The company Vipera PLC with registered office at 1 Fore Street Ave, London EC2Y 9DT (United Kingdom) (hereinafter, “Company” “we” and “our”), as the data controller, undertakes to protect the user’s privacy. This privacy policy (“Privacy Policy”) applies only to the website www.vipera.es (hereinafter referred to as the “Site”). Please read the Privacy Policy carefully before using the Site.
1. The Site
The main purpose of the Site is to present the services and products of the Company and provide users with detailed information.
This Privacy Policy describes how we collect, use and share the personal data we obtain as a result of the use of the Site by users.
Since the Company reserves the right to add or remove functions from the Site at any time and to change the services and/or products offered, the Privacy Policy can be updated at any time by the Company.
2. Data processed
Data provided voluntarily by the user. The Company may collect the following personal data provided voluntarily by the user:
- name of the user
- his/her email address
- other information provided by the user through the contact form.
3. Browsing data
The browsing data includes all data collected automatically through the Site and relate, for example, to the types of actions performed on the Site by users and how they use the Site. Furthermore, we can automatically record the IP address (meaning the univocal address that identifies the user’s device on the internet), which is automatically identified by our server. Browsing data are used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct functioning, and they are deleted immediately after they are processed. These data could also be used to establish responsibility in case of any computer-related crimes against the Site or to protect our rights.
4. Purpose and legal basis of the processing
| Purpose | Legal basis |
|---|---|
| A. The Company processes the user’s personal data to provide the service and/or product requested by the user, to respond to or satisfy a user’s request, including assistance services, events or promotions for which the user has chosen to register. | A. The Company processes the data for these purposes to execute a contract and/or pre-contractual procedures adopted following the request of the user. |
| B. The Company processes the user’s personal data to send the user promotional information regarding services and/or products of the Company, to send invitations to events of the Company and/or third parties and to carry out market surveys using automated tools (e.g. via email) and non-automated tools (paper mail, telephone calls by an operator) without prejudice to the possibility for the user to oppose the sending of such communications at any time. | B. The Company processes the data for these purposes only with the prior consent of the user given at the time of the collection of personal data for said purposes. |
| C. The Company processes the user’s personal data to ensure that the Site is up-to-date and meets the needs of users, to analyse, review and improve the products or services offered on the Site, to provide users with a user-friendly browsing experience, to ensure compliance with the terms of use of the Site, the safety of the Site and of its users and for the protection of the rights and/or assets of the Company. The information used for this purpose will remain strictly anonymous and will not be used to identify any user nor will it be added to the personal data of users. | C. The Company processes the data for these purposes in order to pursue its legitimate interest of protecting its assets, its business and its rights. |
| D. The Company processes the user’s personal data to fulfil obligations deriving from the law, regulations or EU legislation. | D. The Company processes the data for these purposes to fulfil a legal obligation. |
Purpose
A. The Company processes the user’s personal data to provide the service and/or product requested by the user, to respond to or satisfy a user’s request, including assistance services, events or promotions for which the user has chosen to register.
B. The Company processes the user’s personal data to send the user promotional information regarding services and/or products of the Company, to send invitations to events of the Company and/or third parties and to carry out market surveys using automated tools (e.g. via email) and non-automated tools (paper mail, telephone calls by an operator) without prejudice to the possibility for the user to oppose the sending of such communications at any time.
C. The Company processes the user’s personal data to ensure that the Site is up-to-date and meets the needs of users, to analyse, review and improve the products or services offered on the Site, to provide users with a user-friendly browsing experience, to ensure compliance with the terms of use of the Site, the safety of the Site and of its users and for the protection of the rights and/or assets of the Company. The information used for this purpose will remain strictly anonymous and will not be used to identify any user nor will it be added to the personal data of users.
D. The Company processes the user’s personal data to fulfil obligations deriving from the law, regulations or EU legislation.
Legal basis
A. The Company processes the data for these purposes to execute a contract and/or pre-contractual procedures adopted following the request of the user.
