Privacy Policy

Privacy Policy of www.qcterme.com

This Website collects certain Personal Data from its Users.

Policy summary

Personal data collected for the following purposes and using the following services:

Contacting the User

Contact form

Personal Data: Address, company name, country, county, date of birth, email, first name, last name, occupation, phone number, postcode and town/city

 

Tag management

Google Tag Manager

Personal Data: Cookies and Usage Data

Interacting with social media and external platforms

Facebook Like button and social plugins, Twitter Tweet button and social plugins and LinkedIn button and social plugins

Personal Data: Cookies and Usage Data

 

Advertising

Direct Email Marketing (DEM)

Personal Data: email

Remarketing and behavioral targeting

AdWords Remarketing and Facebook Remarketing

Personal Data: Cookies and Usage Data

 

Statistics

Google Analytics and Google Ads conversion tracking

Personal Data: Cookies and Usage Data

Displaying content from external platforms

 

Instagram widget

Personal Data: Cookies and Usage Data

YouTube Video widget without cookies

Personal Data: Usage Data

Further information on Personal Data

o Flow Chat

The Flow Chat widget is a service for interacting with the Flow chat platform, provided by Flow Technologies, Ltd.

 

Newsletters and Marketing

Contact details

 

Data Controller

QC Terme S.r.l. - Via Ripamonti 89 - 20141 Milan (MI) VAT Group Reg. No. 10541980966

Data Protection Officer (DPO): Tecnologie & Sistemi srl - Corso Promessi Sposi, 23 - 23900 Lecco (LC) VAT No.: 03347650131, represented by Mirco Giorgi, who can be contacted for any information or requests.

Email: [email protected]

Certified email (PEC): [email protected]

Tel: 0341-350065

Email address of the Data Controller: [email protected]

 

Full Policy

Data Controller

QC Terme S.r.l. - Via Ripamonti 89 - 20141 Milan (MI) VAT Group Reg. No. 10541980966

Data Protection Officer (DPO): Tecnologie & Sistemi srl - Corso Promessi Sposi, 23 - 23900 Lecco (LC) VAT No.: 03347650131, represented by Mirco Giorgi, who can be contacted for any information or requests.

Email: [email protected]

Certified email (PEC): [email protected]

Tel: 0341-350065

Email address of the Data Controller: [email protected]

 

Type of Data collected

The Personal Data collected by this Website, independently or via third parties, includes: Cookies, Usage Data, first name, last name, date of birth, phone number, company name, occupation, address, country, county, email, postcode and town/city.

Full details on each type of data collected are provided in the relevant sections of this privacy policy or in specific information texts displayed before the data is collected.

Personal Data may be provided by the User at their discretion or, in the case of Usage Data, collected automatically during the use of this Website.

Unless otherwise indicated, all Data requested by this Website is mandatory. Should the User refuse to provide the data, it may prevent this Website from providing the Service. Where this Website indicates certain Data as optional, the User is free to abstain from providing said Data, without the availability or running of the Service being affected.

Should the User wish to clarify which Data is mandatory, they are advised to contact the Data Controller.

Any use of Cookies (or other tracking tools) by this Website or by third-party service providers used by this Website, unless otherwise indicated, is for the purpose of providing the Service requested by the User, and for the additional purposes indicated in this document and in the Cookie Policy, where available.

The User accepts responsibility for the Personal Data of third parties that is obtained, published or shared via this Website and the User guarantees their right to communicate or disseminate said data, releasing the Data Controller from any liability with respect to third parties.

Methods and location of processing the Data collected

Processing methods

The Data Controller adopts the necessary security measures aimed at preventing unauthorised access, disclosure, editing or destruction of Personal Data.

The data is processed using computer and/or electronic tools, with organisational methods and logic strictly relating to the purposes indicated. In addition to the Data Controller, the Data may in some cases be accessed by other parties involved in running this Website (administrative, sales and marketing staff, legal teams and system administrators) or external parties (such as third-party technical service providers, couriers, hosting providers, computer companies, communications agencies, banks and financial institutions, insurance companies) which may, if necessary, also be appointed as Data Processors by the Data Controller. The updated list of Data Processors can be requested at any time from the Data Controller.

