Privacy Policy

With this Privacy Policy, drawn up in accordance with art. 13 of Regulation (EU) 2016/679 (“GDPR”), IRD Engineering S.r.l. (hereinafter “IRD” or “Owner”) provides users (“Users”) who access the website https://engineeringcorpua.com/ (hereinafter “Site”) with information regarding the processing of their data, with the exception of third-party websites that do not belong to IRD and can only be consulted through external links.

1 Data Controller

The data controller is IRD Engineering S.r.l., C.F. /VAT 06293511009, with registered office at Lungotevere delle Navi, 30 – 00196, Rome. For information related to treatment, you can write to info@irdeng.com

2 Categories of processed data

The processed data are navigation data, as well as identification and contact data provided by the User to communicate with the Data Controller through email addresses or the corresponding forms on the Site.

Navigation data

The computer systems and software procedures responsible for the operation of the Site receive, during their normal operation, some personal data, the transmission of which is implicit when using Internet protocols. This is information that is not collected for the purpose of communicating with identified interested parties, but which, by its nature, may, through processing and association with data held by third parties, allow the identification of users.

This category of data includes:

• IP addresses of devices used by Site Users;
• URI (Uniform Resource Identifier) ​​addresses designating requested resources;
• request time, method used to submit request to server;
• size of file received in response;
• numeric code indicating status of server response;
• characteristics of browser and operating system used by visitor;
• other parameters related to visitor’s operating system.

Data provided by User spontaneously

This category includes all personal data provided by User, optionally. In particular, the identification data (name and surname) and contact data (email, telephone number) provided by the User are processed by sending emails or filling in the relevant forms on the Site, in order to request information or in any case to contact the Data Controller.

Information obtained through cookies and other tracking systems

The Site uses technical cookies, through which information related to the User’s navigation is obtained, and session cookies, the use of which is strictly limited to the transmission of session identifiers necessary for the safe and efficient study of the site.

These are technical cookies for which, in accordance with the provisions of art. 122 of the Privacy Code, the user’s consent is not required.

3 Purpose and legal basis for processing

Personal data collected through the Site are processed for the following purposes and legal bases:

A. To conclude a contract or take pre-contractual measures at the request of the User (art. 6, para. 1, letter b) GPDR) Personal data provided by the User in a non-binding manner are used only to process requests made by the same, by sending emails to the addresses or filling in specific forms on the Site.

B. To comply with legal and/or regulatory obligations to which we are subject (art. 6, para. 1, letter c) GPDR) To comply with legal and/or regulatory obligations to which we are subject, the User’s personal data may be processed to comply with requests from competent administrative and/or judicial authorities in accordance with the provisions of applicable law, as well as to prevent crimes.

C. To pursue the legitimate interests of the Data Controller (art. 6, para. 1, letter f) GDPR)

Navigation data is obtained to ensure correct navigation on the Site, for security purposes and to verify its correct functioning. These data may be used to prosecute any computer crimes against the Site.

Data voluntarily provided by the User may be used in the context of the legitimate interest of the Data Controller to carry out defensive activities or to assert or protect a right in court.

4 Nature of the provision of data

Providing data for the purposes specified in this Privacy Policy is not mandatory. However, failure to provide such data, even partially, will not allow the User to submit requests or contact the Data Controller by sending emails or filling in the relevant forms on the Site.

5 methods of data management

A. Data processing methods

User data are processed through computer systems and programs used by IRD, within the limits of what is strictly necessary to achieve the stated purposes and, in any case, to minimize the processing of identification and contact data. Adequate security measures are taken to prevent data loss, illegal or improper use, and unauthorized access.

B. Data transfer abroad

The data is stored in electronic archives located at the Data Controller’s headquarters and on servers located in European territory.

C. Retention period

Personal data will be stored for a period of time not exceeding the time strictly necessary for the purposes for which they were collected or subsequently processed in accordance with the provisions of legal obligations. In particular, browsing data of Users accessing the Site is stored for 1 month and in any case in accordance with legal obligations. Personal data provided by Users by sending emails requesting information or in any case contacting the Data Controller is stored for the time strictly necessary to provide feedback and in any case for a maximum of 12 months.

