Privacy & Cookie Policy

In accordance with EU Regulation 2016/679, we provide the required information regarding the purposes and methods of processing your personal data, as well as the scope of their communication and dissemination, their nature and how they are provided.

The personal data you provide will be processed exclusively for the purpose indicated on each specific page of the website www.windex.it. The possible purposes are listed below:

1) to respond to your specific requests and to send related information material about the products and services provided.

2) to periodically send information, promotional and advertising material about the services provided, via a newsletter by e-mail.

This processing will be based on the principles of fairness, lawfulness and transparency, protecting your confidentiality and your rights, and its purpose is to manage your requests. For the indicated processing, the Data Controller will become aware of identifying personal data concerning you, such as personal details and telephone/electronic contact data.

The data collected is, in any case, only that which is strictly necessary. Therefore, failure to provide, or incorrect provision of, one of the requested pieces of information prevents the Data Controller from following up on your request. The data will be processed for the entire duration of the relationships established, until you object to such processing at any time you wish. In any case, the data will be kept for the time necessary to fulfil any legal obligations and requirements. Data processing will be carried out mainly using IT and electronic tools, with logic strictly related to the purposes and in such a way as to guarantee the security and confidentiality of the data, by persons specifically appointed as Data Processors and/or Persons in charge by the Data Controller.

Without prejudice to communications made in fulfilment of legal and contractual obligations, for the defence of rights and at the request of the competent Authorities, the data may be communicated to employees and/or collaborators of the Data Controller to whom the transfer of your data is necessary or otherwise aimed at carrying out the activity; to Professionals or Service firms for administration and management acting on behalf of the Data Controller; to third-party Suppliers for the performance of the service. Your data will not be disseminated (i.e. communicated to an indefinite number of other parties), nor will it be transferred to a non-EU country.

Data Controller: Windex srl – Via S. Chiara, 22 – 37012 BUSSOLENGO – VERONA, Italy – VAT 02986820237 – Phone: 045 6703469 Fax: 045 6704164 – Email: windex@windex.it – Legal email: windexpec@legalmail.it, to which communications regarding the exercise of your rights may also be sent. In relation to such data, and at any time, by simple written request addressed to the Data Controller (also by e-mail or through a delegated person), you may exercise a number of rights:

• obtain access to your personal data to know the origin of the data, the purpose of the processing, the logic applied to the processing with the use of electronic tools, the categories of data, the recipients (or categories of recipients) to whom it will be communicated, the retention period, and its communication in an intelligible form;
• obtain the rectification, integration or erasure of the data, or the restriction of processing;
• object, for legitimate reasons, to the processing of your personal data;
• obtain the portability of the data, where relevant;
• withdraw consent at any time;
• lodge a complaint with a supervisory authority.

The rights indicated above may be exercised in accordance with the procedures provided for by the relevant regulations. The expression of consent to the processing of personal data by the Data Controller, as indicated and qualified above, since it is attributable exclusively to legal and contractual obligations, is superfluous pursuant to Art. 6(1)(b) and (c) of EU Regulation 2016/679.

This document provides information to users who interact with the web services accessible electronically, starting from the address www.windex.it corresponding to the home page, as well as on the use of cookies, how to manage them and how they are used on the site.

The IT systems and software procedures used to operate the Data Controller’s services acquire, during normal operation, some personal data that is implicitly transmitted in the use of internet communication protocols. This is data relating to electronic traffic that, by its nature, is not immediately associated with identified subjects, but through processing or association with data held by third parties could allow the site’s users/visitors to be identified (e.g. IP addresses). This data is used only for anonymous statistical information about the use of the service or to verify its correct functioning. Such data is kept by the Data Controller for the strictly necessary period and in any case in compliance with the regulations in force on the matter. You expressly acknowledge the existence of certain logs relating to electronic traffic, compiled and kept by the Data Controller under the terms and in the manner established by law. The aforementioned record constitutes full and incontrovertible proof of the facts and acts performed by you before the Data Controller and/or third parties; it is absolutely confidential and may be exhibited and/or provided exclusively at the request of the Subjects expressly indicated by Law. The Data Controller adopts all the technical and organisational measures necessary to guarantee the confidentiality of such logs. After the retention period provided for by law, the aforementioned data will be destroyed and it will no longer be possible to obtain a copy of such documentation.

On the Data Controller’s website, “cookies” (temporary markers) are used that allow faster access to it. A “cookie” means a piece of data that is transmitted from the website to your computer in order to allow rapid identification. Some “cookies” (“session cookies”) remain active only until the browser is closed or the logout command is executed. Other “cookies” survive the closing of the browser and are also available during subsequent visits by the user. These “cookies” are called persistent and their duration is set by the server at the time of their creation. In some cases an expiry is set, in others the duration is unlimited.

