INFORMATION PROVIDED IN ACCORDANCE WITH THE ARTICLE 13 OF EU REG. 2016/679 (HEREINAFTER GDPR)

General information

We inform the interested subjects (as mentioned in the Art.4, paragraph 1 of the GDPR) of the following general profiles, effective for all fields of treatment:

• all data are processed in a lawful, correct and transparent manner as regards the person concerned, in compliance with the general principles established in the Article 5 of the GDPR;
• specific security measures are provided to prevent the loss of data, illicit or incorrect use and unauthorized accesses.

References and rights of the interested subjects

• The Data Controller is the undersigned Carpana srl, represented by the legal representative pro-tempore, who can be addressed to exercise all the rights established in the art. 15-21 of the GDPR (right of access, rectification, cancellation, of limitation, portability, opposition), and revoke a previously agreed consent; in the event of failure to respond to their requests, people involved may lodge a complaint with the Data Protection Authority (GDPR – Art.13, paragraph 2, letter d).

Data Controller contact details

Address: Via Giulio Fornari, 15 / 17a / 17b, 43124 Vigatto (Parma) ITALY
Phone: +39 0521 635400 – Email: sales@carpana.it

Navigation data

The computer systems and software procedures used in this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified involved subjects, but because of their nature they could, through processing and association with data held by third parties, allow users’ identification. In this category of data are included IP addresses or names domain of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, time of request, the method used to submit the request to the server, the size of file obtained in response, the numeric code indicating the status of the response given by the server (successful, error, etc.) and other parameters concerning the operating system and the users’ IT framework.

Purpose and legal basis of the processing (GDPR-Art.13, comma 1, lett.c)	These data are used only to obtain statistical information about the website’s use and to check its correct functioning. The data could also be used to ascertain responsibility in case of possible computer crimes against the website (legitimate interests of the owner).
Communication field (GDPR-Art.13, comma 1, lett.e,f)	The data may be processed exclusively by internal personnel, duly authorized and trained for processing (GDPR-Art.29) or by any person in charge to the maintenance of the web platform (in this case external managers) and shall not be communicated to other subjects, disclosed or transferred to non-EU countries. Only in the event of an investigation they will be made available to the competent authorities.
Data storage period (GDPR-Art.13, comma 2, lett.a)	The data are normally stored for short periods of time, with the exception of possible extensions related to investigation activities.
Provision (GDPR-Art.13, comma 2, lett.f)	The data are not provided by the interested party but acquired automatically by the technological systems of the site.

Cookies

What they are:: Cookies are short pieces of text (letters and/or numbers) that allow the web server to store information on the client (the browser) to reuse during that visit to the website (session cookies) or later, even after several days (persistent cookies). Cookies are stored, based on user preferences, by the individual browser on the specific device used (computer, tablet, smartphone). Similar technologies, such as, for example, web beacons, transparent GIFs and all forms of local storage introduced with HTML5, can be used to gather information on user behavior and use of services. In this statement we will refer to cookies and all similar technologies just using the word “cookie”.

Possible types of first-party cookies and preferences management methods

CATEGORY	PURPOSE	PREFERENCE MANAGEMENT
Navigation or session technical cookies	Guarantee the normal web navigation and use of the site	Through the main web browsers, it is possible to: Block the receipt of all (or some) types of cookies by default View the analytical list of the cookies used Remove all or some of the installed cookies For information on the setting of individual browsers, please see the specific paragraph. Please note that blocking or deleting cookies may compromise website’s surfing and functionality.
Technical-analytical cookies	Collect information on the number of visitors and the pages viewed
Technical-fuctional cookies	Allow navigation as a function of selected criteria
Profiling cookies	Create user profiles in order to send advertising messages in line with preferences

The website may contain links to third party websites and third-party cookies; for further information, please see the privacy policy of any linked sites.

Preferences management through the main browsers

The user can decide whether to accept cookies using his/her browser settings (we point out that, by default, almost all web browsers are set to automatically accept cookies). The setting can be modified and defined specifically for different websites and web applications. Furthermore, the best browsers allow you to define different settings for “proprietary” and “third-party” cookies. Usually, the cookie configuration is carried out from the “Preferences”, “Tools” or “Options” menu.
Below you can find a list of links to the guides for main browsers cookies’ management:

• Internet Explorer: http://support.microsoft.com/kb/278835
• Internet Explorer [versione mobile]: http://www.windowsphone.com/en-us/how-to/wp7/web/changing-privacy-and-other-browser-settings
• Chrome: http://support.google.com/chrome/bin/answer.py?hl=en-GB&answer=95647
• Safari: http://docs.info.apple.com/article.html?path=Safari/5.0/en/9277.html
• Safari [versione mobile]: http://support.apple.com/kb/HT1677
• Firefox: http://support.mozilla.org/en-US/kb/Enabling%20and%20disabling%20cookies
• Android: https://support.google.com/accounts/answer/61416?co=GENIE.Platform%3DAndroid&hl=en
• Opera: http://help.opera.com/opera/Windows/1781/it/controlPages.html#manageCookies

Further information

• www.allaboutcookies.org (for more information on cookies technologies and how they work)
• www.youronlinechoices.com/it/a-proposito (it allows users to oppose the installation of the main profiling cookies)
• www.garanteprivacy.it/cookie (collection of the main regulatory interventions on this subject by the Italian Guarantor Authority)

For more information or to exercise the rights established in Articles 15 to 22 of the European Privacy Regulation n. 679/16, you can contact the Data Controller using the contacts on the website.

Specific services

The website may contain data collection forms with the purpose of guaranteeing the user services/functionalities (e.g.: request information, registrations, etc.).

Purpose and legal basis of the processing (GDPR-Art.13, comma 1, lett.c)	The identification and contact data are required in order to respond to interested parties’ needs. The sending of the request is subject to specific, free and informed consent (GDPR-Art.6, paragraph 1, letter a).
Communication field (GDPR-Art.13, comma 1, lett.e,f)	Data are processed exclusively by duly authorized and trained personnel (GDPR-Art.29) or by people in charge of maintaining the web platform or providing the service (in this case external managers). The data will not be disclosed or transferred to non-EU countries.
Data retention period (GDPR-Art.13, comma 2, lett.a)	Data are stored for times compatible with the collection’s purpose.
Provision (GDPR-Art.13, comma 2, lett.f) The data are not provided by the involved party but acquired automatically by the technological systems of the site.	The provision of data mentioned in the mandatory fields is necessary in order to obtain a response, while the optional fields have the purpose of providing the staff with further useful elements to facilitate contact.

Data voluntarily provided by the user

The optional, explicit and voluntary sending of electronic and/or ordinary mail to addresses on this website causes the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message. If the sender sends his own resume to submit his/her professional candidacy, he/she is the only responsible for the relevance and accuracy of the data sent. Please note that any resume that does not have the authorization to process the data will be immediately canceled.

Policy update

Please note that this disclosure may be subject to periodic review, also in relation to the relevant legislation and jurisprudence. In the event of significant changes, appropriate evidence will be provided on the home page of the website for a reasonable time. However, involved subjects are invited to periodically consult this policy.