Pursuant to Legislative Decree No. 196/2003 and subsequent additions/amendments and EU General Data Protection Regulation 2016/679 (hereafter “GDPR”) and in relation to the personal data concerning you that are processed, we inform you of the following.
General information
We take the protection of your personal data very seriously. Your privacy is important to us.
The following provisions serve to inform you about the processing of personal data in accordance with the requirements of the GDPR, in particular taking into account the information obligations under Articles 12 to 14, as well as to inform you about the rights of data subjects under the GDPR in accordance with Articles 15 to 22 and 34.
Data controller and data processor
Responsible/ Data controller for the processing of your personal data is
IHI Charging Systems International S.p.A.
registered office: Via Regina 25 Cernusco Lombardone 23870 Lecco, Italy
The data controller may process the data directly, through its own employees authorised to do so, or through external collaborators, who in that case take on the title of Data Processors.
The updated list of Data Processors is made available by the Controller upon request.
Scope of application
This data protection declaration applies to all pages of our online network that link to this declaration.
Purpose of data collection
The purpose of the data collection is the optimization of the website, the error analysis, the individual tailoring to your needs, the offer of contacting and, if necessary, the sale of goods and services.
General information on data processing
We only collect and use personal data of our users insofar as this is necessary to provide a functional website as well as our contents and services. The collection and use of personal data of our users takes place regularly only with the user's consent. An exception applies in those cases where prior consent cannot be obtained for real reasons and the processing of the data is permitted by law.
Legal basis for the processing of your data:
Insofar as we obtain the consent of the data subject for the processing of personal data, Art.6 Para.1 lit.a serves as the legal basis.
In the processing of personal data required for the performance of a contract to which the data subject is a party, Art.6 para.1 lit.b serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art.6 Para.1 lit.c serves as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art.6 para.1 lit.d serves as the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art.6 para.1 lit.f serves as the legal basis for processing.
Justified interests can be in particular:
the answering of inquiries;
the implementation of direct marketing measures;
the provision of services and/or information intended for you;
the processing and transfer of personal data for internal or administrative purposes;
the operation and administration of our website;
the technical support of the users;
the prevention and detection of fraud and criminal offences;
protection against non-payment in the event of obtaining credit information for inquiries about deliveries and services; and/or
the guarantee of network and data security, insofar as these interests are in accordance with the applicable law and with the rights and freedom of the user;
the achievement of efficiency gains by bundling services in individual Group companies (in particular marketing, IT, procurement)
Categories of recipients
Service providers for the optimization of websites, online marketing service providers and tools, service providers for information and communication technology, companies for software and device maintenance, partly described in detail below
Social networks and communities as described in more detail below
internal recipients according to the "need to know" principle
Usage data/server log files
Every time you visit our website, our systems automatically collect data and information from the computer system of the calling computer.
The following types of data are collected: Browser type, version used, user's operating system, Internet service provider, user's IP address, date and time of access, websites from which the user's system has reached our website or to which the user accesses from our website.
The legal basis for the temporary storage of data and log files is Art.6 Para.1 lit. f with the above-mentioned legitimate interests.
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this the IP address of the user must remain stored for the duration of the session.
The data is stored in log files to ensure the functionality of the website. In addition, the data serves us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
Our legitimate interest in data processing also lies in these purposes. The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. We also reserve the right to check the files if there is a justified suspicion of illegal use or a concrete attack on the pages based on concrete evidence. In this case, our legitimate interest is the processing for the purpose of clarification and criminal prosecution of such attacks and illegal uses.
Use of cookies
We use cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. If a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic character string that enables a unique identification of the browser when the website is called up again. We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change. The following data is stored and transmitted in the cookies: Language settings, items in a shopping cart, log-in information, etc.....
The purpose of using technically necessary or functional cookies is to enable (necessary) or simplify (functional) the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser is recognized even after a page change. We need cookies for the provision of shopping cart, adoption of language settings, remembering search terms, etc.. Processing is therefore carried out on the basis of Art.6 para. 1 lit. b and f DSGVO.
We also use cookies on some of our websites which enable an analysis of the user's surfing behaviour. In this way entered search terms, frequency of page views, use of website functions, etc. are transmitted. The user data collected in this way is pseudonymised by technical precautions. Therefore, it is no longer possible to assign the data to the calling user. The data will not be stored together with other personal data of the users.
Legal basis for data processing using cookies: The legal basis for processing personal data using technically necessary cookies is Art.6 Para.1 lit. f. The legal basis for the processing of personal data using cookies for analytical purposes is Art. 6 para. 1 lit. a, otherwise Art. 6 para. 1 lit. f in conjunction with the user's consent. EC 47.
