Privacy Policy — Colosseum Computer Rome
This privacy policy describes how the website www.assistenzainformaticaroma.it manages personal data of its users. This notice is provided pursuant to Art. 13 of Regulation (EU) 2016/679 (hereinafter "GDPR") to all individuals who interact with the web services accessible electronically from the address corresponding to the homepage of the site.
1. Data Controller
The Data Controller for the processing of personal data is:
- B&B SRL (Colosseum Computer)
- Registered office: Via di Santa Costanza 18-22, 00198 Roma (RM)
- VAT No.: 12400491002
- Email: colosseum@colosseumcomputer.it
- Phone: 06 8419 630
2. Types of Data Collected
The website collects the following categories of personal data:
Browsing data
The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected for the purpose of association with identified data subjects but, by its very nature, could allow user identification through processing and association with data held by third parties. This category includes IP addresses, domain names of computers used to connect to the site, URI (Uniform Resource Identifier) addresses of requested resources, time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server response, and other parameters relating to the user's operating system and computing environment.
Data provided voluntarily by the user
The voluntary, explicit sending of emails to the addresses listed on this website, the completion of contact forms, or communications via telephone and WhatsApp result in the acquisition of the sender's/user's address and data, which are necessary to respond to requests, as well as any other personal data included in the communication.
3. Purposes of Processing
Personal data are processed for the following purposes:
- Service delivery: responding to requests for technical support, quotes and information submitted by the user via the contact form, email, telephone or WhatsApp;
- Contractual relationship management: managing IT support engagements, invoicing and administrative obligations;
- Website operation: ensuring the proper technical functioning of the website;
- Statistical analysis: processing anonymous and aggregated data on website usage to improve its content and features;
- Legal compliance: fulfilling obligations under applicable laws, regulations and EU legislation.
4. Legal Basis for Processing
The processing of personal data is based on the following legal grounds pursuant to Art. 6 of the GDPR:
- Consent (Art. 6(1)(a)): for the use of non-essential cookies and for any promotional communications;
- Performance of a contract or pre-contractual measures (Art. 6(1)(b)): to respond to user requests and to perform support services;
- Legal obligation (Art. 6(1)(c)): to comply with legal, accounting and tax obligations;
- Legitimate interest (Art. 6(1)(f)): for the proper operation of the website and aggregated statistical analysis.
5. Data Recipients
The personal data collected may be disclosed to:
- Authorised internal staff (technicians, administration);
- Technical and IT service providers (hosting, website maintenance) acting as data processors pursuant to Art. 28 of the GDPR;
- Consultants and professionals responsible for accounting and tax compliance;
- Competent authorities in the cases provided for by law.
Personal data shall not be disseminated or transferred to third countries outside the European Union. Should such a transfer become necessary, it shall only take place to countries ensuring an adequate level of protection or on the basis of appropriate safeguards pursuant to Articles 46 and 49 of the GDPR.
6. Data Retention
Personal data are retained for the time strictly necessary to achieve the purposes for which they were collected, in accordance with the following criteria:
- Browsing data: retained for a maximum period of 90 days, unless required for the investigation of offences by the judicial authorities;
- Contact request data: retained for the time necessary to respond to the request and, in the event of a contractual relationship, for the duration thereof;
- Accounting and tax data: retained for 10 years as required by Italian tax and civil law;
- Consent data: retained until consent is withdrawn by the data subject.
7. Data Subject Rights
Pursuant to Articles 15 to 22 of the GDPR, the data subject has the right to:
- Access (Art. 15): obtain confirmation as to whether personal data concerning them are being processed and access to such data;
- Rectification (Art. 16): obtain the rectification of inaccurate personal data or the completion of incomplete data;
- Erasure (Art. 17): obtain the erasure of personal data concerning them, in the cases provided for by the GDPR;
- Restriction (Art. 18): obtain the restriction of processing in the cases provided for by the GDPR;
- Portability (Art. 20): receive personal data in a structured, commonly used and machine-readable format;
- Objection (Art. 21): object at any time to the processing of personal data;
- Withdrawal of consent: withdraw consent at any time, without affecting the lawfulness of processing based on consent given prior to its withdrawal.
To exercise their rights, data subjects may send a written request to colosseum@colosseumcomputer.it or write to the Data Controller at the address indicated above.
Data subjects also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali, www.garanteprivacy.it) if they believe that the processing of their personal data infringes the GDPR.
8. Cookies
For detailed information on the use of cookies on this website, please refer to our Cookie Policy.
9. Changes to this Policy
The Data Controller reserves the right to amend this privacy policy at any time, publishing updates for users on this page. Please consult this page regularly, taking the date of the last update shown above as reference. In the event of material changes, the Data Controller will provide appropriate notice.