Legal basis for processing Personal Data

The Data Controller processes Personal Data relating to the User where one of the following conditions is met:

the User has consented for one or more specific purposes; N.B.: in certain legal systems the Data Controller may be authorised to process Personal Data without the User's consent or another of the legal bases specified below, until such time as the User objects to said processing (by opting out). However, this does not apply where the processing of the Personal Data is governed by EU legislation on the protection of Personal Data;

the processing is necessary for the fulfilment of a contract with the User and/or for the execution of pre-contractual measures.

the processing is necessary for the fulfilment of a legal obligation to which the Data Controller is subject;

the processing is necessary for the performance of a task in the public interest or in the exercise of official authority vested in the Data Controller;

the processing is necessary for the pursuit of the legitimate interests of the Data Controller or of third parties.

In any event, the User may ask the Data Controller at any time to clarify the specific legal basis for any processing and in particular to specify whether the processing is based on law, required by a contract or necessary for delivering a contract.

Location

The Data is processed at the headquarters of the Data Controller and in any other location in which the parties involved in the processing are based. For further information, please contact the Data Controller.

The User's Personal Data may be transferred to a country other than the one in which the User is located. For further information on the location of the processing, the User can refer to the section relating to details on the processing of Personal Data.

The User has the right to obtain information with regard to the legal basis for the transfer of Data outside of the European Union or to an international organisation of public international law or constituted by two or more countries, such as the UN, and with regard to the security measures adopted by the Data Controller to protect the Data.

The User can check whether one of the above transfers has taken place by consulting the section of this document relating to details on the processing of Personal Data, or can request information from the Data Controller by contacting it using the contact details provided at the beginning of this document.

Retention period

The Data is processed and retained for as long as is required for the purposes for which it has been collected.

Therefore:

Personal Data collected for purposes relating to the fulfilment of a contract between the Data Controller and the User shall be held until said contract has been completely fulfilled and in accordance with the time periods required by law.

Personal Data collected for purposes relating to the legitimate interests of the Data Controller shall be held until said interests have been satisfied. For further information on the legitimate interests pursued by the Data Controller, the User can refer to the relevant sections of this document or can contact the Data Controller.

When the processing is based on the User's consent, the Data Controller may retain the Personal Data for longer, until said consent has been withdrawn. Furthermore, the Data Controller may be obliged to retain Personal Data for a longer period in order to comply with a legal requirement or on the orders of an authority.

On termination of the retention period, the Personal Data will be deleted. Consequently, on expiry of said term, the right to access, delete, rectify the Data and the right to data portability may no longer be exercised.

Purposes of Processing the Data collected

The User's Data is collected to enable the Data Controller to provide its services and for the following purposes: To respond to a request for a quotation, to confirm the booking of the services chosen by the User, statistics, remarketing and behavioral targeting, interaction with social media and external platforms, displaying content from external platforms, contacting the User, advertising and tag management.

For more detailed information on the purposes of the processing and on the specific Personal Data relating to each purpose, the User should refer to the relevant sections of this document.

Details on the processing of Personal Data

Personal data is collected for the following purposes and using the following services:

 

Contacting the User

Contact form (This Website)

By completing the contact form with their Data, the User consents to its use for responding to requests for information, quotations, or of any other nature indicated at the top of the form.

Personal Data collected: Address, company name, country, county, date of birth, email, first name, last name, occupation, phone number, postcode and town/city.

 

Tag management

This type of service is used for the centralised management of the tags or scripts used on this Website.

The use of these services involves the flow of the User's Data through these and, where appropriate, its retention.

Google Tag Manager (Google LLC)

Google Tag Manager is a tag management service provided by Google LLC.

Personal Data collected: Cookies and Usage Data.

