Privacy Policy

Privacy Policy for https://acerbispaesaggistica.ch/

General Information

Last modified: 11.09.23.

For previous versions, please contact the owner and data controller.

The website https://acerbispaesaggistica.ch/ collects some personal data from users who visit it.

According to Article 13 of the Swiss Federal Constitution and the provisions of the Federal Data Protection Act (DSG), everyone has the right to privacy and protection from misuse of their personal data. The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations and this privacy policy.

This privacy statement has been prepared based on multiple legislative systems, including Article 13 of the Swiss Federal Constitution, the provisions of the Federal Data Protection Act (DSG), and Articles 13 and 14 of Regulation (EU) 2016/679. The purpose of this statement is to provide information on the nature, purpose, scope of communication, dissemination, duration, and nature of personal data as well as the rights of users and persons who interact with the website, regardless of the purpose of the connection.

This statement applies exclusively to the website, unless otherwise specified.

The website does not provide services to minors under 18 years of age. In the case of requests by or for minors, the parent or guardian must provide the data.

Changes to this Privacy Policy

The owner has the right to modify this document by notifying users on this page or, if feasible and possible, via the contact information in its possession. Users are therefore advised to check this page regularly. To confirm the actual modification, please refer to the date of the last modification indicated at the bottom of the page.

The owner will collect the users’ consent again if the changes to this document concern data processing for which consent is required.

Data Protection Declaration for SSL/TLS Encryption

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as the requests you send to us as the website operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Methods, Places, and Times of Processing Collected Data

Owner and Data Controller

Simone Acerbis, Via Bellavista 5, 6930 Bedano, TEL: +41 91 945 53 26, info@acerbispaesaggistica.ch

Places of Data Storage

The personal data of users are stored and processed at the operational and administrative headquarters of the owner, as well as in the server farms where the servers hosting the website are located or on the servers making backup copies. The user’s personal data are located in Switzerland.

Data Storage Periods

In the case of data collected directly via the website, the data is stored for 24 months following the completion of the service. Or until consent is revoked.

If the owner is required to retain personal data in compliance with a legal obligation or by order of an authority, the owner may retain the data for a longer period, as necessary to meet these obligations.

At the end of the retention period, the personal data will be deleted. After this period, it will no longer be possible to access, delete, or transfer the data.

Methods of Processing Collected Data

The owner has designed an appropriate IT system to ensure security measures deemed adequate to prevent unauthorized access, disclosure, modification, unauthorized deletion, loss, misuse, or falsification of personal data.

The processing is carried out by our authorized personnel, using automated tools, in compliance with current regulations and in accordance with the principles of fairness, legality, transparency, confidentiality protection, and user rights, for the time strictly necessary to use the service. Our IT system is structured to prevent data loss, unlawful or incorrect use, and unauthorized access.

The user has the right to obtain information on the security measures adopted by the owner to protect the data.

We would like to point out that data transmission over the Internet (e.g., communication by email) may have security gaps. Complete protection of data against access by third parties is not possible.

Access to Data Beyond the Owner

Only the owner and/or external entities (such as third-party IT service providers, server farms, communication agencies, providers of complementary services) have access to the personal data collected by https://acerbispaesaggistica.ch/. If necessary, these entities are appointed by the owner as data processors.

The user can request at any time from the owner of the processing an updated list of the data processors.

Notification of Unauthorized Access to the Data Protection Authority

Our IT system is monitored and controlled by technicians and system administrators. However, although considered a remote possibility, unauthorized access may occur. If this happens, the owner is committed, as required by GDPR, to report it to the Data Protection Authority within the legal time frame.

Types of Data Collected

The website collects user data directly or through third parties. Further details on the types of data collected for each service are specified in the dedicated sections of this privacy policy. The types of data collected automatically are:

  • IP address (in anonymous form)
  • Browser used and type of device used for connection
  • Arrival web page (or source), list of visited pages, path followed, time spent on each page, and exit page
  • Date and time of visit
  • In general, technical navigation data

These latter are collected in aggregated and anonymous form.

