INFORMATION ON THE PROCESSING OF PERSONAL DATA
Pursuant to article 13 of Regulation (EU) 2016/679

HOLDER OF THE TREATMENT
NAtpuglia 2.0 srl
Registered office: Via Indipendenza 27 -700111 Alberobello – (BA)
Factory: Via Alberobello 395 / C – 74015 Martina Franca (TA)
Tel: +390804402020
Mail: info@apuliastones.com
C. F. / VAT number: 07935500723

EXTERNAL RESPONSIBLE FOR THE TREATMENT FOR THE WEBSITE
Ineald S.R.L. Via Senna 3/5 50019 Florence – Sesto Fiorentino, tel: 800 12 58 68, VAT no .: 06679300480, mail: info@inlead.it.

LEGAL BASIS OF THE PROCESSING
The Data Controller processes Personal Data relating to the User if one of the following conditions exists:
The User has given consent for one or more specific purposes; Note: in some systems, the Data Controller may be authorized to process Personal Data without the User’s consent or another of the legal bases specified below, as long as the User does not object (“opt-out”). to such treatment. However, this is not applicable if the processing of Personal Data is regulated by European legislation on the protection of Personal Data;
Processing is necessary for the execution of a contract with the User and / or for the execution of pre-contractual measures;
Processing is necessary to fulfill a legal obligation to which the Data Controller is subject;
Processing is necessary for the execution of a public interest task or for the exercise of public powers with which the Data Controller is invested;
The processing is necessary for the pursuit of the legitimate interest of the owner or third parties.
However, it is always possible to request the Data Controller to clarify the concrete legal basis of each treatment and in particular to specify whether the treatment is based on the law, provided for by a contract or necessary to conclude a contract.

TYPES OF DATA PROCESSED AND PURPOSE OF THE PROCESSING

Navigation data
The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes the IP addresses or domain names of the computers and terminals used by users, the addresses in URI / URL (Uniform Resource Identifier / Locator) notation of the requested resources, the time of the request, the method used in the submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s computer environment. These data, necessary for the use of the web services, are also processed for the purpose of: obtaining statistical information on the use of the services (most visited pages, number of visitors by time or day, geographical areas of origin, etc.) and checking the proper functioning of the services offered. Browsing data do not persist for more than seven days and are deleted immediately after their aggregation (except for any need for the detection of crimes by the judicial authority).

Data communicated by the user
The optional, explicit and voluntary sending of messages to the owner’s contact addresses, as well as the compilation and forwarding of the forms on the owner’s sites, entail the acquisition of the sender’s contact data, necessary to reply, as well as all the personal data included in the communications. Specific information will be published on the pages of the owner’s sites prepared for the provision of certain services. The site contains several forms for the collection of user data. Each form is aimed at allowing the user to access specific services.
The data connected to the “Contact Us”, “Guestbook” and / or “Newsletter” forms may also be processed by the staff of the company that takes care of the maintenance of the technological part of the site, Inlead S.R.L. (Outsourcing Manager of the Treatment), at the company’s headquarters and / or by consulting the data stored on its server. Users are asked to pay particular attention to the provision of consent, remembering that any consent given may always and at any time be revoked by the same users, using the owner’s email box, indicating in the email subject “Ref . Privacy “.

Cookies and other tracking systems
Why do we use cookies?
Cookies allow us to provide, protect and improve the Service, for example by personalizing content and providing a safer experience. Although the cookies we use may undergo periodic changes following the improvement and updating of the Service, we use cookies for the following purposes: to save the User’s preferences and optimize the browsing experience by reducing waiting times. These cookies include, for example, those for setting the language and currency, login information for private sections or for the management of statistics by the owner of the site.

