Privacy Policy

Privacy Policy

FOREWORD

Your privacy is important to DF Solution.

DF srl (hereinafter DF Solution ), with registered office in Via Madre Teresa di Calcutta 22 – 70022 – Altamura (BA), has drawn up, in a simple and understandable way , this document, concerning the processing of your personal data, how and why we collect them and how we manage them.

We remind you that the processing of personal data must be understood as any operation or set of operations, carried out with or without the aid of electronic tools, concerning the collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, cancellation and destruction of data, even if not registered in a database.

This information applies when you visit our website or our social media channels; when you purchase our services and use our applications; when you subscribe to our newsletter; request our assistance or you are a supplier, partner, consultant or any other person who has commercial relations with DF Solution.

The information and data you provide will be processed in compliance with the applicable laws and regulations on the subject (including, by way of example but not limited to, the General Data Protection Regulation – EU Regulation 2016/679 – General Data Protection Regulation or “GDPR “).

The data processing carried out by DF srl will be based on principles of correctness, lawfulness, transparency, accuracy, integrity, confidentiality, purpose limitation and data retention and minimization.

THE LEGAL BASES FOR OUR PROCESSING OF YOUR PERSONAL DATA

DF Solution bases the processing of your personal data on different legal bases:

1. your consent (only when necessary or permitted by law). In this case you will still have the right to revoke it;
2. the need to establish a contractual relationship and fulfill the obligations arising from it;
3. the need to comply with the laws in force and to establish, exercise or defend against legal actions;
4. the need to pursue its legitimate interests: ensure that networks and information are secure, prevent or investigate alleged or actual violations of the law, commercial contracts or cases of non-compliance with its corporate principles; </ li >
5. the need to respond to your requests;
6. any other legal basis permitted by current regulations.

WHAT KIND OF PERSONAL DATA WE PROCESS, FOR WHAT PURPOSE AND FOR HOW LONG WE KEEP THEM

a) Navigation data
For the correct functioning of the DF Solution site and the services provided, computer systems and software procedures are required which, during their normal operation, acquire some personal data, the transmission of which is implicit in the use of internet communication protocols. These are data that are not collected to be associated with identified subjects, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified (eg IP addresses). These data are used only for anonymous statistical information relating to the use of the service and to verify its correct functioning and are kept for the strictly necessary period and in any case in compliance with current regulations.

b) Customer data
In order to allow the provision of the services provided for in the contractual agreements, the performance of marketing activities and to comply with tax obligations and provided for by current regulations, DF Solution will collect the following data relating to customers: Name – Surname – Company name (in the case of a person other than a private individual) – Tax code – VAT number (in the case of subject other than private) – Address – City – Postcode – Province – Telephone numbers – Email addresses. These data will be kept for the purposes of providing services, as well as for promotional activities and for a period of 10 years from the termination of the contractual relationship. For tax purposes and for other obligations established by law, the same data will be kept for 10 years, unless the law allows a longer retention period, also due to the expiry of the prescription of any rights claimed by third parties.

c) Supplier data
In order to ensure the smooth running of the employment relationship, we need the contact details of the relevant persons operating within the supplier company (such as names, surnames, telephone numbers and e-mail addresses). We also need all the data necessary for issuing the invoice, as well as the bank details necessary to pay for the services purchased (if it falls within the stipulated contractual agreements). For the aforementioned purposes, the data will be kept for a period of one year starting from the termination of the contractual relationship. For tax purposes and for other obligations established by law, the data will be kept for 10 years, unless the law allows a longer retention period, also due to the expiry of the prescription of any rights claimed by third parties.

d) Data related to the registration of domain names
For the registration of domain names, DF Solution will carry out only the strictly necessary treatments and if you do not provide the data, it will be unable to provide the service. The data provided may always be disclosed to third parties exclusively for the aforementioned purposes (national and foreign registration authorities). In particular, for the domains of competence of ICANN (Internet Corporation for Assigned Names and Numbers) and on the advice of ICANN, a copy of the data provided is also deposited with the company Iron Mountain Intellectual Property Management, Inc as a guarantee. At the end of the domain registration, according to the provisions of each of the relevant Registers, the data provided will be published on the WHOIS (public database that contains all the data of the domain name holders). These data will be kept for a period of 6 months from the cancellation of the domain name to which they refer, unless further conservation is imposed by order of a judicial or administrative authority.

e) Data of third parties provided by the interested party
It may happen that you provide the data of third parties to request the assignment of domain names or to differentiate billing contacts (in case your customer pays for the service directly). In this circumstance you will be the exclusive data controller of the aforementioned data with related legal obligations and responsibilities. These data will be kept exclusively for tax purposes (billing) for a period of 10 years and for a period of 6 months starting from the cancellation of the domain name to which they refer (domain registration for third parties), unless the law requires or allow for a longer retention period.

