NOTICE ON THE PROCESSING OF PERSONAL DATA OF WEBSITE USERS

Articles 13 and 14 of Regulation 2016/679/EU (hereinafter also „GDPR“)

Why this notice

Rapitech is committed to respecting and protecting your privacy and wants you to feel safe both while simply browsing the website and if you decide to register by providing your personal data to use the services available to its Users and/or Clients. On this page, Rapitech aims to provide information about the processing of personal data relating to users who visit or browse the website accessible online at rapitech.it. This privacy notice applies solely to the Rapitech website and not to any other websites that may be accessed by users through links (for which reference should be made to their respective privacy policies). Reproducing or using pages, materials, and information contained within the Website, by any means and on any medium, is not permitted without Rapitech’s prior written consent. Copying and/or printing for strictly personal and non-commercial use is allowed (for requests or clarifications, contact Rapitech at the details provided below). Any other use of the content, services, and information on this site is not permitted.

Regarding the content and information provided, Rapitech will make every effort to keep the Website’s content reasonably up to date and reviewed, without providing any guarantees as to the accuracy, adequacy, or completeness of the information. Rapitech explicitly disclaims any liability for any errors or omissions in the information provided on the Website.

Origin – Navigation Data

Rapitech informs you that the personal data you provide, as well as data collected when requesting information or contacting us, registering on the website, and using services via smartphone or any other device used to access the Internet—including data necessary to provide these services, browsing data, and data used for any purchases of products and services offered by Rapitech, as well as so-called “navigation” data from users visiting the site—will be processed in compliance with applicable law. The IT systems and software procedures used to operate this website automatically collect certain personal data during normal operation. This data is transmitted implicitly through the use of the Internet. Such information is not collected to be associated with identified individuals, but by its nature it could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of users’ computers connecting to the site, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the web server, the size of the file obtained in response, the numerical code indicating the server’s response status (success, error, etc.), and other parameters related to the user’s operating system and IT environment. These data are used solely to generate anonymous statistical information on website usage and to check the correct functioning of Rapitech’s website. It should be noted that this data could be used to establish liability in the event of cybercrimes against Rapitech’s site or related/connected sites; except in such cases, web contact data is currently not stored for more than a few days.

Origin – Data provided by the User

Rapitech collects, stores, and processes your personal data for the purpose of providing the products and services offered on the Website, or to comply with legal obligations. For certain specific Services, Products, Promotions, etc., Rapitech may also process your data for commercial purposes. In such cases, separate, explicit, optional consent will be requested, which can always be withdrawn according to the methods and contacts provided below. Voluntary, explicit submission of emails to the addresses indicated in the dedicated section of the Website, as well as completing questionnaires (e.g., forms), communicating via chat, push notifications through the App, social networks, call centers, etc., involves the subsequent collection of some of your personal data, including those collected through the use of the App and related services, necessary to respond to your requests. Please note that when using a mobile connection to access digital content and services offered directly by Rapitech or through our Partners, it may be necessary to transfer your personal data to these third parties. You may also access areas of the Website where you can post information using blogs or forums, communicate with others—for example, through Rapitech’s pages on Facebook®, LinkedIn®, YouTube®, and other social networks—review products and offers, and post comments or content. Before interacting with these areas, we invite you to carefully read the Terms of Use, keeping in mind that, in some circumstances, the information you post may be visible to anyone with Internet access, and all information you include in your posts can be read, collected, and used by third parties.

Purpose of processing and legal basis

The data are processed for the following purposes:

1) strictly related to and necessary for registration on the rapitech.it website, for the services and/or Apps developed or made available by Rapitech, for accessing related informational services, managing contact or information requests, and for purchasing products and services offered through the Rapitech website.

