Cookie Policy (UE)

Foreword

This Cookie Policy has been drafted and customized specifically for the website [https://www.retinae.com/](https://www.retinae.com/)

This Policy was drawn up based on the provision of the Data Protection Authority (Garante per la protezione dei dati personali) n. 229 of May 8, 2014, “Identification of simplified procedures for information and acquisition of consent for the use of cookies,” and the New provision n. 231 of June 10, 2021, “Guidelines on cookies and other tracking tools.” It integrates and updates other information already present on the site and/or previously released by the company, in combination with which it provides all the elements required by Art. 13 of EU Regulation 2016/679.

Data of the Joint Controllers and Data Protection Officer (DPO)

The Data Controller of personal data is RETINAE SRL VIA MERCANZIA 80
40050 FUNO DI ARGELATO (BO)
Tel. +39 051 8659633
E-mail commercial@retinae.com
VAT IT02247411206
Fiscal Code: 91218290376

Types of cookies and relative purposes

Cookies can be classified into:

  • Technical cookies: used for the sole purpose of carrying out the transmission of a communication over an electronic communication network, or to the extent strictly necessary for the provider of an information society service explicitly requested by the subscriber or user to provide such service as provided for by Art. 122 paragraph 1 of the Privacy Code. These types of cookies do not require the acquisition of user consent but must be indicated in the cookie policy.
  • Profiling cookies: used to link specific actions or behavioral patterns to identified or identifiable subjects for the purpose of allowing the controller to modulate the provision of the service in a more personalized way and send advertising messages in line with the preferences expressed by the user during navigation.
  • Analytics Cookies: installed on the user’s terminal by the operator of the site visited or by third-party sites. Third-party cookies, primarily for analytical purposes, derive mostly from Google Analytics functionalities. It is possible to obtain more information about Google Analytics by clicking on the following link: [http://www.google.it/intl/it/analytics](http://www.google.it/intl/it/analytics). In any case, the cookies do not allow the identification of the data subject and are intended to refer to the single device or single application to avoid tracking the user’s browsing data. Analytics cookies can be treated as technical cookies, and therefore regardless of user consent, if the following conditions are met:
    • Use is limited to the production of aggregate statistics usable in relation to the site visited by the user;
    • In reference to so-called third-party analytics cookies, the fourth part of the IP address being tracked must be masked;
    • With regard to so-called third-party analytics cookies, the third party must be prevented from using the analytics cookies in combination with other processing or transmitting them to further third parties.

Applicable Law

For the use of cookies and other technical tracking tools, the data controller is subject only to the obligation to provide specific information to the data subject. Regarding cookies and other tracking tools for purposes other than technical ones, use is permitted exclusively after acquiring the user’s informed consent, which must be expressed by an unequivocal act pursuant to Recital 32.

Mechanism for acquiring consent

The data controller guarantees the mechanism for acquiring consent through the presentation of a banner upon the user’s first access to the site.

  • In the event that the user does not consent to the use of cookies and other tracking tools, and in the event that the user has chosen to provide consent only for the use of certain cookies, the choice is recorded and no longer solicited, except in the following cases:
  • when one or more conditions of the processing change significantly
  • when it is impossible for the site operator to know if a cookie has already been stored in the device
  • when at least 6 months have passed since the previous presentation of the banner.

Legal basis for processing

For technical cookies, the legal basis for processing is the legitimate interest of the data controller, pursuant to Art. 6 letter f) GDPR, as these cookies are necessary for the functioning of the site. For non-technical cookies, the legal basis for processing is the consent expressly manifested by the user and always revocable pursuant to Art. 6 letter a) GDPR.

Cookies used – Retention times – Purpose – Transfer of data to third parties

Social media

On our website, we have included content from Facebook and Twitter to promote web pages (e.g., “like”, “pin”) or share them (e.g., “tweet”) on social networks such as Facebook and Twitter. This content is embedded with code derived from Facebook and Twitter and places cookies. This content might store and process certain information for personalized advertising.

Please read the privacy policy of these social networks (which may change regularly) to know what they do with your (personal) data they process using these cookies. The data obtained is anonymized as much as possible. Facebook and Twitter are located in the United States.

Browser settings

We also inform you that the user can configure, freely and at any time, their privacy parameters in relation to the installation and use of cookies, directly through their navigation program (browser) following the relevant instructions.

In particular, the user can set so-called “private browsing,” thanks to which their navigation program stops saving the history of sites visited, any passwords entered, cookies, and other information about the pages visited.

We warn that if the user decides to deactivate all cookies (including those of a technical nature), the quality and speed of services offered by this website could drastically worsen and access to some sections of the site itself could be lost.

Rights of the data subjects

We inform you that as a data subject, you have the right to exercise the following rights:

Right of access pursuant to Art. 15 of EU Reg. 2016/679: the data subject has the right to obtain confirmation as to whether or not personal data concerning them are being processed and, if so, can obtain, among other things, access to their personal data and information regarding the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data have been or will be disclosed.

Right to rectification pursuant to Art. 16 of the Regulation:

  • rectification of inaccurate personal data concerning them without undue delay
  • integration of their personal data, if incomplete.

Right to erasure (“right to be forgotten”) pursuant to Art. 17 of the Regulation: erasure of personal data concerning them without undue delay.

Right to restriction of processing pursuant to Art. 18 of the Regulation: restriction of processing in the following cases:

  • the data subject disputes the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
  • the processing is unlawful and the data subject opposes the erasure of the personal data and requests instead that its use be restricted;
  • although the data controller no longer needs them for the purposes of the processing, the personal data are necessary for the data subject for the establishment, exercise, or defense of a legal claim;
  • the data subject has objected to processing pursuant to Article 21, paragraph 1, pending verification as to whether the legitimate grounds of the data controller override those of the data subject

Right to data portability pursuant to Art. 20 of the Regulation: you may receive in a structured, commonly used, and machine-readable format the personal data concerning you and in our possession;

Right to transmit such data to another data controller without hindrance from the data controller to whom they were provided in the cases referred to in Article 20 of the Regulation.

Right to object for processing carried out pursuant to Article 6, paragraph 1 letters e) or f) and pursuant to Art. 21 of the Regulation: objection, at any time, on grounds relating to your particular situation, to the processing of personal data concerning you, including profiling.

The above requests may be addressed to the Data Controller.

Requests can be sent via:

  • registered mail with return receipt (A/R) to RETINAE SRL VIA MERCANZIA 80 40050 FUNO DI ARGELATO (BO)
  • registered mail with return receipt (A/R) to RETINAE SRL VIA MERCANZIA 80 40050 FUNO DI ARGELATO (BO)
  • an e-mail to the address commercial@retinae.com

Furthermore, in the event that it is believed that the processing has been carried out in violation of the legislation on the protection of personal data, the right to lodge a complaint with the Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia, 11 – 00187 – Roma) is recognized.