Privacy Policy
INFORMATION ON THE PROCESSING OF USERS' PERSONAL DATA
Pursuant to Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and to all applicable national and European Union legislation
I. Data Controller
Vero Project S.p.A., with registered office in Concesio (BS), Italy, Via Stella no. 44, Tax Code and VAT No. 07623480964, represented by its legal representative pro tempore, as Data Controller (hereinafter the “Data Controller”), informs you that your personal data will be processed for the purposes and in the manner specified below.
Personal data will be processed in compliance with the law and in accordance with the principles of necessity, fairness, lawfulness, transparency, protection of your privacy and your rights, purpose and storage limitation, data minimisation, accuracy and quality, and data integrity and security.
For any matter relating to the processing of your personal data, you may contact the Data Controller at the following email address: privacy@veroproject.it
II. Categories and source of the personal data processed
Browsing data. The IT systems and software procedures used to operate the website https://www.veroprojectgroup.com (hereinafter the “Website”) acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified data subjects; however, by its very nature, it could, through processing and association with data held by third parties, allow users to be identified. This category includes the IP addresses or domain names of the computers used by users connecting to the Website, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server's response (successful, error, etc.) and other parameters relating to the user's operating system and IT environment. These data are used solely to obtain anonymous statistical information on the use of the Website and to check that it is working correctly, and are deleted immediately after processing. The data may be used to establish liability in the event of potential computer crimes against the Website; except in this case, browsing data are not kept for more than seven days and in any event no longer than is necessary to deal with the requests submitted.
Data voluntarily provided by the User to register for and access the customer area of the Website. Registration for the customer area of the Website requires the collection of specific data provided by the data subject, such as first name, surname, email address, role within the company and content of the message. These personal data will be processed by the Data Controller solely for the purpose of creating an account on the Website for the customer. Subsequent use of the functions available in the customer area of the Website requires prior login to that area, for which certain personal data are required (for example, username and password).
Data voluntarily provided by the User via the contact form. The optional, explicit and voluntary sending of messages via the contact form available on the Website entails the subsequent collection of the data provided by the sender (first name, surname, email address, content of the message), which are needed to respond to the requests submitted. Personal data collected in this way will be processed by the Data Controller solely for the purpose of responding to the request for information received and for any subsequent related communications.
Data voluntarily provided by the User via the free demo request form. A free demo of the Data Controller's products can be formally requested on the Website. Such a request is subject to the Data Controller collecting the following data: first name, surname, business sector, email address, telephone number and content of the message. Personal data collected in this way will be processed by the Data Controller solely for the purpose of responding to the request and for any subsequent related communications.
Data voluntarily provided by the User via the course registration form. Registration for courses offered by the Data Controller may require the following personal data to be provided: email address, telephone number, VAT number and content of the message. These personal data will be processed by the Data Controller solely for the purpose of responding to the request and for any subsequent related communications.
Data voluntarily provided by the User via the newsletter subscription form. Users voluntarily provide data via the newsletter subscription form. To subscribe to the Website's newsletter, the following personal data must be provided: email address and first name. These data will be processed by the Data Controller solely for the purpose of handling the request and for any subsequent related communications.
Data processed as part of the reporting procedure (Whistleblowing). The submission of reports of relevant events pursuant to Italian Legislative Decree no. 24/2023 through the reporting channel set up by the Data Controller may involve the processing of personal data such as, by way of example, the first name, surname and job role of the reporting person and may, depending on the content of the reports and of the documents attached to them, give rise to the processing of special categories of personal data pursuant to Article 9 of Regulation (EU) 2016/679 (including data concerning health, sexual orientation or trade union membership) or personal data relating to criminal convictions and offences pursuant to Article 10 of Regulation (EU) 2016/679, in accordance with the specific Privacy Notice on whistleblowing available at the following link: [-].
Except as expressly provided for by law, the Data Controller does not collect personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, nor does it process genetic data, biometric data for the purpose of uniquely identifying a natural person, or data concerning users' health, sex life or sexual orientation. The Data Controller therefore asks users not to provide such data.
