming all the obligations and responsibilities of the law.
In this sense, the user confers on the point the widest indemnity with respect to any dispute, claim, request for compensation for damages from treatment, etc..
that may be received by the Oil Mill from third parties whose Personal Data have been processed through a use made by the user in violation of the Applicable Regulations.

b.1
Contact section

On our site there is a section called “contacts” in which you will have the opportunity to request information from us about our services and/or anything related to our business.

In order to fulfill your request we will invite you to provide us with some of your personal information, particularly your name and email address, which are essential to acknowledge your message.

b.2
“Work with us” section

By registering with the application section of the Site at Vayu at https://www.vayu.it/wp/contatti/opportunita/ (“Work with Us”), you will be asked to provide your personal information (such as First Name, Last Name, Date of Birth, Address, Telephone, Email Address), and certain professional or work details (education, degrees, professional qualifications, and desired place of employment).
Personal data provided for this purpose will be processed by Vayu as described in the specific information provided therein.

b.3
“Chat” section

On the site, it is possible to chat with one of our representatives through the chat provided by tawk.to.

Through the use of this tool you may voluntarily provide personal data, the processing of which will be carried out by us in accordance with the requirements of the Applicable Regulations.

The collection and use of information obtained by means of the above chat is governed by our privacy policy as well as that of the provider Tawk.to, to which please refer:

https://www.tawk.to/privacy-policy/

  1. Cookies and related technologies

Our site collects Personal Data through cookies.
More information about the use of cookies and related technologies can be found in the relevant cookie policy at www.vayu.it.

PURPOSE OF PROCESSING, LEGAL BASIS AND NATURE OF PROCESSING

Personal Data provided by the user will be processed by VAYU for the following purposes:

  1. Handling of requests made by users using the “contact us” form:
  1. Contact with the user who has specifically requested it to provide information about our services;
  2. Contact with the user who specifically requested it to send a free quote for the provision of our services;
  1. Management of applications made by users through the “work with us” form
  1. Preliminary evaluation of applications made by users;
  2. Contact with the user who specifically requested it for a possible call for a job interview;
  1. Management of requests made mediated by “chat”
  1. Responding to requests made by the user via chat

RECIPIENTS

The processing of the data you provide to us, or otherwise acquired within the scope of our activity, will be carried out only by individuals who have been authorized in advance, appointed as appointees or indicated as responsible persons by Vayu, such as Vayu’s employees for the sole purpose of providing you with the requested service.
In some cases, your data may be provided to individuals who are granted the right to access them by Italian or EU regulations.

DATA RETENTION

The data will be stored at our office, located in Rome (Rm) at Via Cornelia no.
498, both in paper format and in our server for the time prescribed by current legal regulations.

To enable the operation of some services, data may also be transferred to third-party servers located, in each case, within the European Economic Area.

Vayu will process Personal Data for the time strictly necessary to achieve the purposes indicated by the different purposes of processing.

Notwithstanding the above, Vayu will process Personal Data for as long as permitted by Italian law to protect its interests (Art.
2947(1)(3) c.c.).
More information regarding the retention period of Personal Data and the criteria used to determine this period may be requested by writing to: privacydpo@vayu.it

RIGHTS OF THE DATA SUBJECT

The law recognizes the data subject’s right to request from the data controller access to and rectification or erasure of personal data or restriction of processing concerning him or her or to object to its processing, as well as the right to data portability.

The rights recognized by current data protection regulations are detailed below.