General statements about WebBeacons / Tracking-Pixel
WebBeacons are invisible graphics with the size of a pixel. These are used by partner companies, in particular for the purpose of tracking a user via various web pages to form profiles for use in advertising tailored to the user (targeting). A pixel embedded in the web page is loaded from the partner's server when the web page is called. The partner receives your IP address, information about your browser and its version as well as browser plug-ins used (browser fingerprint), your operating system and your network operator.
Contents of external providers
On our website we use active JavaScript content and fonts, which can also come from external providers such as Google. By accessing our website, these providers may receive information about your visit to our website, for example by transmitting your IP address. You can prevent this transmission by installing a JavaScript blocker such as the browser plug-in'NoScript' or deactivating JavaScript in your browser. However, this can lead to functional restrictions.
Some of our websites integrate third party content, such as videos from YouTube, maps from Google Maps, images, texts and multimedia files, RSS feeds or other services from other websites. This always requires a transmission of your IP address to the providers of this content. We cannot make any statement about the use of your data by these providers and have no influence on further processing. In particular, not about whether the data is also used for other purposes, such as profiling. You can protect yourself against further prosecution by tracking pixels of these providers by deactivating the acceptance of third party cookies in your browser settings.
Google Analytics
Some of our websites use Google Analytics, a web analysis service provided by Google Inc. "("Google"). Google Analytics uses"cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, Google will reduce your IP address within Member States of the European Union or in other states party to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services associated with website and Internet use. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. The legal basis for processing the personal data of users is Art.6 Para.1 lit. f DSGVO. We use Google Analytics to analyse and regularly improve the use of our website. We can improve our offer and make it more interesting for you as a user. This website also uses Google Analytics for a device-independent analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under "My data", "Personal data".
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en. This website uses Google Analytics with the extension "_anonymizeIp()". As a result, IP addresses are further processed in abbreviated form, so that a personal relationship can be ruled out. As far as the data collected about you is personal, it will be excluded immediately and the personal data will be deleted immediately. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Third Party Information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of Use: http://www.google.com/analytics/terms/de.html, Privacy Policy: http://www.google.com/intl/de/analytics/learn/privacy.html, and Privacy Policy: http://www.google.de/intl/de/policies/privacy.
Special data protection clause for the monitoring software Matomo (formerly Piwik):
On our website we use the open source software tool Matomo (formerly PIWIK) to analyse the surfing behaviour of our users. The software places a cookie on the user's computer (see above for cookies). If individual pages of our website are accessed, the following data is stored: Two bytes of the IP address of the user's calling system, accessed website, the website from which the user has accessed the accessed website (referrer), the sub-pages accessed from the accessed website, the time spent on the website, frequency of accessing the website. The software runs exclusively on the servers of our website. The personal data of users is only stored there. The data will not be passed on to third parties. The legal basis for processing the personal data of users is Art.6 Para.1 lit. f DSGVO. The processing of users' personal data enables us to analyse the surfing behaviour of our users. We are in a position to compile information about the use of the individual components of our website by evaluating the data obtained. This helps us to continuously improve our website and its user-friendliness. For these purposes, it is also in our legitimate interest to process the data in accordance with Art. 6 para. 1 lit. f. By anonymizing the IP address, users' interest in protecting their personal data is sufficiently taken into account. The data will be deleted as soon as they are no longer needed for our recording purposes.
Cookies are stored on the user's computer and transmitted to our site. Therefore, you as a user also have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.
Contact form and e-mail contact
There is a contact form on our website which can be used for electronic contact. If a user takes advantage of this possibility, the data entered in the input mask will be transmitted to us and stored. This data is: Name, address, e-mail address, telephone number, etc. At the time the message is sent, the following data is also stored: The IP address, date and time. Your consent is obtained for the processing of the data within the scope of the sending process and reference is made to this data protection declaration.
Alternatively, you can contact us via the e-mail address provided. In this case, the user's personal data transmitted by e-mail will be stored. In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversation.
The legal basis for processing is:
For the processing of the data after registration for the newsletter by the user, Art.6 para. 1 lit. a.
For the processing of data transmitted in the course of sending an e-mail, Art.6 para.1 lit.f with the above-mentioned legitimate interests.
If the e-mail contact aims at the conclusion of a contract, then additional legal basis for the processing is Art.6 Abs.1 lit.b.
The processing of the personal data from the input mask serves us only for the treatment of the establishment of contact. In the event of contact by e-mail, this also constitutes the necessary legitimate interest in the processing of the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those that were sent by e-mail, this is the case when the respective conversation with the user is finished. The conversation is terminated when it can be inferred from the circumstances that the facts in question have been finally clarified. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.
