Web Privacy Policy

This document is provided by Aprile S.p.A., headquartered in Genoa (GE) – 16149, Via di Francia, 28, the owner of the website www.aprilenet.com. It outlines the management of the website concerning the processing and protection of personal data for users navigating directly from the homepage or internal pages. During website navigation, personal data related to identified or identifiable individuals may be collected.

This privacy policy aligns with national and European data protection regulations, including the General Data Protection Regulation (GDPR) (EU 2016/679), Legislative Decree no. 196/2003, and other applicable Italian data protection laws.

The principles outlined below form the foundation of Aprile S.p.A.’s approach to privacy.

Your personal data will be:

Processed lawfully, fairly, and transparently.
Collected for specified, explicit, and legitimate purposes, as detailed below, and processed in a manner compatible with these purposes.
Adequate, relevant, and limited to what is necessary for the purposes for which they are processed.
Accurate and kept up to date as needed. Aprile S.p.A. commits to taking appropriate measures to rectify or promptly delete inaccurate data concerning the purposes of processing.
Stored in a form that allows identification of individuals for no longer than necessary for the purposes for which they are processed.
Processed to ensure adequate security of personal data, including protection through suitable technical and organizational measures against unauthorized or unlawful processing, as well as accidental loss, destruction, or damage.

Data Controller and Processor

The Data Controller is Aprile S.p.A., located in Genoa (GE) – 16149, Via di Francia, 28.

An updated list of processors, appointed by the Data Controller under Article 28 of the GDPR, is available at the Data Controller’s legal office.

Processed Data and Purposes of Processing

Navigation Data: The IT systems and software procedures governing the website’s operation acquire, during their regular exercise, certain personal data whose transmission is implicit in the use of internet communication protocols. This information is not collected to be associated with identified individuals, but due to its nature, it may, through processing and association with data held by third parties, allow user identification. This category of data includes IP addresses or domain names of computers used by users connecting to the site, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters related to the user’s operating system and computer environment. This data, once collected, may be used to establish responsibility in case of potential cybercrimes against the site.

Data Provided by the User: Data requested in various sections of the website, such as name, surname, and email, are used to fulfill user requests (e.g., when requesting information by writing to the email addresses on the homepage or internal pages, submitting a curriculum vitae for job applications, or making direct calls or sending faxes to the contact numbers in the “contacts” section).

Nature and Legal Basis of Processing

Navigation data is processed as necessary for computer and telematic protocols. Providing personal data by users is voluntary, but failure to provide it may result in the inability to access the services offered by the portal. The legal basis for processing is consent.

Processing Methods and Storage Period

Data collected through the aforementioned website is processed through computer and telematic procedures. Technical data is stored on the company’s servers. Personal data acquired through web services provided by Aprile S.p.A. is stored at Savino Del Bene IT s.r.l., located in Via Benozzo Gozzoli 5/2, 50018 Scandicci, and is processed only by authorized technical personnel or authorized personnel for occasional maintenance interventions.

The data collected by the Data Controller is stored in full compliance with the principles of necessity, minimization, storage limitation, through the adoption of technical and organizational measures appropriate to the level of risk of the processing. The data is retained for a period not exceeding the purposes for which it is processed and in any case for the period provided by law.

Cookies

The Data Controller uses some cookies, as detailed in the dedicated cookie policy on the company’s website.

Rights of the Data Subject

The data subject may assert specific rights under Articles 15 and subsequent of the GDPR, including:

The right to confirm whether or not personal data is being processed.
The right to access personal data and obtain specific information (purposes of processing, data categories, recipients of data, storage period, etc.).
The right to request rectification or limitation of data processing.
The right to obtain the deletion of personal data if certain conditions are met.
The right to lodge a complaint with a supervisory authority.
Additionally, the data subject has the right to withdraw consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. To exercise these rights, the Data Controller provides the email address privacy@aprilenet.com.

Disclosure and Sharing of Data

The collected data will not be disclosed, sold, or exchanged with third parties without the express consent of the data subject, except for communications to authorized third parties – committed to confidentiality or appointed as data processors under Article 28 of the GDPR – (such as IT support companies and hosting companies) when necessary for the purposes described above. Data may be communicated to competent authorities according to the law.

Transfer of Data Abroad

For the pursuit of the aforementioned purposes, the possibility of transferring personal data to group companies abroad is foreseen. It should be noted that some countries may not offer the same legal protection for personal data processing. In such cases, Aprile S.p.A. undertakes to ensure the presence of adequate guarantees for the protection of personal data in compliance with current regulations and to promptly inform the data subject of the aforementioned guarantees, the means to obtain a copy of such data, and the location where they are made available.