Privacy Policy

Community Privacy Policy

This privacy policy is prepared, pursuant to art. 13 of EU Regulation 2016/679 (“GDPR”), by the company Akeron S.r.l. (“Akeron” or the “Data Controller“), in relation to the personal data provided by users (“Users“) when registering on the site with restricted access, accessible via log-in at the address https://community.akeron.com (“Akeron Community”).

1.      Data Controller

Akeron, in quality of Data Controller pursuant to the GDPR, will process your personal data in accordance with the methods established by the GDPR itself.By personal data we mean, according to the relative definition contained in the art. 4, par. 1, n.1) of the GDPR, “any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;” (“Personal Data”). For any information or request relating to the processing of your Personal Data, you can contact both Akeron or the Personal Data Protection Officer (“DPO“) at the following addresses:

Data Controller: Akeron S.r.l.

Location: Via Farnesi, 141  55100 Lucca

Contact details:

Phone: +39 0583 15284

Fax: +39 0583 15284463

E-mail: privacy@akeron.com

PEC: akeron@pec.akeron.com

Data Protection Officer:

Dr. Michela Turri

Location: Via Fontana, 22 – 20122 Milano, Italy

Tax Code / VAT Number: TRRMHL73A51E715K / 01744290469

Contat details:

Phone: +39 0583 578787

E-mail: dpo.turrimichela@gmail.com

PEC: dpo.turrimichela@pec.it

2.      Types of data collected

The Personal Data being processed is data provided voluntarily by the User when completing the registration form to the Akeron Community and the navigation data that are collected automatically when accessing and browsing the site.

The data provided voluntarily by the User, by filling in the form, are functional to registration and therefore access to the Akeron Community. Unless otherwise specified in the registration form, the Personal Data expressly requested for registration with the Akeron Community are necessary data, although their communication by the User is optional. This means that the failure to communicate the requested data makes it impossible to access the Akeron Community. Where some Personal Data requested in the registration form are, instead, indicated as optional, Users are free to refrain from communicating them, without this having any consequence in relation to access and use of the Akeron Community.

The navigation data collected automatically during access to the Akeron Community is information whose collection takes place automatically through the use of Internet communication protocols (also from third-party applications integrated into this Application). This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association, allow the User to be identified. This category of data includes, for example, the IP addresses or domain names of the computers used by the User who connects to this site, the addresses in URI (Uniform Resource Identifier) notation, the time of the request, the method used in forwarding the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal connotations of the visit (for example the time spent on each page) and the details relating to the itinerary followed within the Application, with particular reference to the sequence of pages consulted, the parameters relating to the operating system and to the User’s IT environment.

Complete details on each type of data collected are provided in the dedicated sections of the Akeron Community cookie policy.

The User assumes responsibility for any Personal Data of third parties obtained, published or shared in the Akeron Community and guarantees to have the right to communicate or disseminate them, freeing the Data Controller from any liability towards third parties and holding him harmless from any direct and/or indirect damage that may result from this.

  1. Purpose and legal basis of the processing of Personal Data

 

The Data Controller processes the Personal Data provided by Users as functional to the execution of a contract of which the User’s company is a party, in accordance with the provisions of art. 6, c.1, lett. b) GDPR, in order to allow registration to the Akeron Community and the provision of services dedicated exclusively to members of the Akeron Community itself. In particular, it concerns material and relevant information regarding Akeron S.r.l. and to the products and services provided by the same under the aforementioned contract.

Akeron could also process the Personal Data relating to the online browsing history collected during the User’s visits to the website, using tracking technologies such as “cookies” (for information on the collection of data through cookies, the User is invited to consult the our Cookie Policy.

[Any use of cookies – or other tracking tools – by the Akeron Community site or by the owners of third-party services used by the site in question, unless otherwise specified, has the purpose of providing the Service requested by the User, in addition to the purposes referred to in this information, also the purposes indicated in the cookie policy.]

4.      Nature of data provision

For the purposes referred to in art. 3 the provision of Personal Data is necessary for the execution of the services provided by the Data Controller and any refusal determines the impossibility of providing the same. To carry out the data processing referred to in art. 3 it is not necessary to acquire the consent of the interested party.

5.      Processing methods

The processing is carried out using IT and/or telematic tools, also with the aid of electronic tools, with organizational methods and with logic strictly related to the purposes indicated. The processing of Personal Data will take place by Akeron employees and/or, in some cases, by third parties as subjects with technical skills functional to the management of the Akeron Community site. Both employees and third parties who process Personal Data have been expressly authorized by Akeron itself according to logic strictly connected to the purposes referred to in this privacy policy.

