Privacy notice

1. Data controller

The data controller is DUCAM S.r.l., with registered office at Via Montenapoleone 8, 20121 Milano (MI), VAT number 03080950847.

For any question about the processing of data, you can write to privacy@ducam.it or to our certified email (PEC) address ducam@arubapec.it.

2. What data we process

Browsing data. As with any web page, the systems that run the website receive some technical data: the IP address, the type of browser and operating system, the date and time of the request, the address of the requested page and that of the page you came from. These addresses may also contain the search carried out in the catalogue of our telecoms sites, or the site or type of request indicated in the link leading to the contact form.

Data sent with the contact form. We process your full name, email address, type of request, message and, if you fill them in, company, telephone number and site of interest. Which fields are required is explained in point 4. With the form we also receive the language of the page you are writing from (Italian or English), so that we can reply in the same language.

Data sent by email or certified email (PEC). If you write to the addresses published on the website, we process the sender's address and the content of the message.

The website does not use cookies or other tools that store information in your browser, and it does not use visitor statistics tools: details are given in the cookie notice.

3. Why we process the data and on what legal basis

• To make the website work, check that it is working properly and protect it from abuse: legitimate interest of the controller (Article 6(1)(f) GDPR).
• To reply to your requests and, if you ask, to prepare an offer, for example for hosting on one of our telecoms sites: pre-contractual measures taken at your request (Article 6(1)(b)); for general requests, legitimate interest in replying (point (f)).
• If a contract results from the request, to manage and perform it: performance of the contract (Article 6(1)(b)).
• To comply with legal obligations: Article 6(1)(c).
• To exercise or defend a right, including in court: legitimate interest of the controller (point (f)).

We do not use the data to send you advertising, and there is no automated decision-making or profiling.

4. Is providing the data mandatory?

Browsing data are necessary for the website to work.

No law or contract obliges you to write to us. In the form, however, full name, email, type of request and message are required (they are marked with an asterisk): without these data the form cannot be sent and we cannot reply to you. Company, telephone number and site of interest are optional: if you do not provide them, we will still reply to you.

To send the form you must also tick the box “I have read the privacy notice”, which is also marked with an asterisk: it confirms that you have read this page; it is not consent.

5. How we process the data

We process the data with IT and electronic communication tools, only for the purposes indicated above and with appropriate security measures to prevent unauthorised access, loss or unlawful use.

6. Who we disclose the data to

• Aruba S.p.A., provider of the website's hosting and of the email service for the ducam.it domain, and Aruba PEC S.p.A., provider of our certified email (PEC) mailbox, both based in Ponte San Pietro (BG): they process the data on our behalf as data processors (Article 28 GDPR).
• Consultants and suppliers who look after the website or our administration, only as far as their assignment requires.
• Public authorities, in the cases provided for by law.

The data are not disseminated or sold.

7. Third-party services and links to other websites

The pages of the website do not connect to third-party servers: typefaces, images and the map are hosted on our domain.

Links to other websites, for example “Directions”, which opens Google Maps, or www.radiorelax.eu, open those websites: from that moment their own notices apply.

8. Transfer of data outside the European Economic Area

We do not transfer data outside the European Economic Area. The data we collect through the website, the form, email and certified email (PEC) remain in Italy: Aruba states that it runs hosting, email and PEC exclusively in its own Italian data centres.

9. How long we keep the data

• Requests that do not lead to a contract, received through the form, by email or by certified email (PEC): 24 months from the last contact.
• Requests that lead to a contract: for the whole duration of the contract and, afterwards, for 10 years, like accounting records and business correspondence (Article 2220 of the Italian Civil Code).
• Browsing data: they remain in the technical logs of Aruba's servers, which Aruba keeps for 12 months on our behalf, as data processor (point 6), to make the website work and protect it from abuse (point 3); we do not extract these logs or keep them anywhere else.

Once the periods indicated for requests have expired, we delete the requests together with the data they contain; the technical logs remain on Aruba's servers for the 12 months indicated above.

10. Your rights

At any time you can ask to access your data, to correct or erase them, to restrict their processing and to receive them in a machine-readable format, that is, data portability (Articles 15 to 20 GDPR).

To exercise these rights, write to privacy@ducam.it or to our certified email (PEC) address ducam@arubapec.it. We will reply within one month; if the request is complex, this period may be extended by two months, and in that case we will inform you within the first month (Article 12 GDPR).

If you consider that the processing of your data infringes the GDPR, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) (www.garanteprivacy.it (opens in a new tab); instructions are on the page how to lodge a complaint (opens in a new tab), in Italian). Alternatively, you can contact the supervisory authority of the EU Member State in which you habitually reside or work, or of the one in which the alleged infringement took place (Article 77 GDPR).

11. Right to object

You can object at any time, on grounds relating to your particular situation, to the processing that in point 3 is based on our legitimate interest: the operation and security of the website, replying to general requests and defending our rights. If you object, we stop processing your data for these purposes. We may continue only in two cases, and it is up to us to demonstrate them: if we have compelling legitimate grounds that override your interests, rights and freedoms, or if we need the data to establish, exercise or defend legal claims (Article 21 GDPR). To object, simply write to privacy@ducam.it or to our certified email (PEC) address ducam@arubapec.it.

12. Changes to this notice

We may update this notice, for example if the website changes or the rules change. Any change is published on this page, with the date of the update.