Directive 95/46/CE – “on the protection of individuals with regard to the processing of personal data and on the free movement of such data”. Directive 2002/58/CE –“concerning the processing of personal data and the protection of privacy in the electronic communications sector”. Legislative Decree 30 June 2003, n. 196 –“Personal Data Protection Code” as amended or supplemented.
As a consequence of the visit to this Site, the data referring to identified or identifiable people are subject to be processed. The “Data Controller” of such processing is I.C.R. INDUSTRIE COSMETICHE RIUNITE SPA (I.C.R.), which is based in Strada Provinciale 25, Km 2,8 – 26900 Lodi, Italy 4 del Codice Privacy e di cui all’art. 4 del Regolamento (UE) 2016/679.
The treatments related to the web services of this website take place at the Data Controller and are only handled by technical staff in charge of the treatment or by technical staff in charge of occasional maintenance operations.
In the course of their normal service, the computer-based systems and the software procedures involved in the working of this website come into possession of some personal information, the transmission of which is implied in the use of the protocols of Internet communication. This information is not collected to be associated to any identified people, but, through processes and associations with data owned by third parties, they might by its own nature lead to the identification of users. In this category of data are included the “IP addresses” or otherwise the names stored in the domain of the computers used by those who access the Site, the “addresses in notation URI (Uniform Resource Identifier)” of the required resources, the time of the request, the method used to forward the request to the server, the size of the file received in reply, the digit code showing the state of the reply given by the server (good, error, etc.) and other parameters connected with the operating system and the structure and conditions of the user’s computer. This data is used only to get anonymous statistical information about the use of the Site and to check its correct performance and is deleted immediately after processing. The data might be used to investigate responsibilities, should there be any data processing offences against the Site: apart from this possibility, at present the data on Web contacts does not last for more than seven days.
Data voluntary provided by the user
The optional, explicit and voluntary forwarding of personal data from the user on registration forms present on this Site implies the subsequent acquisition of the data provided by the sender, which is essential to the procession of the required service. Specific, concise information to data subjects will progressively be reported or displayed on the pages of the Site set up for particular services on demand.
Cookies are not sent on your computer’s hard drive neither by I.C.R., nor by third party.
Except for what has been specified for navigation data, the user is free to provide the personal information stated on request forms or indicated during contacts with the Office to further the dispatch of information material or of other communications.
Personal data is processed with automated instruments only for no longer than is necessary for the purposes for which the data were collected or subsequently processed. Specific security procedures are kept to prevent the risk of their destruction or loss, whether by accident or not, of unauthorized access to the data or of processing operations that are either unlawful or inconsistent with the purposes for which the data have been collected. I.C.R. has adopted all the minimum security measures provided by the law. I.C.R., in accordance with the main international standards, has also taken further security measures to minimize risks regarding to the confidentiality, integrity and availability of the personal data collected and processed.
Data subjects have the right, at any time, to obtain confirmation as to whether or not personal data concerning him exist, to know its content and source, to verify its accuracy or to demand its integration, updating or rectification (Art. 7, Legislative Decree 30 June 2003, n. 196). In accordance with said Article, you have the right to ask for the erasure, the anonymization or the blocking of data that have been processed unlawfully, and, furthermore, to object on legitimate grounds, to the processing of personal data, even though they are relevant to the purpose of the collection.
I.C.R. keeps checking their own privacy and security policy regularly and, if necessary, review it in accordance with the amendments introduced by the law, the organization, or prompted by technological evolution. Any changes to said policy will be posted on this page.