TREATMENT OF DATA OF USERS WHO CONSULT THIS SITE
This page describes how the site is managed with reference to the processing of personal data of users who consult it.
This is an information that is also made pursuant to art. 13 of Legislative Decree no. 196/2003 – Code regarding the protection of personal data and art. 13 of the European Regulation EU 2016/679 (GDPR) to those who interact with the owner’s web services, accessible electronically starting from the address: https://www.smarties.bio.
It should be noted that the information is provided only for the above site and not for other websites that may be consulted by the user through links. The information is also inspired by Recommendation no. 2/2001 that the European authorities for the protection of personal data, gathered in the Group established by art. 29 of Directive n.95 / 46 / EC, adopted on May 17, 2001 to identify some minimum requirements for the collection of personal data online, and, in particular, the methods, times and nature of the information that the owners of the processing must provide users when they connect to web pages, regardless of the purpose of the connection.

PLACE OF DATA PROCESSING
The treatments connected to the web services of this site take place at the headquarters of the Data Controller and are only handled by staff from the Office in charge of processing, or by any persons in charge of occasional maintenance operations. No data deriving from the web service is communicated or disclosed. The personal data provided by users who submit requests (for information, newsletter subscriptions, to be contacted, etc.) are used for the sole purpose of performing the service or provision requested, unless otherwise provided for in any further specific information on data processing, present in case of data entry and collection. Unless otherwise provided in the individual information relating to the requested service, the data are disclosed to third parties only in the event that this is necessary to perform the requested service or service. In addition to the Data Controller, in some cases, categories of agents involved in the organization of the site as external subjects (such as suppliers of third party technical services, postal couriers, hosting providers, IT companies, communication agencies) may also have access to the Data, also appointed, if necessary, Data Processors by the Owner. The updated list of Managers can always be requested from the Data Controller.

TYPES OF DATA PROCESSED

Navigation data
During their normal operation, the IT systems and software procedures used to operate this website acquire some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) ​​notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site: except for this eventuality, at present the data on web contacts do not persist for more than seven days.

Data voluntarily provided by the user
The optional, explicit and voluntary sending of e-mails to the addresses indicated on this site or the compilation of specific data entry forms to receive services / information or make requests entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message. Specific summary information and any requests for consent, if necessary, will be progressively reported or displayed on the pages of the site prepared for particular services on request.

PURPOSE OF THE TREATMENT
1. The data provided by the User will be processed without the prior consent of the User pursuant to art. 24 lett. b) Privacy Code and art. 6 lett. b) GDPR, for the following Service purposes:
a. for the management and processing of statistical surveys on the use of the Site;
b. to carry out the maintenance and technical assistance necessary to ensure the correct functioning of the Site and the services connected to it;
c. to improve the quality and structure of the Site, as well as to create new services, functionalities and / or characteristics of the same;
d. to process any contact request sent by the User by filling in the appropriate form or by email;
e. to allow the Body to exercise its rights in court and repress illegal behavior;
g. to fulfill legal or regulation obligations.
2. The data provided by the User will be processed, subject to the User’s consent pursuant to art. 23 Privacy Code and art. 6 lett. a) GDPR, for the following purposes:
a. to allow the User to send commercial communications by e-mail on initiatives and / or services offered by the company and / or newsletters containing insights regarding the main topics related to the services offered and / or collect references relating to the services covered by the Smarties.bio activity.

METHOD OF TREATMENT
The processing of user data is carried out by means of the operations indicated in art. 4 Privacy Code and art. 4 no. 2) GDPR and in particular: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, access, use, interconnection, blocking, communication, cancellation and destruction of data.
Users’ data are processed with automated and non-automated tools and, in any case, in order to guarantee the security and confidentiality of the data, for the time strictly necessary to achieve the purposes for which it was collected and, in any case, not more than 10 years from their collection for the Service purposes referred to in point 1 paragraph 1 and no more than 2 years from their collection for the Commercial purposes referred to in point 2 of paragraph 1.

SCOPE OF COMMUNICATION AND DIFFUSION
Without the express consent of the User (pursuant to art. 24 lett. a), b), d) Codice Privacy and art. 6 lett. b) e c) GDPR), Smarties.bio may communicate the User’s data for the purposes of Service to Supervisory Bodies, judicial Authorities as well as to all the other subjects to whom the communication is mandatory by law for the accomplishment of said purposes, as autonomous holders of the treatment. Users’ data will not be disclosed.
Personal data may come to the knowledge of the data processors.
Personal data will not be disclosed to other subjects, nor will it be disseminated except for the assistance structures connected to Smarties.bio, as well as to professional firms or companies as they are obliged to participate for the purpose of carrying out our service. activities, as well as the fulfillment of the regulatory and tax obligations related to it.

OPTIONAL DATA SUPPLY
Except as specified for navigation data, the user is free to provide personal data contained in the request forms or indicated in contacts with the Data Controller. Their absence can make it impossible to obtain what is requested.

RIGHTS OF THE INTERESTED PARTIES
The person to whom the personal data refer will have the right to exercise the rights referred to in art. 7 Privacy Code and art. 15 GDPR and precisely:
1. The interested party has the right to obtain confirmation from the data controller that personal data concerning him or her is being processed and in this case, to obtain access to personal data and to the following information:
a) the purposes of the treatment;
b) the categories of personal data in question;
c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if recipients from third countries or international organizations;
d) when possible, the expected retention period of personal data or, if not possible, the criteria used to determine this period;
e) the existence of the right of the interested party to ask the data controller to correct or delete personal data or to limit the processing of personal data concerning him or to oppose their treatment;
f) the right to lodge a complaint with the supervisory authority;
g) if the data are not collected from the data subject, all information available on their origin;
h) the existence of an automated decision-making process, including the profiling referred to in Article 22, paragraphs 1 and 4, and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such treatment for the person concerned;
2. If personal data are transferred to a third country or to an international organization, the interested party has the right to be informed of the existence of adequate guarantees pursuant to article 46 relating to the transfer.
3. The data controller provides a copy of the personal data being processed. In cases of further copies requested by the interested party, the data controller can charge a reasonable expense contribution based on administrative costs. If the interested party submits the request by electronic means, and unless otherwise indicated by the interested party, the information is provided in a commonly used electronic format.
4. The right to obtain a copy referred to in paragraph 3 must not infringe the rights and freedoms of others.

Where applicable, the subject to whom the personal data refer also has the rights referred to in articles 16-21 GDPR (Right of rectification, right to be forgotten, right of limitation of treatment, right to portability of contractual and raw navigation data, right of opposition), as well as the right of complaint to the Guarantor Authority

IDENTIFICATION OF THE OWNER, THE MANAGER AND THE REPRESENTATIVE OF THE OWNER IN THE STATE TERRITORY
The Data Controller is Smarties.bio in the figure of the President and Legal representative, with registered office in Chioggia (VE), Via Amerigo Vespucci 292, mail: info@smarties.bio, to which the communications referred to in art. . 7 of Legislative Decree 196/03 and art.15 GDPR.
The complete list of Managers and Officers is available at the headquarters.

JURISDICTION
For any dispute that may arise between the user and the data controller or other subjects who have collaborated, collaborate or will collaborate with Smarties.bio, the user accepts the jurisdiction of the Italian State and, in any case, the application of the Italian law regardless of one’s home or office. The place of jurisdiction is that of VENICE.