The updated list of Data Processors may be requested from the Data Controller at any time.

6.      Disclosure and communication of Personal Data

Personal Data is not subject to dissemination or transfer.

Communication to third parties other than the Data Controller is foreseen where necessary. The data processing by these third parties will in any case take place in compliance with the principles of correctness, proportionality and necessity, as well as with respect for the provisions of the law in force.

 

7.      Personal Data transfer

The data are processed at the Data Controller’s operating offices and in any other place where the parties involved in the processing are located in Italy or in the EU territory.

The data collected automatically could be transferred to a country other than the one in which the User is located. To obtain further information on the place of processing, the User can refer to the cookie policy, or can be obtained by contacting the Data Controller.

In this case Akeron ensures that the processing of your Personal Data by these subjects to whom the data is transferred takes place in compliance with the GDPR, always in compliance with the principles indicated in art. 45 of the GDPR relating to the existence of an adequacy decision by the European Commission, or in the absence of such decisions in compliance with art. 46 of the GDPR relating to the transfer of Personal Data in the presence of adequate guarantees or in compliance with art. 49 paragraph 1 lett. b), GDPR – transfer necessary for the execution of a contract concluded between you and the Data Controller or for the execution of pre-contractual measures.

8.      Data retention period

The data will be stored, in compliance with the principle of proportionality, for a period of time not exceeding the achievement of the purposes for which they are processed and in any case for the entire duration of the contractual relationship as well as, subsequently, for the period of time necessary to fulfill the legal obligations,  pursuant to art. 5 of GDPR, and in any case for a period not exceeding 10 years (prescription term) from the cancellation of the user from the Akeron Community in accordance with the terms and conditions of use of the same. At the end of this period, the data will be deleted or made anonymous.

Personal Data collected for purposes attributable to the legitimate interest of the Data Controller will be retained until such interest is satisfied. In the event of a pending judgment, the data will be processed further until their resolution. Furthermore, the Data Controller may be obliged to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority.

The data collected automatically is stored and will be retained for the period better specified in the Cookie Policy.

At the end of the retention period, the Personal Data will be deleted. Therefore, upon expiry of this term, the right of access, cancellation, rectification and the right to data portability can no longer be exercised..

9.      Personal Data security

The Data Controller adopts the appropriate technical and organizational measures for the protection of Personal Data in order to prevent unauthorized access, disclosure, modification, loss or destruction of Personal Data, as well as their illicit or incorrect use or unauthorized access. 

 

10.  Data Subject rights

We inform you that as Data Subject you have, in addition to the right to lodge a complaint with the Supervisory Authority, the rights listed below, which you can assert by making a specific request to the Data Controller and/or the Data Protection Officer, by contacting them at the addresses indicated at point 1:

(i)    right of access: in order to obtain from the Data Controller confirmation of the existence or not of Personal Data concerning the User, even if not yet registered, and of the origin of the data, as well as access to the User’s Personal Data and to information on the purposes and methods of processing, on the details of the Data Controller and of the Data Processor, on the recipients or categories of recipients to whom the data may be communicated or who can learn about it, the retention period or, if it is not possible criteria for determining it;

(ii)   right to rectification, cancellation and limitation: in order to ask the Data Controller to rectify or integrate Personal Data, cancel, limit processing, transform into anonymous form or block Personal Data processed in violation of the law, including those whose conservation is not necessary in relation to the purposes for which the Personal Data were collected or subsequently processed, the attestation that the requested operations have been brought to the attention, also as regards their content, of those to whom the Personal Data have been communicated or disseminated, except in the case in which this fulfillment proves impossible or involves the use of means manifestly disproportionate to the protected right;

(iii) right to portability: in order to receive the Personal Data concerning the User provided to the Data Controller in a structured, commonly used and automatically readable format and has the right to transmit such data to another Data Controller, where this operation is applicable;

(iv)  right of opposition: in order to oppose, for legitimate reasons, the processing of the User’s Personal Data, even if pertinent to the purpose of the collection.

Finally, if the User believes that the processing of his Personal Data violates the GDPR or the Privacy Law, he also has the right pursuant to art. 13 of the GDPR, to lodge a complaint with the Supervisory Authority for the protection of personal data and/or with any other competent supervisory authorities or, alternatively, appeal to the judicial authority.