Cookie Policy
Summary
Data we collect automatically
We automatically collect your data, such as when you visit test.igmidev.net/
⦁ Types of Data: Tracking Tools, Usage Data
⦁ Trusted third parties that help us process them: this Application
⦁ How we use them:
⦁ Platform and hosting services
⦁ Developing and managing this Application
Data provided
We collect data provided while using our service
⦁ Types of Data: payment information, billing address, shipping address, name (+5 other data)
⦁ Trusted third parties that help us process them: this Application
⦁ How we use them:
⦁ Platform and hosting services.
⦁ Developing and managing of this Application
Data Controller
Italian Military Geographic Institute
via Cesare Battisti, 10, 50122, Florence
Data Controller’s email address: istituto_geografico@postacert.difesa.it
Type of Data We Collect
The Personal Data collected by this Application, either directly or through third parties, include:
⦁ Tracking Tools
⦁ Usage Data
⦁ Payment Information
⦁ Billing Address
⦁ Shipping Address
⦁ Name
⦁ E-mail
⦁ Order ID
⦁ Phone Number
⦁ Retail Store Information
⦁ Date of Birth
Full details on each type of Personal Data collected are provided in the relevant sections of this Privacy Policy or through specific notices displayed prior to the collection of such Data. Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically while using this Application. Unless otherwise specified, all requested Data are mandatory.
Any use of Cookies – or other tracking tools – is intended to provide the Service requested by the User, in addition to the further purposes described herein and in the Cookie Policy.
The User assumes responsibility for any Personal Data of third parties obtained, published or shared through this Application.
Method and Location of collected Data processing
Method of processing
The Data Controller takes appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data. Processing is carried out using IT and/or telecommunication tools, with organizational methods and logics strictly related to the specified purposes. In addition to the Data Controller, other parties involved in the organization or external parties appointed as Data Processors may have access to the Data.
Location
The Data are processed at the operational offices of the Data Controller and in any other location where the parties involved in the processing are located. The User’s Personal Data may be transferred to a country other than the one in which the User is located.
Retention Period
Unless otherwise specified, Personal Data are processed and stored for the time required by the purpose for which they were collected and may be retained for a longer period due to any legal obligations or based on the Users’ consent.
Purpose of processing the Collected Data
User Data are collected to enable the Data Controller to provide the Service, fulfill legal obligations, respond to requests or enforcement actions, protect the Data Controller’s rights and interests, detect any malicious or fraudulent activities, as well as for the following purposes:
⦁ Platform and hosting services
⦁ Creation and management of this Application
Personal Data Processing Details
Creation and Management of this Application
The main components of this Application are created and managed directly by the Data Controller using of the software listed below.
⦁ WordPress (self-hosted)
⦁ Personal Data Processed: date of birth, Usage Data
⦁ Service Provided by: this Application
⦁ CCPA Category: identifiers, information about related activities on Internet or other networks Platform and hosting services
These services are intended to host and run key components of this Application.
⦁ WooCommerce
⦁ Personal Data Processed: Usage data, retail store-related data, email, order ID, billing address, shipping address, payment information, name, phone number, Tracking Tools
⦁ Service provided by: this Application
CCPA Category: identifiers, business information, information about activities on Internet or other networks
Cookie Policy
This Application uses Tracking Tools. Users may consult the Cookie Policy.
Additional information for users in the European Union
Legal basis for processing
The Data Controller processes Personal Data if any of the following conditions exist:
⦁ consent for one or more specific purposes;
⦁ processing is necessary for the performance of a contract or pre-contractual measures;
⦁ processing is necessary to fulfill a legal obligation;
⦁ processing is necessary for the performance of a task carried out in the public interest or the exercise of public authority;
⦁ processing is necessary for the pursuit of the legitimate interest of the Data Controller or third parties.
Additional information on retention time
⦁ Data collected for a contract: retained until execution is completed
⦁ Data collected for legitimate interest: retained until such interest is satisfied
⦁ Consent-based processing: retained for a longer period until consent is withdrawn
⦁ Due to legal obligation, the Data Controller may be required to retain Data for a longer period
Personal Data will be deleted at the end of retention period
User’s Rights Based on the General Data Protection Regulation (GDPR)
The User has the right to:
⦁ withdraw consent at any time
⦁ object to the processing of Personal Data (when legal basis is other than consent)
⦁ access the Data
⦁ verify and request rectification
⦁ get restriction of processing
⦁ get the deletion or removal of Personal Data
⦁ receive the Personal Data or transfer these Data to another Controller (portability)
⦁ submit a complaint
Details concerning the right to object
Users have the right to object for reasons relating to their particular situation when Personal Data are processed in the public interest, in the exercise of official authority, or to pursue a legitimate interest.
