Privacy Information

ex Art. 13 Regulation (EU) 2016/679 “European Regulation on privacy”

Milan, 03/02/2022 This information, prepared pursuant to art. 13 of Regulation (EU) 2016/679 and subsequent amendments, describes the processing of personal data of visitors and users of the TerrAria Srl website ( https://www.terraria.com/ ) as well as customers and suppliers with whom the company establishes or has established commercial relationships TerrAria Srl may modify this information to adapt it to future expansions or future changes to the Site or the services offered. In the event of substantial changes, the company will publish a notice on the Site and/or send a notification via email to report the changes and collect any request to exercise the rights recognized by the legislation on the protection of personal data.

1. Regulatory References

• Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data – (General Data Protection Regulation)
• Legislative Decree 30 June 2003, n. 196, amended by Legislative Decree 10 August 2018, n. 101, containing provisions for the adaptation of national legislation to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, as well as on the free circulation of such data, and which repeals Directive 95/46/EC

2. Data Controller

Terraria Srl Via Melchiorre Gioia, 132 20125 Milan Tel.02 87085651 VAT and Tax Code: 00744290149 amministrazione@pec.terraria.it

3. Purpose of the processing

The purpose of the processing to which the company data (legal entity) and the data of the company’s personnel with whom we will interface (natural person) or the data of natural persons not belonging to an organization will be subjected, will be processed exclusively for purposes strictly connected and instrumental to the fulfillment of the obligations inherent to a request for quotation, a contract stipulated between the parties or for the selection of personnel, in particular:

• for the transmission of economic proposals following the welcome request for quotation (pre-contractual measures);
• to carry out the requested service, in case of order confirmation;
• for entering personal data into company IT databases;
• for collection management;
• to fulfill the obligations set forth by civil and fiscal laws, regulations and community legislation

The processing of personal data will be carried out through paper and electronic media by the owner, the appointed manager/managers and the authorised persons trained for specific processing, with the observance of every precautionary measure that guarantees its security and confidentiality.

4. Mandatory or optional nature of consent

The provision of personal data relating to processing to fulfill pre-contractual or contractual measures is mandatory because it is required to fulfill a specific request.

5. Website navigation data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but by its very nature could allow users to be identified. This category of data includes IP addresses or domain names of computers used by users who connect to the site, URI (Uniform Resource Identifier) ​​addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could also be used to ascertain responsibility in the event of hypothetical computer crimes against the site.

6. Cookies

Cookies are small text files that are stored on your computer by websites you visit. They are primarily used to make websites work and operate more efficiently, as well as to provide information to the owners of the website. This site uses the features offered by the Google Analytics service, which uses cookies to collect and analyze anonymous information on the behavior of use of websites (for example, the time and day of the visit, any previous visits to the site by the same visitor, the site of origin, etc.). In order to assimilate Google Analytics cookies to technical cookies, as required by current legislation, the visitor’s IP address is anonymized as Google is prevented from cross-referencing the information and data collected by Analytics with other data in its possession. For more information on how Google collects and uses data, we recommend consulting the site: www.google.it/policies/privacy/partners/ (or another URL that Google may provide from time to time). If the user does not wish to receive any type of cookie on his computer, neither from this site nor from others, he can increase the privacy protection level of his browser using the appropriate function. If you do not know the type and version of browser you are using, click on “Help” in the browser window at the top, from which you can access all the necessary information. If, however, you know your browser, click on the one you are using to access the cookie management page. Internet Explorer Google Chrome Mozilla Firefox Safari Opera We also remind you that it is possible to selectively disable the action of Google Analytics by installing on your browser the opt-out component provided by Google. To disable the action of Google Analytics, please refer to the link below: https://tools.google.com/dlpage/gaoptout

7. Links to other websites or social networks

This information on the processing of personal data is provided exclusively in relation to the Data collected through the Site and with reference to the purposes identified and not for any other websites consulted and/or consultable via links and/or widgets (e.g. social networks): these additional websites will process the Data as independent controllers and in compliance with their respective information, consultation of which by users is expressly recommended.