Data transmission via the Internet
Data transmission over the Internet is generally associated with certain risks. A special encryption of the data is not carried out, especially messages from the contact form of our website and messages in the service chat are transmitted unencrypted . If you wish to communicate with us by encrypted e-mail, this is possible using SMIME encryption. Please inform us of your wish for encryption, as we regularly send unencrypted, due to the currently low market penetration of e-mail encryption methods.
Data transfer
If you provide us with personal data, this will only be passed on to third parties if this is necessary for the processing of the contractual relationship or if another legal reason justifies this transfer.
However, we provide certain services with the cooperation of service providers. We have carefully selected these service providers and have taken appropriate measures to protect your personal data.
1. What data do we collect? How do we use personal data? Legal basis of processing
"Data" refers to data relating to natural persons processed by IHI Charging Systems International S.p.A. for the conclusion and execution of the contractual relationship with its customers/suppliers, such as, for example, data directly referable to the customer/supplier as a natural person, or to the legal representative of the customer/supplier as a legal person, to the employees/consultants of the same involved in the activities relating to the contract, as well as any other information necessary for the execution of the contract.
In particular, Data will be processed for the purposes below.
a. Management of the contractual/commercial relationship, such as: satisfying specific customer/supplier requests prior to the conclusion of the contract; conclusion, modification, execution of the contract; provision and management of related services; complaint management.
The legal basis of processing in relation to the above-mentioned purposes are:
b. Administrative - accounting, such as: invoicing, payment management, bookkeeping, organisation of business activities.
The legal basis of processing in relation to the above-mentioned purposes are:
c. Fulfilment of legal obligations provided for by national or European Union law or by collective agreements in accordance with national law, such as: fulfilment of obligations provided for by European Union and national legislation, in particular on health and safety at work, and crime prevention (anti-mafia legislation, anti-corruption, Legislative Decree 231/2001).
The legal basis of processing is the need to fulfil a legal obligation to which the data controller is subject.
d. Exercise and/or defence of rights in court and debt collection, such as: management of any legal disputes, protection and recovery of debts, directly or through third parties (lawyers/agencies/collection companies).
The legal basis of processing is legitimate interest.
2. How long do we keep your personal data for?
The data shall be processed for the duration of the contractual relationship and, after its termination, until the limitation period of the rights mutually arising between the parties. In the event of litigation, for the duration of the litigation itself, and until the decision is final.
3. How do we collect your data?
Personal data may be processed by analogue, electronic or otherwise automated means, using methods and procedures strictly necessary for the pursuit of the purposes described above.
4. When do we share personal data and authorized parties?
The Data may be communicated to external parties acting as autonomous data controllers, such as public or private parties entitled to process the Data (e.g. public administrations, banks and credit institutions, accountants, notaries, lawyers and other professionals).
The Data may be processed, on behalf of the data controller, by external parties designated as data processors, who carry out specific activities on behalf of the data controller, by way of example, its distribution network, companies and agents performing debt collection activities for the data controller, legal, tax and administrative consultants.
The Data may be processed by employees of the company functions assigned to the pursuit of the above-mentioned purposes, who have been expressly authorised to process them and who have received appropriate operating instructions.
The Data are not subject to dissemination.
5. Provision of data
Any refusal on the part of the person concerned to provide personal data may make it impossible (in part or in full) to fulfil legal obligations, or to enter into or properly perform the contract or service. In this eventuality, without prejudice to the data subject's right not to provide his/her data, the Data Controller reserves the right to suspend, interrupt or not establish the contractual relationship.
6. What are your data protection rights? How to contact us?
The legislation on the protection of personal Data (Articles 12-22 of GDPR) guarantees the data subject/recipient the right to be informed about the processing of the Data and the right to access the Data at any time and to request that it be updated, supplemented and rectified. Where the conditions set out in the legislation apply, the data subject may also claim the right to the deletion of the Data, the restriction of its processing, the portability of the Data, the right to object to its processing, and the right not to be subject to decisions based solely on automated processing.
If the processing of Personal Data is based on the consent of the data subject, the data subject has the right to revoke that consent.
In order to exercise his/her rights, as well as for more detailed information regarding the processing of Data, the data subject may contact IHI Charging Systems International S.p.A. by writing to the e-mail address: privacy@ihi-csi.it.
If the data subject/recipient considers that his or her rights have been infringed, he or she may lodge a complaint with the Data Protection Authority.
7. Processing of third-party data
The customer/supplier is informed that if it uses its own employees or collaborators (including any subcontractors) in the execution of the contractual relationship, the personal data of the latter may be processed by IHI Charging Systems International S.p.A., also in its capacity as data controller, for the purposes described in point 1.
These processing operations have the same purposes, methods and retention periods as those described in this information notice; in relation to these processing operations, moreover, the data subjects have the same rights as those identified in point 6.
The customer/supplier has the duty to properly inform its employees and collaborators about the processing, also by providing them with this information document.