“Cookies” are stored, according to the user’s preferences, by the individual browser on the specific device used (computer, tablet, smartphone).

The cookies used are:

Technical cookies used solely for the purpose of carrying out the transmission of a communication over an electronic communications network (IT authentications, session monitoring and storage of specific information about users). They are essential for correct navigation within the site and without them it would not be possible to provide all the services requested. Such cookies do not collect information to be used for commercial purposes. They are distinguished into:

• session/navigation cookies that ensure normal browsing and use of the website;
• functionality cookies that allow the user to browse according to criteria selected by the user (e.g. language) solely to improve the service.

In addition, Analytics cookies are used that allow information to be known such as the date and time of the user’s last visit and which content was accessed. Knowing these elements, we can focus our efforts on improving the most visited areas and help the user to find more easily what they are looking for; these statistics are carried out on anonymous data and for this sole purpose. Anonymised third-party “analytics cookies” are also used to collect aggregated information on the number of users and on how they visit the site.

Third-Party Cookies: they allow the use of third-party cookies for the purposes of analysis, retargeting, understanding and improving the effectiveness of our advertising both on our site and on third-party websites. The third-party cookies used are: Google Analytics: it allows information relating to the use of the Website by users to be collected and analysed (e.g. the number of web pages visited). Such cookies do not collect information to be used for commercial purposes.

For more information visit this link: www.google.com/intl/it_ALL/analytics/learn/privacy.html

The user can disable the action of Google Analytics by installing the opt-out component provided by Google on their browser. To disable the action of Google Analytics visit this link tools.google.com/dlpage/gaoptout

“Profiling cookies” are not used, neither by the Data Controller nor by third parties. Please note that prior consent of users is not required for the installation of only “technical cookies” and anonymised “analytics cookies”. The types of cookies used may vary according to needs, choices or technological progress. This section is updated, from time to time, should this occur.

It is always possible to request the deactivation of “cookies” by changing the browser settings so as to decide whether to automatically accept or reject all cookies, or to receive a warning on the screen of the transmission of each cookie and decide each time whether or not to accept its installation on the terminal; such deactivation, however, may slow down or prevent access to some parts of the site. The “session cookies” used avoid the use of other IT techniques that are potentially prejudicial to the confidentiality of users’ browsing and do not allow the acquisition of personal identifying data of the user.

How to manage cookies in the most common browsers

• Chrome: support.google.com/chrome/answer/95647
• Firefox: support.mozilla.org/kb/cookies
• Internet Explorer: windows.microsoft.com/internet-explorer/delete-manage-cookies
• Opera: help.opera.com/Windows/10.00/cookies.html
• Safari: support.apple.com/kb/HT1677

Social Plugins

The website uses so-called “Social Plugins” of social networks. The frame contains “Social Plugins” that show the content shared by the Data Controller within the following social networks: LinkedIn, Google+. Each plugin is active by default, but to interact with the posted content you must log in to your specific account. In this case, a direct connection is established to the server of the social network you are logged into. The content of the “Social Plugins” is then transmitted directly from the social network to your browser and linked by the latter to the web page. If you are registered with a social network and do not want the latter, during your visit to the website, to link the data collected with the data registered on your profile, you must log out of the respective social network before interacting with the “Social Plugins”.

It is not possible to influence in any way the amount of data collected by the social networks with their respective “Social Plugins”. To learn about the purpose and extent of the data collection and the subsequent processing and use by the respective social networks, as well as your rights in this regard and the setting options to protect your privacy, we invite you to consult the data protection notices of the respective social networks.

• LinkedIn – LinkedIn Cookies Policy
• Google+ – Google Cookies Policy

You have the right to know which personal data has been recorded, where it was collected and for what purposes, to whom it may have been communicated and the retention time or the criteria used to determine it. You can also request its modification, integration and erasure, where not attributable to legal and contractual obligations, and the restriction of processing in certain circumstances. It is also your right to receive your personal data and transmit it to another Controller without any impediment. You have the right to withdraw consent at any time for each purpose for which you granted it. And you have the right to lodge a complaint with the supervisory authority.

The Data Controller is WINDEX S.r.l. – Via Santa Chiara, 22 – 37012 Bussolengo (VR), Italy. VAT 02986820237 – Tel. +39 045 6703469 – email: windex@windex.it, to which communications regarding the exercise of your rights may also be sent.

