Privacy & Cookie Policy

Relevant regulations

  • Directive 2002/58/EC – regulating the “treatment of personal data and the protection of privacy in the electronic communications sector”
  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

Data Controller

As a consequence of the use of this website, personal information concerning identified or identifiable individuals might be collected and processed. The data Controller is Acimga, Piazza Castello 28, 20121 Milan, Italy.

Place of data treatment and storage period

The treatments connected to the services provided by this website take place at the aforementioned offices of the Data Controller and are performed solely by specifically appointed personnel, or by third-party contractors entrusted with occasional maintenance operations, nominated Data Controllers in compliance with article 28 of the GDPR. The data collected shall be stored – for each type of data processed – strictly for the time necessary for the fulfilment of the specific purposes referred to in the summary notices available for view on the website pages and dedicated to specific services.

Types of data treated

Browsing data

During the ordinary course of operations, the IT systems and software procedures used to operate this website acquire some personal data, whose forwarding is implied in the use of Internet communication protocols.

Such information is not collected to be associated with identified individuals, but because of its very nature could, through processing and associations with data held by third parties, allow users to be identified.

This category of data includes IP addresses or the domain names of the computers used by users to access the website, the URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used for submitting the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the response from the server (success, error, etc.) and other parameters related to the user’s operating system and IT environment.

The data is used only to obtain anonymous statistical information on the use of the website and to ensure its correct operation, and is deleted immediately after processing. The data may be used to ascertain responsibility in the event of possible computer crimes against the website; except for this possibility, the data on web contacts does not persist for more than seven days.

Data supplied voluntarily by users

The elective, explicit and voluntary provision of personal data by users through the registration forms available on this website implies the subsequent acquisition of the data supplied by the sender, necessary for the provision of the required service. Specific summary notices will be made available or viewable on the website pages dedicated to specific services which may be requested. 

Cookies

Cookies are small text files containing a certain amount of information exchanged between a website and the user’s computer (usually a browser). They are mainly used for the purpose of enabling websites to run and operate more efficiently as well as providing information to the owners of the website.

Below is a list of the cookies used by our website:

  1. Technical cookies, to the extent strictly necessary to use and browse the website. In particular, the use of technical session cookies is limited to the transmission of session identifiers (formed by random numbers generated by the server) necessary to ensure the safe, efficient browsing of the website. These cookies avoid using other processing techniques which may potentially reduce the user’s privacy when browsing, and do not allow the acquisition of personal data which may identify the user. To this end, the person data of users is not acquired by the website. No cookie is used to forward information of a personal nature, nor is any type of so-called persistent cookie used, i.e. user tracking systems. Should the user no longer wish to receive any type of cookie on their computer, from this website or others, they can increase the data protection level on their browser through the relevant setting.
  2. Google Analytics Cookies, used to collect and analyse in an anonymous way information concerning users’ behaviour while using websites (e.g. the date and time of the visit, any previous visits to the website by the same user, the website of origin, etc.). Such information (including the user’s IP address) is collected by Google Analytics, which processes it to the end of producing a report on the activities performed on the website, which can be used to improve it. Google does not link the IP address to any other data in its possession, nor does it attempt to link any IP address to the user’s identity. Google may provide this information to third parties if this is required by law or if third parties process this data on behalf of Google.

For further information on the collection and use of data by Google, please visit http://www.google.it/policies/privacy/partners/ (or another URL which Google may provide each time).

The table below provides further details on the cookies currently in use by our website.

COOKIE NAME

DEFAULT EXPIRY

TYPE

COOKIE DESCRIPTION

Acimga

The default expiry is set to 4 days

First-party cookie

It contains the identifier of the user’s session on the website

cookiesaccepted

The default expiry is set to 5 years

First-party cookie

It tracks whether the user has viewed the cookie policy, as described in the notice displayed on the user’s first visit to the website.

_ga

The default expiry is set to 2 years

Third-party analytics

This cookie is associated to Google Analytics and is used to differentiate users by assigning each of them a casually generated number as identifier. It is used to keep track of the number of page visitors, sessions and data to the end of producing anonymised statistical analysis reports.

_gid

The default expiry is set to 24 hours

Third-party analytics

This cookie is associated to Google Analytics and is used to differentiate user by assigning each of them a casually generated number as identifier. It is used to keep track of the number of page visitors, sessions and data to the end of producing anonymised statistical analysis reports.

