Notice pursuant to art.13 of the general data protection regulation 679/2016

1.1 In order to protect, in the best possible way, the privacy of their customers, complying with Italian and European law, UBR SRL provides indications on the type of information collected online and about the methods available to customers for the collection and processing of this information on the website.
1.2 The notice pursuant to art. 13 of the General Data Protection Regulation 679/2016 (following GDPR) is aimed at all those that interact with the web services of UBR, accessible online at www.ubr.it.

As a consequence, this notice is issued only for the web site www.ubr.it and not for other website potentially consulted by the user via links.
1.3 The present notice is applying exclusively to the personal data collected and processed through this website and it doesn’t concern the data processing done through other instruments (i.e. phone, mail, ect).
1.4 This information is the last version, updated at the date showed in the end notes: UBR reserves the right to modify it and update it every time that is necessary or appropriated. 

2.1 The “Controller” of the processing of personal data is UBR SRL, company incorporated under Italian law and based in Gussago (Brescia), Italy.

3.1 The processing connected with the web services of this website takes place at the aforementioned head office of UBR. All the collected data can be hosted in servers allocated in the S. Marino Republic.
For assistance operations the collected data can be occasionally verified from the technical staff of Passepartout S.P.A., based in Dogana (postal code 47891) Via Consiglio dei Sessanta no. 99 in S. Marino Republic, which has been appointed as “Data Processor” in the execution of the above mentioned services.
 

4.1During their regular operations, the computer systems and software procedures employed to run this website acquire some personal data whose transmission is implicit in the use of Internet communication protocols (e.g. web cookies).
This information is not collected to be associated with identified parties but, due to its very nature, could be used to identify users following processing and association with data held by third parties. This category of data includes IP addresses or the domain names of the computers used by users that connect to the website, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error etc.) and other parameters related to the user’s operating system and IT environment.
4.2 Cookies: No user personal data is acquired by the website. Cookies are not used to transmit personal information and no persistent cookies of any type, designed to trace users, are used. The use of session cookies (which are not permanently stored on the user’s computer and which disappear when the browser is closed) is strictly limited to the transmission of session data (consisting of random numbers generated by the server) required to enable the safe and efficient browsing of the site. The session cookies used on this site do not use other IT techniques that may potentially compromise the user’s browsing privacy and do not permit the acquisition of the user’s personal data.
4.3 These data are used exclusively to obtain anonymous statistical information on the use of the website and to monitor its correct functioning. The data may be used to establish responsibility in the event of hypothetical cybercrime against the website only on the request of the competent supervisory bodies.
4.4 Data provided voluntarily by the Data Subject: the optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site involves the subsequent acquisition of the sender’s email address, necessary in order to respond to their requests, as well as any other personal data inserted in the message. The user is free to provide the personal data indicated in UBR request forms or in communications to request the sending of information materials or other communications. If these data are not provided it may be impossible to fulfill the user’s request.

5.1 The personal data supplied by users that submit requests to receive information materials are only used to provide the requested service. Personal data are processed with computer-based tools only for the amount of time strictly necessary to serve the purpose for which they were collected. Specific security measures are observed to prevent data loss, the illegal or incorrect use of data, and unauthorized accesses.
 

6.1 The personal data processing is made through IT, telematics and manual processes. Always in respect to the GDPR rules and to UBR’s internal provisions.

7.1 The processing of personal data is made from the Controller and from his appointed staff.
7.2 The processing of personal data, from UBR and their appointed staff could be made, despite to the missing approval of the User, under request of the Judicial Authorities and in all the circumstances in which the data treatment is necessary to consent investigations aimed to contrast illegal activities, acts in fraud against the law or in order to guarantee the safety of people and things; or, in general, when the data transmission is due by law.

 

8.1 The Data Subject that is registered on the web site is the only responsible for the truthfulness of the personal information fulfilled herein. Pursuant to the Articles from 15 to 21 of GDPR, the Data Subject has the right:

1. To obtain the confirmation of the existence or not of his personal data, even if not yet registered, and their communication in an intelligible form.
2. To obtain the indication:

a) of the origin of personal data;

b) of the purpose of the processing;

c) of the logic applied in case of processing carried out with the aid of electronic instruments;

d) of the identification details of the Data Controller and the Data Managers

e) of the subjects or categories of subjects to whom the personal data may be communicated or who may come to know as a designated Representative in the territory of the State, managers or agents.

3. To obtain:

a) updating, rectification or, when interested, integration of data;

b) the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;

c) the attestation that the operations referred to letters a) and b) have been brought to the attention, also regarding to their content, of those to whom the data have been communicated or disseminated, except in the case where such fulfillment is valuated as impossible or it involves the use of resources which are manifestly disproportionate to the protected right.

The Data Subject can exercise these rights recognized by law by contacting UBR S.r.l. to the Contacts indicated in point 10 below.

8.2 Since 25 May 2018, the user may also, in accordance with articles 15-21 of the GDPR, exercise the following specific rights:

• right of access 
• right of rectification 
• right to cancellation (right to be forgotten), except in the event that the processing is necessary for the Data Controller, for the exercise of the rights to freedom of expression and information, for the fulfillment of a legal obligation or for the execution of a task carried out in the public interest, for purposes of archiving in the public interest, scientific or historical research or for statistical purposes, for the assessment, exercise or defense of a right in court.
• right to limitation of processing 
• opposition right
• the right to revoke the consent at any time, considered the lawfulness of the processing based on consent before revocation
• the right to lodge a complaint to the Guarantor for the protection of personal data. Therefore, if the Data Subject wishes to exercise this right, he can express his will by contacting UBR S.r.l. to one of the addresses indicated in point 10, below. 

8.3 UBR S.r.l. reserves the right to notify the Data Subject of changes or updates to the Website whenever necessary.

9.1 UBR S.r.l. retains the personal data collected by the Data Subject as long as such information is deemed relevant for commercial purposes or until the User requests the cancellation of their data by contacting UBR S.r.l. to one of the addresses indicated in point 10, below.

10.1 The Data Subject can exercise the rights recognized by the current legislation and submit any request, question, comment, or complaint regarding this Information, or the way in which personal data are processed on the Website to:

UBR S.r.l.  -  Viale Italia 95, 25064 Gussago (Bs) 
tel +39 030 2520842;  fax +39 030 2521481; 
email: amministrazione@ubr.it 
                                                                                                            
 
Information updated on 25 May 2018