“CUSTOMERS” NOTICE ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ART. 13 OF REGULATION 2016/679/EU – GENERAL DATA PROTECTION REGULATION

Types of personal data

WINDEX S.r.l., as Data Controller, wishes to inform you that, for the performance of the contract, your personal data will be processed in compliance with the regulations provided for by the General Data Protection Regulation and the obligations of fairness, lawfulness and confidentiality. In particular, the following personal details will be processed: Company name, address, VAT number, company IBAN, as well as the name, surname, address, e-mail/PEC, telephone number, tax code of the persons who represent the company for legal, administrative and commercial activities.

Purposes and legal basis of the processing

A. The processing of the data will be carried out for the following purposes:

• formulation of offers, quotes and contracts relating to our services;
• administrative, accounting and contractual management of the existing legal relationship and related legal obligations;
• provision of the requested and/or contracted products/services;
• archiving for the purpose of keeping accounting documents for the necessary times required by the regulations in force;
• protection of the contractual rights of the writer, including in litigation;
• communication of commercial and/or information initiatives relating to the services provided or similar.

For the aforementioned purposes, the processing is necessary for the performance of the existing contract or of pre- or post-contractual actions taken at your request and aimed, for example, at the formulation of quotes and offers. The processing of your data for the above purposes does not require your express consent, but any refusal to provide it will make it impossible for the writing company to follow up on the legal relationship.

B. WINDEX S.r.l. may also process your data for purposes relating to promotional, advertising and commercial communication, through telephone, e-mail and/or the sending of material and offers relating to new products and services. For this purpose of the processing, we ask for your formal and express consent.

Methods of processing, logic applied and retention period

The processing of your data may be carried out by means of paper documents and archives and/or through electronic and/or telematic tools in compliance with the provisions of law designed to guarantee its confidentiality and security, as well as the accuracy, updating and relevance of the data with respect to the aforementioned purposes and in order to prevent access and consequent processing by persons not previously authorised. The logic applied to the electronic tools, used for the management of personal data functional to the sale of products and the provision of services, is based on the application of specific policies that limit access to specifically authorised company personnel. As far as possible, the principle of necessity is applied, which provides for the configuration of IT systems and programs to minimise the use of personal and identifying data. In this way, the aim is to exclude the processing of data when the purposes pursued can be achieved by means of, respectively, anonymous data or appropriate methods that allow the data subject to be identified only when necessary.

Your personal data will be kept by the writer for the entire time the legal relationship is in place. In any case, it will be kept to fulfil regulatory or legal obligations (such as the retention of accounting documents, the archiving of contractual documents for any litigation or contractual liability) for a period of 10 years, after which the data will be erased or made anonymous.

For the purposes indicated in paragraph B), your data will be kept until you inform us that you are no longer interested in our communications for the aforementioned purposes.

Provision of data and consequences of refusal

The provision of data for the purposes referred to in the previous points is strictly functional to the sale of products and the provision of support services as provided for by national, regional and municipal regulations. Without prejudice to the freedom of choice for the processing purposes referred to in point B) above, any refusal by the customer to provide the data, for the purposes referred to in point A), will make it impossible for the writer to provide the defined products and services.

Dissemination, transfer and communication of data

No personal data will be disseminated, nor will it be transferred to a non-EU country. Without prejudice to communications made in fulfilment of obligations provided for by laws, regulations or EU legislation, your data will be processed by the employees and collaborators of the writer in relation to the specific work tasks assigned and may be communicated in Italy to the Authorities or Public Institutions, credit institutions, controlled and affiliated companies, IT and business consultancy companies, debt collection and insurance sector companies, professionals and companies that provide services and consultancy (for example in the accounting, tax, legal, training fields, etc.), and to persons who need to access your data for the performance of the existing legal relationship. In any case, only the personal data necessary to achieve the purpose for which it is collected will be transferred to the aforementioned persons, in full compliance with the necessary security and confidentiality of the data.

Rights of the data subject

In relation to such data, and at any time, by simple written request addressed to the Data Controller (also by e-mail or through a delegated person), you may:

• obtain access to your personal data to know the origin of the data, the purpose of the processing, the logic applied to the processing with the use of electronic tools, the categories of data, the recipients (or categories of recipients) to whom it will be communicated, the retention period, and its communication in an intelligible form;
• obtain the rectification, integration or erasure of the data, or the restriction of processing;
• object, for legitimate reasons, to the processing of your personal data;
• obtain the portability of the data, where relevant;
• withdraw consent at any time;
• lodge a complaint with a supervisory authority.

The rights indicated above may be exercised in accordance with the procedures provided for by the relevant regulations.