2) for ancillary activities related to managing User/Client requests and sending responses, which may include the transmission of promotional material; for completing the purchase of offered products and services, including aspects related to credit card payments, shipment management, the possible exercise of the right of withdrawal for distance purchases, and updates on the availability of products and services that are temporarily unavailable;

3) related to the fulfillment of obligations under EU and national laws, the protection of public order, and the investigation and prosecution of crimes.

4) direct marketing, i.e., sending advertising material, direct sales, conducting market research, or commercial communication of products and/or services offered by Rapitech; this activity may also involve products and services of Rapitech Group companies and may be carried out through sending advertising/informational/promotional materials and/or invitations to participate in initiatives, events, and offers aimed at rewarding users/clients, using “traditional” methods (e.g., postal mail and/or operator calls) or “automated” contact systems (e.g., SMS and/or MMS, automated phone calls, emails, fax, interactive applications), pursuant to Article 130, paragraphs 1 and 2, of Legislative Decree no. 196/03 and subsequent amendments. Providing data for the purposes listed in points 1), 2), and 3)—related to a pre-contractual and/or contractual phase or functional to a user request or required by specific legal provisions—is mandatory. Without this, it will not be possible to receive information or access the requested services. Regarding point 4) of this Privacy Notice, the user/client’s consent to data processing is voluntary and optional and can always be withdrawn without affecting the usability of products and services, except that Rapitech will not be able to keep users/clients informed about new initiatives or particular promotions or benefits that may be available.

Rapitech may send commercial communications regarding products and/or services similar to those already provided, pursuant to Directive 2002/58/EC, using the email or postal addresses you have provided on such occasions. You may object to these communications using the methods and contacts indicated below.

Methods, logic of processing, retention periods, and security measures

The processing is carried out using electronic or otherwise automated means and is performed by Rapitech and/or third parties that Rapitech may use to store, manage, and transmit the data. Data processing is carried out according to organizational and operational procedures, including logs generated from access to and use of services available via the web, as well as the products and services used, for the purposes outlined above, and in any case in a manner that ensures the security and confidentiality of the data. Personal data will be retained for the periods required by applicable law.
Regarding data security, in sections of the website designed for specific services where personal data is requested from users, the data is encrypted using a security technology called Secure Sockets Layer (SSL). SSL encrypts information before it is exchanged over the Internet between the user’s device and Rapitech’s central systems, making it unintelligible to unauthorized parties and ensuring the confidentiality of transmitted information. Additionally, transactions carried out using electronic payment methods are processed directly through the Payment Service Provider’s (PSP) platform, and Rapitech retains only the minimum set of information necessary to manage any disputes. With respect to personal data protection, users/clients are encouraged, pursuant to Article 33 of the GDPR, to report to Rapitech any circumstances or events that could lead to a potential personal data breach, so that Rapitech can promptly assess the situation and take any necessary actions. Reports can be sent to info@rapitech.it or through Customer Service. The measures adopted by Rapitech do not exempt clients from taking appropriate precautions, such as using sufficiently complex passwords/PINs, updating them periodically—especially if they suspect they have been compromised—and keeping them secure and inaccessible to third parties to prevent improper or unauthorized use.

COOKIE NOTICE

The website uses cookies and similar technologies to ensure the proper functioning of its processes and to enhance the online user experience. This document provides detailed information on the use of cookies and similar technologies, how they are used, and how to manage them.

Definitions

Cookies are small text fragments (letters and/or numbers) that allow a web server to store information on the client (browser) to be reused during the same website visit (session cookies) or later, even after several days (persistent cookies). Cookies are stored by the individual browser on the specific device used (computer, tablet, smartphone), according to the user’s preferences. Similar technologies, such as web beacons, transparent GIFs, and all forms of local storage introduced with HTML5, can be used to collect information about user behavior and service usage. In the rest of this document, we will refer to cookies and all similar technologies simply as “cookies.”