8. Data provided voluntarily by the user

The optional, explicit and voluntary sending of personal data by the user to the email contacts provided on the website and/or in the registration forms on this site entails the subsequent acquisition of the data provided by the sender. Such data will be processed, mainly by computer, in order to follow up on the user’s request (e.g. requesting information and/or sending your Curriculum Vitae). Specific summary information will be progressively reported or displayed on the pages of the site set up for particular services on request. In no case will data acquired through forms or receiving emails be saved and used for the transmission of subsequent marketing or update emails. If an express request is made, the specific consent of the interested party will be acquired before saving the contacts in the database. We recommend that Users communicate only updated, pertinent data that does not exceed the specific purposes of the processing. In the event that Users find themselves in the need to communicate third-party data, we remind Users to comply with legal obligations regarding the protection of personal data and, in particular, to inform third parties appropriately and promptly of the communication of their data and the characteristics of the processing by the company. Any unnecessary data will be deleted immediately.

9. Recipients and transfers of data abroad

Personal data for the purposes of executing the stipulated contract may also be communicated to third parties, more specifically:

• to all natural and legal persons (legal, administrative and tax consultancy firms, auditing firms, companies dealing with health and safety at work and personal data protection, couriers and freight forwarders) in cases where communication is necessary for the purposes illustrated above;
• to banking institutions for the management of collections and payments;
• third parties, responsible for carrying out activities directly connected and instrumental to the provision of services carried out by Teraria Srl or with whom the Company has stipulated commercial agreements functional to the dissemination and development of the services to be provided, a detailed list of which is available upon express request of the interested party.

Upon express request of the interested party, a detailed list of the above-mentioned “recipients” is available. Outside of these cases, personal data will not be communicated or granted to anyone, except as provided for by contract or with the authorization of the subjects. In this sense, personal data could be transmitted to third parties, but only and exclusively in the event that:

1. a) there is explicit consent to share data with third parties;
2. c) this is necessary to comply with requests from the Judicial Authority or Public Security. No data will be disclosed.

There will be no transfer of your personal data abroad: however, the Data Controller reserves the right to use cloud services for both management software and newsletter transmission services, if you have given specific consent, and in this case the service providers will be selected from those who provide adequate guarantees, as required by art. 46 of the GDPR.

10. Retention period

Your personal data necessary to fulfill fiscal, accounting and administrative obligations will be retained until the time foreseen and established by current legislation. Once the retention periods defined above have expired, your data will be retained for a further 5 years, to document our activity and to respond to your data recovery needs, unless you explicitly request their deletion for legitimate reasons. Other types of data in our possession, not included in the categories above, will be retained if the retention is justified or if the informed consent of the interested parties has been validly obtained regarding a subsequent newsletter transmission activity, unless the interested party explicitly requests their cancellation.

11. Rights of the interested party and their exercise

The subjects to whom the personal data refer have the right at any time to obtain confirmation of the existence or otherwise of the same data and to know their content and origin, verify their accuracy or request their integration or updating, or the rectification, cancellation, limitation, portability of the data (Articles 15-20 of Regulation (EU) 2016/679). If your email address is stored in our database, because you have given specific consent to receive it or because the emails are purely technical updates relating to the contract stipulated, you will find the possibility to unsubscribe from the service simply by clicking on the provided button or by replying to the email sent. To exercise your rights, you may contact us at the contact details in point 2 of this information notice. You also have the right to lodge a complaint with the supervisory authority.

12. More information

The processing of personal data may be carried out with or without the aid of electronic or automated means and will include, in compliance with the limits and conditions set by the legislation in force, all operations or set of operations foreseen and necessary for the processing in question, including communication to the subjects referred to in point 8, if necessary. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access. The owner has adopted all the security measures required by law and, inspired by the main international standards, has also adopted additional security measures to minimize the risks relating to the confidentiality, availability and integrity of the personal data collected and processed. Changes may be made to the privacy and security policy and, if applicable, in relation to regulatory, organizational or technological changes. In the event of changes to the policies, the new version will be published on this page of the site.