ABOUT US

The address of our website is: https://ilmag.it.

What personal data we collect and why we collect them

 

Contact form

When visitors fill out and submit contact forms, we collect the data shown in the form above the visitor’s IP address and the browser’s user agent string to facilitate spam detection.

An anonymized string created from your email address (otherwise known as hash) can be provided to the Gravatar service to see if you are using it. The privacy policy of the Gravatar service is available here: https://automattic.com/privacy/.

Cookies

If you leave a comment on our site, you can choose to save your name, email address and website in cookies. They are used for your convenience so you do not have to re-enter your data when you leave another comment. These cookies will last for a year.

If you have an account and access this site, a temporary cookie will be set to determine if your browser accepts cookies. This cookie does not contain personal data and it is deleted when you close the browser.

When you log in, several cookies will be set to save your login information and screen display options. The access cookies last two days while the cookies for the screen options last one year. If you select “Remember me”, your access will persist for two weeks. If you exit your account, access cookies will be removed

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie does not include personal data, but simply indicates the ID of the just edited article. It expires after 1 day.

cookie name Type Service name Description Duration Domain
_ga third-party analytic Google Analytics Used by API – Google Analytics 6 months ilmag.it
_gat third-party analytic Google Analytics Used by API – Google Analytics 10 minutes ilmag.it
viewed_cookie_policy functional privacy policy statement Keep the privacy policy information bar hidden 1 year ilmag.it
PHPSESSID technical WebServer Identification of the browsing session until the end of the browsing session ilmag.it
SERVERID technical WebServer Identifier of the server that managed the user’s request until the end of the browsing session ilmag.it

 

Content embedded by other websites

Articles on this site may include embedded content (such as videos, images, articles, etc.). Content embedded by other websites behave exactly the same way as if the visitor had visited the other website.

These websites may collect data about you, use cookies, integrate additional third-party tracking, and monitor interaction with that embedded content, including tracking your interaction with embedded content if you have an account and are logged in to that website.

Analytics

We use the anonymous tracking service of Google Analytics users to be able to study our audience and provide a better browsing experience. The privacy policy of the Google Analytics service is available here: https://www.google.com/intl/it_it/ analytics / learn / privacy.html.

Pursuant to art. 13 of Legislative Decree no. 196/2003 – Code regarding the protection of personal data (hereinafter referred to as Code) it is necessary that you are provided with information about the use of your “personal data”.

Below is the Privacy policy of this site (hereinafter “Site” as well as in the General Privacy Policy) relating to the Google Analytics service used on the Site. It contains all the information you need to know so that you can use the Site with serenity and in full awareness of the data you provide or provide during your navigation.

In any case it is important to inform you immediately that your “sensitive data” will not be processed.

Description of the Google Analytics service

Google Analytics (hereinafter simply “Analytics”) is a statistical service offered by Google Inc. whose head office is at 1600 Amphitheater Parkway, Mountain View, CA 94043, United States.

Analytics allows you to keep track of the accesses to the Site and its administrators to generate and view data in aggregate and anonymous form in order to understand the use that the Site makes visitors and to process statistics.

 

 

 

Sources of personal data

Google Analytics requires, for its operation, the presence on the pages of the Site of a so-called tracking code.

The purpose of this code is to identify, for the purposes indicated below, the pages that you visit during the browsing session on the Site.

In addition to the pages visited among the collected data, the domain names and the browser type of the computers used to connect to the Site, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, may also be included as an example and not exhaustive. , the time of the request, parameters concerning the operating system and the IT environment that you use.

These data do not allow, in any case, reaching your identity by their nature and by the methods of their treatment and are therefore considered anonymous.

Methods of data processing (a)

Google Inc. manages the processing of the collected data through IT and telematics tools with logic strictly related to the purposes indicated below and, in any case, in order to guarantee the security and confidentiality of the data.

For its operation, Google Analytics uses cookies and information on the use of the Site by the visitors they generate are transmitted to Google and stored on its servers in the United States.

In relation to the purposes described below, the data are then aggregated to the other data collected and related to the other visitors of the Site. Their treatment does not allow under any circumstances to know or go back in any way to your identity.

In any case, Google will not associate the IP address with any other data relating to you and possibly owned by it, except in case you have to use other services offered by Google that provide for this association and for which you have accepted the related rules on privacy from Google itself prepared. In any case, the aforementioned association and the use of the aforementioned services are to be considered unrelated to the use or navigation of this Site whose data controller or other person in charge of other duties does not have direct or indirect access to the data in that opportunity from Google collected and / or processed.

Purpose of processing (a)

The data collected in the manner described above are used by Google in order to track and examine the use of the Site, compiling reports on the activities of the same which can be viewed by authorized Site operators and provide other services related to the activities of the Site and to use the Internet.

 

 

Optional and mandatory (b)

You can refuse to use cookies by selecting the appropriate settings on your browser, but this may prevent you from using all the features of this website.

You cannot refuse the collection of your other data by the Google Analytics software. If you do not agree, in whole or in part about its presence on the pages of the Site, please leave it immediately ceasing its navigation.

Subjects or categories of subjects who can access the data or become aware of it (d)

Your personal data is transferred to the servers of Google Inc. and processed there. Google may also transfer this information to third parties where required to do so by law or where such third parties process the information on Google’s behalf.

The administrators of the Site or the Data Controller on the same cannot in any way connect the data collected with your identity, either directly or indirectly.

For how long we keep your data

For users who register on our website through the contact form or through the booking, we also store the personal information they provide in their user profile. All users can view, modify or delete their personal information at any time (except for their username that they cannot change). Website administrators can also view and edit this information.

What rights do you have on your data?

If you have an account on this site, or you have filled out a form, you can request to receive a file exported from the site with the personal data we have about you, including the data you have provided. You can also request that we delete all personal data concerning you. This does not include data that we are obliged to keep for administrative, legal or security purposes.

Where we send your data

Comments and compilations of visitor forms can be controlled through an automatic spam detection service. We currently do not use this technology so your data are never shared.

 

 

 

Your contact information

Additional information

How we protect your data

We protect your data by constantly applying the latest security paths, promptly updating the website and its functionalities and putting into practice the de-facto standard in computer science in order to have a secure website. In practice, your data is stored on a database whose password are not saved on any device. The database itself, compliant GDPR (mysql) is kept up-to-date and protected. The site is protected with a https ssl certificate in order to establish secure communication channels between the visitor and the server. The server is a VPS machine of the Amazon Web Services ecosystem, GDPR compliance. The data saved on the server’s hard disk, are backed up every other day, on an object storage service that is always part of the Amazon Web Services ecosystem, which encrypts the data in an encrypted way. This data are kept for 10 days, the time when the next backup rewrites over the old ones.

What procedures we have set up to prevent data breaches

We have implemented and programmed a policy of immediate notification to registered users or who have registered on the website. This procedure signals to users a potential cyber attack, causes and effects of it. After this type of attack, beyond the total restoration of the site’s features, we completely delete all user data and recommend (in the notification sent to subscribers) to update and change the passwords in use. This procedure therefore leads the site to be in a new safe state. We actively investigate the causes for making it impossible for a potential attacker to gain access to the same security hole previously exploited. If from our technical interventions the result is a theft of personal data, we proceed immediately to the complaint to the competent authorities. Each step is notified and in agreement with the owners of the website.

.

From which third parties we receive data

We do not receive data from third parties.

.