Information on the processing of personal data pursuant to Articles 13 and 14 of EU Regulation No. 679/2016

Your personal data are processed for the following Service Purposes:
– to allow you to be registered in the company’s records, both on paper and electronically;
– to manage and maintain said registries
– to fulfil pre-contractual, contractual and fiscal obligations arising from existing relations with you;
– fulfil the obligations provided for by law, regulation, Community legislation or an order of the Authority;
– prevent or uncover fraudulent activities or harmful abuse of Internet navigation;
– prevent any possible unlawful use of telematic tools;
– exercise the right of defence in court.
– send you by email information on your existing working relationship with the undersigned
– customer satisfaction activities for the purpose of assessing customer satisfaction (e.g. via an online form)

The processing of your personal data is carried out by means of the operations indicated in Article 4 of the Privacy Code and Article 4.2 of the GDPR, namely: collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data.
Your personal data will be processed both on paper and electronically.
Your personal data will be processed for the time necessary to fulfil the above purposes and in any case for no longer than 10 years from the termination of the relationship, for the Service Purposes.

Your data may be made accessible for the following purposes
– to employees and collaborators of the undersigned in their capacity as persons in charge and/or internal data processors and/or system administrators;
– to third parties (e.g. professional firms, etc.) carrying out activities in outsourcing on behalf of the writer, in their capacity as external data processors.

Your data may be communicated to Supervisory Bodies, Judicial Authorities as well as to all other subjects to whom the communication is compulsory by law and for the fulfilment of the aforementioned purposes. In particular:
– shippers, carriers, Postal Service, Logistics companies;
– consultants and freelance professionals, also in associated form
– banks and credit institutions
– insurance companies;
– debt collection and/or assignment companies;
– other companies, entities and/or individuals carrying out activities that are instrumental, supportive or functional to the performance of the contracts or services requested (e.g., suppliers, etc.)
– consulting companies;
– our agents;
– auditors;
– supervisory bodies;
– parent, subsidiary or associated companies within the meaning of Article 2359 of the Civil Code or companies under common control, for the administrative and accounting purposes expressly provided for therein.

The management and storage of personal data will take place on servers located within the European Union of the Data Controller and/or third party companies appointed and duly appointed as Data Processors. The servers are currently located at the registered office of the writer. The data will not be transferred outside the European Union. It is in any event understood that the undersigned, should it become necessary, shall have the right to move the location of the servers to the European Union and/or non-EU countries. In this case, it is assured as of now that the transfer of data outside the EU will take place in compliance with the applicable legal provisions, stipulating, if necessary, agreements that guarantee an adequate level of protection and/or adopting the standard contractual clauses provided for by the European Commission.

The provision of data for the purposes indicated in the preceding points is mandatory. In their absence, we will not be able to guarantee the provision of services.

In your capacity as data subject, you have the rights set out in Article 15 GDPR, namely the rights to
obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet registered, and its communication in intelligible form;
obtain the indication
– the origin of the personal data
– the purposes and methods of the processing
– of the logic applied in the event of processing carried out with the aid of electronic instruments;
– the identification data concerning the data controller, data processors and the representative designated pursuant to Section 5(2) of the Privacy Code and Section 3(1) of the GDPR
– the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of the data in their capacity as designated representative in the territory of the State, data processors or persons in charge of processing;
to obtain:

-updating, rectification or, where interested therein, integration of the data;
– the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed
– certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected;
– to object, in whole or in part, on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection. The data subject may decide to receive only communications by traditional means or only automated communications or neither.
Where applicable, you also have the rights set out in Articles 16-21 GDPR (Right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object), as well as the right to complain to the Data Protection Authority.

You may exercise your rights at any time by sending
– an email to the following address: info@iwstock.net
– a registered letter with advice of receipt to: IWSTOCK S.r.l. – Via Buttaro, 4/D – 24044 Dalmine (BG)

The Data Controller is: IWSTOCK S.r.l. – Via Buttaro, 4/D – 24044 Dalmine (BG)

The up-to-date list of data processors and persons in charge of processing is kept at the registered office of the data controller.

IWSTOCK S.r.l has appointed a Data Protection Officer/Data Protection Officer (‘DPO’) pursuant to Articles 37 et seq. of the GDPR. You may contact the DPO/DPO by sending an e-mail to gdpro@iwstock.net to exercise, at any time, the rights guaranteed by law and listed below: right of access to your personal data (art. 15 GDPR); right to correct or update your data (art. 16 GDPR); right to data portability (art. 20 GDPR); right to data deletion (art. 17 GDPR); revocation of consents, change of privacy settings and right to object (art. 18-19 GDPR); lodging a complaint with the Privacy Guarantor (art. 77 GDPR)

This Policy is subject to change. We therefore recommend that you check this Policy regularly and refer to the most up-to-date version.

The website, for better functioning and to ensure services provided by third parties, uses Cookies issued by the OWNER or third parties.

The cookies issued by the OWNER by navigating on this website are ‘technical’ and are those used for the sole purpose of ‘carrying out the transmission of a communication on an electronic communication network, or to the extent strictly necessary for the provider of an information society service explicitly requested by the subscriber or user to provide such service’ (see Art. 122, paragraph 1 of the Code). They are not used for any further purposes, and are installed with normal navigation on our pages. They can be divided into navigation or session cookies, which guarantee normal navigation and use of the website; functionality cookies, which allow the user to navigate according to a series of selected criteria (e.g. language, etc.) in order to improve the service rendered to him/her. Users’ prior consent is not required for the installation of such cookies, while the obligation to provide this information pursuant to Article 13 of the Code remains in place.

In the course of browsing the site, the user may also receive on his/her terminal equipment cookies from different suppliers (‘third party’ cookies); this happens because on the website visited there may be elements that reside on servers other than the one on which the requested page is located.
THE OWNER uses third party cookies only for technical purposes, for example cookies issued to statistically analyse access/visits to the website (‘analytics’ cookies) or to allow the use of parts of code issued by third parties, which guarantee a better use of the service (administration pages etc.).
The third-party cookies used on this site and the methods for managing opt out (deactivating them) are set out below:

– Google Analytics: a web traffic analysis service provided by Google, Inc. (‘Google’). These cookies are used for the sole purpose of monitoring and improving the performance of the site. For further information, please refer to the link below: https://www.google.it/policies/privacy/partners/
The user can selectively disable the action of Google Analytics by installing the opt-out component provided by Google on their browser. To disable the action of Google Analytics, please refer to the link below: https://tools.google.com/dlpage/gaoptout

To disable these cookies, you can also use appropriate features and tools on your browser, or take advantage of the services provided by http://www.youronlinechoices.com/it/ run by the European Interactive Digital Advertising Alliance (EDAA), which is a guide on behavioural advertising and online privacy and where you will find information on how behavioural advertising works and a lot of information on how to manage and disable cookies as well as steps to follow to protect your privacy on the internet.

Date: May 2024