Location of the processing: USA Privacy Policy.

Interacting with social media and external platforms

This type of service allows for interaction with social media, or with other external platforms, directly from the pages of this Website.

The interaction and information acquired by this Website is in any event subject to the User's privacy settings relating to each social network.

If a service for interacting with social media is installed, it may be that, even if the User is not using the service, it collects traffic data relating to the pages on which it is installed.

Facebook Like button and social plugins (Facebook, Inc.)

The Facebook "Like" button and social plugins are services for interacting with the social networking service Facebook, provided by Facebook, Inc.

Personal Data collected: Cookies and Usage Data.

Location of the processing: USA Privacy Policy.

Twitter Tweet button and social plugins (Twitter, Inc.)

The Twitter Tweet button and social plugins are services for interacting with the social networking service Twitter, provided by Twitter, Inc.

Personal Data collected: Cookies and Usage Data.

Location of the processing: USA Privacy Policy.

LinkedIn button and social plugins (LinkedIn Corporation)

The LinkedIn button and social plugins are services for interacting with the social networking service LinkedIn, provided by LinkedIn Corporation.

Personal Data collected: Cookies and Usage Data.

Location of the processing: USA  Privacy Policy.

 

Advertising

This type of service allows for the use of the User's Data for commercial communication purposes in various advertising forms, such as banners, also relating to the User's interests.

This does not mean that all Personal Data is used for this purpose. Data and conditions of use are set out below.

Some of the services indicated below may use Cookies to identify the User or to use the behavioral retargeting technique, namely to display personalised ads based on the interests and behaviour of the User, identified also outside of this Website. For further information on this, please consult the privacy policies of the respective services.

In addition to the possibility of opting out of the services shown below, the User can opt out of receiving cookies relating to a third-party service by visiting the opt-out page of the Network Advertising Initiative.

Direct Email Marketing (DEM) (this Website)

This Website uses the User's Data to send offers of a commercial nature relating to services and products provided by third parties or unrelated to the product or service provided by this Website.

Personal Data collected: email.

 

Remarketing and behavioral targeting

This type of service enables this Website and its partners to communicate, optimise and run ads based on the User's past usage of this Website.

This activity is performed through the tracking of Usage Data and the use of Cookies, information that is transferred to partners to which the remarketing and behavioral targeting activity is linked.

In addition to the possibility of opting out of the services shown below, the User can opt out of receiving cookies relating to a third-party service by visiting the opt-out page of the Network Advertising Initiative.

AdWords Remarketing (Google Inc.)

AdWords Remarketing is a remarketing and behavioral targeting service provided by Google Inc. which connects the activity of this Website to the AdWords advertising network and the Doubleclick Cookie.

Personal Data collected: Cookies and Usage Data.

Location of the processing: USA Privacy Policy - Opt Out.

Facebook Remarketing (Facebook, Inc.)

Facebook Remarketing is a remarketing and behavioral targeting service provided by Facebook, Inc. which connects the activity of this Website to the Facebook advertising network.

Personal Data collected: Cookies and Usage Data.

Location of the processing: USA Privacy Policy - Opt Out.

 

Statistics

The services contained in this section enable the Data Controller to monitor and analyse the traffic data and serve to keep track of the User's behaviour.

Google Analytics (Google Inc.)

Google Analytics is a website analysis service provided by Google Inc. (ìGoogleî). Google uses the Personal Data collected for the purpose of tracking and analysing the use of this Website, compiling reports and sharing them with the other services developed by Google.

Google may use Personal Data to contextualise and personalise ads on its own advertising network.

Personal Data collected: Cookies and Usage Data.

Location of the processing: USA Privacy Policy - Opt Out.

Google Ads conversion tracking (Google Inc.)

Google Ads conversion tracking is a statistical service provided by Google Inc. which links the data from the Google Ads advertising network to the actions performed within this Website.

Personal Data collected: Cookies and Usage Data.

