Red Hive - Privacy Policy

Privacy Policy

PRIVACY POLICY ON THE PROCESSING OF PERSONAL DATA OF WEBSITE USERS PURSUANT TO ARTICLES 13 AND 14 OF REGULATION (EU) 2016/679

Red Hive SRL, pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (hereinafter, “GDPR”), hereby informs you, as a data subject, that it needs to process your personal data in compliance with current legislation on personal data protection and as outlined below.

Data Controller

The Data Controller is Red Hive SRL (VAT / Tax Code IT04914600277, REA VE 463322), with registered office at Via Guido Guinizzelli 25, Chirignago-Zelarino 30174 (VE), Italy, in the person of its legal representative pro-tempore (hereinafter, “Company” or “Data Controller”), who can be contacted by email at [email protected] or certified email (PEC) at [email protected].

Data Protection Officer (DPO)

The Company has appointed, pursuant to Articles 37 et seq. of the GDPR, a Data Protection Officer (hereinafter, “DPO”), who can be contacted by email at [email protected].

Source of Personal Data

Personal data processed for the purposes set out below are collected directly from you or from third parties who communicated them to the Data Controller.

Categories of Personal Data Processed

For the pursuit of the purposes indicated below, the Data Controller will process personal data belonging to the following categories:

Common personal data: identifying details, contact details, browsing data, cookies.

Purposes, Legal Bases of Processing and Retention Period

Your personal data will be processed by the Data Controller for the following purposes:

a) Browsing the website
- Legal basis: processing of common personal data is necessary for the pursuit of a legitimate interest of the Data Controller (Art. 6, par. 1, lett. f) of the GDPR);
- Retention period: personal data will be retained for the duration of the browsing session.
b) Handling requests submitted via online forms or website contacts
- Legal basis: processing of common personal data is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Art. 6, par. 1, lett. b) of the GDPR); where the data subject has given consent via a dedicated checkbox, processing for marketing purposes is based on such consent (Art. 6, par. 1, lett. a) of the GDPR);
- Retention period: personal data will be retained for 1 (one) year from receipt of the request.

Upon expiry of the retention periods indicated above, data will be destroyed, erased, or rendered anonymous.

Nature of Providing Personal Data

For purpose a) (Browsing): providing your personal data is necessary for browsing the website. Failure to provide them will make it impossible for the Data Controller to allow you to browse the website.
For purpose b) (Handling requests): providing your personal data is necessary to manage your request. Failure to provide them will make it impossible for the Data Controller to respond to your inquiry.

Processing Methods

Personal data will be processed both in paper format (stored in locked cabinets) and digitally. Such data may be accessed exclusively by authorized employees and collaborators of the Company. These individuals may perform operations of consultation, use, processing, comparison, and any other appropriate operation, including automated processing, in compliance with statutory provisions ensuring confidentiality, security, accuracy, updating, and relevance of the data with respect to the stated purposes.

Categories of Data Recipients

Personal data acquired by the Data Controller may be disclosed externally for various reasons; in addition to disclosures required by law, data may be made available to:

Entities providing services for the management of the IT system and telecommunications networks of the Data Controller;
Companies or other third parties performing outsourcing activities related to the management of the Data Controller's website;
Competent authorities for compliance with legal obligations.

Recipients belonging to the above categories will process your personal data as independent data controllers, joint controllers, or data processors. The complete and updated list of data recipients (pursuant to Art. 4, no. 9 of the GDPR) is available at the offices of the Data Controller.

Transfers of Personal Data Outside the EEA

Your personal data processed by the Data Controller will not be transferred to countries outside the European Economic Area (hereinafter, “EEA”); should this occur through technological solutions whose providers are located outside the EEA, appropriate measures and safeguards will be applied in accordance with applicable personal data protection laws.

Your Rights

In relation to the personal data provided, you have the right to exercise, at any time and pursuant to the GDPR, the rights provided therein:

Right to withdraw consent (Art. 7, par. 3 GDPR): the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal;
Right of access (Art. 15 GDPR): the right to obtain confirmation as to whether or not personal data concerning you are being processed, and to receive a copy in intelligible form;
Right to rectification (Art. 16 GDPR): the right to obtain the rectification of inaccurate personal data concerning you;
Right to erasure (“right to be forgotten”) (Art. 17 GDPR): the right to obtain the erasure of your personal data;
Right to restriction of processing (Art. 18 GDPR): the right to obtain restriction of processing in accordance with the law;
Right to data portability (Art. 20 GDPR): the right to receive the personal data concerning you in a structured, commonly used and machine-readable format and transmit them to another controller;
Right to object (Art. 21 GDPR): the right to object at any time to the processing of your personal data;
Right not to be subject to automated decision-making (Art. 22 GDPR): the right not to be subject to a decision based solely on automated processing.

The aforementioned rights may be exercised in writing by contacting the Data Controller at the contact details provided above. The Company undertakes to respond to requests within one (1) month, or up to three (3) months in cases of particular complexity.

The outcome of the request will be provided in writing or in electronic format. The Company may charge a reasonable fee should requests prove manifestly unfounded, excessive, or repetitive.

Pursuant to Art. 19 of the GDPR, the Company undertakes to communicate any rectification, erasure, or restriction of processing to each recipient to whom the personal data have been disclosed, where feasible.

Right to Lodge a Complaint (Art. 77 GDPR)

If you believe that your rights have been compromised or that the processing of your personal data violates applicable law, you have the right to lodge a complaint with the competent supervisory authority (in Italy, the Garante per la Protezione dei Dati Personali) via: Garante Privacy - Reclamo.

Changes and Updates

The Data Controller may amend and/or update this policy as a consequence of regulatory updates or changes. In such cases, the updated version of this policy will be published promptly.