European Regulation eu 2016/679 (MAY 25, 2018)

1.Introduction
The European Union has raised the required standards by having (as of May 25, 2018) all countries that are part of the EU apply GDPR-a new legislation that changes the rules for collecting, storing, and using user information, and therefore, in order to maintain existing contacts, companies are informing of the change and in some cases giving a new authorization to use data.However, it is often not clear what the authorization is being given to, which is why we thought we would simplify the content.First: GDPR stands for General Data ProtectionRegulation (in Italian General Data Protection Regulation-EU Regulation 2016/679).
The goal of this new privacy law is to enable European citizens to have greater control over how individuals, companies and public bodies collect and use their personal data.
Then, in simple terms, here’s what it consists of, what it changes, and what to do.What is GDPR As we mentioned, GDPR is the European Data Protection Regulation that replaces the current Data Protection Directive 95/46/EC, which dates back to 1995.
This new law takes into account the sudden changes that have taken place in the digital world and also goes on to unify the European laws on the subject, with the specific aim of making sure that (our) right to be in full control of the information about us is preserved.
The regulation consists of 99 articles all aimed at giving citizens more control over their personal data, and clarifying responsibilities in case of privacy breaches.
In addition, the GDPR establishes some much-discussed key principles recently: the right to be forgotten (users can request to remove information about themselves forever), data portability (i.e., one can download and transfer data from one platform to another, without tying oneself to a certain account), and the obligation to notify in case of a data breach (companies, if they experience leaks of sensitive information, must notify the users whose data they have within 72 hours).

The substantial changes introduced by the GDPR compared to previous privacy regulations concern 4 specific areas: territorial scope, obtaining consent, the introduction of the DPO, and sanctions.
The territorial scope means that the new law applies to the data of all European citizens and all companies that process or handle such data, regardless of the country where they have their registered office or where the data is processed.
Obtaining consent: as before, consent to data processing must be free, informed and explicit, as tacit or assumed consent will not be allowed in any way.
New with regard to minors, whose consent will be considered valid from the age of 16; before that age, consent must be given by a parent or guardian.Linked to obtaining consent is the introduction of the DPO, or Data ProtectionOfficer.
This is an independent figure charged with ensuring proper management of personal data.
As has been pointed out, however, it is not yet well understood what the DPO is and what duties he or she has.

What data it protects.

The GDPR regulation applies to a wide range of personal data including name, identification and location numbers, as well as IP addresses, cookies and other fingerprints.On the European Data Protection Supervisor website, personal data is defined as follows: “Any information relating to an identified or identifiable natural person, referred to as a ‘data subject’-an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his or her physical, physiological, mental, economic, cultural or social identity. “The new regulation, however, as is easily guessed, also affects us individual users.

How?

First of all, you can expect to be informed more about how your data is used: companies need to be clear and transparent about everything, which is why you may receive a flurry of emails asking you to check the boxes to give consent for data use.The company MG Visio Srl operates in the LED lighting sector, through subsidiaries, agents, licensing and distribution agreements.Within this website – owned by MG Visio Srl.
– contains information directly related to it.

This Policy is intended to describe how this website is managed, with reference to the processing of personal data of users/visitors who consult it.
MG Visio Srl, in line with applicable privacy protection regulations, intends to guarantee the privacy and security of each visitor’s personal data, also in relation to Internet access made from abroad, consistent with what is prescribed in this Policy.
Where not otherwise specified, this Policy is also to be understood as general information on the processing of personal data provided to those who interact with the services offered by the website.Detailed information on the processing of personal data is provided, where necessary, on the pages relating to individual services in the sections of the site.
These disclosures are aimed at defining the limits and methods of data processing for each service, on the basis of which the visitor may freely express his or her consent and possibly authorize the collection of data and its subsequent use.It should be noted that this Privacy Policy does not extend to other websites that may be consulted by the user via hyperlink.

2. Roles and responsibilities in privacy
The Data Controller is the company MG Visio Srl. with registered office in Via Antonino Giuffré 101, 00128 rome, Italy.
Responsible for the web services offered is the pro tempore contact person for Marketing.
Personal data may be processed by persons appointed as Data Processors, as well as by Data Processors in charge of the management of the requested service.

