Cookie policy

Home / Cookie policy

The underlying policy, addressed to all subjects browsing the website (hereinafter referred to as “Web Site”), has been drawn up pursuant to art. 13 of Reg. (EU) no. 2016/679 (hereinafter referred to as “GDPR“) and art. 122 of legislative decree 196/2003 (hereinafter referred to as “Privacy Code“), as well as in accordance with the provision by the Italian Data Protection Authority “Identification of Simplified Procedures for  Policies and Attainment of Consent for the Use of Cookies” of 8 May, 2014, as supplemented by the “Guidelines on  Cookies and other Tracking Tools” of 10 June, 2021 (hereinafter referred to as  “Provision”).

  1. Identity and contact details of the data controller

The data controller is Elica S.p.A., with registered office in Via Ermanno Casoli no. 2 – 60044 Fabriano (AN) – Italy, F.C. COMPANY REGISTRY AN 00096570429, Telephone +39 0732 610 1, Fax +39 0732 610 249, e-mail: elicaspa@sicurezzapostale.it (hereinafter referred to as the “Data Controller“).

  1. Data Protection Officer (DPO)

DPO can be contacted at e-mail address: dpo@elica.com

  1. Types of data processed

The Web Site makes use of cookies.

What is a cookie?

Cookies (or markers) are small text files that are sent from the web server visited by the user, to the user’s device (usually to the browser) when the latter accesses a particular web site for storing and transporting information. Cookies are stored in order to recognize the device at every visit.  On each subsequent visit, cookies are sent from the user’s device back to the web site.

Each cookie generally contains the name of the server from which the cookie was sent and its expiry date in addition to a value, usually a unique number randomly generated by the computer.

First-party and third-party cookies

Cookies can be installed not only by the same provider of the web site visited by the user (first- party cookies), but also by a different web site installing them through the first web site (third- party cookies), which is able to recognize them. This happens because there may be some elements (images, maps, sounds, links to web pages of other domains, etc.) on the web site visited, which are actually on other servers and not on the one of the visited site.

Technical, analytical and profiling cookies

According to their purpose, cookies are divided into two categories:  technical cookies and profiling cookies.

Technical cookies are installed for the sole purpose of “carrying out the transmission of certain information on an electronic communications network, or insofar as this is strictly necessary for the provider of an information service to provide the services requested explicitly by the subscriber or user.” (see Art. 122, para. 1, Privacy Code). They are usually used to allow efficient navigation between pages, store user preferences, store information on specific user configurations, perform user authentication, etc..

Technical cookies can be divided into browser cookies, which are used to record useful data for the web site standard navigation and usage on the user’s computer (allowing, for example, to memorize the preferred size of the page in a list) and functional cookies, which allow the website to memorize the choices made by the user in order to optimize its operation (for example, functional cookies allow the website to memorize  a user’s specific settings, such as country selection and, if set, permanent login status). Some of these cookies (called essential or strictly necessary) enable some features which are necessary to perform certain operations.

Pursuant to the aforementioned Art. 122, para. 1 of the Privacy Code, the use of technical cookies does not require any consent by users, just the obligation to inform them.

Pursuant to the aforementioned Provision, the so-called analytics cookies are assimilated to technical cookies – and therefore their installation doesn’t require any user consent – should they be:

  1. created and used directly by the first -party website provider (without, therefore, the intervention of third parties) for the purpose of optimizing the web site in order to collect aggregate information on the number of users and how they visit the website, and
  1. created and made available by third parties, if:
    1. used by the first- party web site for purely statistical purposes, if suitable minimization measures are adopted to reduce the identification power (e.g. by masking off appropriate portions of the IP address) and used solely for the production of aggregate statistics and, as a rule, in relation to a single site or a single mobile application, so as not to allow tracking of the navigation of the person using different applications or navigating different websites;
    2. third parties, who provide the web measurement service to the site, do not combine, enrich or cross-reference data, even minimized as above specified, with other information available to such third parties (e.g. customer files or statistics of visits to other sites) or transmit to other third parties.