Location of the processing: USA Privacy Policy. Privacy Shield Participant

Displaying content from external platforms

This type of service allows for the displaying of content hosted on external platforms directly on the pages of this Website and for interaction with these.

If a service of this type is installed, it may be that, even if the User is not using the service, it collects traffic data relating to the pages on which it is installed.

Instagram widget (Instagram, Inc.)

Instagram is an image display service operated by Instagram, Inc. which enables this Website to integrate said content into its own pages.

Personal Data collected: Cookies and Usage Data.

Location of the processing: USA Privacy Policy.

YouTube Video widget without cookies

YouTube is a service for displaying video content operated by Google Inc. which enables this Website to integrate said content into its own pages.

This widget is configured so that YouTube does not save information and cookies relating to the User on this Website, unless they reproduce the video.

Personal Data collected: Usage Data.

Location of the processing: USA Privacy Policy. Privacy Shield Participant

Further information on Personal Data

Flow Chat

The Flow Chat widget is a service for interacting with the Flow chat platform, provided by Flow Technologies, Ltd.

 

Newsletters and Marketing

Pursuant to Article 13 of Regulation (EU) 2016/679 on the protection of personal data ("Regulation"), we hereby inform you that your personal data, which is provided at your discretion, will be processed by QC TERME S.R.L., hereinafter the Data Controller, mainly by electronic means for the purpose of fulfilling your request to subscribe to our automated newsletter, which will enable you to stay up to date with the services we offer and with our promotional activities, as well as allowing us to identify your level of satisfaction with regard to the services you have enjoyed, to carry out market research surveys and to send you advertising materials. You may withdraw your consent to this subscription at any time. The provision of your personal data is at your discretion but failure to provide it will not allow us to perform what is required and, consequently, to subscribe you to our newsletter. If you decide to provide us with your data, it will be processed exclusively by personnel authorised by the Data Controller and will be retained only for the time necessary to fulfil the purpose outlined above. Under no circumstances will your data be shared but it may be disclosed to third parties which the controller relies on solely and exclusively to ensure the correct pursuit of the above purposes. You are entitled to the following: the right of access, the right to rectification, the right to erasure, the right to restriction, the right to portability, the right to withdraw consent, the right to complain, the right to object, the right not to be subject to a decision based solely on automated processing, including profiling, except in the cases provided for in the Regulation.

To exercise these rights, you can contact the Data Controller by writing to QC TERME S.R.L. - Via Ripamonti 89 - 20141 Milan (MI) or by sending an email to [email protected]

Without prejudice to any other administrative or judicial appeal, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is in breach of the Regulation.

The Data Protection Officer (DPO) appointed by the Data Controller pursuant to Article 37 of the GDPR is: Tecnologie e Sistemi Srl, represented by Mirco Giorgi (Corso Promessi Sposi, 23, 23900 Lecco (LC) VAT No.: 03347650131; email: [email protected]; tel: 0341 350065.

 

Rights of the User

The User may exercise certain rights in relation to the Data processed by the Data Controller.

In particular, the User has the right to:

withdraw their consent at any time. The User may withdraw their consent to the processing of their Personal Data previously expressed.

object to the processing of their Data. The User may object to the processing of their Data when this has a legal basis other than consent. Further details on the right to object can be found in the following section.

access their Data. The User has the right to obtain information on the Data processed by the Data Controller, on specific aspects of the processing and to receive a copy of the Data processed.

check and request rectification. The User may check the correctness of their Data and request that it be updated or corrected.

restrict processing. Under certain conditions, the User may request that the processing of their Data be restricted. In such a case, the Data Controller shall not process the Data for any purpose other than its retention.

have their Personal Data deleted or removed. Under certain conditions, the User may request that their Data be deleted by the Data Controller.

receive their Data or have it transferred to another Data Controller. The User has the right to receive their Data in a structured, commonly used and machine-readable format and, where technically feasible, to have it transferred to another Data Controller without hindrance. This provision applies when the Data is processed by automated means and the processing is based on the User's consent, on a contract to which the User is a party or on contractual measures relating thereto.

lodge a complaint. The User may lodge a complaint with the relevant supervisory authority for the protection of personal data or commence court proceedings.

