PRIVACY & COOKIE POLICY

This Application collects some Personal Data from its Users.

This document can be printed using the print command available in the settings of any browser.

Data Controller
CORA SRL
Viale del Lavoro, 3
38068 – Rovereto (TN)
VAT no. and Tax Code 00496220229
fax. +39 0464 485 701

Data Controller’s email address: [info@elcora.com](mailto:info@elcora.com)

Types of Data collected
Among the Personal Data collected by this Application, either independently or through third parties, there are: various types of Data; first name; email address; Cookies; Usage Data.

Full details on each type of Data collected are provided in the dedicated sections of this privacy policy or by specific information texts displayed before the Data itself is collected.
Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when using this Application.
Unless otherwise specified, all Data requested by this Application is mandatory. If the User refuses to provide it, it may be impossible for this Application to provide the Service. In cases where this Application specifically states that some Data is optional, Users are free not to communicate such Data, without any consequences on the availability or operation of the Service.
Users who are uncertain about which Data is mandatory are encouraged to contact the Data Controller.
Any use of Cookies – or of other tracking tools – by this Application or by the owners of third-party services used by this Application, unless otherwise specified, is for the purpose of providing the Service requested by the User, in addition to the other purposes described in this document and in the Cookie Policy, if available.

The User assumes responsibility for the Personal Data of third parties obtained, published, or shared through this Application and warrants that they have the right to communicate or disseminate it, releasing the Data Controller from any liability towards third parties.

Methods and place of processing of the collected Data
Methods of processing
The Data Controller adopts appropriate security measures aimed at preventing unauthorized access, disclosure, modification, or destruction of Personal Data.
Processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases, other parties involved in the organization of this Application (administrative, commercial, marketing, legal personnel, system administrators) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the Data and may also be appointed, if necessary, as Data Processors by the Data Controller. The updated list of Processors may always be requested from the Data Controller.

Legal basis of processing
The Data Controller processes Personal Data relating to the User if one of the following conditions applies:

the User has given consent for one or more specific purposes; Note: in some jurisdictions the Data Controller may be allowed to process Personal Data until the User objects (“opt-out”) without having to rely on consent or another of the legal bases specified below. This, however, does not apply whenever the processing of Personal Data is subject to European legislation on the protection of Personal Data;
processing is necessary for the performance of a contract with the User and/or for any pre-contractual obligations thereof;
processing is necessary for compliance with a legal obligation to which the Data Controller is subject;
processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party.
In any case, it is always possible to ask the Data Controller to clarify the specific legal basis of each processing activity and in particular to specify whether the processing is based on law, provided for by a contract, or necessary to enter into a contract.

Place
The Data is processed at the Data Controller’s operating offices and in any other place where the parties involved in the processing are located. For further information, please contact the Data Controller.
The User’s Personal Data may be transferred to a country other than the one in which the User is located. To obtain further information on the place of processing, the User may refer to the section containing details on the processing of Personal Data.

The User has the right to obtain information regarding the legal basis of Data transfers outside the European Union or to an international organization governed by public international law or set up by two or more countries, such as the UN, and regarding the security measures adopted by the Data Controller to protect the Data.

The User may verify whether any such transfer takes place by checking the relevant section of this document containing details on the processing of Personal Data or by asking the Data Controller for information using the contact details provided at the beginning.

Retention period
Data is processed and stored for as long as required by the purposes for which it has been collected.

Therefore:

Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User shall be retained until such contract has been fully performed.
Personal Data collected for purposes related to the legitimate interest of the Data Controller shall be retained until such interest is satisfied. The User may obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.
When processing is based on the User’s consent, the Data Controller may retain Personal Data for a longer period until such consent is withdrawn. Furthermore, the Data Controller may be obliged to retain Personal Data for a longer period in compliance with a legal obligation or upon order of an authority.

Once the retention period expires, Personal Data shall be deleted. Therefore, upon expiry of this term, the right of access, deletion, rectification, and the right to data portability can no longer be exercised.

Purposes of processing the collected Data
The User’s Data is collected to allow the Data Controller to provide the Service, comply with legal obligations, respond to requests or enforcement actions, protect its own rights and interests (or those of Users or third parties), detect any malicious or fraudulent activity, as well as for the following purposes: Contacting the User, Interaction with social networks and external platforms, Displaying content from external platforms, and Analytics.