  • The right of access: the right to obtain from the data controller confirmation as to whether or not personal data concerning him or her are being processed and, if so, to obtain access to the personal data and the following information:
    (a) the purposes of the processing;
    (b) the categories of personal data concerned;
    (c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, particularly if recipients in third countries or international organizations;
    (d) when possible, the expected period of retention of personal data or, if this is not possible, the criteria used to determine this period;
    (e) the existence of the data subject’s right to request from the controller the rectification or erasure of personal data or the restriction of the processing of personal data concerning him or her or to object to their processing
    (f) the right to lodge a complaint with a supervisory authority;
    (g) where the data are not collected from the data subject, all available information about their origin;
    (h) the existence of an automated decision-making process, including profiling, and, at least in such cases, meaningful information about the logic used, as well as the importance and expected consequences of such processing for the data subject.
    Where personal data are transferred to a third country or international organization, the data subject then has the right to be informed of the existence of appropriate safeguards relating to the transfer.
  • The right to rectification: the right to obtain from the data controller the rectification of inaccurate personal data concerning him/her without undue delay.
    Taking into account the purposes of the processing, the data subject has the right to obtain the integration of incomplete personal data, including by providing a supplementary declaration.
  • The right to erasure: the right to obtain from the data controller the erasure of personal data concerning him or her without undue delay if:
    (a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
    (b) the data subject withdraws the consent on which the processing is based and if there is no other legal basis for the processing;
    (c) the data subject objects to the processing carried out because it is necessary for the performance of a task carried out in the public interest or in connection with the exercise of official authority vested in the controller or for the pursuit of the legitimate interest and there is no overriding legitimate ground for the processing, or objects to the processing for direct marketing purposes
    (d) personal data have been processed unlawfully;
    (e) personal data must be erased in order to comply with a legal obligation under Union or Member State law to which the data controller is subject;
    (f) personal data have been collected in connection with the provision of information society services to children.
    However, the request for erasure cannot be granted if the processing is necessary:
    (a) for the exercise of the right to freedom of expression and information;
    (b) for the performance of a legal obligation requiring the processing provided for by Union or Member State law to which the data controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller;
    (c) for reasons of public interest in the field of public health;
    (d) for archiving in the public interest, scientific or historical research, or statistical purposes, insofar as erasure is likely to render impossible or seriously prejudice the achievement of the purposes of such processing; or
    (e) for the establishment, exercise or defense of legal claims.
  • The right to restriction: the right to have data processed, except for storage, only with the consent of the data subject or for the establishment, exercise or defense of a legal claim or to protect the rights of another natural or legal person or for reasons of substantial public interest of the Union or a Member State if:
    (a) the data subject disputes the accuracy of the personal data, for the period necessary for the controller to verify the accuracy of such personal data;
    (b) the processing is unlawful and the data subject objects to the erasure of the personal data and instead requests that their use be restricted;
    (c) although the data controller no longer needs the personal data for the purposes of the processing, the personal data are necessary for the data subject to establish, exercise or defend a legal claim; and
    (d) the data subject has objected to the processing being carried out because it is necessary for the performance of a task carried out in the public interest or in connection with the exercise of official authority vested in the data controller or for the pursuit of the legitimate interests of the data controller or of a third party, pending verification as to whether the data controller’s legitimate grounds prevail over those of the data subject.
  • The right to portability: the right to receive in a structured, commonly used and machine-readable format personal data concerning him or her that have been provided to the data controller and has the right to have those data transmitted to another data controller without hindrance by the data controller to whom he or she has provided them, as well as the right to obtain the direct transmission of personal data from one data controller to another, if technically feasible, where the processing is based on consent or on a contract and the processing is carried out by automated means.
    This right is without prejudice to the right to erasure.
  • the right to object: the right of the data subject to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her carried out because it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller or in the furtherance of the legitimate interests of the controller or a third party.
    Where personal data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him or her carried out for such purposes, including profiling insofar as it is related to such direct marketing.

Interested parties may assert their rights at any time, without formalities, by contacting the email address: privacydpo@vayu.it.

The data subject is then informed that he or she is entitled by law to assert his or her rights by appeal to the Privacy Guarantor or before the judicial authority

CHANGES

This Privacy Policy is effective as of 15/02/2019 and replaces the previous version.
Vayu reserves the right to modify or simply update its content, in part or in full, including due to changes in Applicable Legislation.
Vayu will inform the user of such variations as soon as they are introduced; they will be binding as soon as they are published on the Website: we therefore invite you to visit this section regularly in order to be aware of the most recent and updated version of the Privacy Policy and so that the user is always up-to-date on the data collected and Vayu’s use of it.