Data Controller’s details

The Data Controller is WINDEX S.r.l. – Via Santa Chiara, 22 – 37012 Bussolengo (VR), Italy. VAT 02986820237 – Tel. +39 045 6703469 – email: windex@windex.it.

“SUPPLIERS” NOTICE ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ART. 13 OF REGULATION 2016/679/EU – GENERAL DATA PROTECTION REGULATION

Types of personal data

WINDEX S.r.l., as Data Controller, wishes to inform you that, for the performance of contracts for the supply of products and services, personal data will be processed in compliance with the regulations provided for by the General Data Protection Regulation and the obligations of fairness, lawfulness and confidentiality. In particular, the following personal details will be processed: name and surname, email, telephone number, IBAN of your directors, managers, employees and collaborators that you have communicated to us during commercial negotiations. For those engaged in professional activities, in addition, data relating to VAT number, tax code and any professional register number will be processed.

Purposes and legal basis of the processing

The processing of the data will be carried out for the following purposes:

• formulation of orders, requests for quotes, contracts relating to the requested products and services;
• administrative, accounting and contractual management of the existing legal relationship and related legal obligations;
• performance of the existing contract;
• archiving for the purpose of keeping accounting documents and protecting the contractual rights of the writing company, including in litigation.

For the aforementioned purposes, the processing is necessary for the performance of the contract or of pre-contractual measures taken at your request and aimed, for example, at the negotiation of future orders and offers. The processing of personal data for the purposes in question does not require express consent. Any refusal to provide the data may make it impossible for the writing company to follow up on the legal relationship.

Methods of processing, logic applied and retention period

The processing of personal data will be carried out by means of paper documents and archives and through electronic and/or telematic tools in compliance with the provisions of law designed to guarantee its confidentiality and security, as well as the accuracy, updating and relevance of the data with respect to the aforementioned purposes and in order to prevent access and consequent processing by persons not previously authorised.

The logic applied to the electronic tools, used for the management of personal data functional to the management of the processes for the purchase of products and services, is based on the application of specific policies that limit access to specifically authorised company personnel. As far as possible, the principle of necessity is applied, which provides for the configuration of IT systems and programs to minimise the use of personal and identifying data. In this way, the aim is to exclude the processing of data when the purposes pursued can be achieved by means of, respectively, anonymous data or appropriate methods that allow the data subject to be identified only when necessary. Personal data will be kept by the writer for the entire time the relationship is in place and for the subsequent 10 years from its termination, for regulatory or legal obligations (such as the retention of accounting documents, the archiving of contractual documents for any litigation or contractual liability). After this period, the data will be erased or made anonymous.

Provision of data and related refusal

For the aforementioned purposes, the processing is necessary for the performance of the contract or of pre-contractual measures taken at your request and aimed, for example, at the negotiation of future orders and offers. The processing of personal data for the purposes in question does not require express consent. Any refusal to provide the data may make it impossible for the writing company to follow up on the legal relationship.

Dissemination, transfer and communication of data

No personal data will be disseminated, nor will it be transferred to a non-EU country. Without prejudice to communications made in fulfilment of obligations provided for by laws, regulations or EU legislation, your data will be processed by the employees and collaborators of the writer in relation to the specific work tasks assigned and may be communicated in Italy to the Authorities or Public Institutions, credit institutions, controlled and affiliated companies, IT and business consultancy companies, debt collection and insurance sector companies, professionals and companies that provide services and consultancy (for example in the accounting, tax, legal, training fields, etc.), and to persons who need to access your data for the performance of the existing legal relationship. In any case, only the personal data necessary to achieve the purpose for which it is collected will be transferred to the aforementioned persons, in full compliance with the necessary security and confidentiality of the data.

Rights of the data subject

In relation to such data, and at any time, by simple written request addressed to the Data Controller, also by e-mail, directly and/or through a delegated person, you may:

• obtain access to your personal data to know the origin of the data, the purpose of the processing, the logic applied to the processing with the use of electronic tools, the categories of data, the recipients (or categories of recipients) to whom it will be communicated, the retention period, and its communication in an intelligible form;
• obtain the rectification, integration or erasure of the data, or the restriction of processing;
• object to the processing of your personal data;
• obtain the portability of the data, where relevant;
• withdraw consent at any time;
• lodge a complaint with a supervisory authority.

The rights indicated above may be exercised in accordance with the procedures provided for by the relevant regulations.

Data Controller’s details

The Data Controller is WINDEX S.r.l. – Via Santa Chiara, 22 – 37012 Bussolengo (VR), Italy. VAT 02986820237 – Tel. +39 045 6703469 – email: windex@windex.it.