Details of the right to object

When Personal Data is processed in the public interest, in the exercise of official authority vested in the Data Controller or to pursue a legitimate interest of the Data Controller, the User has the right to object to the processing for reasons relating to their particular circumstances.

Should their Data have been processed for direct marketing purposes, the User may object to the processing without providing any reason. To find out whether the Data Controller processes data for direct marketing purposes, the User should refer to the relevant sections of this document.

How to exercise your rights

To exercise the User's rights, the User can send a request using the Data Controller's contact details indicated in this document. Requests are submitted free of charge and are actioned by the Data Controller as quickly as possible, and in any event within a month.

 

Cookie Policy

This Website uses Cookies. To find out more and to view the detailed notice, the User should consult the Cookie Policy.

Further information on processing

Representation in legal proceedings

The User's Personal Data may be used by the Data Controller in legal proceedings or in their preliminary stages for protection against the User's improper use of this Website or related Services.

The User hereby acknowledges that the Data Controller may be obliged to disclose Data on the orders of the public authorities.

Specific information

At the User's request, in addition to the information contained in this privacy policy, this Website may provide the User with additional and contextual information relating to specific Services, or the collection and processing of Personal Data.

System and maintenance log

For operational and maintenance purposes, this Website and any third-party services used by it may keep system logs, i.e. files that record interactions and which may also contain Personal Data, such as the User IP address.

Information not contained in this policy

Further information on the processing of Personal Data can be requested at any time from the Data Controller by using the contact details.

Response to "Do Not Track" requests

This Website does not support "Do Not Track" requests.

To find out whether any of the third-party services used support them, the User should consult the corresponding privacy policies.

Amendments to this privacy policy

The Data Controller reserves the right to make amendments to this privacy policy at any time, informing the User of such on this page and, where possible, on this Website, and, where technically and legally feasible, by sending a notification to the User via one of the contact methods available to the Data Controller. It is therefore recommended to consult this page on a regular basis, referring to the date of the latest amendment shown at the bottom.

Should the amendments relate to processing for which consent is the legal basis, the Data Controller shall seek the User's consent again, if necessary.

Legal definitions and references

Personal Data (or Data)

Personal Data is any information that, directly or indirectly, also in connection with any other information, including a personal identification number, can lead to the identification of an individual.

 

Usage Data

This is the information collected automatically through this Website (also by third-party applications built into this Website), including: the IP addresses or domain names of the computers used by the User visiting this Website, the addresses in URI (Uniform Resource Identifier) notation, the time of the request, the method used to send the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various timings of the visit (for example the time spent on each page) and the details relating to the route followed within the Application, with particular reference to the sequence of pages consulted, the parameters relating to the User's operating system and computer environment.

User

The individual who uses this Website and who, unless otherwise indicated, is also the Data Subject.

Data Subject

The individual to whom the Personal Data refers.

Data Processor

The individual, legal entity, public administration and any other body that processes personal data on behalf of the Data Controller, as set out in this privacy policy.

Data Controller

The individual, legal entity, public authority, service or other body that, individually or together with others, determines the purposes and means of processing the personal data and the tools adopted, including security measures.

This Website (or this Application)

The hardware or software tool by means of which the User's Personal Data is collected and processed.

Service

The Service provided by this Website as defined in the relevant terms (where they exist) on this website/application.

European Union (or EU)

Unless otherwise indicated, every reference to the European Union contained in this document is understood to extend to all current member states of the European Union and of the European Economic Area.

Cookie

A small amount of data stored on the User's device.


Legal references

This privacy policy has been drafted on the basis of numerous legal systems, including articles 13 and 14 of Regulation (EU) 2016/679.

Unless otherwise indicated, this privacy policy relates exclusively to this Website