This page describes how the website is managed with regard to the processing of the personal data of the users who consult it. This information is provided pursuant to Articles 13 and 14 of Regulation (EU) 679/2016, otherwise known by the acronym GDPR (General Data Protection Regulation), or pursuant to and for the purposes of Legislative Decree no. 196/2003, which implemented the rules referred to in that Regulation.
This regulation relates to the protection of individuals with regard to the processing and free movement of personal data, and the related compliance regulations for those who interact with the web service of the relevant data controller, LIGHTINUP SRL, which can be accessed electronically from the address l lightinup.it which corresponds to the home page of the data controller's official website.
This information is provided only for the website of the owner and not for other websites that may be consulted by the user via links.
The information is also based on Recommendation no. 2/2001, which the European authorities for the protection of personal data, meeting in the Working Party established by art. 29 of Directive no. 95/46/EC, adopted on 17 May 2001 to identify certain minimum requirements for the collection of personal data online, as well as, in particular, the methods, timing and nature of the information that data controllers must provide to users when they connect to web pages, regardless of the purpose of the connection.
THE DATA CONTROLLER
The data controller is LIGHTINUP SRL, in the person of its pro tempore legal representative, with headquarters at VIA NONA STRADA 23 in PADOVA, which also acts as Data Processor.
PLACE OF PROCESSING DATA
The processing operations connected to the web services of this site take place at the aforementioned registered office of the owner and at the operational headquarters, located in VIA NONA STRADA 23 - 35129 PADOVA
Such processing is carried out only by office staff in charge of processing, who have access to the email address The exercise of the above rights may be exercised by sending an e-mail to the following address
Electronic data is stored on the hosting server of ODOO, GODADDY INC. and WORDPRESS
TYPES OF DATA PROCESSED
Navigation Data – The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or the domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment. These data are used only to obtain anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes to the detriment of the site: except in this case, at present, the data on web contacts do not persist for more than seven days.
Data provided voluntarily by the user - The optional, explicit and voluntary sending of e-mails to the addresses indicated on this site, or the insertion of data in the contact form for the purpose of contacting the company, entails the subsequent acquisition of such data, which is necessary to respond to requests and process them. We collect or collect directly from you your name, surname, address, email address, telephone number, company name and VAT number, if any. This data is stored indefinitely in the owner's database.
PURPOSE OF PROCESSING
The Owner will process your data in order to facilitate navigation and to provide the services you may request through the forms provided on the site. Apart from what has been specified for browsing data and technical cookies, within the sections of the site set up for particular services at your request, you will be free to provide your personal data for the purposes indicated in the respective disclosures, but failure to provide them may make it impossible to obtain the requested service.
PERSONAL DATA PROCESSING METHODS
The processing is carried out through operations, carried out with the aid of electronic instruments and consists of the collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. The processing is carried out by the data controller and by those specifically authorised by the data controller for the time strictly necessary to achieve the purposes for which the data were collected. Specific security measures are observed to prevent the loss of data, unlawful or incorrect use and unauthorised access.
COMMUNICATION OF DATA
The data subject to processing may come to the knowledge of the data controller, the persons in charge of processing and may be communicated to internal or external collaborators, such as accounting, logistics and technical companies, suppliers of payment services, warehouses, packaging and order dispatch companies.
Part of the navigation data, as above, may be partially processed on the systems of the supplier Google LLC (currently Google Analytics, Google Conversion Tracking, Google Adwords, Zendesk Inc, which in any case declare to use systems that offer guarantees of adequacy with respect to the GDPR Regulation and the regulations concerning the protection of personal data. Finally, the data may be communicated in the event of a request to the competent authorities in fulfilment of obligations deriving from mandatory legal regulations.
RIGHTS OF THE DATA SUBJECT
The person concerned is entitled:
- rectification, erasure, restriction and opposition to data processing;
- to obtain from the data controller, without hindrance, the data in a structured, commonly used and machine-readable format for transmission to another data controller;
- to withdraw consent to the processing, without prejudice to the lawfulness of the processing based on the consent acquired before the withdrawal;
to lodge a complaint with the Italian Data Protection Authority.