3. Type of data processed and purpose of processing
The website offers content of an informative and, at times, interactive nature. While browsing the site, information about the visitor may therefore be acquired, in the following ways:- Browsing dataIn the course of their normal operation, the computer systems and software procedures used to operate this website acquire certain personal data, the transmission of which is implicit in the use of Internet communication protocols.This category of data includes: IP addresses, the type of browser used, the operating system, the domain name and addresses of websites from which access or exit was made, information on the pages visited by users within the site, the time of access, the length of time spent on the individual page, internal path analysis and other parameters relating to the user’s operating system and computer environment. These technical/informational data are collected and used only in an aggregate and anonymous manner and could be used to ascertain responsibility in case of hypothetical computer crimes against the site.- Data provided voluntarily by the visitorThis is all those personal data freely released by the visitor on the site to, for example, register to the news letters and/or access a restricted area, request information about a particular product or service through an email contact, write to an email address or call a toll-free number to have direct contact with customer service. Where applicable, this information may be used for the purpose of user profiling. Where this occurs, appropriate information will be provided and free and specific consent will be acquired for marketing and/or profiling purposes, in accordance with the techniques (initially at the stage of collecting consent under the concept of “opt-in” and subsequently at the stage of denying consent under the concept of “opt-out”) provided for in current privacy legislation.

4. Technologies Used
Cookies are packets of information sent by a web server (e.g., the site) to the user’s Internet browser, automatically stored by the latter on the computer and automatically sent back to the server each time the site is accessed.By default, almost all web browsers are set to automatically accept cookies.Visitors can set their computer’s browser to accept/reject all cookies or display a warning whenever a cookie is proposed, so that they can consider whether or not to accept it.
The user can, however, change the default configuration and disable cookies (i.e., block them outright) by setting the highest level of protection.MGvisio srl and third-party vendors, including Google, use both proprietary and third-party cookies to determine the correlation between website visits and ad impressions from the Google AdWords Display Network, other uses of advertising services, and interactions with those ad impressions and advertising services, and to determine reports on demographic and interest data from Google Analytics.
This website uses Google Analytics, a web analytics service provided by Google , Inc.
(“Google”).
Google Analytics uses “cookies,” which are text files deposited on your computer to enable the website to analyze how users use the site.
The information generated by the cookie about your use of the website (including your anonymous IP address) will be transmitted to and stored by Google on servers in the United States.
Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage.
Google may also transfer this information to third parties where required to do so by law or where such third parties process the information on Google’s behalf.
Google will not associate your IP address with any other data held by Google.
You may refuse the use of cookies by selecting the appropriate setting on your browser or by visiting Google’s page on currently available opt-out features, but please note that if you do this you may not be able to use the full functionality of this website.
By using this website, you consent to the processing of your data by Google in the manner and for the purposes set out above.

5. Methods of data processing
The processing of personal data is carried out mainly using electronic procedures and media (DB, CRM platforms, etc.) for the time strictly necessary to achieve the purposes for which the data were collected and, in any case, in accordance with the principles of lawfulness, correctness, non-excessiveness and relevance provided for in the current privacy legislation.

6. Redirect to external sites
The Web site may use social plug-ins.
Social Plug-ins are special tools that allow you to embed social network functionality directly within the website (e.g., Facebook’s “like” function).
All social plug-ins on the site are marked with the respective logo owned by the social network platform (e.g. Facebook, Google+, Twitter, etc.).
When you visit a page on our site and interact with the plug-in (e.g., by clicking the “Like” button) or decide to leave a comment, the corresponding information is transmitted from your browser directly to the social network platform and stored by it.For information about the purpose, type and manner of collection, processing, use and storage of personal data by the social network platform, as well as how to exercise your rights, please consult the privacy policy adopted by the individual social network.

7. Rights of data subjects
The subjects to whom personal data (so-called “data subjects”), processed through this website, refer have the right to exercise their rights in the manner and within the limits provided by the privacy legislation applicable on the national territory.
In particular, it is recognized the exercise of the following rights:
– the right to access personal data in its paper and/or electronic files;
– the right to request their rectification, updating and deletion, if incomplete or erroneous, as well as to oppose their processing for legitimate and specific reasons;
– the right to obtain the rectification of inaccurate personal data without undue delay.
Taking into account the purposes of the processing, the data subject has the right to obtain the integration of incomplete personal data, including by providing a supplementary declaration;
– the right to obtain the deletion of personal data concerning him/her without undue delay if one of the reasons referred to in Art.
17, paragraph 1 of the Regulation;
– the right to obtain the limitation of processing when one of the cases referred to in Art.
18, paragraph 1 of the Regulation;
– the right to data portability within the limits and in the manner provided for by Art.
20 of the Regulation and the Guidelines on data portability;
– the right to lodge complaints with the competent Authority.To exercise these rights, obtain an updated list of Data Processors (where designated), report problems or ask for clarifications on the processing of your personal data, please address your requests to the Data Controller, specifying the subject of the request, at the following address (info@mgvisio.com).

8. Duration of data processing and retention time.
The Data will be processed for the time necessary for the performance of the activity that is the subject of the services provided and, also thereafter, limited to the fulfillment of any legal obligations.