It is possible to object at any time for direct marketing purposes.
How to exercise your rights
Requests should be addressed to the Data Controller. The request is free of charge and the Data Controller will reply within one month.
Additional Information for Users in Switzerland
This section applies to Users in Switzerland.
Users’ rights under the Federal Data Protection Act
Users have the following rights:
⦁ right to access their Personal Data;
⦁ right to object to the processing of their Personal Data (including restriction, deletion or destruction, prohibition of disclosure);
⦁ right to receive Personal Data and to transfer them to another Data Controller (data portability);
⦁ right to request rectification of incorrect Personal Data.
How to exercise these rights
Requests should be addressed to the Data Controller. They are free of charge and the Data Controller will reply as soon as possible.
Additional information for Users in Brazil
This section applies to all Users in Brazil (LGPD).
Legal basis under which we process your personal information
Processing is carried out if one of the following legal bases applies:
⦁ consensus;
⦁ fulfillment of legal obligations;
⦁ enforcement of provisions according to laws or regulations or by contracts;
⦁ studies conducted by research institutions;
⦁ performance of a contract and related pre-contractual obligations;
⦁ exercise of our rights in court;
⦁ defense or physical safety of you or a third party;
⦁ health protection;
⦁ our legitimate interest;
⦁ credit protection.
Your privacy rights in Brazil, how to submit a request and how it will be handled by us
———————–
You have the right to:
⦁ get confirmation about the existence of processing activities;
⦁ access your personal information;
⦁ get rectification;
⦁ get anonymization, blocking, or deletion of personal information that is unnecessary or processed in violation of the LGPD;
⦁ get information regarding the possibility of giving or withholding your consent;
⦁ get information regarding the third parties with whom we share your personal information;
⦁ get the portability of your personal information;
⦁ get the deletion of personal information processed on the basis of your consent;
⦁ withdraw your consent at any time;
⦁ file a complaint to the ANPD or a consumer protection organization;
⦁ object to processing activities;
⦁ request clear and adequate information regarding the criteria and procedures used in automated decision-making process;
⦁ request a review of decisions made only on the basis of automated decision-making.
You will not be discriminated against for exercising your rights.
How to submit a request:
You may submit a formal request to exercise your rights free of charge, using the contact information in this document.
How and when will we handle your request? We will reply as soon as possible. If this is not possible, we will explain the reasons.
For access or confirmation requests, please specify the format (electronic/paper) and type of response (immediate/full disclosure – 15 days).
For requests for rectification, deletion, anonymization, or blocking, we will inform the other parties with whom we have shared data.
Transfer of personal information outside Brazil in cases permitted by the law
Transfer is possible when:
⦁ necessary for international legal cooperation;
⦁ necessary to defend life or physical safety;
⦁ authorized by the ANPD;
⦁ resulting out of an international cooperation agreement;
⦁ necessary for the exercise of public policy or the performance of a public service;
⦁ necessary for the fulfillment of a legal obligation, the performance of a contract, or the exercise of rights in judicial/administrative/arbitration proceedings.
Additional Information for Users in the United States
(Applicable to residents of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Nevada, Delaware, Iowa, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, and Montana).
Notice at collection (Notice at collection)
Information is provided about the categories of Personal Information collected or disclosed in the past 12 months.
⦁ Identifiers
⦁ Personal Information Collected or Disclosed: Tracking Tools, Usage Data, Billing Address, Shipping Address, Name, Email, Order ID, Phone Number, Store Location Data, Date of Birth.
⦁ Sensitive Personal Information collected or disclosed: payment information.
⦁ Purpose: Platform and hosting services. Creation and management of this Application.
⦁ Retention period: for as long as necessary to fulfill the purpose.
⦁ Sold or Shared: No.
⦁ Targeted Advertising: No.
⦁ Third parties: this Application.
⦁ Business Information
⦁ Personal Information Collected or Disclosed: Tracking Tools, Usage Data, Billing Address, Shipping Address, Name, Email, Order ID, Phone Number, Point of Sale Data.
⦁ Sensitive Personal Information collected or disclosed: payment information.
⦁ Purpose: Platform and hosting services.
⦁ Storage period: as long as necessary to fulfill the purpose.
⦁ Sold or Shared: No.
⦁ Targeted Advertising: No.