e) Data processing deriving from the connection with social media
You will be able to register on the DF Solution website even if you have a Facebook profile. In this case, Facebook will automatically provide DF Solution with some of your personal data. If you are already a registered user on our site, you can choose to associate your DF Solution account with your Facebook profile to facilitate subsequent access to the site. In the same way you can associate your customer area on DF Solution with your other Linkedin, Twitter or Google accounts. These subjects will automatically provide DF Solution with some of your personal data. The aforementioned data will be kept for the purposes of providing services, as well as for promotional activities and for a period of one year from the termination of the contractual relationship. Unless a greater is imposed by order of the authority.

f) Cookies
Access to the site www.dfsolution.it, shop.dfsolution.it, www.hosting-magento.net, www.magentapp.it may result in the sending of so-called ” cookies “, ie files that allow you to obtain information on the pages visited in order to speed up the use of the various services. The use of cookies is limited to the duration of a single session ion and does not in any way allow the acquisition of the user’s personal identification data. The acquired data will not be stored but will be deleted when the browser is closed. You can choose at any time to disable cookies by simply changing the settings of the navigation browser; We remind you, however, that disabling cookies can slow down or prevent access to some sections of the site. You can find more information in the cookie information on the site.

g) Traffic data
DF Solution informs you of the existence of the connection register (LOG), in which the data relating to telematic traffic are stored within the terms and in accordance with the timing provided for by law. After the retention period required by law, and unless otherwise indicated by the Authority with an administrative or judicial measure, the above data will be destroyed and the possibility of obtaining a copy will no longer be guaranteed.

HOW WE MANAGE YOUR DATA FOR PROMOTIONAL PURPOSES

DF Solution may send you marketing communications relating to its services, products, promotions or events via email, telephone and social networks of other parties.
These communications may also be personalized taking into account your preferences (expressly indicated by you or deduced from visits to the DF Solution website or based on the links you clicked). Before starting any marketing activity and if required by applicable laws, we will ask you to give us your consent, which you can still revoke by sending a PEC request email to df [email protected] . Even in the event of withdrawal of consent to receive marketing communications, you can still receive other types of communications (for example important notices of a technical or administrative nature).

WHO IS THE OWNER OF THE PROCESSING OF PERSONAL DATA

The Data Controller carried out through the site is DF srl with headquarters in Via Madre Teresa di Calcutta 22 – 70022 Altamura (BA).

The appointed DPO (Data Protection Officer or in Italian Protection Officer) can be contacted at the following PEC address [email protected] for all information relating to the processing of personal data and to provide a list of all the managers involved in the management.

WHO ARE THE RECIPIENTS OF THE PERSONAL DATA

The recipients of the personal data collected are:

• people, companies, professional firms that provide accounting, administrative, tax or legal consultancy services to DF Solution;
• subjects with whom DF Solution interacts for the provision of services (for example Public Registers for the registration of domain names or Authorities that manage the WHOIS database);
• subjects that provide services related to the collection of payments (for example bank transfer, credit card);
• any subjects who carry out maintenance activities on network equipment and communication networks;
• other bodies or authorities to whom, for reasons or legal obligations, it is necessary to communicate your personal data;
• persons authorized by DF Solution to carry out activities necessary for the provision of services (with a legal obligation of confidentiality).

The complete list of data processors can be requested by sending a PEC email to [email protected] .

TRANSFER OF PERSONAL DATA

In order to be able to provide some services governed by the contract (such as the registration of international domain names and the issue of digital security certificates), some of your data may be transferred outside the European Economic Area. In particular:

• for the domains of competence of ICANN (Internet Corporation for Assigned Names and Numbers) and on the advice of ICANN, a copy of the data provided is also deposited with the company Iron Mountain Intellectual Property Management, Inc as a guarantee ( both companies are based in the United States);
• for the domains covered by the GMO Registry, the data is transmitted to Tokyo – Japan (where the registry is based);
• for the domains covered by the Uniregistry registry, the data is transmitted to George Town Grand Cayman (where the registry is based);
• for the domains of competence of the InternetX registry, the data is transmitted to Miami – Florida (where the registry is based) ;
• for the domains of competence of the Neustar registry, the data is transmitted to Sterling – United States (where the registry is based);
• for domains covered by the Public Internet Registry (PIR), the data is transmitted to Reston – United States (where the registry is based);
• for Verisign domains, the data is transmitted to Reston – United States (where the company is based);
• for the domains of competence of Onlinenic the data is transmitted in California – United States (where the company is based)
• for digital certificates issued by Digicert the data is transmitted in Utah – United States (where the company is based)

In the aforementioned circumstances, the recipient companies of the data guarantee us standards of protection, thanks to appropriate technical, organizational and legal measures.