To obtain detailed information on the purposes of processing and on the Personal Data processed for each purpose, the User may refer to the section “Details on the processing of Personal Data”.

Details on the processing of Personal Data
Personal Data is collected for the following purposes and using the following services:

Contacting the User
Contact form (this Application)
By filling in the contact form with their Data, the User consents to its use to respond to requests for information, quotations, or any other kind of request indicated by the form header.
Personal Data processed: email address; first name; various types of Data.

Interaction with social networks and external platforms
This type of service allows interaction with social networks, or with other external platforms, directly from the pages of this Application.
The interactions and information acquired through this Application are in any case subject to the User’s privacy settings for each social network.
This type of service may still collect traffic data for the pages where the service is installed, even when Users do not use it.
It is recommended to log out of the respective services in order to make sure that the data processed on this Application is not linked back to the User’s profile.

Facebook Like button and social widgets (Facebook, Inc.)
The Facebook “Like” button and social widgets are services allowing interaction with the social network Facebook, provided by Facebook, Inc.
Personal Data processed: Cookies; Usage Data.
Place of processing: United States – Privacy Policy. Privacy Shield participant.

LinkedIn button and social widgets (LinkedIn Corporation)
The LinkedIn button and social widgets are services allowing interaction with the social network LinkedIn, provided by LinkedIn Corporation.
Personal Data processed: Cookies; Usage Data.
Place of processing: United States – Privacy Policy. Privacy Shield participant.

YouTube button and social widgets (Google LLC)
The YouTube button and social widgets are services allowing interaction with the social network YouTube, provided by Google LLC.
Personal Data processed: Usage Data.
Place of processing: United States – Privacy Policy. Privacy Shield participant.

Google+ +1 button and social widgets (Google LLC)
The Google+ +1 button and social widgets are services allowing interaction with the social network Google+, provided by Google LLC.
Personal Data processed: Cookies; Usage Data.
Place of processing: United States – Privacy Policy. Privacy Shield participant.

Analytics
The services contained in this section enable the Data Controller to monitor and analyze traffic data and are used to track User behavior.

Google Analytics with anonymized IP (Google LLC)
Google Analytics is a web analysis service provided by Google LLC (“Google”). Google uses the Personal Data collected to track and examine the use of this Application, compile reports, and share them with other services developed by Google.
Google may use the Personal Data to contextualize and personalize the ads of its own advertising network.
This integration of Google Analytics anonymizes your IP address. Anonymization works by shortening Users’ IP addresses within the borders of member states of the European Union or in other countries party to the Agreement on the European Economic Area. Only in exceptional cases will the IP address be sent to Google’s servers and shortened within the United States.
Personal Data processed: Cookies; Usage Data.
Place of processing: United States – Privacy Policy – Opt Out. Privacy Shield participant.

Google Analytics (Google LLC)
Google Analytics is a web analysis service provided by Google LLC (“Google”). Google uses the Personal Data collected to track and examine the use of this Application, compile reports, and share them with other services developed by Google.
Google may use the Personal Data to contextualize and personalize the ads of its own advertising network.
Personal Data processed: Cookies; Usage Data.
Place of processing: United States – Privacy Policy – Opt Out. Privacy Shield participant.

Displaying content from external platforms
This type of service allows content hosted on external platforms to be displayed directly from the pages of this Application and to interact with it.
This type of service may still collect web traffic data related to the pages where the service is installed, even when users do not use it.

YouTube video widget without cookies (Google LLC)
YouTube is a video content visualization service provided by Google LLC that allows this Application to incorporate such content within its pages.
This widget is set so that YouTube does not save information and cookies regarding Users on this Application unless they play the video.
Personal Data processed: Usage Data.
Place of processing: United States – Privacy Policy. Privacy Shield participant.

Instagram widget (Instagram, Inc.)
Instagram is an image visualization service provided by Instagram, Inc. that allows this Application to incorporate such content within its pages.
Personal Data processed: Cookies; Usage Data.
Place of processing: United States – Privacy Policy.

YouTube video widget (Google LLC)
YouTube is a video content visualization service provided by Google LLC that allows this Application to incorporate such content within its pages.
Personal Data processed: Cookies; Usage Data.
Place of processing: United States – Privacy Policy. Privacy Shield participant.

