Privacy Policy

This site uses various types of technical and third-party profiling cookies.
The Data Controller lists below the specific categories of cookies used, their purpose, and the related Privacy Policy:

COOKIES – TYPE – PURPOSE – PRIVACY POLICY

cenobio.it Own – persistent and session Cookies necessary to allow navigation on the Site, for internal security and system administration purposes.
cenobio.it/en/PrivacyPolicy

google.com Third-party – persistent – profiling Cookies for the Google Analytics service. Information: google.com/policies/privacy

Configuration: tools.google.com/dlpage/gaoptout?hl=en

vimeo.com Third-party – persistent and session Cookies necessary for displaying videos on the Site. vimeo.com/privacy

mailchimp.com Third-party – persistent and session Cookies necessary for managing addresses and sending email messages. mailchimp.com/legal/privacy

reviewpro.com Third-party – persistent and session Cookies necessary for implementing reviews on the Site. reviewpro.com/en/privacy-policy-en

google.com/recaptcha Third-party – persistent and session Cookies necessary for spam prevention. google.com/policies/privacy/

Albacross Third-party – persistent and session Cookies for data aggregation and lead generation https://albacross.com/privacy-policy/

Tawk.to – Live Chat Third-party – persistent and session Cookies related to the site’s Chat service https://www.tawk.to/privacy-policy/

Yandex Metrica Third-party – persistent and session Cookies for data aggregation https://metrica.yandex.com/about/info/gdpr

The Data Controller lists below the retention periods and the consequences of deselecting individual cookies:

COOKIES RETENTION – CONSEQUENCES OF DESELECTION

cenobio.it Session. Technical cookies that, once deselected, would cause problems with content usage.

google.com Set by third parties, please refer to the information below. The Data Controller would no longer be able to acquire aggregated information.

vimeo.com It will not be possible to view videos on the site.

mailchimp.com It will not be possible to subscribe to Newsletters.

reviewpro.com reviewpro.com/en/privacy-policy-en

google.com/recaptcha google.com/policies/privacy/

Albacross The Data Controller would no longer be able to acquire aggregated information.

Tawk.to – Live Chat Chat malfunction.

Yandex Metrica The Data Controller would no longer be able to acquire aggregated information.

Social buttons
The Data Controller’s websites feature special “buttons” (called “social buttons/widgets”) that display social network icons (Facebook, Twitter, Google+, Instagram) and other websites (Youtube, Telegram). These buttons allow users browsing the sites to interact with a “click” directly with the social networks and other websites depicted therein. In this case, the social network and other websites acquire data related to the user’s visit, while the Data Controller will not share any browsing information or user data acquired through its site with the social networks and other websites accessible via the Social buttons/widgets.

Deselection and activation of cookies
By accessing the site and passing the initial banner containing the brief information, the user has given their express consent to the use of the third-party cookies indicated above.
The selection/deselection of individual cookies can be done freely through your browser (by selecting the settings menu, clicking on Internet options, opening the privacy tab, and choosing the desired cookie blocking level). For more information, consult the following links: Google Chrome, Mozilla Firefox, Apple Safari, and Microsoft Windows Explorer.
Furthermore, the Do Not Track option present in most next-generation browsers can be activated.
Third-party cookies can be disabled by consulting the third party’s privacy policy, via the link provided above, or by contacting them directly. Disabling “third-party” cookies does not affect navigability in any way.

Secondary purposes:
1 – communication to third parties and recipients
The processing of your personal data occurs depending on the contract and the obligations, including legal and/or regulatory, arising therefrom.
Your data will not be communicated to third parties/recipients for their autonomous purposes unless:
you authorize it;
it is necessary for the fulfillment of obligations arising from the contract and legal provisions governing it (e.g., for the defense of your rights, etc.);
The personal data that the Data Controller processes for this purpose include, among others:
IP address and cookies released through browsing

2 – IT security
The Data Controller processes, also through its suppliers (third parties and/or recipients), your personal, IT (e.g., logical accesses) or traffic data collected or obtained in the case of services exposed on the website to the extent strictly necessary and proportionate to ensure the security and capacity of a network or connected servers to resist, at a given security level, unforeseen events or unlawful or malicious acts that compromise the availability, authenticity, integrity, and confidentiality of personal data stored or transmitted.
For these purposes, the Data Controller provides procedures for managing personal data breaches (data breach).
What happens if you do not provide your data?
We invite you to review the consequences of deselecting individual cookies, as indicated in the table above.

How
Data processing is carried out through IT procedures by specially authorized and trained internal personnel. They are allowed access to your personal data to the extent and within the limits necessary for carrying out the processing activities concerning you. Your data is processed separately from others, also through pseudonymization or aggregation methods that do not allow easy identification.
The Data Controller periodically verifies the tools through which your data is processed and the security measures provided for them, ensuring their constant updating; it also verifies, through authorized processing entities, that personal data not necessary for processing is not collected, processed, archived, or stored; it verifies that the data is stored with the guarantee of integrity and authenticity and its use for the purposes of the processing actually carried out.

Where
The data is stored in IT and telematic archives located within the European Economic Area.

How long
We invite you to review the personal data retention periods as indicated in the previous table.
What Are Your Rights?
Essentially, you can, at any time and free of charge, without particular burdens or formalities for your request:
– obtain confirmation of processing carried out by the Data Controller;
– access your personal data and know its origin (when data is not obtained directly from you), the purposes and scope of processing, the data of the subjects to whom it is communicated, the data retention period or the criteria useful for determining it;
– update or rectify your personal data so that it is always exact and accurate;
– delete your personal data from the Data Controller’s databases and/or archives, including backups, in cases where, among others, it is no longer necessary for the purposes of processing or if the processing is deemed unlawful, and always if the conditions provided by law exist; and in any case if the processing is not justified by another equally legitimate reason;
– restrict the processing of your personal data in certain circumstances, for example, where you have contested its accuracy, for the period necessary for the Data Controller to verify its accuracy. You must be informed, in a timely manner, also when the suspension period has ended or the cause for the restriction of processing has ceased, and therefore the restriction itself has been revoked;
– obtain your personal data, if received or processed by the Data Controller with your consent and/or if their processing occurs based on a contract and with automated tools, in electronic format also for the purpose of transmitting them to another data controller.
– The Data Controller must proceed in this regard without delay and, in any case, no later than one month from receipt of your request. The deadline may be extended by two months, if necessary, taking into account the complexity and number of requests received by the Data Controller. In such cases, the Data Controller, within one month of receiving your request, will inform you and make you aware of the reasons for the extension.
For any further information and in any case to send your request, you must contact the Data Controller at privacy@cenobio.it.

How and when can you object to the processing of your personal data?
For reasons related to your particular situation, you can object at any time to the processing of your personal data if it is based on legitimate interest, by sending your request to the Data Controller at privacy@cenobio.it.
You have the right to have your personal data erased if there is no legitimate reason overriding the one that gave rise to your request.

To Whom Can You Lodge a Complaint?
Without prejudice to any other administrative or judicial action, you may lodge a complaint with the supervisory authority for personal data protection, unless you reside or carry out your work in another Member State. In the latter case, or in the event that the violation of personal data protection regulations occurs in another EU country, the competent authorities to receive and investigate the complaint will be the supervisory authorities established therein.

Any update to this privacy policy will be communicated to you promptly and by appropriate means, and you will also be informed if the Company proceeds with the processing of your data for purposes other than those in this policy, before doing so and in time to provide your consent if necessary.