WHAT RIGHTS YOU CAN EXERCISE

As an interested party you can exercise the rights referred to in art. from 16 to 22 of EU Regulation 679/16:

Art. 16 – Right of rectification
You have the right to obtain from the data controller the correction of inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to obtain the integration of incomplete personal data, also by providing a supplementary declaration.

Art. 17 – Right to cancellation
You have the right to obtain from the data controller the cancellation of personal data concerning you without undue delay and the data controller is obliged to cancel the personal data without undue delay, if one of the following reasons exists:

1. the personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed; 4.5.2016 EN Official Journal of the European Union L 119/43
2. withdraw the consent on which the processing is based in accordance with Article 6, paragraph 1, letter a), or Article 9, paragraph 2, letter a), and if there is no other legal basis for the processing; < / li>
3. you oppose the processing pursuant to Article 21, paragraph 1, and there is no legitimate overriding reason to proceed with the processing, or you oppose the processing pursuant to Article 21, paragraph 2;
4. the personal data have been unlawfully processed;
5. personal data must be deleted to fulfill a legal obligation under the law of the Union or of the Member State to which the data controller is subject;
6. the personal data were collected in relation to the information society service offer referred to in Article 8, paragraph 1.

If the data controller has made personal data public and is obliged, pursuant to paragraph 1, to delete them, taking into account the available technology and the implementation costs, it adopts reasonable measures, including technical ones, to inform the data controllers that they are processing the personal data of your request to delete any link, copy or reproduction of your personal data.
Paragraphs 1 and 2 do not apply to the extent that processing is necessary:

• for the exercise of the right to freedom of expression and information;
• for the assessment, exercise or defense of a right in court.

Art. 18 – Right to limit the processing
You have the right to obtain from the data controller the limitation of the processing when one of the following hypotheses occurs:

1. disputes the accuracy of personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
2. the processing is unlawful and you oppose the deletion of personal data by asking instead that its use be limited;
3. although the data controller no longer needs it for processing purposes, your personal data are necessary for the establishment, exercise or defense of a right in court;
4. you opposed the processing pursuant to Article 21, paragraph 1, pending verification of the possible prevalence of the data controller’s legitimate reasons with respect to those of the data subject.

If the processing is limited pursuant to paragraph 1, such personal data are processed, except for storage, only with your consent or for the ascertainment, exercise or defense of a right in court or to protect rights of another natural or legal person or for reasons of significant public interest of the Union or of a Member State. L 119/44 EN Official Journal of the European Union 4.5.2016 3.
If you have that you have obtained the limitation de The processing pursuant to paragraph 1 you are informed by the data controller before this limitation is revoked.

Art. 19 – Right to obtain notification from the data controller in cases of rectification or cancellation of personal data or cancellation of the same
The data controller communicates to each of the recipients to whom the personal data have been transmitted any corrections or cancellations or limitations of the processing carried out in accordance with Article 16, Article 17, paragraph 1, and Article 18, unless otherwise stated. proves impossible or involves a disproportionate effort. The data controller informs you of these recipients if you request it.

Art. 20 – Right to portability
You have the right to receive in a structured format, commonly used and readable by an automatic device, the personal data concerning you provided to a data controller and you have the right to transmit such data to another data controller without impediments by the data controller to whom you provided them if:

1. the processing is based on consent pursuant to Article 6, paragraph 1, letter a), or Article 9, paragraph 2, letter a), or on a contract pursuant to Article 6, paragraph 1, letter b);
2. the processing is carried out by automated means.

In exercising your rights regarding data portability in accordance with paragraph 1, you have the right to obtain the direct transmission of personal data from one data controller to the other, if technically feasible.
The exercise of the right referred to in paragraph 1 of this article is without prejudice to article 17.
The right referred to in paragraph 1 must not affect the rights and freedoms of others.

Art. 21 – Right to object
You have the right to object at any time, for reasons related to your particular situation, to the processing of personal data concerning you pursuant to Article 6, paragraph 1, letters e) or f), including profiling on the basis of these provisions. The data controller refrains from further processing personal data unless he demonstrates the existence of compelling legitimate reasons to proceed with the processing that prevail over your interests, rights and freedoms or for the assessment, exercise or defense of a right in court. If personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you carried out for these purposes, including profiling to the extent that it is connected to such direct marketing. If you object to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes. 4.5.2016 EN Official Journal of the European Union L 119/45 4. The right referred to in paragraphs 1 and 2 is explicitly brought to your attention and is presented clearly and separately from any other information at the latest at the time of the first communication with you. In the context of the use of information society services and without prejudice to Directive 2002/58 / EC, you can exercise your right to object with automated means that use specific techniques. If personal data are processed for scientific or historical research purposes or for statistical purposes pursuant to Article 89, paragraph 1, you, for reasons connected with your particular situation, have the right to object to the processing of personal data concerning you, unless the processing is necessary for the performance of a task of public interest.