The website uses statistical tools to track user navigation; the analysis is carried out through logs. It does not directly use cookies but may use cookies by including third-party services.

The personal data that the user may voluntarily and optionally provide by filling out forms include (but are not limited to):

The use of the contact form(s) to contact the website owner is not mandatory for browsing the site, but its use implies explicit consent to be contacted. If the user prefers not to provide these data, the service will still be provided by the website.

Sending emails, making phone calls, or any contact between the user and the website owner through site data is optional but involves the subsequent collection and processing of the personal data provided. These relationships are no longer governed by this statement but by the owner’s company policies.

Before entering third-party data on the website, the user must ensure they have the permissions and legal basis. The website cannot be held responsible for such abuses.

Each use of cookies is detailed in the Cookie Policy.

Purposes of Processing Collected Data

The user’s data are collected by the owner for the following purposes:

  • Providing technical and commercial information
  • Providing quotes to users
  • Contacting the user
  • Complying with legal obligations
  • Responding to legal actions
  • Identifying and protecting against abuse on the website (such as spam protection)
  • < li>Statistics and analysis of user behaviors

The user can request at any time from the owner of the processing clarifications on the purposes of each processing.

Legal Basis for Processing Collected Data

The owner collects personal data from users in the cases described below.

The processing is necessary:

  • If the user has deliberately consented to the processing for one or more purposes
  • For pre-contractual relationships such as, for example, providing a quote or submitting a contract to the user
  • To provide a service to the user
  • So that the owner can comply with a legal obligation
  • So that the owner can perform a task of public interest
  • So that the owner can exercise public powers
  • For the owner’s obligation to perform tasks of public interest
  • So that the owner or third parties can pursue their legitimate interests.

The user can request at any time from the owner of the processing clarifications on the legal basis of each processing.

Specific Details on the Collection and Use of Personal Data

To Contact the User

Contact Forms

Service Provider: The website

Purpose of the Service: The user can fill out the contact/information request forms, entering their data, thereby explicitly consenting to their use to respond to requests of the nature indicated in the form header.

Personal data that may be collected: Name, surname, email, phone number, and any other data the user chooses to enter in the fields. Entering any data in the contact forms represents explicit consent to its processing.

Collected Personal Data: Name, surname, email address, other data entered by the user.

Place of Processing: Switzerland. (IF HOSTING IS NOT WITH US; INQUIRE – IF AN SMTP SERVICE IS USED, CLARIFY IN WHICH COUNTRIES THE SERVERS ARE LOCATED)

For Statistics

These services are used by the owner of the processing and third parties to analyze user traffic on the website.

The collected data and their use by third-party services are governed by their respective privacy policies to which reference is made.

Google Analytics

Service Provider: Google, Inc.

Purpose of the Service: Web analysis service. This service collects user data (in anonymous form thanks to IP anonymization) to monitor and analyze the use of the website, generate reports, and use them for other Google services as well.

Collected Data: Anonymized IP address, usage data

Place of Processing: Netherlands or United States (depending on the country from which the website is accessed).

Privacy Policy: https://policies.google.com/privacy

Opt-Out: https://tools.google.com/dlpage/gaoptout?hl=en

Participant in the Privacy Shield

Displaying Content from External Platforms

Google Fonts

Service Provider: Google, Inc.

Purpose of the Service: Displaying fonts different from the standard fonts of the browser.

Collected Data: Usage data and those specified in Google’s privacy policy.

Place of Processing: Netherlands or United States (depending on the country from which the website is accessed).

Privacy Policy: https://policies.google.com/privacy

Use of Google Maps

This website uses the Google Maps service. This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently. When you visit the website, Google records your visit to the website page. This happens regardless of whether you have a Google user account or not. If you are logged in to Google, your data will be directly associated with your account. If you do not wish to be associated with your Google profile, you must log out before using the maps. Google saves your data as usage profiles and uses them for advertising, market research, and/or tailoring its website to your needs. This evaluation takes place in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, although you must contact Google to exercise this right.

