This notice is provided, in accordance with Article 13 of the European Regulation 679/2016 (GDPR), to those who access the website www.umbriakinetics.com.
This notice applies only to the aforementioned website and not to other external websites that may be accessed by the user through links.
By browsing the above-mentioned site, personal data of users may be processed.

1) Data Controller

The Data Controller for the processing carried out on the website www.umbriakinetics.com is Umbria Kinetics SRL, located at Via A. Vici, 28 Foligno 06034 PG, email sales@umbriakinetics.com.

2) Nature of the data processed and the purposes of processing

a) Navigation data

Following the consultation of this website, data relating to identified or identifiable persons may be processed. The IT systems and software procedures used for the operation of this domain acquire, during normal operation, some personal data whose transmission is implicit in the use of internet communication protocols. These are aggregated and anonymous information, which are not specifically collected to be associated with identified individuals, but which, by their nature, could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users connecting to the site, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response from the server (successful, error, etc.), and other parameters relating to the user’s operating system and IT environment.
These data are used solely to obtain anonymous statistical information about the use of the site and to monitor its proper functioning, and are deleted immediately after processing. However, these data may be used for the identification of responsibility in the case of hypothetical cybercrimes to the detriment of the site.

b) Data provided by the user

Personal data provided by users are also subject to processing when users voluntarily submit information, such as through the form in the “Contact” section of the website. Users’ personal data are not disclosed. If users send inappropriate or irrelevant data to the purposes of the collection, Umbria Kinetics SRL will delete them immediately.

c) Cookies

Refer to the specific “Cookies Policy” published on the website for all the necessary information regarding the types and functioning of cookies and other services and features active on the website.

3) Legal bases

Apart from what is specified for navigation data, which is necessary to allow browsing on this website, the user is free to provide their personal data if they wish to contact Umbria Kinetics SRL via the forms available on the site. The legal basis for processing is therefore the necessity to provide a response to the user.

4) Recipients of the data

Personal data of users are accessible to those authorized to process data under the direct authority of Umbria Kinetics SRL, as well as to external data processors and sub-processors, who provide specific services and with whom Umbria Kinetics SRL has entered into appropriate contracts, pursuant to Article 28 of the GDPR.
The personal data collected on the Umbria Kinetics SRL website may be communicated to companies acting as independent data controllers, which Umbria Kinetics SRL uses for the provision of professional and technical services related to the management of the website and the pursuit of its purposes. All of the above-mentioned parties are committed to using the received information only for the processing purposes outlined above, to keeping it confidential, intact, and not available to unauthorized third parties.
Furthermore, personal data may be disclosed pursuant to a legal or regulatory provision or to comply with an order from an administrative or judicial authority.

5) Data transfer

The data subject to processing are stored on servers located within the territory of the State. In the event that they are transferred outside the European Union, for the purpose of hosting the servers of certain service providers, Umbria Kinetics SRL will adopt all the appropriate safeguards prescribed by the GDPR to protect users’ personal data.

6) Methods of processing and retention periods

Personal data are processed using automated tools for the time strictly necessary to achieve the purposes for which they were collected and to provide the services of this website. Specific security measures are implemented to prevent data loss, unlawful or incorrect use, and unauthorized access. All information collected on the website is stored and maintained in secure facilities that limit access to authorized personnel only. The website is regularly monitored to check for any security breaches and to ensure that all collected information remains inaccessible, accurate, and unavailable to unauthorized individuals.
The data provided by the user will be deleted when no longer necessary to respond to their specific requests, subject to the legal or regulatory retention obligations.

7) Rights of access

Articles 15 to 22 of the GDPR grant the user, as the data subject, the exercise of specific rights. Article 15 grants data subjects the right to access their personal data and obtain a copy. The right to obtain a copy of the data must not infringe upon the rights and freedoms of others. With an access request, the user has the right to obtain from Umbria Kinetics SRL a confirmation of whether their personal data is being processed, as well as to know the purposes and categories of the processed data, the third parties to whom the data are disclosed, and whether the data are transferred to a non-EU country with adequate safeguards. The user also has the right to know the retention period of their personal data in relation to the above-mentioned purposes.

8) Other rights

With regard to their personal data, the user has the right to request the correction of inaccurate data and the completion of incomplete data, the deletion (right to be forgotten) under the conditions set out in Article 17 of the GDPR, the limitation of processing, and the portability of data.
To exercise these rights, the user can contact Umbria Kinetics SRL by sending an email to sales@umbriakinetics.com or by writing to the address of the data controller’s office. Before providing a response, the data controller may need to verify the user’s identity by requesting a copy of their identity document. A written response will be provided to the user without undue delay and, in any case, no later than one month from the receipt of the request.

9) Complaint

If the user believes that the processing of their personal data violates the provisions of the GDPR, they have the right to file a complaint with the Data Protection Authority located in Rome, pursuant to Article 77 of the GDPR, as well as to seek judicial remedy.

The Data Controller