So.Di.Co. S.r.l.Registered Office: Via Mascheroni Lorenzo n. 31, 20145, Milano (MI)Operational Office: Via Foce Cesano 4/9, 60019, Senigallia (AN)Email contact: firstname.lastname@example.org
Cookies are small text strings that a website can send to your device (such as a PC, notebook, smartphone, or tablet) while you are browsing. These cookies are typically stored directly on the browser used for navigation. The same website that transmitted them can then read and record the cookies found on the same device to obtain various types of information. What kind of information? Each type of cookie has a specific role.
There are three fundamental macro-categories of cookies, each with different characteristics: technical cookies (which can be further divided into necessary or navigation cookies and functional cookies), analytical cookies (or statistical cookies), and profiling cookies.
Technical cookies are generally necessary for the proper functioning of the website and to enable navigation. Without them, you may not be able to view pages correctly or use certain services. For example, a technical cookie is essential to keep the user logged in during the entire visit to a website or to store language and display settings. Technical cookies can be further distinguished as follows:
Navigation cookies: These ensure the normal navigation and use of the website (e.g., allowing a purchase or authentication to access restricted areas).
Functionality cookies: These allow the user to navigate based on selected criteria (e.g., language, selected products for purchase) to improve the provided service.
Additionally, the following categories of cookies exist:
Analytics cookies: These can be assimilated to technical cookies only if used directly by the website operator to collect aggregated information about the number of users and how they visit the website, subject to the additional specific requirements outlined in the aforementioned Guidelines.
Profiling cookies are more sophisticated. They aim to profile the user and are used to send advertising messages in line with the preferences expressed by the user during their browsing.
Profiling cookies and analytical cookies, not assimilated to technical cookies, can also be called or classified as non-technical cookies.
Cookies can also be classified as:
Session cookies: These are deleted immediately when the browsing browser is closed.
Persistent cookies: Unlike session cookies, they remain within the browser for a specified period of time. They are used, for example, to recognize the device connecting to the website and facilitate user authentication operations.
First-party cookies: These are generated and managed directly by the website owner and/or operator the user is browsing.
Third-party cookies: These are generated and managed by parties other than the website owner and/or operator the user is browsing (including when there is a contract between the website owner and the third party). Third-party cookies may also include the aforementioned profiling cookies (or non-technical cookies in general). For such types of cookies, reference is made to the above statements regarding obtaining prior free consent. Detailed and up-to-date information on the use and expiration of third-party cookies can be found on the specific information pages of the respective third parties, which can be accessed through specific links provided in the description of the individual cookies used and, if applicable, listed below.
The data subject, in relation to the personal data covered by this information, has the right to exercise the rights provided by the EU Regulation listed below:
• Right of access by the data subject [Article 15 of the EU Regulation]: The data subject has the right to obtain from the data controller confirmation as to whether or not personal data concerning them is being processed, and, if so, access to the information expressly provided for in the mentioned article. This includes, for example, the purposes of the processing, the categories of data and recipients, the retention period, the existence of the right to erasure, rectification or restriction, the right to lodge a complaint, all available information on the origin of the data, the possible existence of automated decision-making in accordance with Article 22 of the Regulation, as well as a copy of their personal data.
• Right to rectification [Article 16 of the EU Regulation]: The data subject has the right to obtain from the data controller the rectification and/or integration of inaccurate personal data concerning them, without undue delay.
• Right to erasure (“right to be forgotten”) [Article 17 of the EU Regulation]: The data subject has the right to obtain the erasure of their personal data without undue delay, if one of the reasons expressly provided for in the mentioned article applies. This includes, for example, the cessation of the need for processing for the purposes, withdrawal of the consent on which the processing is based, objection to the processing where it is based on overriding legitimate interests, unlawful processing of the data, erasure for legal obligations, data of minors processed without meeting the conditions of applicability provided for in Article 8 of the Regulation.
• Right to restriction of processing [Article 18 of the EU Regulation]: In cases provided for in Article 18, including unlawful processing, disputing the accuracy of the data, objection by the data subject, and the cessation of the need for processing by the data controller, the data subject’s data must only be processed for storage, subject to their consent and other cases expressly provided for in the mentioned article.
• Right to data portability [Article 20 of the EU Regulation]: The data subject, in cases where processing is based on consent and contract and is carried out by automated means, has the right to receive their personal data in a structured, commonly used, and machine-readable format, and has the right to transmit this data to another controller.
• Right to object [Article 21 of the EU Regulation]: The data subject has the right to object to the processing of their personal data when the processing is based on overriding legitimate interests or is carried out for direct marketing purposes.