Consent given by minors to the processing of their personal data is valid from the age of 16. The Data Controller will not process the personal data of minors under the age of 16 unless their parents or legal guardians consent to the collection, use and disclosure of information relating to the minors by the Data Controller.
III. Purposes of data processing
On the basis of the user's free, explicit and informed consent or in other legally permitted circumstances (including Article 6 of Regulation (EU) 2016/679), the Data Controller informs you that personal data will be processed for the following purposes:
- research and statistical analysis on aggregated or anonymous data, thus ensuring that the user cannot be identified, aimed at assessing how the Website works, measuring traffic and assessing usability and interest;
Legal basis: legitimate interest of the Data Controller.
- handling of contact requests received via the Website's contact form, the free demo request form, the course registration form and the newsletter subscription form;
Legal basis: performance of a contract to which the user is a party or pre-contractual measures taken at the user's request.
- receipt and handling of reports of potentially relevant events pursuant to Italian Legislative Decree no. 24/2023;
Legal basis: compliance with a legal obligation to which the Data Controller is subject and pursuit of the Data Controller's legitimate interest in exercising its specific rights, including in the field of employment law.
The Data Controller informs you that, if the personal data required for the purposes described in point b) are not provided, it will be objectively impossible to provide you with the services offered by the Data Controller through the Website.
- sending of commercial communications (newsletters) by email relating to the products or services offered by the Data Controller;
Legal basis: express consent.
IV. Processing methods and data retention period
The personal data of data subjects are processed mainly by electronic means by personnel authorised to process them pursuant to Article 29 of Regulation (EU) 2016/679 or by data processors appointed pursuant to Article 28 of Regulation (EU) 2016/679, for the time necessary to achieve the purposes for which they were collected or for any other legitimate purpose connected with them, and in any event no longer than the time limits laid down by law for the protection of rights and/or for compliance with legal obligations. Appropriate security measures are in place to prevent the destruction or loss of data, unauthorised use and unauthorised access, pursuant to Article 32 of Regulation (EU) 2016/679.
V. Disclosure and dissemination of data
The personal data collected about the user will not be disseminated in any way, without prejudice to the Data Controller's right to disclose them to third parties whose activities are necessary for and connected with the achievement of the purposes indicated above, such as, by way of example but not limited to: email service providers, suppliers involved in occasional maintenance and repair work, cloud service providers, hosting and virtual server providers, connectivity and telephone service providers, chat and communication service providers, mailing list service providers, file transfer service providers, remote support service providers, social networks, third parties that perform or distribute banking, financial and insurance services, archiving, support and consultancy activities, and administrative and judicial authorities competent to request and obtain information concerning you.
Your data may also be disclosed to professional partners and/or companies based abroad – in countries inside and outside the European Union or the European Economic Area (so-called “third countries”) recognised by the European Commission as providing an adequate level of personal data protection or, if not, only where a level of personal data protection adequate in relation to that of the European Union is guaranteed contractually by the company based in the third country (for example, by signing the standard contractual clauses provided by the European Commission) and the exercise of data subjects' rights is always ensured.
More specifically, personal data made available through the Website may be transferred to servers located outside the EU where the IT service providers used by the Data Controller (listed above as recipients) require it, or where they use cloud computing technology that does not make it possible to determine with certainty where the user's data are located.
VI. Rights of the data subject
Each data subject may exercise at any time the rights set out in Articles 15 et seq. of Regulation (EU) 2016/679. In particular, each data subject may ask the Data Controller to confirm whether or not personal data concerning them exist, and request access to their personal data and the rectification or erasure of such data or the restriction of processing concerning them, or object to processing, in addition to the right to data portability and the right to lodge a complaint with the data protection supervisory authority. Data subjects may obtain information on the source of the personal data and, where applicable, whether the data come from publicly accessible sources. In addition, where processing is based on explicit consent, the data subject has the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent given before its withdrawal.
To ensure that your data are not breached or unlawfully used by third parties, before granting a request to exercise any of the above rights, we will ask you for some information to verify your identity.
You may exercise your rights by sending a written request to the email address: privacy@veroproject.it.
This information notice is drawn up in Italian. In the event of any conflict between the Italian version and any translation into another language, the Italian version shall prevail.