Profiling cookies are used to track the user’s navigation, analyze their behavior for marketing purposes and create profiles based on their tastes, habits, choices, etc. in order to send targeted advertising messages in relation to their interests and in line with the preferences expressed when browsing online. As pursuant to art. 122 of the Privacy Code, these cookies may be installed on the user’s terminal only upon their consent after being informed in the simplified manner indicated by the Italian Data Protection Authority  in the Provision  (publication on the web site of a “short” policy, contained in a banner appearing immediately on the home page (or another page through which the user can access the web site), which refers to an “extended” policy and that can be accessed through a link to be clicked by the user).

Persistent and session cookies

Based on their duration, a distinction is made between persistent cookies, which are stored on the user’s device until they expire unless the user removes them, and session cookies, which are not stored persistently on the user’s device and disappear when the browser is closed.

List of cookies used by this web site

Technical Cookies

This web site makes use of technical cookies, installed by the site itself for the purposes indicated below.

This type of cookie cannot be disabled and their installation does not require the prior consent by users, pursuant to art. 122 of the Privacy Code, as indicated above.

Name First-party or third party Purposes Duration
PHPSESSID Elica Stores session status Session
_icl_current_language Elica Stores selected language 1 day

Anonymized analytical cookies

Name First-party or third-party Purposes Duration
_gat Elica A Cookie provided by Google, used  to speed up the request rate. Session
_ga Elica A Cookie provided by Google, used to distinguish unique users by assigning a randomly generated number as an identifier.. It is included in every page request on the web site and used to calculate visitor, session and campaign data. 730 days
_gid Elica A Cookie provided by Google, used to store and update a unique value for each page visited. 1 day

 

After the above-mentioned retention periods have elapsed, data will be destroyed or rendered anonymous, subject to technical deletion and backup procedures.

  1. Provision of data

Data relating to cookies, for which consent is not required, is necessary for the provision of the related service; therefore, failure to provide such data will make it impossible to provide the requested service.

  1.  Data Recipients

The processing activity connected to the web services of this Web Site is carried out by personnel, expressly authorized upon receiving adequate operating instructions.

Data may also be processed by third parties, on behalf of the Data Controller, designated as Data Processors pursuant to Article 28 of the GDPR, such as natural and/or legal persons who carry out activities connected to the aforementioned purposes, for example the company that is in charge of the management and maintenance of the Web Site.

Data may be communicated to autonomous data controllers, such as authorities and supervisory and control bodies entitled to request/receive the data, as well as to third party providers (or vendors) that are listed in the above tables containing the list of cookies, which also include a link to the relevant policy.

Should data be transferred to countries outside the European Union (EU) or the European Economic Area (EEA) that have not been deemed adequate by the European Commission, then the “transfer tools” referred to in Article 45 of the GDPR will be used, considering the possible adoption of “additional measures” to ensure a level of protection which is substantially similar to the one required by EU law. For further information, please see the links in the policy of the third parties indicated in the table.

  1. Browser settings

Users can also express their options on cookies through the settings of the browser they use. Even if the web browser used by the user is set to automatically accept cookies, the user can change the default configuration through the settings menu, thus deleting and/or removing all or some cookies, blocking the sending of cookies or limiting it to certain web sites. Disabling, blocking or deleting cookies may affect the optimal use of certain areas of the Web Site or prevent certain features of the Web Site, as well as affect the operation of third-party services.  Below are the links to the guides of cookie management for the main browsers:

For browsers not included in the aforementioned list, it is necessary to consult the relevant guide in order to understand how to manage cookies.

  1. Data subjects’ rights

In relation to the processing of personal data carried out by the Data Controller, the data subject,- in addition to what has been specified  in the preceding paragraph- , may exercise the rights set out in Articles 15 to 22 of the GDPR, where applicable, and, in particular, may request access to the data concerning them  and to the information referred to in Article 15 (purposes of data processing, categories of personal data, etc.), and their cancellation in the cases provided for in Article 17, the amendment of inaccurate data, the integration of incomplete data, the limitation of data processing in the cases provided for by art. 18, as well as data portability (i.e. to receive data in a structured, commonly used and machine-readable format, and, if technically feasible, to transmit them to another data controller without any hindrance) in case the processing is based on a consent or contract and is carried out with automated tools.

To exercise their rights, the data subject may contact the Controller at the contact points indicated in section 1.

The data subject shall have the right to lodge a complaint with the competent supervisory authority in the Member State in which he/she normally resides or works or in the State in which the alleged violation occurred.