PRIVACY POLICY RELATING TO THE PROCESSING OF PERSONAL DATA IN ACCORDANCE WITH THE GENERAL DATA PROTECTION REGULATION N. 679/2016 (GDPR, GENERAL DATA PROTECTION REGULATION)

PREMISE

In compliance with the obligations set forth in the European Regulation 679/2016 (hereinafter “GDPR”), this privacy policy is made available to all those who interact with the web services of Rewrite , accessible electronically, starting from the address https://rewrite.technology/ , owned by Rewrite (hereinafter, the “Company”).

This document provides information pursuant to art. 13 of the GDPR regarding the management methods of the site https://rewrite.technology/ , with regard to the processing of personal data of users who visit it.

On the web pages of the site https://rewrite.technology/ you can find hyperlinks ( links ) to other websites, proposed to provide a better service to its users; the Company cannot be held in any way responsible for the content of websites that users may access through its site.

The existence of a link to another site does not imply, therefore, approval or acceptance of responsibility by the Company regarding the content of the new site accessed, also in relation to the policy adopted for the processing of personal data as well as its use.

1. OWNER, RESPONSIBLE AND AUTHORISED TO PROCESS DATA

The Data Controller of the navigation data is Rewrite , with registered office in Via XXXX , contactable at the email address info@rewrite.technology 

The Data Controller of the data provided voluntarily by users is Rewrite which carries out the requested service.

The list of subjects Responsible for the Treatment and/or Authorized for the Treatment can be requested at the following e-mail address: info@rewrite.technology

1. TYPE OF DATA PROCESSED

According to art. 4.1, letter a), of the GDPR, «personal data» means «any information relating to an identified or identifiable natural person («data subject»); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, an identification number, location data or an online identifier».

The personal data collected through the site https://rewrite.technology/ belong to the following categories.

• Browsing data

The computer systems and software procedures used to operate the website https://rewrite.technology/ acquire, during their normal operation, some data whose transmission is implicit in the use of Internet communication protocols.

Browsing data includes the IP addresses or names of the computers used by users who connect to the Site, the URI ( Uniform Resource Identifier ) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server and other parameters relating to the operating system and the IT platform used by the user.

These data may be processed by the Data Controller in order to obtain anonymous statistical information on the use of the site, in order to identify the pages preferred by users, so as to be able to present them with the most appropriate content and check its correct functioning.

The data may also be used to ascertain responsibility in the event of hypothetical computer crimes against the Site.

• Cookie

Cookies are generally defined as small text files that are stored on the user’s device when the latter browses websites, including those of Rewrite .

The cookies used help the user navigate within the sites and memorize the choices made during the sessions, avoiding the use of other IT techniques potentially prejudicial to the privacy of the users’ navigation.

Many web browsers automatically activate cookies; however, if the user wishes, it is possible to set the browser to deactivate them: in this case, however, navigation of the site may not be complete, mainly due to the failure to install technical cookies.

This type of cookie allows the user to navigate the sites correctly and to use specific functions such as access, where applicable, to secure areas of the sites. Without these cookies, it will not always be possible to provide authentication services or the correct functioning of the websites.

Technical cookies are distinguished from “third-party” cookies, which are instead set by a website other than the one the user is visiting/using.

In line with regulatory provisions, prior consent for the use of cookies is required for non-anonymized “analytical” cookies and for profiling cookies, e.g. those that create user profiles to send them advertising messages in line with the preferences they have expressed while browsing.

Further information on cookies can be found in the cookie policy at the following link https://rewrite.technology/cookie-policy/

• Data provided voluntarily by the user

The optional, explicit and voluntary sending of communications via email, forms to be filled in or the various modules on the site , involves the subsequent acquisition of the sender’s address, necessary to respond to his requests, as well as any other personal data included in the message or communication or in the form in question. Such data will be processed in accordance with current legislation for the pursuit of those purposes for which they were communicated.

The provision of personal data provided voluntarily is optional, but failure to collect it may make it impossible to obtain what is requested.

• “Contact Us” Form

The user who intends to request information from Rewrite you can fill out the form that you will find on the “Contacts” page.

The user is invited not to provide irrelevant personal data; in any case, irrelevant data will be deleted or, in any case, will not be considered.

The requested data (name, surname and email) will be processed only for the purpose of responding to the user’s requests, on the basis of the execution of a contract to which the interested party is a party, as established by art. 6, par. 1, lett. B of EU Regulation 2016/679 (GDPR).