_gat

The default expiry is set to 10 minutes

Third-party analytics

This cookie is associated to Google Analytics and is used to speed up access requests.

In addition to the cookies included in the table, this website may also use other session cookies, i.e. cookies that are not stored permanently on the user’s computer and disappear when the browser session is terminated. Their use is strictly limited.

For further information on individual third-party cookies, please view the relevant notices at the following URLs:

 

Cookie management

Normally browsers allow to control the majority of cookies through the browser settings. However, please remember that disabling all or part of the so-called technical cookies may affect the use of the website’s functions. Should the user no longer wish to receive any kind of cookie on their computer, from this wesite or from others, they can increase the level of privacy protection by adjusting the security settings on their browser:

Mozilla Firefox: https://support.mozilla.org/it/kb/Gestione%20dei%20cookie

Google Chrome: https://support.google.com/chrome/answer/95647?hl=it

Internet Explorer: http://windows.microsoft.com/it-it/windows-vista/block-or-allow-cookies

Safari 6/7 Mavericks: https://support.apple.com/kb/PH17191?viewlocale=it_IT&locale=it_IT

Safari 8 Yosemite: https://support.apple.com/kb/PH19214?viewlocale=it_IT&locale=it_IT

Safari on iPhone, iPad, or iPod touch: https://support.apple.com/it-it/HT201265

Links to other websites

This website contains links or references providing access to other websites, such as social networks – Instagram, Facebook, LinkedIn, Google+ and Twitter. The use of these social networks is aimed at making the communication with our users and interested individuals more participative, inform them about Acimga’s initiatives and interact with users through posts, comments on posts, questions, etc. On each of these channels, Acimga uses content – including multimedia content (photos, videos, etc.) – that is proprietary or for which it has purchased the relevant copyright. The institutional accounts are managed by CPA S.p.A. (Centro Promozionale Acimga). Users’ written and verbal contributions through posts and videos/recordings must always be identifiable. They express the opinion of individual users, not Acimga’s, which shall not be held responsible for the truthfulness or accuracy of the posts published on its institutional pages by individuals or legal entities.

Elective data transfer

With the exception of online browsing data, users are free to provide their personal data. However, failure to do so may render the provision of the services requested impossible.

Processing methods 

Personal data may be treated by means of automated tools. Specific security measures are in place to prevent loss of data, unlawful or illegitimate use and unauthorised access. The Controller has adopted all of the minimum security measures required by law; moreover, inspired by the main international standards, it has adopted further security measures to minimize the risk to the confidentiality, availability and integrity of the personal data that has been collected and processed. 

Sharing, transfer and disclosure of data

The collected data may be transferred or provided to other companies for activities that are closely connected and instrumental to the operation of the service, including the management of the IT system. The personal data provided by users submitting requests for information material (brochures, information material, etc.) is used solely for the purpose of carrying out the service or request, and shall be disclosed to third parties (companies providing enveloping, labelling and mailing services) only if necessary for this purpose. Save for such cases, personal data shall not be disclosed except if required by contract or regulatory provisions or a specific consent is provided by the data subject.

In this connection, personal data may be transferred to third parties if and only if:

a) an explicit consent to share the data with third parties has been provided;

b) it is necessary to share the information with third parties to the end of providing the service requested;

c) this is necessary to comply with requests made by judicial or public security authorities. No data deriving from the web service shall be disclosed.

Rights of the data subjects

The personal data protection regulation expressly confers a number of rights to the subjects to whom the data refers (the so-called data subjects). In particular, in connection to the treatment of said data, in compliance with articles 15 et seq. of the Regulation you have the right to: obtain access to the personal data concerning you; rectify such data (correct inaccurate data or integrate it); request the deletion of data treated in violation of the law or under any of the conditions specified in article 17 of the GDPR; and the right to data portability. You also have the right to lodge a complaint with a supervisory authority should you feel that you have been denied the rights listed above.

Modifications of the current privacy policies

The Controller periodically examines its privacy and security policy and, if necessary, reviews it according to regulatory, organizational changes or those dictated by technological developments. Should the policies be modified, the new version will be published on this page of the website.

Questions, complaints, suggestions and exercise of rights

Anyone interested in more information, contributing suggestions, filing complaints or challenging the Company’s privacy policies or the way the Company treats personal data, or to exercise the rights conferred by the personal data protection regulation, please contact the Data Controller by mailing Acimga, Piazza Castello 28, 20121 Milan, Italy.