Art. 22 – Right to refuse the automated process
You have the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or which significantly affects your person in a similar way. Paragraph 1 does not apply if the decision:

1. is necessary for the conclusion or execution of a contract between you and a data controller;
2. is authorized by the law of the Union or of the Member State to which the data controller is subject, which also specifies appropriate measures to protect your rights, your freedoms and your legitimate interests;
3. is based on your explicit consent.

In the cases referred to in paragraph 2, letters a) and c), the data controller implements appropriate measures to protect your rights, your freedoms and your legitimate interests, at least the right to obtain human intervention by the data controller. , to express their opinion and to contest the decision.
The decisions referred to in paragraph 2 are not based on the particular categories of personal data referred to in Article 9,paragraph 1, unless Article 9, paragraph 2, letters a) or g) applies, and adequate measures are in place to protect your rights, your freedoms and your legitimate interests.

In this sense, you will be able to access your data to:

– Verify its veracity
– Modify them if they become inaccurate
– Integrate them also with a supplementary declaration
– Request cancellation
– Limit their treatment
– Opposition to the processing

The data controller is obliged to respond without unjustified reason.

DELETING DATA

DF Solution, in compliance with the corresponding right of access to the interested party, has set up procedures for which you can request the cancellation without undue delay of your personal data or the limitation of the processing of personal data concerning you for the following reasons:

– Because the data are no longer necessary for the purposes for which they were collected
– Because you have withdrawn your consent
– Why do you object to the treatment
– Because the data is processed unlawfully.

You can exercise the aforementioned rights by writing to the PEC email [email protected]

CHANGES TO THE PRIVACY POLICY

This privacy policy is effective from 22.05.2018 and DF Solution may modify or update its content.
You will be informed of these circumstances and the changes will be effective as soon as they are published on our website www.dfsolution.it.
To this end, we invite you to visit the section relating to Privacy to check the updated version.

Cookie Policy

Access to the sites www.dfsolution.it / shop.dfsolution.it / www.hosting-magento.net / www.magentapp.it may involve the sending of so-called ” cookies “, ie files that allow you to obtain information on the pages visited in order to speed up the use of the various services.

DF Solution combines the information collected by cookies with other data provided by you about yourself or otherwise collected for the purposes reported in our Privacy Policy </ a >.

If you do not want our site not to place cookies on your device, you can refuse their use through the settings of your browser. In this case we do not guarantee the correct use of the services offered on the website www.dfsolution.it / shop.dfsolution.it / www.hosting-magento.net / www.magentapp.it.

Purpose and types of cookies

Based on the function and purpose of use, cookies can be divided into technical cookies, profiling cookies, third-party cookies.

Technical cookies

They are cookies used to perform computer authentication, session monitoring and storage of specific information on users who access a web page. These cookies are often useful, because they can make browsing and use of the web faster and faster, because for example they intervene to facilitate certain procedures for making online purchases or for authentications to restricted access areas. A particular type of technical cookies, called analytics, are then used to collect information, in aggregate form, on the number of users and on how they visit the site itself, and then process general statistics on the service and its use.

Profiling cookies

Profiling cookies, on the other hand, can be used to monitor and profile users while browsing, study their movements and web browsing or consumption habits, also for the purpose of sending advertising for targeted and personalized services.

Third party cookies

Third-party cookies are cookies from other sites and contained in various elements hosted on the page itself, such as advertising banners, images, videos, etc .. These cookies are set directly by managers of websites or servers other than the site www .dfsolution.it / shop.dfsolution.it / www.hosting-magento.net / www.magentapp.it. Below are the links to information on third-party cookies:

• Facebook
• Livechatinc
• Google
• Twitter
• WHMCS
• HOTJAR

Cookie Table

Name	Provider	Purpose	Expiry	Type
__ cfduid	zopim.com	Used by the content network, Cloudflare, to identify reliable web traffic.	1 year	HTTP Cookie
CookieConsent	dfsolution.it	Stores the user’s cookie consent status for the current domain	1 year	HTTP Cookie
JSESSIONID	linkedin.com	Preserve the user status on the different pages of the site.	Session	HTTP Cookie