INFORMATION ABOUT THE PROCESSING OF PERSONAL DATA
of users who consult our Website, www.kibag.it,
pursuant to Article 13 of (EU) Regulation 2016/679

 

Contents
1. FOREWORD
2. DATA CONTROLLER
3. PURPOSE AND LEGAL BASIS OF PROCESSING
4. COLLECTED DATA
5. COOKIES
6. DATA RETENTION PERIOD
7. TRANSFER OF COLLECTED DATA TO THIRD PARTIES
8. LOCATION OF PROCESSING
9. SECURITY MEASURES
10. USER RIGHTS
11. DISCLOSURE UPDATE

 

1. FOREWORD
   Pursuant to (EU) Regulation 2016/679 (hereinafter referred to as the “Regulation”), this page describes the manner in which the personal data is treated of users who consult and use the Kibag Website of Con.Fid. Tec S.r.l., (hereinafter Con.Fid. Tec) at the following web address: www.kibag.it.
   This information does not pertain to other Websites, pages, or online services that can be reached through hypertext links that may be posted on the Website, but refer to resources outside Kibag’s domain.
   This Website and any services offered through the Website are restricted to individuals who are eighteen years of age or older. By completing a user registration or a purchase as a non-logged-in user, you confirm that you are at least 18 years old. Therefore, the Data Controller does not collect personal data related to individuals under the age of 18. Upon request of such Users, the Data Controller will promptly delete all personal data involuntarily collected from them.
   By using or consulting the Website, visitors and users approve this privacy policy and consent to the processing of their personal data in the manner and for the purposes described below, including possible disclosure to third parties if necessary for the provision of the service.

 

2. DATA CONTROLLER
   The Data Controller under current laws is Con.Fid. Tec S.r.l. contacted through  https://www.kibag.it/supporto
   The web hosting service provider Var Group – Via Privata Gaetano Sbodio, 2 – 20141 Milan is located in the European Economic Area and acts in accordance with European standards.

 

3. PURPOSE AND LEGAL BASIS FOR PROCESSING
   The processing of data collected by the Website is aimed at the following purposes:
   – Access and registration to the Kibag portal: collection of data and information that is instrumental and necessary for the use of services for registered users, including the ability to purchase services online;
   In particular, within the scope of this purpose, Con.Fid. Tec will process your personal information, among other things, to:
   enable you to browse and access the Kibag Website, either as a logged-in user or as a non-logged-in user;
   enable you to register with the Website, creating an account, and to take advantage of services for registered users, including, in particular, the ability to purchase services;
   maintain and manage your account;
   store data and information in your account, such as, but not limited to, personal data and order history.

– Conclusion and execution of the purchase contract: collection of data and information that is instrumental and necessary for the conclusion of the purchase contract, in particular to:
conclude the purchase contract for the chosen service;
execute the obligations that are the responsibility of Con.Fid. Tec because of the concluded purchase contract, such as, without limitation, the performance of the service;
to enable the fulfilment of the obligations that are the responsibility of the user because of the concluded purchase contract, such as, without limitation, the payment, including online, of the purchased products.

The legal basis for this data treatment is: the conclusion of the purchase contract or pre-contractual measures and the fulfilment of legal obligations.

The data for the above purposes is necessary to enable access and navigation, and/or registration on the Website and/or the provision of account management and maintenance services as well as the conclusion of the purchase contract through the Website. Failure to provide the data will therefore result in the user being unable to access and/or browse the Website and/or register on the Website and take advantage of the services for registered users and/or purchase the services and/or conclude the relevant contract.

– Administrative, fiscal and accounting purposes: collection of data and information that is instrumental and necessary for the purpose of performing administrative, accounting and/or tax obligations related to the services purchased on the Kibag portal.
The legal basis for this processing is the fulfilment of legal obligations by Con.Fid. Tec S.r.l.

– Information about the commercial activities of Kibag – with express consent: collection of data and information with prior consent, aimed at sending commercial communications about the services offered by Kibag.
The legal basis for this processing is the express consent of the data subject.

– Fraud prevention: collection of data and information in the case of service payment by credit card, aimed at prevention and in order to prosecute possible fraudulent activities.
The legal basis for this processing is the legitimate interest of Con.Fid. Tec S.r.l.

– Security: Collection of data and information in order to protect the security of the Website (spam filters, firewalls, virus detection) and Users and to prevent or expose fraud or abuse against the Website. The data are recorded automatically and may possibly include personal data (IP address) that could be used, in accordance with the relevant laws, in order to block attempts to damage the Website itself or cause harm to other users, or otherwise harmful or criminal activities. This data is never used for identification or profiling of the User and is periodically deleted.

– Ancillary activities: Disclose data to third parties who perform functions that are necessary or instrumental to the operation of the service, and to enable third parties to carry out technical, logistical and other activities on behalf of Con.Fid. Tec S.r.l.. Providers have access only to personal data that are necessary to perform their tasks, and they agree not to use the data for other purposes. They are required to process personal data in accordance with applicable regulations.
The legal basis for this data treatment is: the conclusion of the purchase contract or pre-contractual measures and the fulfilment of legal obligations.

 

4. COLLECTED DATA
   This Website collects user data in two ways:
   – Data provided by the user
   The Website collects data necessary to be able to use the Kibag service, to respond to user requests for information via the form that is provided, and it allows users to review the Website.
   Required information is the user’s first name, last name, email, phone number, and address.
   For storage services at railway stations, copies of ID may be requested.
   It is also possible to include the photo in the user’s profile (optional data).
   Other data that may be processed is data given voluntarily via the contact form, e-mails, the user reviews section.