After the expiry of the retention periods, the personal data will be destroyed, deleted or made anonymous, compatible with technical deletion and backup procedures, without prejudice to any defense needs for which the data may be retained even after the periods indicated.

6 Recipients of the data

The data will be processed by the Data Controller also through authorized personnel.

The data will be known to companies used by the Data Controller to provide hosting and email management services related to the website, to consultants for the management of litigation and for legal assistance in the event of any disputes for which their participation is necessary. The data may also be known to the competent authorities in the event of specific requests that the owner is legally obliged to follow, as well as to the IRD Group companies for internal administrative management purposes.

It is noted that some of the aforementioned entities act as data processors pursuant to art. 28 GDPR, while others, such as self-employed owners. In the latter case, the transfer of data is carried out because (i) it is required by legal obligations, (ii) it is necessary for the performance of obligations arising from contractual relationships, or (iii) it is necessary to respond to the legitimate interest of the owner to maintain the security of computer systems and to carry out defensive activities through legal advisors.

In any case, the communication is limited to the categories of data whose transfer is necessary to achieve the aforementioned purposes. The interested party may request from the Data Controller a list of external entities that carry out their activities as Data Processors.

7 Rights of data subjects

Users of the Site may at any time exercise the rights recognized by articles 15 and ss GDPR.

In particular, the User may exercise:

• Right of access: you may request from us information regarding the processing of your data that we carry out or confirmation that we process your personal data. In this case, you can ask us to provide a copy of the data by email and check any data we hold.
• Right to rectification: you can correct your personal data if it is incorrect (for example, because it differs from that provided when compiling a report), including the right to request the integration of incomplete data.
• Right to cancellation: you can ask us to delete the data (or part of it) that you have provided to us.
• Right to restriction: you can ask us to restrict the processing of your personal data where legal hypotheses apply.
• Right to portability: you can ask us to receive in a structured format, commonly used and readable by an automatic device, the personal data that you have provided to us and to transmit them to another data controller indicated by you.
• Right to object: you can at any time, for reasons relating to your specific situation, object to the processing of your personal data, including profiling, and, in such case, we will refrain from further processing of the personal data unless our overriding legitimate interests exist. If the User objects to the processing for any marketing purposes, we will no longer be able to process your data for these purposes.
• Withdrawal of consent: in all those cases where the processing has its legal basis in the User’s consent, he may withdraw it at any time, without prejudice to the lawfulness of the processing carried out before said withdrawal.
• Right to lodge a complaint with the Guarantor: without prejudice to any other administrative or judicial remedy, the User may lodge a complaint with the Guarantor for the protection of personal data, following the procedures and instructions published on the Authority’s official website, accessible at www.garanteprivacy.it

At any time, the User may exercise the rights mentioned above by contacting the following email address: privacy@irdeng.com

8 Links to other sites

This Privacy Policy, published on the Site, explains, how IRD uses and manages the personal data of Users who browse the Site.

The Site may containlinks to other websites, plugins and/or buttons for social networks that the User can consult by selecting the specific links available while browsing on it. In any case, access to and consultation of these sites remain independent of the activities, controls and/or security measures adopted by the IRD. In this case, the privacy policy and procedures for the protection of personal data of these sites will apply to all personal data that they will collect from the User.

9 Changes and updates to the Privacy Policy

At any time and without any notice, the IRD may make changes or updates to this Privacy Policy to incorporate any changes in the legislation on the protection of personal data, to adapt to technological innovations or internal operational processes, or for any other reason that makes it appropriate.

Users are therefore invited to periodically review this page.

Any new versions of this Privacy Policy will be immediately published on the Site and IRD will communicate them through its communication channels. The new Privacy Policy will be binding as soon as it becomes known. If the user does not wish to acknowledge or accept any changes made to it, he may exercise the rights indicated in § 7 Rights of interested parties.