Privacy Policy

Information on data processing pursuant to articles. 13/14 of EU Regulation 2016/679. To users of the website

1. Introduction

GOFOR360 Srl with registered and operational headquarters in via Val Camonica, n. 8, 20900 Monza (MB), registered in the Monza Company Register, tax code and VAT number no. 10816840960 (hereinafter the “Data Controller” or “Gofor360”), considers the protection of the personal data of its and/or potential users of fundamental importance, guaranteeing that the processing of personal data, carried out in any way, whether automated or manual, takes place in full compliance with the protections and rights recognized by Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, relating to the protection of natural persons with regard to the processing of personal data, as well as free movement of such data (hereinafter the "Regulation") and by the further applicable rules regarding the protection of personal data.

This Policy (hereinafter the “Site Policy”) has the specific purpose of describing the management methods of the website (hereinafter the “Website”), in reference to the processing of personal data of users/visitors who consult it pursuant to the Regulation.

Gofor360, in line with the applicable regulations on the matter, intends to guarantee the protection and security in the processing of the personal data of each visitor, also in relation to internet access made from abroad, consistently with what is prescribed in this Site Information.

Unless otherwise specified and regulated by a specific privacy information provided pursuant to article 13 of the Regulation, this Site Information must also be understood as a document aimed at providing the information referred to in articles 13 and 14 of the Regulation to those who are in browse the Website and interact with the Data Controller through the services offered by the Website itself.

It is specified that this Site Information is applicable exclusively to the Internet Site and does not refer to other websites that may be consulted by the user during navigation by clicking on links and/or banners on the Internet Site.

2. Type of data processed and purposes of processing relating to navigation on this Website

The Website offers informative and sometimes interactive content. While browsing the Website, information about the user can be acquired in the following ways:

  • Browsing data

The computer systems and software procedures used to operate the Website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This category of data includes: IP addresses, the type of browser used, the operating system, the domain name and addresses of websites from which access or exit was made, information on the pages visited by users users within the site, access time, time spent on a single page, internal path analysis and other parameters relating to the user's operating system and IT environment.

Such technical/IT data is collected and used exclusively in an aggregate and non-identifying manner and could be used to ascertain responsibility in the event of hypothetical computer crimes against the site.

  • Data provided voluntarily by the visitor/user

This is all personal data freely released by the visitor on the Website, for example, to register and/or access a reserved area, request information on a specific service via a form, write to an email address or call a number to have direct contact with customer service. The processing of such personal data will be carried out on the basis of all the information contained in the General Privacy Policy provided pursuant to articles 13 and 14 of the Regulation at the time of providing personal data during registration as requested in the appropriate forms.

In some additional cases, personal data may be processed for profiling purposes collected by cookies. The processing of such personal data will be conducted on the basis of what is indicated in the cookie policy on the Website in the specific Cookie Policy section.

3. Methods of data processing

The processing of personal data is mainly carried out using electronic procedures and supports for the time strictly necessary, in accordance with Article 5 of the Regulation.
Personal data will be processed by the data controller limited to what is necessary for the pursuit of the main purpose. In particular, personal data will be processed for a period of time equal to the minimum necessary, as indicated in Recital 39 of the Regulation, i.e. until the termination of the existing contractual relationships between the interested party and the data controller, without prejudice to a further period of conservation which may be imposed by law as also provided for in Recital 65 of the Regulation.

4. Redirects to external sites

The Website may use so-called social plug-ins. Social plug-ins are special tools that allow you to incorporate social network features directly into the Website (e.g. the Facebook "like" function).

All social plug-ins present on the Website are marked with the respective logo owned by the social network platform.

When you visit a page of the Website and interact with the plug-in (e.g. by clicking the "like" button) or decide to leave a comment, the corresponding information is transmitted from the browser directly to the social network platform ( in this case Facebook) and stored there.

For information on the purposes, type and methods of collection, processing, use and storage of personal data by the social network platform, as well as the methods through which to exercise your rights, please consult the Site Information of the individual social network network.

5. Link to/from third party sites

From the Website it is possible to connect via specific links to other third-party websites.

In this regard, Gofor360 cannot be held responsible for any management of personal data by third-party websites and for the management of authentication credentials provided by third parties.

6. Rights of interested parties

As provided for in Article 15 of the Regulation, the interested party can access their personal data, request rectification and updating if incomplete or incorrect, request cancellation if the collection occurred in violation of a law or regulation, as well as oppose to the Processing for legitimate and specific reasons.