Google Fonts (Google LLC)
Google Fonts is a typeface visualization service provided by Google LLC that allows this Application to incorporate such content within its pages.
Personal Data processed: Usage Data; various types of Data as specified by the service’s privacy policy.
Place of processing: United States – Privacy Policy. Privacy Shield participant.

User Rights
Users may exercise certain rights regarding the Data processed by the Data Controller.

In particular, the User has the right to:

withdraw consent at any time. The User may withdraw consent to the processing of their Personal Data previously given.
object to the processing of their Data. The User may object to the processing of their Data when it takes place on a legal basis other than consent. Further details on the right to object are provided in the section below.
access their Data. The User has the right to obtain information about the Data processed by the Data Controller, about certain aspects of the processing, and to receive a copy of the Data processed.
verify and request rectification. The User may verify the accuracy of their Data and request that it be updated or corrected.
obtain restriction of processing. When certain conditions apply, the User may request restriction of the processing of their Data. In this case, the Data Controller will not process the Data for any purpose other than storage.
obtain the deletion or removal of their Personal Data. When certain conditions apply, the User may request the deletion of their Data by the Data Controller.
receive their Data and have it transferred to another controller. The User has the right to receive their Data in a structured, commonly used, and machine-readable format and, where technically feasible, to have it transferred to another controller without hindrance. This provision applies when the Data is processed by automated means and the processing is based on the User’s consent, on a contract to which the User is party, or on pre-contractual measures related thereto.
lodge a complaint. The User may lodge a complaint with the competent personal data protection supervisory authority or take legal action.

Details on the right to object
Where Personal Data is processed in the public interest, in the exercise of official authority vested in the Data Controller, or for the purposes of the legitimate interests pursued by the Data Controller, Users may object to such processing by providing grounds related to their particular situation.

Users are reminded that, if their Personal Data is processed for direct marketing purposes, they may object to that processing without providing any justification. To find out whether the Data Controller processes data for direct marketing purposes, Users may refer to the relevant sections of this document.

How to exercise rights
Any requests to exercise User rights can be directed to the Data Controller through the contact details provided in this document. Requests are free of charge and will be handled by the Data Controller as early as possible, in any case within one month.

Cookie Policy
This Application uses Tracking Tools. To learn more, the User may consult the Cookie Policy.

Further information on processing
Defense in court
The User’s Personal Data may be used by the Data Controller in court or in the preparatory stages leading to possible legal action for the defense against abuse in the use of this Application or the related Services by the User.
The User declares to be aware that the Data Controller may be required to reveal Data upon order of public authorities.

Specific information notices
Upon request by the User, in addition to the information contained in this privacy policy, this Application may provide the User with additional and contextual notices concerning specific Services, or the collection and processing of Personal Data.

System logs and maintenance
For operation and maintenance purposes, this Application and any third-party services used by it may collect system logs, i.e. files that record interactions and may also contain Personal Data, such as the User IP address.

Information not contained in this policy
Further information concerning the processing of Personal Data may be requested at any time from the Data Controller using the contact details.

Response to “Do Not Track” requests
This Application does not support “Do Not Track” requests.
To determine whether any third-party services used support them, the User is invited to consult the respective privacy policies.

Changes to this privacy policy
The Data Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page and, where possible, within this Application and, where technically and legally feasible, by sending a notification to Users through any contact details available to the Data Controller. Users are therefore kindly requested to consult this page regularly, referring to the date of the last modification indicated at the bottom.

Should the changes affect processing activities whose legal basis is consent, the Data Controller shall collect new consent from the User, where required.

Cookie Policy

This document contains information regarding the technologies that enable this Application to achieve the purposes described below. Such technologies allow the Data Controller to collect and save information (for example through the use of Cookies) or to use resources (for example by executing a script) on the User’s device when the latter interacts with this Application.

For simplicity, in this document such technologies are collectively defined as “Tracking Tools”, unless there is reason to distinguish them.
For example, although Cookies can be used in both web and mobile browsers, it would be inappropriate to talk about Cookies in the context of mobile apps, since they are Tracking Tools that require the presence of a browser. For this reason, within this document, the term Cookie is used only to specifically refer to that particular type of Tracking Tool.

Some of the purposes for which Tracking Tools are used may also require the User’s consent. If consent is given, it may be freely withdrawn at any time by following the instructions contained in this document.