⦁ Third parties: this Application.
⦁ Information about activity on Internet or other electronic networks
⦁ Personal Information Collected or Disclosed: Tracking Tools, Usage Data, Billing Address, Shipping Address, Name, Email, Order ID, Phone Number, Point of Sale Data, Date of Birth.
⦁ Sensitive Personal Information collected or disclosed: payment information.
⦁ Purpose: Platform and hosting services. Creation and management of this Application.
⦁ Storage period: for as long as necessary to fulfill the purpose.
⦁ Sold or Shared: No.
⦁ Targeted Advertising: No.
⦁ Third parties: this Application.
What are the sources of the Personal Information we collect?
We collect data:
⦁ directly or indirectly from you (for example, when you submit requests via forms, or indirectly by browsing activity);
⦁ from third parties who work with us in connection with the Service.
Your Privacy Rights under U.S. State Laws
You have the right to:
⦁ access to Personal Information: right to know.
⦁ correct inaccurate Personal Information.
⦁ request deletion of your Personal Information.
⦁ get a copy of your Personal Information (portability).
⦁ opt out the Sale of your Personal Information.
⦁ non-discrimination.
Additional Rights for Users residing in California
⦁ disable the Sharing of your Personal Information for cross-context behavioral advertising.
⦁ restrict our use or disclosure of your Sensitive Personal Information.
Additional rights for Users residing in Virginia, Colorado, Connecticut, Texas, Oregon, Nevada, Delaware, Iowa, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, and Montana
⦁ opt out the processing of your personal information for Targeted Advertising or profiling.
⦁ freely give, deny or withdraw your consent for the processing of your Sensitive Personal Information.
Additional rights for users residing in Utah and Iowa
⦁ opt out processing of your Personal Data for Targeted Advertising.
⦁ opt out the processing of your Sensitive Personal Information.
How to Exercise Your Privacy Rights Under U.S. State Laws
You must submit your request via the contact information provided in this document.
⦁ How to exercise your opt out rights: In addition to contacts, you can use the privacy choices link provided on this Application, or a Global Privacy Control (GPC).
⦁ How and when we will handle your request: We will reply without undue delay, within the time required by law.
Additional Processing Information
Defense in Court
Personal Data may be used by the Data Controller in court to defend against misuse of the Application. The Data Controller may be required to disclose the Data by order of public authorities.
Specific disclosures
The Application may provide additional and contextual disclosures about specific Services.
System log and maintenance
For operational and maintenance needs, the Application may collect system log, which may also contain Personal Data (e.g. User IP address).
Information not incuded in this policy
Further information in relation to the processing of Personal Data may be requested from the Data Controller at any time.
Changes to this privacy policy
The Data Controller reserves the right to make changes at any time by notifying Users. If such changes affect processing whose legal basis is consent, the Data Controller will seek consent again.
Definitions and Legal References
Personal Data (or Data) / Personal Information (or Information)
Any information that makes a natural person identified or identifiable.
Sensitive Personal Information
All Personal Information not publicly available and revealing sensitive information according to applicable law.
Usage Data
Information automatically collected through this Application (e.g., IP addresses, time of request, browser/operating system characteristics, sequence of pages accessed).
User
The subject using this Application (concurring with the Data Subject).
Data Subject
The natural person to whom the Personal Data refer.
Data Processor (or Manager)
The natural person, legal entity, public administration and any other entity that processes personal data on behalf of the Data Controller.
Data Controller (or Controller)
The natural or legal entity, public authority, agency or other body that determines the purposes and means of the processing of personal data.
This Application
The hardware or software tool by which Users’ Personal Data are collected and processed.
Service
The Service provided by this Application.
Sale
Any exchange of Personal Information by the Owner to a third party in exchange for money or otherwise for consideration (as defined by applicable U.S. state law).
Sharing
Any disclosure of Personal Information to a third party for cross-context behavioral advertising, whether in exchange for money or otherwise for consideration (as defined by California privacy laws).
Targeted Advertising
The display of advertisements to a selected consumer based on Personal Information obtained from that consumer’s activities over time and on unaffiliated websites or online applications.
European Union (or EU)
Extended to include all current member states of the European Union and the European Economic Area.
Cookies
Tracking tools that consist of small portions of data stored within the User’s browser.
Tracking Tool
Any technology – e.g., cookies, unique identifiers, web beacons – that enables tracking of Users.
Legal framework
This privacy policy is drafted in accordance with multiple legal frameworks. It pertains exclusively to this Application.