Technical session and navigation cookies:
This website uses session cookies to carry out activities that are strictly necessary for its functioning.
Cookies are information installed in the browser when you visit a website or use a social network with your PC, tablet or smartphone. Each cookie contains different information that assist the owner in providing the service based on the purposes described. Cookies can remain in the system for the duration of a session (i.e. when the browser is closed) or for an extended period of time. Some of the installation purposes may require the consent of the User.
Cookies are not used for user profiling, nor are other tracking methods used.
Instead, session cookies (non-persistent) are used strictly limited to what is necessary for the safe and efficient navigation of the sites. The storage of session cookies in terminals or browsers is under the control of the user, whereas on the servers, at the end of the HTTPS sessions, information relating to cookies remains recorded in the service logs, with storage times in any case not exceeding 1 day per on a par with other browsing data. Acceptance of the cookie banner lasts for 1 year.

Third party cookies:
Statistics. The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to keep track of User behavior. By way of example, the following are mentioned:
– Google Analytics (Google Inc.). Web analysis service provided by Google Inc. (“Google”). Google uses the Personal Data collected for the purpose of tracking and examining the use of this website, compiling reports and sharing them with other services developed by Google. Google could use Personal Data to contextualize and personalize the advertisements of its advertising network.
– Google AdWords (Google Inc.). Google AdWords conversion tracking is a statistics service provided by Google Inc. that connects data from the Google AdWords ad network with the actions performed within this website.
– Personal data collected: Cookies and Usage data; Place of treatment: 1600 Amphitheater Parkway Mountain View – CA94043 USA; privacy legislation; revocation

Widgets. These services allow you to view content hosted on external platforms directly from the pages of this website and interact with them. In the event that a service of this type is installed, it is possible that, even if the Users do not use the service, the same collects traffic data relating to the pages in which it is installed.
The site may also use some “social plugins” for sharing and communicating content: their use is optional. When you use one of the plugins, the site will contact, through your browser, with the servers where the social sharing services referred to are managed, communicating to them the data that the user intends to publish and share through their social profile ( of which he remains solely responsible) and informing them (the servers) of the pages that the user has visited.
To exclude this possibility, you can avoid sharing content with the use of social share buttons. For further details regarding the use and collection of data through the following plugins and to find out how the data collected and transmitted are processed (and for what purposes), please consult the privacy and legal information issued by the owners of the services in question.

How can i control cookies?
Through the browser preferences, the User has the possibility to manage the preferences relating to Cookies directly within his browser and prevent third parties from installing them. It is important to note that by disabling all or some cookies, the functioning of this site may be compromised.
Your browser or device may contain settings that allow you to choose whether to set cookies and to delete them. For more information on these control options, please consult the support materials of your browser or device.
For more information on how companies usually use cookies and the choices available, you can consult the following resources:
Digital Advertising Alliance
Digital Advertising Alliance of Canada
European Interactive Digital Advertising Alliance
Payment management
The payment management services allow this website to process payments by credit card, bank transfer or other instruments. The data used for payment are acquired directly by the operator of the payment service requested without being processed in any way by this website. Some of these services may also allow the scheduled sending of messages to the User, such as emails containing invoices or notifications regarding the payment.

Infrastructure monitoring
These services allow this application to monitor the use and behavior of components of the same, to allow for improved performance and functionality, maintenance or troubleshooting.

RIGHTS OF THE INTERESTED PARTY
In your capacity as an interested party, you can exercise your rights towards the Data Controller at any time, pursuant to art. 15 of the GDPR:
the. obtain confirmation of the existence or not of personal data concerning you, even if not yet registered, and their communication in an intelligible form;
ii. obtain the indication: a) of the origin of the personal data; b) the purposes and methods of treatment; c) the logic applied in case of treatment carried out with the aid of electronic instruments; d) of the identification details of the owner, of the managers and of the representative appointed pursuant to art. 3, paragraph 1, GDPR; e) the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the State, managers or agents;
iii. obtain: a) updating, rectification or, when interested, integration of data; b) the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those whose retention is unnecessary for the purposes for which the data were collected or subsequently processed; c) the certification that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment occurs proves impossible or involves the use of means manifestly disproportionate to the protected right;
iv. object, in whole or in part: a) for legitimate reasons, to the processing of personal data concerning you, even if pertinent to the purpose of the collection; b) to the processing of personal data concerning you for the purpose of sending advertising materials or direct selling or for carrying out market research or commercial communication, through the use of automated call systems without the intervention of an operator by e-mail and / or through traditional marketing methods by telephone and / or paper mail. It should be noted that the right of opposition of the interested party, set out in point b) above, for direct marketing purposes through automated methods extends to traditional ones and that in any case the possibility remains for the interested party to exercise the right of opposition also only partially.