B. The Company processes the data for these purposes only with the prior consent of the user given at the time of the collection of personal data for said purposes.
C. The Company processes the data for these purposes in order to pursue its legitimate interest of protecting its assets, its business and its rights.
D. The Company processes the data for these purposes to fulfil a legal obligation.
5. Nature of the conferment of data and consequences of refusal
The conferment of data for the purposes set out in point 3. A is necessary and a refusal by the user implies the impossibility for the Company to perform its contractual obligations and provide the user with the functionalities, services and the information requested as specified above. The conferment of data for the purposes referred to in paragraph 3.D is automatic and implicit in Internet transmission protocols.
6. Recipients of the data
Affiliated companies, subsidiaries. Where it is necessary to pursue the purposes described in this Privacy Policy, the Company communicates the users’ personal data to its affiliated, subsidiary and parent companies, also located outside the European Union. Personal data collected as are processed by Vipera’s staff, acting on specific instructions concerning purposes of information communications.
Third parties in compliance with a legal obligation or to protect the rights of the Company. The users’ personal data can be communicated to institutions, law enforcement agencies, judicial, administrative, or regulatory bodies, in the context of a legal or administrative procedure, or in order to fulfil a legal obligation or protect our rights, including in court of law.
Third parties in the case of corporate operations. The users’ personal data can be communicated in case of events such as mergers, sale of companies (or of a business branch) or other extraordinary operations by which the Company may need to share information with potential buyers or counterparties and the related consultants.
7. Transfer abroad
To provide services to the users themselves and to pursue the other purposes listed in this Privacy Policy, the Company may need to transfer the users’ personal data abroad. Before proceeding with the transfer of data outside the European Union, it will adopt all the appropriate precautions, also of a contractual nature, provided for by the applicable privacy legislation in order to guarantee the protection, security and confidentiality of the personal data transferred.
8. Data retention
We retain the users’ personal data only for the time strictly necessary to provide the services or to achieve the purposes for which the data were collected and in compliance with legal obligations. After this period, personal data are deleted.
In the event that we have collected personal data based on the user’s consent and no longer have any other valid legal basis to continue with their processing, if the user subsequently revokes his/her consent we will delete the personal data affected by such revocation. Without prejudice to the foregoing, we retain the personal data of users collected in accordance with this Privacy Policy for the marketing purposes referred to in paragraph 3.B for a period not exceeding 2 years.
After this period, the data are deleted or rendered anonymous.
9. Data security
The Company undertakes to protect the security of the users’ personal data and complies with the security provisions of the applicable law in order to avoid any loss, illegitimate or illegal use of the data and unauthorized access to the same. In addition, information systems and computer programs are configured in such a way as to minimize the use of personal and identifying data, which are used only when necessary for the specific purposes from time to time pursued as indicated in this policy. The Company uses multiple advanced security technologies and procedures to promote the protection of the users’ personal data. For example, personal data are stored on secure servers located in places with controlled access. Users can help the Company to update and maintain their personal data by communicating any changes, such as for instance their e-mail address.
10. Privacy rights
The user has the right to access, rectify or delete the data stored by the Company that concerns him or her, as well as the right to object to, or limit, certain types of processing (including the right to revoke consent to the processing previously granted), as well as to be sent the personal data concerning him or her in a structured, commonly used format readable using an automatic device (right to data portability). Finally, the user has the right to lodge a complaint with a competent Supervisory Authority. The exercise of the above rights does not have costs but should we deem the exercise of privacy rights by the user manifestly unfounded or excessive. To exercise your privacy rights, as well as to request any information or clarification regarding this Privacy Policy, you can contact the Company at the following email address: admin-es@vipera.com.
11. DPO
The Company has designated Merea S.a.S. di De Micheli Cesare & C., with registered office at Corso Argentina n. 24 (27029 Vigevano, Pavia) in the person of Mr. Cesare DE Micheli as DPO of the Company.