WEBSITE PRIVACY AND COOKIE POLICY
PURPOSE OF THIS INFORMATION
Pursuant to Regulation (EU) 2016/679 (hereinafter "Regulation"), this page describes how personal data of users who visit the online Shop website of Istituto Poligrafico e Zecca dello Stato S.p.A. (hereinafter "Poligrafico") is processed. The website is accessible at:
www.shop.ipzs.it
This privacy notice applies only to Poligrafico's website and does not cover other websites, pages, or online services that may be accessed through hyperlinks published on the sites but referring to resources external to the aforementioned Poligrafico domain.
Following consultation of the above-listed site, data relating to identified or identifiable natural persons may be processed.
DATA CONTROLLER
The Data Controller is Istituto Poligrafico e Zecca dello Stato S.p.A., with registered office in Rome (Italy), Via Salaria 691.
LEGAL BASIS OF PROCESSING
The personal data indicated on this page is processed by Poligrafico in the execution of a contract to which the data subject is party or in the execution of pre-contractual measures taken at the data subject's request (Art. 6, par. 1, letter b) GDPR).
TYPES OF DATA PROCESSED AND PURPOSE OF PROCESSING
Browsing Data
The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes IP addresses or domain names of computers and terminals used by users, URI/URL (Uniform Resource Identifier/Locator) addresses of requested resources, time of request, method used to submit the request to the server, size of the file received in response, numerical code indicating the status of the response from the server (successful, error, etc.), and other parameters regarding the operating system and user's computer environment.
Such data, necessary for the use of web services, is processed for the purpose of:
- Obtaining statistical information on service usage (most visited pages, number of visitors by time slot or daily, geographical areas of origin, etc.);
- Checking the correct functioning of services offered.
This data is immediately deleted from the server 7 days after processing.
Data Provided by the User
Optional, explicit, and voluntary sending of emails to addresses indicated on this site results in the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the request.
Regarding personal data provided by the data subject for website registration and, potentially, to place an online order, please refer to the Privacy Notice provided to the user during registration.
Cookies
No cookies are used for user profiling.
Session technical cookies (non-persistent) are used, strictly limited to what is necessary for safe and efficient site navigation.
Persistent technical cookies are used (which are stored persistently on the user's computer and do not disappear when the browser is closed) that are functional and necessary to offer a better browsing experience and ensure proper site operation.
Specifically, we use technical cookies to manage user sessions, enable navigation, maintain authentication status, and temporarily save items in the cart when the user is not authenticated. These cookies are stored for 7 (seven) days and are updated and renewed with each site visit.
Furthermore, the site uses Google Analytics 4 to collect anonymous statistical information about site usage. The data collected by Google Analytics 4 is used exclusively to analyze how the site is used, generate reports on site activity, and improve user experience. IP addresses are anonymized by default and this setting cannot be modified to ensure privacy protection. More information about Google's data handling, including Google Analytics 4, is available at the following link: https://policies.google.com/privacy. Information regarding the processing of data collected in the EU by Google Analytics 4 is indicated at the following link: https://support.google.com/analytics/answer/12017362?hl=it
DATA RECIPIENTS
Personal data collected following site consultation is processed by:
- Poligrafico personnel, who act based on specific instructions provided regarding the purposes and methods of processing;
- Subjects designated as System Administrators pursuant to the Italian Data Protection Authority's Provision of November 27, 2008, as amended.
Additionally, recipients of data collected from site consultation may include companies providing professional IT services and/or maintenance of IT equipment specifically designated - where necessary - by Poligrafico, pursuant to Article 28 of the Regulation, as data processors, who may designate sub-processors.
RIGHTS OF THE DATA SUBJECT
Data subjects have the right to obtain, in cases provided for, access to their personal data and the rectification or erasure of such data or the restriction of processing concerning them or to object to processing (Articles 15 et seq. of the GDPR).
The relevant request should be sent to the Data Protection Officer (DPO) of Poligrafico (Via Salaria 691 - 00138 ROME) at the following email addresses: privacy@ipzs.it or rpd@pec.ipzs.it
RIGHT TO LODGE A COMPLAINT
Data subjects who believe that the processing of personal data relating to them carried out through this site violates the provisions of the Regulation have the right to lodge a complaint with the Privacy Authority, as provided for by Art. 77 of the Regulation, or to take appropriate legal action (Art. 79 of the Regulation).
Last updated: January 21st, 2024
The Data Controller