Privacy Policy

Data Controller

Aelion Project Soc. Coop a R.L.
Via Roma, 60
Guardiagrele (CH)
C.F e P.IVA: 02463580692

e-mail: info@aelionproject.com

Types of Data collected

This site processes data primarily based on user consent. Consent is provided via the banner at the bottom of the page, or through use or browsing of the site, as a conclusive action. By using or browsing the site, visitors and users approve this privacy policy and consent to the processing of their personal data in relation to the methods and purposes described below, including any disclosure to third parties if necessary to provide a service. Further consent forms relating to the specific purpose of the service are collected through the communication or service request forms. Providing your data and therefore consenting to the collection and processing of your data is optional. You may refuse consent, and may revoke consent already given at any time (via the banner at the bottom of the page, your browser’s cookie settings, or the Contact Us link). However, denying consent may make it impossible to provide certain services and your browsing experience on the site may be compromised. Data used for site security and to prevent abuse and SPAM, as well as data used to analyze site traffic (statistics) in aggregate form, are processed based on the Data Controller’s legitimate interest in protecting the site and its users. In such cases, the user always has the right to object to the processing of their data (see the section on User Rights). Data provided for consulting or professional assignments is processed based on the fulfillment of a contract and compliance with a legal obligation. In such cases, specific information is provided.

Purpose of the processing

This site collects user data in two ways.

Data collected automatically
During User navigation, the following information may be collected and stored in the site’s server (hosting) log files:
– Internet Protocol (IP) address;
– Browser type;
– Device parameters used to connect to the site;
– Name of the Internet Service Provider (ISP);
– Date and time of visit;
– Referral and exit web pages;
– Possibly, the number of clicks.

This data is used for statistical and analytical purposes only, in aggregate form. The IP address is used exclusively for security purposes and is not cross-referenced with any other data.

Data provided voluntarily
The site may collect additional data when users voluntarily use services, such as commenting and communication services (contact forms, comment boxes), and these data will be used exclusively to provide the requested service:
– name;
– email address;
– any additional data voluntarily submitted by the user.

Type of data collected

The Data Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data. The processing of data collected by the site, in addition to the purposes related, instrumental, and necessary to providing the service, is aimed at the following purposes:

Statistics (analysis)
Collection of data and information in an exclusively aggregated and anonymous form to verify the proper functioning of the site. None of this information is related to the individual user of the site, and does not allow identification in any way. Consent is not required.
Security
Data and information are collected to protect the security of the site (spam filters, firewalls, virus detection) and its users, and to prevent or detect fraud or abuse of the website. The data is recorded automatically and may also include personal data (IP address), which may be used, in accordance with applicable laws, to block attempts to damage the site or other users, or otherwise prevent harmful or criminal activities. This data is never used to identify or profile users and is deleted periodically. Consent is not required.
Ancillary Activities
Disclose data to third parties who perform functions necessary or instrumental to the operation of the service (e.g., comment boxes), and to allow third parties to perform technical, logistical, and other activities on our behalf. Suppliers have access only to the personal data necessary to perform their tasks and undertake not to use the data for other purposes. They are required to process personal data in accordance with applicable regulations.
Consultations and Professional Assignments
If you voluntarily submit data to request professional advice or a professional assignment, the data will be used solely for the purpose of evaluating the assignment and, if applicable, for its fulfillment. In such cases, specific information will be provided.

The updated list of Data Processors may always be requested from the Data Controller.

Place

The data is processed at the Data Controller’s headquarters and at the web hosting provider’s data center (ARUBA S.P.A.). The web hosting provider is responsible for processing the data on behalf of the data controller. ARUBA is located in the European Economic Area and complies with European regulations (Aruba privacy policy).

Retention period

The Data is processed and stored for the time required by the purposes for which it was collected.

Therefore:

Personal Data collected for purposes related to the performance of a contract between the Owner and the User will be retained until such contract has been fully performed.
Personal Data collected for purposes related to the Data Controller’s legitimate interest will be retained until such interest is fulfilled. Users may obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.

When processing is based on the User’s consent, the Data Controller may retain the Personal Data for a longer period until such consent is revoked. Furthermore, the Data Controller may be required to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority.

At the end of the retention period, the Personal Data will be deleted. Therefore, upon expiration of this period, the right to access, erasure, rectification, and the right to data portability can no longer be exercised.

Cookie

For information regarding the use of cookies through the Site, please read the Cookie Policy.

User Rights

Pursuant to Article 13 of Regulation 2016/679, the user has the right to obtain access to personal data at any time, to rectify and erase it, to limit its processing, and to object to its processing.

In particular, the User has the right to:

withdraw consent at any time. The User may revoke the consent to the processing of his/her Personal Data previously expressed.
object to the processing of your data. Users may object to the processing of their data when it occurs on a legal basis other than consent. Further details on the right to object are provided in the section below.
access your data. The User has the right to obtain information on the Data processed by the Data Controller, on certain aspects of the processing and to receive a copy of the processed Data.
verify and request rectification. The User can verify the accuracy of his/her Data and request its updating or correction.
obtain restriction of processing. When certain conditions apply, the User may request that the processing of their Data be limited. In this case, the Data Controller will not process the Data for any purpose other than its storage.
obtain the deletion or removal of your Personal Data. When certain conditions apply, the User may request that the Data Controller delete their Data.
receive your Data or have it transferred to another owner. The User has the right to receive their Data in a structured, commonly used, and machine-readable format and, where technically feasible, to have it transmitted to another controller without hindrance. This provision applies when the Data is processed by automated means and the processing is based on the User’s consent, on a contract to which the User is a party, or on contractual provisions related to it.
lodge a complaint. The User may lodge a complaint with the competent data protection supervisory authority or take legal action.

How to exercise your rights

To exercise User rights, Users may direct a request to the Data Controller’s contact details provided in this document. Requests are submitted free of charge and processed by the Data Controller as quickly as possible, in any case within one month.

Last modified: January 13, 2021