This Application uses Tracking Tools managed directly by the Data Controller (commonly referred to as “first-party” Tracking Tools) and Tracking Tools that enable services provided by third parties (commonly referred to as “third-party” Tracking Tools). Unless otherwise specified in this document, such third parties have access to their respective Tracking Tools.
The duration and expiration of Cookies and similar Tracking Tools may vary depending on what is set by the Data Controller or by each third-party provider. Some of them expire at the end of the User’s browsing session.
In addition to what is specified in the description of each of the categories listed below, Users may obtain more detailed and updated information on duration, as well as any other relevant information – such as the presence of other Tracking Tools – in the privacy policies of the respective third-party providers (through the links made available) or by contacting the Data Controller.

Activities strictly necessary to guarantee the operation of this Application and the provision of the Service

This Application uses so-called “technical” Cookies or other similar Tracking Tools to carry out activities strictly necessary to guarantee the operation or provision of the Service.

Other activities involving the use of Tracking Tools
Improving the experience

This Application uses Tracking Tools to provide a personalized user experience, enabling better management of personal settings and interaction with external networks and platforms.

Interaction with social networks and external platforms

This type of service allows interaction with social networks, or with other external platforms, directly from the pages of this Application.
The interactions and information acquired through this Application are in any case subject to the User’s privacy settings for each social network.
This type of service may still collect traffic data for the pages where the service is installed, even when Users do not use it.
It is recommended to log out of the respective services in order to make sure that the data processed on this Application is not linked back to the User’s profile.

Facebook Like button and social widgets (Facebook, Inc.)

The Facebook “Like” button and social widgets are services allowing interaction with the social network Facebook, provided by Facebook, Inc.

Personal Data processed: Cookies and Usage Data.

Place of processing: United States – Privacy Policy. Privacy Shield participant.

LinkedIn button and social widgets (LinkedIn Corporation)

The LinkedIn button and social widgets are services allowing interaction with the social network LinkedIn, provided by LinkedIn Corporation.

Personal Data processed: Cookies and Usage Data.

Place of processing: United States – Privacy Policy. Privacy Shield participant.

Google+ +1 button and social widgets (Google LLC)

The Google+ +1 button and social widgets are services allowing interaction with the social network Google+, provided by Google LLC.

Personal Data processed: Cookies and Usage Data.

Place of processing: United States – Privacy Policy. Privacy Shield participant.

Displaying content from external platforms

This type of service allows content hosted on external platforms to be displayed directly from the pages of this Application and to interact with it.
This type of service may still collect web traffic data related to the pages where the service is installed, even when users do not use it.

Instagram widget (Instagram, Inc.)

Instagram is an image visualization service provided by Instagram, Inc. that allows this Application to incorporate such content within its pages.

Personal Data processed: Cookies and Usage Data.

Place of processing: United States – Privacy Policy.

YouTube video widget (Google LLC)

YouTube is a video content visualization service provided by Google LLC that allows this Application to incorporate such content within its pages.

Personal Data processed: Cookies and Usage Data.

Place of processing: United States – Privacy Policy. Privacy Shield participant.

Measurement

This Application uses Tracking Tools to measure traffic and analyze User behavior with the aim of improving the Service.

Anonymous statistics services

The services in this section allow the Data Controller to process and manage statistics in anonymous form through the use of first-party Tracking Tools.

Google Analytics with anonymized IP (Google LLC)

Google Analytics is a web analysis service provided by Google LLC (“Google”). Google uses the Personal Data collected to track and examine the use of this Application, compile reports, and share them with other services developed by Google.
Google may use the Personal Data to contextualize and personalize the ads of its own advertising network.
This integration of Google Analytics anonymizes your IP address. Anonymization works by shortening Users’ IP addresses within the borders of member states of the European Union or in other countries party to the Agreement on the European Economic Area. Only in exceptional cases will the IP address be sent to Google’s servers and shortened within the United States.

Personal Data processed: Cookies and Usage Data.

Place of processing: United States – Privacy Policy – Opt Out. Privacy Shield participant.

Analytics

The services contained in this section enable the Data Controller to monitor and analyze traffic data and are used to track User behavior.

Google Analytics (Google LLC)

Personal Data processed: Cookies and Usage Data.

Place of processing: United States – Privacy Policy – Opt Out. Privacy Shield participant.