– Automated data collection: During Users’ browsing, the following may be collected:
Technical data such as IP addresses, type of browser used and other parameters related to the User’s operating system and computer environment.
The data that is collected this way could be used to ascertain liability in the event of any computer crimes against the Website.
This data is used for statistical and analytical purposes, in aggregate form only. The IP address is used for security purposes only and is not cross-referenced with any other data or data collected using cookies or similar technologies. For more information, please review our “Cookie” policy: Cookie Policy
The supply of this data, and therefore the consent to the collection and processing of data, is optional. At any time users may withhold consent, and may revoke consent that was given (via the browser settings for cookies, or by contacting the Data Controller). However, denying consent may result in the inability to deliver the service and the Website experience would be compromised.
In the case of authentication to the Kibag account through external social networks, data necessary for registration/authentication will be collected by these third parties. Specifically, authentication may be through Facebook and Google credentials.

 

5. COOKIES
   For information regarding the use of cookies and how to disable them, please refer to the Cookie Policy.

 

6. DATA RETENTION PERIOD
   Data collected by the Website during its operation are kept for the time that is strictly necessary to carry out the specified activities. In the case of a registered user, data will be kept as long as the user is an active customer.
   Data required for administrative, tax and accounting purposes, such as invoices and accounting documents, are retained within the mandatory time frame prescribed by law.
   Personal data may be transferred outside the European Union for processing by some of our service providers. In this case, we ensure that this transfer takes place in compliance with applicable legislations and that an adequate level of personal data protection is guaranteed by relying on an adequacy decision, standard clauses defined by the European Commission, or Binding Corporate Rules.

 

7. TRANSFER OF COLLECTED DATA TO THIRD PARTIES
   The data provided by the user will be disclosed only to competent and duly appointed parties for the performance of services necessary for the proper management of the contract and business relationship, with guaranteed protection of the rights of the data subject, and will be processed only by personnel who is authorised by the Data Controller.
   Data collected by the Website are generally not provided to third parties, except in specific cases: legitimate request by a judicial authority and only in cases provided by law; if it is necessary for the provision of a specific service requested by the User.
   Data collected by the Data Controller may be disclosed:
   – to public and/or private entities for which the communication of data is obligatory or necessary in fulfilment of legal obligations;
   – to companies that perform functions closely related and instrumental to the operation – including technical functions – of Kibag’s services, such as, for example, companies that provide archive, administrative, payment and billing services, companies that provide technical components for the delivery of the online service;
   – following a legitimate request by the judicial authority;
   – for the execution of security controls or Website optimisation.
   Under no circumstances will personal data be given or sold to third parties.

 

8. LOCATION OF PROCESSING
   The data collected from the Website are processed at the Data Controller’s office and at the Data Centre of the web Hosting service, Var Group – Via Privata Gaetano Sbodio, 2 – 20141 Milan, which is responsible for data processing, by processing the data on behalf of the Data Controller, and is located in the European Economic Area and acts in accordance with European standards.
   Users’ personal data, may be processed outside the area of the European Union, in particular:
   – data to be processed by some service providers of Con.Fid. Tec S.r.l., which perform functions closely related and instrumental to the operation of the Kibag service;
   – the Website may share some of the data with services performed by Google and Facebook through social plugins and the Google Analytics service.
   The transfer is authorised under specific decisions of the European Union and the Italian Data Protection Authority, in particular Decision 1250/2016 (Privacy Shield – the Italian Data Protection Authority’s information page), so no further consent is needed. The companies mentioned above guarantee their adherence to the Privacy Shield.

 

9. SECURITY MEASURES
   We process visitor/user data lawfully and fairly, taking appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of data. The processing is carried out by means of computer and/or telematic tools, with organisational methods and logic strictly related to the purposes that are indicated. In addition to the Data Controller, in some cases, categories of appointees involved in the organisation of the Website or external parties (such as third-party technical service providers, hosting providers) may have access to the data.

 

10. USER RIGHTS
    Pursuant to European Regulation 679/2016 (GDPR) and Article 7 of Legislative Decree. June 30, 2003, No. 196, the User may, in the manner and within the limits provided by current legislation, exercise the following rights:
    – oppose in whole or in part, for legitimate reasons, the processing of personal data concerning him/her for the purpose of sending advertising materials or direct selling or for market research or commercial communications;
    – request confirmation of the existence of personal data concerning him/her (right of access); – know the origin;
    – receive intelligible communication;
    – have information about the logic, methods and purposes of treatment;
    – request updating, rectification, integration, cancellation, and transformation into anonymous form, the blocking of data processed in violation of the law, including the data no longer necessary to achieve the purposes for which they were collected;
    – in cases of processing based on consent, the user may receive at the sole cost the support, the user’s data that was provided to the data controller, in a structured form readable by a data processor and in a format commonly used by an electronic device;
    – the right to lodge a complaint with the Data Protection Authority (Privacy Guarantor);
    – as well as, more generally, to exercise all the rights recognised to him/her by current laws.
    The user may exercise his/her rights against the Data Controller at any time by contacting support@kibag.it

 

11. UPDATING OF THE POLICY
    This policy may be subject to change as a result of substantial changes to the Data Controller’s use of the data.
    The updated version of the privacy policy will be posted on the Kibag Website, with the date of the latest issue.