Following a policy of transparency and fairness, in compliance with applicable regulations and with particular reference to national legislation and to European Privacy Regulation No. 679/2016 (“GDPR”, hereinafter “Privacy Code”), Web Lab S.a.s. provides the following information regarding the processing of personal data provided by the user.
It is specified that, pursuant to Article 4, paragraph 1, letter a) of the Privacy Code, “processing” means: “any operation or set of operations, carried out with or without the aid of electronic means, concerning the collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, erasure and destruction of data, even if not recorded in a database”.
1. PURPOSE OF DATA PROCESSING
1.1. The data provided or otherwise acquired by the Data Controller directly from the User or from third parties are processed by our company and/or by our authorized personnel for the following purposes:
a) for the performance of its activities relating to the execution, management, conclusion and fulfillment of existing pre-contractual and contractual relationships, in order to provide the services requested or provided to the User, as well as for the performance of activities strictly connected thereto;
b) for compliance with obligations provided by laws, regulations, provisions issued by authorities and supervisory and control bodies;
c) for the performance of commercial activities aimed at promoting services and products offered by the Data Controller and/or its commercial Partners, including the sending of advertising material or periodic communications.
1.2. The Data Controller will collect or process the data. Such data may subsequently be acquired and processed by the Controller’s Partner entities that are required to deliver goods or provide the purchased services, always within the limits in which such processing is instrumental to the specific purpose pursued by the transaction or the requested services.
1.3. The collected data will also be processed by the Data Controller, without the need for explicit consent, in accordance with Article 130, paragraph 4 of the Privacy Code and with the decision of the Data Protection Authority “Simplifications of certain obligations in the public and private sectors with regard to processing for administrative and accounting purposes” dated 19/06/2008, for commercial communications, the offering of products or services, the sending of advertising material, and the carrying out of market research by the Data Controller via postal mail and email. Pursuant to Article 7, paragraph 4 of the Privacy Code, the customer may object at any time to the processing of personal data concerning them for the purposes of sending advertising material, direct sales, market research, or commercial communications.
1-bis. PROCESSING OF DATA FOR B2B COMMERCIAL PROSPECTING ACTIVITIES
1-bis.1. As part of its commercial development activities, Web Lab S.a.s. ("Data Controller") processes business contact data (such as professional email address,
company name and, where available, the name of the contact person) obtained from publicly accessible sources, such as institutional websites of companies operating in the maintenance and technical assistance sector, for the purpose of offering a free trial of the ReportAgile software.
1-bis.2. The legal basis for the processing is the Data Controller's legitimate interest (Article 6(1)(f) GDPR) in promoting its services to professional parties for whom the offer is relevant given their sector of activity. The processing is limited to data of a professional nature, collected from public sources, and does not involve the use of special categories of data.
1-bis.3. The recipient may object to such processing at any time, without providing any justification, by using the unsubscribe link included at the bottom of
each communication, or by writing to info@reportagile.com. In the event of an objection, the Data Controller will cease sending further commercial communications to the address indicated.
1-bis.4. Data collected for this purpose is retained for the time strictly necessary to manage the commercial contact and, in any event, for no longer than 24 months from the last interaction, unless a contractual relationship is established, which justifies retention in accordance with the purposes referred to in point 1.1.
1-bis.5. To send communications, the Data Controller uses the service provider Brevo (Sendinblue SAS, France), appointed as data processor pursuant to
Article 28 GDPR, which manages the sending of emails and the unsubscribe function.
1-bis.6. Where the recipient is located outside the European Economic Area, the processing of the relevant professional contact data is carried out in
compliance with the Italian and European legislation applicable to the Data Controller, as well as, where relevant, the local personal data protection legislation
applicable to the recipient.
1-bis.7. For recipients located in the United Kingdom, the sending of commercial communications to entities with their own legal personality ("corporate
subscribers") does not require prior consent pursuant to the PECR (Privacy and Electronic Communications Regulations 2003, Regulation 22). The Data Controller does not
send unsolicited commercial communications to sole traders, individual businesses or partnerships without their own legal personality located in the United Kingdom, unless prior consent has been given.
2. METHODS OF DATA PROCESSING
The processing in question is carried out in accordance with the methods provided for by the Privacy Code, including through IT and automated tools, by means of operations such as collection, recording, organization, storage, processing, selection, comparison, use, interconnection, consultation, communication, erasure, destruction, and blocking of data, in compliance with the principles of security, accessibility, confidentiality, and integrity.
The data are processed and retained within the time limits established by law. Processing is carried out directly by the organization of the Data Controller and by external entities forming part of the network of commercial Partners. The data are not subject to dissemination.
3. PROVISION OF DATA
The provision of personal data is necessary for the conclusion and management of the contract. Any refusal to give consent may result in the impossibility of performing the requested services. The provision of data for marketing purposes is optional.
4. SCOPE OF DATA COMMUNICATION AND DISCLOSURE
4.1. The data may be communicated to collaborators of the Data Controller and to external parties connected with the management of the contractual relationship.
4.2. Personal data will not be disclosed.
5. DATA SUBJECT’S RIGHTS
The data subject has the rights provided for by Article 7 of the Privacy Code and Articles 15–22 of the GDPR, including the right of access, rectification, erasure, restriction of processing, data portability, objection, and the right to lodge a complaint with the supervisory authority.
DATA ERASURE
The Data Controller has implemented procedures to allow the erasure or restriction of data when they are no longer necessary, when consent has been withdrawn, or when the data are processed unlawfully.
5.2
To exercise these rights, the data subject may write to Web Lab S.a.s., Via Cavour 151, 10091 Alpignano (TO), or email [info@weblabagency.com](mailto:info@weblabagency.com).
6. DATA CONTROLLER
6.1. The data may be processed by the Data Controller and by its collaborators.
6.2. The data may also be processed by third parties appointed as external data processors.
7. TYPES OF DATA COLLECTED
Among the data collected are: first name, last name, telephone number, company name, VAT number, address, email, cookies, usage data, and password.
8. FURTHER INFORMATION
Web Lab S.a.s. adopts appropriate security measures in accordance with Articles 31 and 32 of the GDPR.
The website may use Google reCAPTCHA and Google Analytics.
9. COOKIE POLICY
In compliance with the decision of the Italian Data Protection Authority dated 8 May 2014, Web Lab S.a.s. provides this cookie information notice.
Types of cookies used by Web Lab:
– technical cookies
– analytics cookies
– geolocation cookies
– registration cookies
– advertising cookies
– third-party cookies
The user can manage or disable cookies through their browser settings.