Cookie and Privacy Policy
Who are we and what do we do with your personal data?
Gate Real Estate Innovation S.r.l., with registered office at Viale Regina Margherita, 33 Cagliari, Sardinia 09124 (hereinafter also the Controller), as data controller, is committed to the confidentiality of your personal data and to providing it with the necessary protection against any event that could put it at risk of a breach.
How does the Controller collect and process your data?
The personal information concerning you will be processed for:
1. Browsing the website startup.gaterei.it
The processing of your personal data, such as browsing data, e.g. the IP address and cookies issued while browsing the website startup.gaterei.it, is carried out by the Controller to manage the website and to collect information, including of an aggregate nature.
Your personal data will not be disseminated or disclosed in any way to unspecified parties.
2. Disclosure to third parties and recipients
Your personal data is disclosed mainly to third parties and/or recipients whose activity is necessary to carry out the activities related to the aforementioned purposes, and also to comply with certain legal obligations. Any disclosure that does not meet these purposes will be subject to your consent.
In particular, your data will be disclosed to third parties/recipients for:
- the provision of the service (e.g. IT service providers);
- communications to the tax administration, and to public supervisory and control bodies towards which the Controller must fulfil specific obligations arising from the nature of the activity carried out;
The personal data that the Controller processes for this purpose are:
- browsing data (IP address)
3. IT security reasons
The Controller processes, also through its suppliers (third parties and/or recipients), your personal data (e.g. IP address) or traffic data collected, or obtained, in the case of services exposed on the website, to the extent strictly necessary and proportionate to ensure the security and the ability of a network or of the servers connected to it to withstand, at a given level of security, unforeseen events or unlawful or malicious acts that compromise the availability, authenticity, integrity and confidentiality of the personal data stored or transmitted.
For these purposes, the Controller has procedures in place for managing personal data breaches (data breach).
What cookies are and what purposes they can be used for
A "cookie" is a small text file created by some websites on the user's computer when the user accesses a given site, for the purpose of storing and carrying information. Cookies are sent by a web server (the computer on which the visited website runs) to the user's browser (Internet Explorer, Mozilla Firefox, Google Chrome, etc.) and stored on the user's computer; they are then sent back to the website on subsequent visits.
Some operations could not be carried out without the use of cookies, which, in some cases, are therefore technically necessary. In other cases the website uses cookies to facilitate and ease browsing by the user or to allow the user to make use of specifically requested services.
Cookies can remain in the system even for long periods and may also contain a unique identification code. This allows the websites that use them to track the user's browsing within the website itself, for statistical or advertising purposes, i.e. to create a personalised user profile based on the pages the user has visited and to then show and/or send the user targeted advertising (so-called Behavioral Advertising).
Which cookies are used and for what main purpose
The Controller sets out below the specific categories of cookies used, their purpose and the consequence of deselecting them:
| Cookie type | First/Third party | Purpose | Retention period | Consequence of deselection |
|---|---|---|---|---|
| Technical cookies | First | Website management. They allow the website to function and to be browsed safely and efficiently | 30 minutes | These are the cookies necessary for using the website; blocking them prevents it from working |
| Analytics cookies | First | Collect information in aggregate form on browsing by users in order to optimise the browsing experience and the services themselves. | 400 days | It would no longer be possible for the Controller to acquire the aggregate information |
Third-party cookies
On this website, no third-party cookies are active, i.e. cookies created by a website other than the one the user is currently visiting.
Social buttons
On the website startup.gaterei.it there are special "buttons" (called "social buttons/widgets") depicting the icons of social networks (e.g. Facebook, LinkedIn, etc.) and other web services (e.g. YouTube, etc.). These allow users browsing the Controller's web page to access the relevant social networks with a "click". In that case the social network and the web services acquire the data relating to the user, while the Controller will not share any browsing information or user data acquired through its own website with the social networks and web services accessible through the social buttons/widgets. These services issue "third-party cookies". Below are the links to the privacy notices of the most widely used social networks and of the websites the buttons link to:
- for LinkedIn: www.linkedin.com/legal/cookie_policy
- for Instagram: https://help.instagram.com/1896641480634370
What happens if you do not provide your data?
Please refer to the consequences resulting from deselecting individual cookies, as set out in the table above.
How, where and for how long is your data stored?
How we process your data
The processing of personal data is carried out through IT procedures by internal staff specifically authorised and trained for this purpose. They are allowed access to your personal data to the extent and within the limits necessary to carry out the processing activities concerning you.
The Controller periodically checks the tools by which your data is processed and the security measures in place for it, which it keeps constantly updated; it also verifies, including through the persons authorised to process the data, that no personal data whose processing is not necessary is collected, processed, archived or stored; it verifies that the data is kept with a guarantee of integrity and authenticity and used only for the purposes of the processing actually carried out.
Where we process your data
The data is stored in IT and telematic archives located within the European Economic Area.
For how long we process your data
Cookies
Please refer to the personal data retention periods indicated in the table above.
Website browsing
Personal data is retained for the time necessary to allow browsing of the website and in any case for no longer than 12 months, except in cases where events occur requiring the intervention of the competent Authorities, including in collaboration with the third parties/recipients entrusted with the Controller's data IT security activities, to carry out any investigations into the causes that led to the event, as well as to protect the Controller's interests relating to any liability connected with the use of the website and its services.
What are your rights?
In essence, at any time, free of charge and without any particular burden or formality for your request, you can:
- obtain confirmation of the processing carried out by the Controller;
- access your personal data and learn its origin (where the data is not obtained directly from you), the aims and purposes of the processing, the details of the parties to whom it is disclosed, the retention period for your data or the criteria used to determine it;
- update or rectify your personal data so that it is always accurate;
- erase your personal data from the Controller's databases and/or archives, including backups, where, among other things, it is no longer necessary for the purposes of the processing or where the processing is deemed unlawful, and always provided that the conditions set out by law are met; and in any case where the processing is not justified by another equally legitimate reason;
- restrict the processing of your personal data in certain circumstances, for example where you have contested its accuracy, for the period necessary for the Controller to verify its accuracy. You must be informed, within a reasonable time, also of when the suspension period has ended or the reason for the restriction of processing has ceased to exist, and the restriction itself has therefore been lifted;
- receive your personal data, where received or processed by the Controller with your consent and/or where its processing takes place on the basis of a contract and by automated means, in electronic format, including for the purpose of transmitting it to another data controller.
The Controller must act on this without delay and, in any case, no later than one month after receiving your request. This period may be extended by two months, if necessary, taking into account the complexity and number of requests received by the Controller. In such cases, the Controller will inform you, within one month of receiving your request, of the reasons for the extension. To exercise your rights, write to [email protected]
How and when can you object to the processing of your personal data?
For reasons connected with your particular situation, you can object at any time to the processing of your personal data where it is based on legitimate interest, by sending your request to the Controller at [email protected]
You have the right to have your personal data erased if there is no overriding legitimate reason prevailing over the one that gave rise to your request.
To whom can you lodge a complaint?
Without prejudice to any other administrative or judicial remedy, you can lodge a complaint with the competent supervisory authority, i.e. the authority that performs its tasks and exercises its powers in Italy where you have your habitual residence or place of work, or, if different, in the Member State where the infringement of Regulation (EU) 2016/679 occurred.
This is a courtesy translation. The Italian version is the legally binding text.