In particular, we list below all the rights that can be exercised, at any time, towards the data controller and/or joint data controllers:

Right of access: the right, pursuant to Article 15, paragraph 1 of the Regulation, to obtain confirmation from the data controller as to whether or not personal data is being processed and, in this case, to obtain access to such personal data and the following information: a) the purposes of the processing; b) the categories of personal data in question; c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if recipients are from third countries or international organisations; d) when possible, the expected retention period of personal data or, if this is not possible, the criteria used to determine this period; e) the existence of the right of the interested party to ask the data controller to rectify or delete personal data or to limit the processing of personal data concerning him or to oppose their processing; f) the right to lodge a complaint with a supervisory authority; g) if the personal data are not collected from the interested party, all available information on their origin; h) the existence of an automated decision-making process, including profiling referred to in Article 22, paragraphs 1 and 4, of the regulation and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such treatment for the interested party. All this information can be found in the information which will always be available in the Privacy section of the site.

Right of rectification: right to obtain, pursuant to article 16 of the Regulation, the rectification of personal data that are inaccurate, taking into account the purposes of the processing; furthermore, it is possible to obtain the integration of personal data that are incomplete, also by providing an additional statement.

Right to cancellation: right to obtain, pursuant to Article 17, paragraph 1 of the Regulation, the cancellation of personal data without unjustified delay and the data controller will have the obligation to delete your personal data, if even just one of the following reasons: a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; b) you have revoked the consent on which the processing of your personal data is based and there is no other legal basis for their processing; c) the interested party has objected to the processing pursuant to Article 21, paragraph 1 or 2 of the Regulation and there is no longer any overriding legitimate reason to proceed with the processing of personal data; d) the personal data have been processed unlawfully; e) it is necessary to delete personal data to fulfill a legal obligation established by a community law or internal law. In some cases, as provided for in Article 17, paragraph 3 of the Regulation, the data controller is entitled not to delete your personal data if their processing is necessary, for example, for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest, for archiving purposes in the public interest, for scientific or historical research or for statistical purposes, for the assessment, exercise or defense of a right in court.

Right to limit processing: right to obtain the limitation of processing, pursuant to Article 18 of the Regulation, in the event that one of the following hypotheses occurs, the interested party: a) has contested the accuracy of his/her personal data (the limitation will continue for the period necessary for the data controller to verify the accuracy of such personal data); b) the processing is unlawful but you have opposed the deletion of your personal data, asking instead that their use be limited; c) although the data controller no longer needs them for the purposes of the processing, the personal data are used for the establishment, exercise or defense of a right in court; d) has objected to the processing pursuant to Article 21, paragraph 1, of the Regulation and is awaiting verification regarding the possible prevalence of the legitimate reasons of the data controller with respect to his own. In case of limitation of processing, personal data will be processed, except for storage, only with consent or for the establishment, exercise or defense of legal claims or to protect the rights of another. natural or legal person or for reasons of significant public interest.

Right to data portability: right to request at any time and receive, in accordance with Article 20, paragraph 1 of the Regulation, all personal data processed by the data controller and/or joint data controllers in a structured, user-friendly format common and readable or request transmission to someone else

data controller without impediments. In this case, the interested party will be responsible for providing us with all the exact details of the new data controller to whom he intends to transfer his personal data by providing us with written authorization.

Right to object: pursuant to Article 21, paragraph 2 of the Regulation and as also reiterated by Recital 70, it is possible to object, at any time, to the Processing of your personal data if these are processed for direct marketing purposes, including profiling to the extent it is connected to such direct marketing.

Right to lodge a complaint with the supervisory authority: without prejudice to the right to appeal to any other administrative or jurisdictional body, if it is believed that the processing of personal data carried out by the data controller and/or joint data controllers occurs in violation of the Regulation and/or applicable legislation, it is possible to lodge a complaint with the competent Personal Data Protection Authority.

To exercise all the rights as identified above, simply contact the data controller in the following ways:

  • by writing to the Management of Gofor360 srl, via Val Camonica, 8, 20900 Monza (MB);

  • by sending an email to your inbox to the kind attention of the Management of Gofor360 Srl.

7. Changes to the Site Information

This Site Policy is applicable to the Website from its publication and integrates and completes the General Privacy Policy provided by Gofor360 within the Site or elsewhere. The possible entry into force of new sector regulations, as well as the constant examination and updating of the general conditions of use of the Website, could lead to the need to change these methods. It is therefore possible that this Site Information may undergo changes over time and we therefore invite each user to periodically consult this page.

Thanks for the attention.

Last modified 05/07/2020