Types of cookies

Based on their characteristics and use, cookies can be categorized as follows: Strictly Necessary Cookies: These are essential for the proper functioning of the website and are used to manage login and access to restricted site features. Their duration is limited to the session (they are deleted when the browser is closed). They are used throughout the site. Analytics and Performance Cookies: These cookies are used to collect and analyze website traffic and usage anonymously. While they do not identify individual users, they can, for example, detect if the same user returns at different times. They also help monitor the system and improve its performance and usability. Disabling these cookies does not affect the site’s functionality. Profiling Cookies: These are persistent cookies used to identify (anonymously or not) the user’s preferences and improve their browsing experience.

Third-party cookies

When visiting a website, cookies may be received both from the site being visited (“first-party”) and from sites managed by other organizations (“third-party”). A notable example is the use of social plugins for Facebook, Twitter, Google+, and LinkedIn. These are parts of the visited page generated directly by those sites and embedded within the host website’s page. The most common use of social plugins is to allow sharing content on social networks. The presence of these plugins involves the transmission of cookies to and from all third-party sites. The handling of information collected by third parties is governed by their respective privacy policies, which should be consulted. For greater transparency and convenience, the web addresses of the various privacy notices and instructions for managing cookies are provided below.
Facebook notice: https://www.facebook.com/help/cookies/
Facebook (configuration): access your account. Privacy section.
Twitter notice: https://support.twitter.com/articles/20170514
Twitter (configuration): https://twitter.com/settings/security
Linkedin notice: https://www.linkedin.com/legal/cookie-policy
Linkedin (configuration): https://www.linkedin.com/settings/
Google+ notice: http://www.google.it/intl/it/policies/technologies/cookies/
Google+ (configurazione): http://www.google.it/intl/it/policies/technologies/managing/

Google Analytics

The website also includes certain components provided by Google Analytics, a web traffic analysis service offered by Google, Inc. (“Google”). In this case as well, these are third-party cookies collected and managed anonymously to monitor and improve the performance of the host website (performance cookies).
Google Analytics uses cookies to collect and analyze information about website usage anonymously (including the user’s IP address). This information is processed by Google Analytics to produce reports for website operators regarding site activity. This website does not use (and does not allow third parties to use) Google Analytics to monitor or collect personally identifiable information. Google does not associate the IP address with any other data held by Google, nor does it attempt to link an IP address with a user’s identity. Google may share this information with third parties if required by law or if such third parties process the information on Google’s behalf.
For more information, please see:
https://www.google.it/policies/privacy/partners/
Users can selectively disable Google Analytics by installing the opt-out component provided by Google. To disable Google Analytics, please visit: https://tools.google.com/dlpage/gaoptout

Cookie Duration

Some cookies (session cookies) remain active only until the browser is closed or the logout command is executed. Other cookies “persist” beyond the browser session and are available on subsequent visits. These are called persistent cookies, and their duration is set by the server when they are created. In some cases, an expiration date is set; in others, the duration is unlimited. While browsing the website, users may also interact with third-party sites that can create or modify persistent and profiling cookies.

Managing cookies

Users can choose whether to accept cookies by adjusting their browser settings.
Note: Disabling technical cookies, either fully or partially, may affect the use of features reserved for registered users. However, public content can still be accessed even if cookies are completely disabled. Disabling third-party cookies does not affect overall site navigation. Browser settings can often be customized for different websites and web applications. Most modern browsers also allow separate settings for “first-party” cookies and “third-party” cookies.
For example, in Firefox, you can access a control panel through the menu Tools → Options → Privacy, where you can choose whether to accept different types of cookies and manage their removal.
Chrome: https://support.google.com/chrome/answer/95647?hl=it
Firefox: https://support.mozilla.org/it/kb/Gestione%20dei%20cookie
Internet Explorer: http://windows.microsoft.com/it-it/windows7/how-to- manage-cookies-in-internet-explorer-9
Opera: http://help.opera.com/Windows/10.00/it/cookies.html
Safari: http://support.apple.com/kb/HT1677?viewlocale=it_IT