• Right not to be subject to automated decision-making [Article 22 of the EU Regulation]: The data subject has the right not to be subject to a decision, including profiling, based solely on automated processing (e.g., exclusively carried out through electronic tools or computer programs).
I A) TECHNICAL COOKIES
Among these technical cookies described above, we highlight essential or navigation cookies, which enable functions without which it would not be possible to fully or completely use the Site.
These cookies are first-party cookies. Essential cookies cannot be disabled using the Site’s functions.
Also included within the scope of technical cookies are functionality cookies, mentioned above, as well as so-called “analytics” cookies, which serve exclusively statistical purposes and collect information in an aggregated form without the possibility of identifying individual users.
The installation of such cookies does not require the prior consent of users. These cookies can also be disabled and/or deleted through browser settings (see below). Such deletion does not constitute withdrawal of consent.
Below, for each technical cookie used, we provide the name, purpose of use, and retention period.
Necessary cookies (including navigation cookies).
I B) PROFILING COOKIES
In addition to technical cookies, the Data Controller informs the User that profiling cookies are also used on the Website, as described above, which also serve the purpose of analyzing user behavior for marketing purposes. The use of such cookies requires the prior acquisition of the user’s free consent, which the Website obtains in accordance with the Provision of the Guarantor issued on May 8, 2014, and subsequent amendments. This consent can be revoked at any time by clicking on the button mentioned above. Refusing or revoking consent for the use of one or more profiling cookies will not interfere with the ability to access or browse the Website, except for the inability to access pages and sections of the site that use such cookies. In such cases, a specific notification will appear to inform the User of this circumstance. Below, for each profiling cookie used, we provide the name, purpose of use, and storage duration.
II THIRD-PARTY COOKIES
During navigation, the User may receive cookies from different websites or web servers on their device (so-called “third-party cookies,” as described above). These cookies are set directly by website managers other than the present Website. You will find more information about the use of each cookie by accessing the link provided in the table below. Below, we provide the name, purpose, cookie type, the name of the third party that sets and manages the cookie and processes the information, as well as the respective link to the third party’s website where you can also revoke your consent or learn about the revocation process. Nome cookie (Cookie name) | Scopo (Purpose) | Tipologia del cookie (Cookie type) | Terza Parte (Third Party) | Link al sito (Link to the website) Please note that the information in the table should be provided by the website or service you are referring to.
Finally, below are the links to the most common browsers, where you can find information on how to disable the storage or delete cookies already stored in your browser:
Notice regarding minors under 14 years old
Children under 14 years old cannot provide personal data. So.Di.Co. S.r.l. will not be held responsible for any collection of personal data or false statements provided by a minor. In any case, if such use is identified, So.Di.Co. S.r.l. will facilitate the right of access and deletion requested by the legal guardian or person exercising parental responsibility.
Changes and updates
Normative references on data subject rights
Right of access by the data subject
The data subject shall have the right to obtain from the data controller confirmation as to whether or not personal data concerning him or her are being processed, and, if so, access to the personal data and the following information:
a) the purposes of the processing;
b) the categories of personal data concerned;
c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
e) the existence of the right to request from the data controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
f) the right to lodge a complaint with a supervisory authority;
g) where the personal data are not collected from the data subject, any available information as to their source;
h) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
Where personal data are transferred to a third country or to an international organization, the data subject shall have the right to be informed of the appropriate safeguards pursuant to Article 46 relating to the transfer.
The data controller shall provide a copy of the personal data undergoing processing. For any further copies requested by the data subject, the data controller may charge a reasonable fee based on administrative costs. If the data subject makes the request by electronic means, and unless otherwise requested by the data subject, the information shall be provided in a commonly used electronic format.
The right to obtain a copy referred to in paragraph 3 shall not adversely affect the rights and freedoms of others.
Article 16 Right to rectification The data subject has the right to obtain from the data controller the rectification of inaccurate personal data concerning him or her without undue delay. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by providing a supplementary statement.
Article 17 Right to erasure (“right to be forgotten”)
Article 18 Right to restriction of processing
Article 19 Notification obligation regarding rectification or erasure of personal data or restriction of processing. The data controller shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Article 16, Article 17(1), and Article 18 to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The data controller shall inform the data subject about those recipients if the data subject requests it.
Article 20 Right to data portability
Articolo 21 Right to object
Articolo 22 Automated individual decision-making, including profiling
Decisions referred to in paragraph 2 shall not be based on special categories of personal data referred to in Article 9(1), unless Article 9(2)(a) or (g) applies and suitable measures to safeguard the data subject’s rights, freedoms, and legitimate interests are in place.