Therefore, the interested party can decide to receive only communications using traditional methods or only automated communications or neither of the two types of communication.

Where applicable, you also have the rights referred to in articles 16-21 GDPR:

– Right to rectification (art.16);
– Right to erasure – Right to be forgotten (art. 17);
– Right to limitation of treatment (art.18);
– Obligation to notify in case of rectification or cancellation of personal data or limitation of treatment (art.19);
– Right to data portability (art.20);
– Right to object (art.21);
– Revoke, at any time, the consent to the processing of your Personal data previously expressed;
– Submit a complaint to the Guarantor Authority.

RESPONSIBILITY OF THE DATA CONTROLLER
Facilitate the protection of personal data already in the planning phase of all processing activities = PRIVACY BY DESIGN
Adopt safety measures, evaluating a priori the risks generated in the treatment process
Ensure transparency on data flows and treatment activities
Promptly intervene in case of violation (also called data breach)
Adapt to establish roles and responsibilities in each treatment activity

For any further information, and to assert the rights recognized by the European Regulation, you can contact the Data Controller, which for all legal purposes is Your site.
Registered office: Via Indipendenza 27 -700111 Alberobello – (BA)
Factory: Via Alberobello 395 / C – 74015 Martina Franca (TA)
Tel: +390804402020
Mail: info@apuliastones.com
C. F. / VAT number: 07935500723

METHODS FOR THE EXERCISE OF RIGHTS BY THE INTERESTED PARTIES
The methods of exercise of the rights by the interested parties are established, in general, in the articles 11 and 12 of the regulation. The deadline for replying to the interested party is, for all rights (including the right of access), 1 month, extendable up to 3 months in cases of particular complexity; the owner must in any case give feedback to the interested party within 1 month of the request, even in case of refusal.
It is up to the owner to evaluate the complexity of the response to the interested party and to establish the amount of any contribution to be asked from the interested party, but only if it concerns manifestly unfounded or excessive (even repetitive) requests (art.12.5), unlike the provisions of art. 9, paragraph 5, and 10, paragraphs 7 and 8, of the Code, or if more “copies” of personal data are requested in the case of the right of access (art. 15, paragraph 3); in the latter case, the owner must take into account the administrative costs incurred. As a rule, feedback to the interested party must also take place in writing through electronic tools that facilitate accessibility; it can be given orally only if the interested party so requests (art. 12, paragraph 1; see also art. 15, paragraph 3).
The exercise of rights is, in principle, free of charge for the interested party, but there may be exceptions. The owner has the right to request information necessary to identify the interested party, and the latter has the duty to provide it, according to suitable methods (see, in particular, art. 11, paragraph 2 and art. 12, paragraph 6).

RIGHT TO CLAIM
Interested parties who believe that the processing of personal data referred to them through this site occurs in violation of the provisions of the Regulation have the right to lodge a complaint with the Guarantor, as required by art. 77 of the Regulation itself, or to take appropriate judicial offices (art. 79 of the Regulation).

POLICY CHANGES
The Data Controller reserves the right to make changes to this policy at any time by giving notice to Users on this page. Please therefore consult this page often, taking as reference the date of last modification indicated at the bottom. In case of non-acceptance of the changes made to this privacy policy, the User is required to cease using this Website and can request the Data Controller to remove his Personal Data. Unless otherwise specified, the previous privacy policy will continue to apply to the Personal Data collected up to that moment.