How to manage preferences and give or withdraw consent

There are various ways to manage preferences related to Tracking Tools and to give or withdraw consent, where necessary:

Users can manage preferences related to Tracking Tools directly through their device settings – for example, they can prevent the use or storage of Tracking Tools.

In addition, whenever the use of Tracking Tools depends on consent, the User may give or withdraw such consent by setting their preferences within the cookie notice or by updating such preferences through the tracking settings widget, if available.

Through specific browser or device functions it is also possible to remove previously stored Tracking Tools.

Other Tracking Tools stored in the browser’s local memory can be removed by clearing the browsing history.

With regard to third-party Tracking Tools, Users can manage preferences and withdraw consent by visiting the relevant opt-out link (where available), using the tools described in the third party’s privacy policy, or by contacting the third party directly.

Locating Tracking Tool settings

Users can, for example, find information on how to manage Cookies in some of the most commonly used browsers at the following addresses:

Google Chrome
Mozilla Firefox
Apple Safari
Microsoft Internet Explorer
Microsoft Edge
Brave
Opera.

Users may also manage certain Tracking Tools for mobile applications by disabling them through the appropriate device settings, such as mobile advertising settings or tracking settings in general (Users may consult the device settings to identify the relevant one).

Advertising industry initiatives for consent management

Without prejudice to the foregoing, Users are informed of the possibility of using the information available on YourOnlineChoices (EU), Network Advertising Initiative (USA), and Digital Advertising Alliance (USA), DAAC (Canada), DDAI (Japan), or other similar services. Through these services it is possible to manage the tracking preferences of most advertising tools. The Data Controller therefore advises Users to make use of these resources in addition to the information provided in this document.

The Digital Advertising Alliance also provides an application called AppChoices that helps Users control behavioral advertising on mobile applications.

Data Controller

CORA SRL
Viale del Lavoro, 3
38068 – Rovereto (TN)
VAT no. and Tax Code 00496220229
fax. +39 0464 485 701

Since the use of third-party Tracking Tools on this Application cannot be fully controlled by the Data Controller, any specific reference to third-party Tracking Tools is to be considered indicative. To obtain complete information, Users are kindly invited to consult the privacy policy of the respective third-party services listed in this document.

Given the objective complexity of identifying tracking technologies, Users are invited to contact the Data Controller should they wish to receive any further information regarding the use of such technologies on this Application.

Definitions and legal references
Personal Data (or Data)

Any information that, directly or indirectly, also in connection with any other information, including a personal identification number, makes a natural person identified or identifiable constitutes personal data.

Usage Data

Information collected automatically through this Application (including from third-party applications integrated into this Application), including: the IP addresses or domain names of the computers used by the User who connects to this Application, the URI (Uniform Resource Identifier) addresses, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the response from the server (successful outcome, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various time details of each visit (for example the time spent on each page within the Application), and the details of the path followed within the Application, with particular reference to the sequence of pages visited, and the parameters relating to the User’s operating system and IT environment.

User

The individual using this Application who, unless otherwise specified, coincides with the Data Subject.

Data Subject

The natural person to whom the Personal Data refers.

Data Processor (or Processor)

The natural or legal person, public authority, agency, or other body which processes personal data on behalf of the Data Controller, as described in this privacy policy.

Data Controller (or Controller)

The natural or legal person, public authority, service, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data and the tools adopted, including the security measures concerning the operation and use of this Application. Unless otherwise specified, the Data Controller is the owner of this Application.

This Application

The hardware or software tool through which the Personal Data of Users is collected and processed.

Service

The Service provided by this Application as defined in the relevant terms (if any) on this site/application.

European Union (or EU)

Unless otherwise specified, any reference made within this document to the European Union includes all current member states of the European Union and the European Economic Area.

Cookies are Tracking Tools consisting of small portions of data stored within the User’s browser.

Tracking Tool

A Tracking Tool means any technology – e.g. Cookies, unique identifiers, web beacons, embedded scripts, e-tags, and fingerprinting – that enables Users to be tracked, for example by collecting or storing information on the User’s device.

Legal references

This privacy notice has been prepared on the basis of multiple legislative systems, including Articles 13 and 14 of Regulation (EU) 2016/679.

Unless otherwise specified, this privacy notice concerns this Application only.

PRIVACY & COOKIE POLICY

Contact us

Informativa