1. PURPOSE OF THE PROCESSING, LEGAL BASIS OF THE PROCESSING AND DATA RETENTION PERIOD

The personal data provided through the site will be processed by the Company for the following purposes:

1. To make a request via the contact form on the site, provide support services, send information and service communications, etc.;
2. Purposes of statistical research/analysis on aggregate or anonymous data, therefore without the possibility of identifying the user, aimed at measuring the functioning of the Site and its operational functions, including the resolution of any technical problem;
3. Purposes aimed at preventing or preventing fraudulent activities or improper use that could damage the site or compromise the security of operations;
4. Purposes necessary to ascertain, exercise or defend a right in court or whenever the judicial authorities exercise their judicial functions;
5. Purposes related to the fulfillment of a legal obligation to which the Data Controller is subject;
6. for sending commercial communications on products and services of the Site and/or the Company, special offers, promotions and news, coupons, by means of automated systems, e-mail (so-called newsletter), sms, mms , fax, or similar, and/or by postal service (so-called marketing purposes );

For the purpose referred to in point A), the legal basis is the execution of a contract to which the interested party is a party; the data will be retained for the entire duration of the contract and, after termination, for ten years.

The purpose referred to in point B) does not involve the processing of personal data.

For the purposes referred to in points C) and D), the processing is necessary for the pursuit of a legitimate interest of the Data Controller; the data will be retained respectively for the entire duration of the browsing session on the Site and for the entire duration of the dispute, until the terms of appeal have been exhausted.

For the purpose referred to in point E), a legitimate processing of personal data is carried out as it is necessary to fulfill a legal obligation to which the Data Controller is subject; the data will be retained for the entire duration of the contract and, after termination, for ten years.

The legal basis for the processing of personal data for the purposes referred to in point F) lies in the specific consent of the interested party (optional and revocable at any time); the data will be retained until its revocation.

1. PROCESSING METHODS – SECURITY MEASURES

The personal data of users are processed by electronic and/or automated means and/or paper media, according to the principles of correctness, lawfulness, transparency, confidentiality and in compliance with the provisions of the legislation in force on the matter, including the General Data Protection Regulation (GDPR).

Personal data are processed for the time strictly necessary to achieve the purposes for which they were collected. More information regarding data retention and/or the criteria used to determine this period is available by writing to info@rewrite.technology .

In order to prevent the loss or destruction, even accidental, of data, or illicit or incorrect use or unauthorized access, specific technical and organizational security measures are observed and adopted as prescribed by the legislation in force on the matter.

1. COMMUNICATION AND DISSEMINATION OF DATA

The personal data collected may be communicated to third parties such as independent Data Controllers or Data Processors, charged with carrying out activities connected and instrumental to the processing of the same, and to the competent Authorities, in compliance with regulatory obligations and/or in order to allow the defense in court of Rewrite .  

• POSSIBLE TRANSFER OF DATA OUTSIDE THE EUROPEAN UNION

The Company may transfer the data to third party independent Data Controllers or Data Processors to allow the performance of the activities listed in this information notice.

If personal information is transferred to countries that do not provide the same level of protection as provided by the GDPR, or in any case an adequate level of protection of personal data, the Company will ensure that each service provider assumes specific contractual obligations in compliance with the applicable regulations on the protection of personal data (including the subscription to the Standard Model Clauses approved by the European Commission), unless the Company can refer to any other legal basis for the transfer of personal information.

1. PERSONAL DATA OF THE MINOR

The site https://rewrite.technology/ is not intended for minors under 18 years of age and does not intentionally collect personal data from them.

Therefore, those who are not yet 18 years old are invited not to communicate their personal data under any circumstances. The Company reserves the right to inhibit access to the services and does not guarantee the successful completion of the activities/services requested for anyone who has concealed their minority.

1. RIGHTS OF THE INTERESTED PARTY

Interested parties have the right, at any time, to obtain confirmation of the existence or otherwise of their personal data and to know their content and origin, verify their accuracy or request their updating, rectification or, when they have an interest, integration.

In the cases provided for by current legislation, interested parties also have the right to request and obtain the cancellation of their personal data at any time, the transformation into anonymous form or the blocking of data processed in violation of the law, including those whose retention is not necessary in relation to the purposes for which the data are collected or subsequently processed, as well as to oppose, in whole or in part, for legitimate reasons to their processing.

Requests should be addressed to the Data Controller, writing via email to the address: info@rewrite.technology

The exercise of these rights must not prejudice and/or harm the rights and freedoms of others.

Where requests are submitted by electronic means, the information will be provided free of charge and in a commonly used electronic format.

Pursuant to art. 15, 3) of the GDPR, if the user’s requests are manifestly unfounded or excessive, in particular due to their repetitive nature, the Company may alternatively:

1. Charge a reasonable fee taking into account the administrative costs of providing the information or communication or taking the action requested;
2. Refuse to comply with the request.

In both circumstances Rewrite provides adequate justification to the user.

In the event that interested parties believe that the processing of their personal data is taking place in violation of current legislation, they have the right to lodge a complaint with the competent Supervisory Authority pursuant to art. 77 of the GDPR.

1. CHANGES

Rewrite reserves the right to modify or update the content of this document, in part or completely, also due to changes in applicable legislation.

We therefore recommend that you regularly check this section to take note of the most recent and updated version of the Privacy Policy so that you are always updated on the data collected and the use that the Company makes of it.

In case Rewrite If you make any changes that you deem important, users will be informed via the website https://rewrite.technology/.