PERSONAL DATA PROTECTION POLICY
Welcome to the website www.avathor.it (“Website”). Your privacy is important to us, and we want to ensure that your personal information is handled with the utmost care and in compliance with applicable laws, including the European Union General Data Protection Regulation (EU) 2016/679 (GDPR).
1. DATA CONTROLLER
The Data Controller of personal data is Avathor S.r.l., with its registered office at Corso Re Umberto 54 – 10128 Torino (TO). The Data Controller can be contacted via the following communication channel:
privacy@avathor.it.
- COLLECTED INFORMATION
The company processes data necessary for managing website navigation, data generated through cookies, and any voluntarily provided data. The categories of personal data processed are listed below.
2.1. NAVIGATION DATA
When you visit our Website, we automatically collect information related to your device and browsing behavior. This information includes your IP address, browser type, operating system, preferred language, pages visited, date and time of your visits, time spent on each page, and other similar statistics.
2.2 INFORMATION VOLUNTARILY PROVIDED BY THE USER:
You may choose to voluntarily share certain personal information with Avathor. This may include data entered in online forms, such as your name and surname, email address, phone number, or other contact details when you request information, subscribe to our newsletter, or contact us directly through our Website.
2.3 COOKIES AND SIMILAR TECHNOLOGIES
We use cookies and similar technologies to collect information about user interactions with the site. Cookies are small text files that are stored on your device when you visit the Website. For further details, please consult our cookie policy.
- USE OF INFORMATION AND LEGAL BASIS
The provision of navigation data is automatic and inherent to the use of browsing protocols. The provision of personal data through forms on the site is optional and necessary to access specific services offered by the Website. We use the collected information for various purposes, including:
3.1 ALLOWING CONNECTION TO THE WEBSITE
To ensure the stability of the site connection and the proper functioning of network protocols, certain navigation data will be used. We pursue this purpose to execute contractual or pre-contractual measures. Art. 6(1)(b) GDPR.
3.2 PROVISION OF SERVICES
We use the received information to process your requests. We pursue this purpose to execute contractual or pre-contractual measures. Art. 6(1)(b) GDPR.
3.3 ANALYSIS AND IMPROVEMENT
We analyze cookies, navigation data, and voluntarily provided information to improve our Website, its usability, and the quality of offered services. This helps us better understand visitor preferences and optimize our content. We pursue this purpose based on the legitimate interest of the Data Controller. Art. 6(1)(f) GDPR.
3.4 PROMOTION OF SERVICES THROUGH CONTACT REQUESTS
The Data Controller may request the user’s consent to use their personal data for promotional purposes. The provided consent is explicit and free. We pursue this purpose with the prior consent of the data subject. Art. 6(1)(a) GDPR.
3.5 WEBSITE SECURITY MANAGEMENT AND FRAUD PREVENTION
The Data Controller is required to ensure the security of its website and prevent cyber fraud. The processing of personal data is therefore necessary to ensure an adequate level of protection of information related to website users. We pursue this purpose based on legitimate interest. Art. 6(1)(f) GDPR.
- DATA RECIPIENTS AND SHARING OF INFORMATION
Processing is carried out directly by the Data Controller’s organization through properly designated and trained personnel acting as internal processors, as well as external companies that provide various services on behalf of the company (such as hosting management), also in the capacity of Data Processors under Art. 28 of the GDPR (for example, companies providing IT services) solely for the purposes defined in this privacy policy. The list of Data Processors is available upon request by contacting the Data Controller at
privacy@avathor.it.
- SECURITY
Data processing is carried out using IT tools or other automated means strictly related to the intended purposes.
The Data Controller has adopted technical and organizational measures to ensure an adequate level of security in compliance with Article 32 GDPR. Security measures include, among others, the encryption of communications.
- DATA RETENTION PERIOD
Personal data will be processed and stored for the time necessary to achieve the specific purpose for which it was collected, varying according to the specific data categories, in compliance with the principles of proportionality and necessity. Personal data processed for promotional purposes will be retained for a maximum of 24 months from the expression of consent.
- TRANSFER OF DATA ABROAD
The use of certain website functions may involve the transfer of personal data abroad. Specifically, the use of third-party cookies may lead to data transfers to controllers located outside the European Economic Area. For more information, please refer to the website’s cookie policy.
The transfer may occur to countries that do not offer adequate protection; in such cases, the transfer will take place based on appropriate and additional safeguards necessary to ensure a level of security equivalent to that provided in the European Union.
- DATA SUBJECT’S RIGHTS
At any time, the data subject may obtain from the Data Controller, where applicable, access to their personal data, rectification, deletion, or restriction of processing (Articles 15 et seq. GDPR). If consent to data processing was provided, it may be revoked at any time. Requests should be sent to the contact details provided in section 1 of this policy, preferably with the subject line “Request to exercise privacy rights.”
Data subjects who believe that the processing of their personal data violates applicable data protection regulations have the right to file a complaint with the Data Protection Authority under Article 77 GDPR (https://www.garanteprivacy.it/reclamo) or take legal action under Articles 79 GDPR and 140-bis of the Privacy Code.
9. MODIFICATIONS TO THE PRIVACY POLICY
This web privacy policy may be subject to modifications and updates, including as a result of regulatory changes and/or integrations. We recommend visiting this page periodically to stay informed about our privacy practices.
Thank you for your trust in our Website and for choosing to visit it.
Avathor S.r.l.
www.avathor.it
Policy updated on 19/02/2025