User Rights

The user has all the rights provided for by Art. 12 of the EU GDPR, the right to control, modify and supplement (rectify), delete their personal data by contacting the owner or, in the case of third-party services, by accessing their websites as listed.

Specifically, they have the right to:

  • Access: know whether the owner holds personal data relating to the user and what these data are (Art. 15 Right of Access)
  • Modify, supplement, or rectify inaccurate or incomplete personal data (Art. 16 Right to Rectification)
  • Request the deletion of all or part of the personal data retained if one of the reasons provided for by the GDPR exists (Art. 17 Right to Erasure)
  • Withdraw consent at any time
  • Limit the processing to only part of the personal data, or completely revoke consent to the processing if one of the reasons provided for by the Regulation exists (Art. 18 Right to Restriction of Processing)
  • Receive or transfer to another owner a copy of all personal data held by the owner, in a commonly used, organized, and machine-readable format (Art. 20 Right to Data Portability)
  • Object in whole or in part to the processing of data if this was done for reasons other than explicit consent (Art. 21 Right to Object)
  • Object to the processing of data in an automated or non-automated manner for profiling purposes (so-called Consent). Users are informed that they can object to the processing of data used for advertising purposes without providing any reason
  • File a complaint with the supervisory authority or take legal action.

How a User Can Exercise Their Rights

The user can exercise their rights above by making a request to the owner of the processing.

Exercising a right has no cost. The owner undertakes to fulfill the requests as soon as possible and in any case within one month.

The user has the right to file a complaint with the Data Protection Authority.

Additional Information on Data Processing

Defense in Court

In the event of court proceedings for misuse by the user in the use of the website or related services, the owner has the right to disclose the user’s personal data. It is also required to provide such data upon request of public authorities.

Request for Specific Information

The user has the right to request specific information from the owner of the processing about the services available on the website and/or the collection and use of personal data.

Data Collection for System Logs and Maintenance

The website and/or third-party services may collect the user’s personal data, such as the IP address, in the form of system logs. The collection of these data is related to the operation and maintenance of the website.

Information Not Contained in This Policy

The user has the right to request at any time from the owner of the data processing additional information not present in this policy regarding the processing of personal data. The owner can be contacted using the contact information provided.

“Do Not Track” Requests

“Do Not Track” requests are not supported by the website.

The user is invited to consult the privacy policies of the third-party services listed above to find out which types of requests are supported.

Definitions

Personal Data (or Data, or User Data)

Personal data are information that identifies or makes a person identifiable, directly or indirectly, and that can provide information about their characteristics, habits, lifestyle, personal relationships, health status, economic situation, etc.

Usage Data

Usage data are information collected automatically during the navigation of the website, both by the website itself and by third-party applications included in the site. Examples of usage data include the IP address and details of the device and browser (including geographical location) that the user uses to navigate the site, addresses in URI notation, server response codes, pages viewed, and the duration of the user’s stay on each page.

User

The person who uses the website.

Coincides with the data subject, unless otherwise specified.

Data Subject

The data subject is the natural person to whom the personal data refers. So, if a processing concerns, for example, the address or other data of Mario Rossi, this person is the data subject (Article 4, paragraph 1, point 1 of the EU Regulation 2016/679).

Data Controller (or Controller)

The controller is the natural or legal person or public administration to whom the owner entrusts specific and defined management and control tasks on their behalf of data processing, even outside their organizational structure (Article 4, paragraph 1, point 8 of the EU Regulation 2016/679). The Regulation has introduced the possibility for a controller to designate another so-called “sub-controller” under certain conditions (Article 28, paragraph 2).

Data Owner (or Owner)

The owner is the natural person, public authority, company, public or private entity, association, or legal person, etc., who makes decisions about the purposes, means, and methods of processing (Article 4, paragraph 1, point 7 of the EU Regulation 2016/679).

Website

The website through which users’ personal data is collected and processed. In this case https://acerbispaesaggistica.ch/

Service

The service offered by the website as indicated in the relevant terms.

European Community (or EU)

Any reference to the European Community extends to all current member states of the European Union and the European Economic Area, unless otherwise specified.