1.Introduction The European Union has raised the required standards by applying (from 25 May 2018) to all the countries belonging to the EU the GDPR a new legislation that changes the rules to collect, store and use user information and therefore in order to maintain existing contacts, companies are informing about the change and in some cases to give a new authorization to use the data. Often, however, it is not clear what authorization is being given, which is why we thought of simplifying its content. First of all: GDPR is the acronym for General Data ProtectionRegulation (in Italian General Data Protection Regulation - European Regulation EU 2016/679). The aim of this new privacy law is to allow European citizens to have greater control over the way in which individuals, companies and public bodies collect and use their personal data. Then, in plain English, here's what it consists of, what changes and what to do.
What is the GDPR As we have said, the GDPR is the European regulation for the protection of personal data that replaces the current Directive 95/46 / EC on Data Protection, dating back to 1995. This new law takes into account the sudden changes that have taken place in the digital world and also unifies European laws in this regard, with the specific objective of preserving (our) right to be in full control of the information that concerns us. The regulation consists of 99 articles all aimed at giving citizens greater control of their personal data, and clarifying responsibilities in case of violations of privacy. In addition, the GDPR establishes some fundamental principles that have been much discussed recently: the right to be forgotten (users can ask to remove information about themselves forever), data portability (that is, you can download and transfer data from one platform to another , without binding to a certain account) and the obligation to notify in case of data breach (companies, if they suffer leaks of sensitive information, must communicate it to the users whose data they have within 72 hours). The substantial changes introduced by the GDPR with respect to the previous privacy regulations concern 4 specific areas: the territorial area, obtaining consent, the introduction of the DPO and sanctions. The territorial scope provides that the new law applies to the data of all European citizens and to all companies that process or manage such data, regardless of the country in which they have their registered office or where the data are processed. Obtaining consent: as before, consent to the processing of data must be free, informed and explicit, as tacit or presumed consent will not be admitted in.News regarding minors, whose consent will be considered valid from 16 years of age, before that age, consent must be expressed by a parent or guardian. Linked to obtaining consent is the introduction of the DPO, i.e. the Data ProtectionOfficer (in Italian Data Protection Officer). It is an independent figure in charge of ensuring correct management of personal data. As has been pointed out, however, it is still not clear what the DPO is and what it does. What data it protects The GDPR regulation applies to a wide range of personal data including name, identification and location numbers, as well as IP addresses, cookies and other fingerprints. On the European Data Protection Supervisor website, personal data are defined as follows: «Any information relating to an identified or identifiable natural person, called" data subject "- an identifiable person is a person who can be identified, directly or indirectly, in particular by referring to an identification number or to one or more specific factors of its physical, physiological, mental, economic, cultural or social identity »The new regulation, however, as can be easily understood, also concerns us individual users. How? First of all, you can expect to be informed more about how your data is used: companies must be clear and transparent about everything, that's why you may receive a barrage of emails asking to tick the boxes to give consent for the use of data. MG Visio Srl operates in the LED lighting sector, through branches, agents, license and distribution agreements. Within this website - owned by MG Visio Srl.
- information directly related to it is reported. This Policy is intended to describe how this website is managed, with reference to the processing of personal data of users / visitors who consult it. MG Visio Srl, in line with the applicable privacy protection regulations, intends to guarantee the privacy and security of each visitor's personal data, also in relation to Internet access made from abroad, consistently with what is prescribed in this policy. Unless otherwise specified, this Policy is also intended as general information on the processing of personal data made to those who interact with the services offered by the website. Information on the processing of detailed personal data are reported, where necessary, in the pages relating to the individual services in the sections of the site. These information are aimed at defining the limits and methods of data processing for each service, on the basis of which the visitor can freely express his consent and possibly authorize the collection of data and their subsequent use. It should be noted that this Privacy Policy is not extended to other websites that may be consulted by the user through a hyperlink.

The Data Controller is the company MG Visio Srl. With registered office in Via Antonino Giuffré 101, 00128 Rome, Italy. The pro tempore contact person for Marketing is responsible for the web services offered. Personal data may be processed by persons appointed as Managers, as well as by Data Processors responsible for managing the requested service.

The website offers informative and sometimes interactive content. While browsing the site, you can therefore acquire information about the visitor, in the following ways: · Navigation data The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes: IP addresses, the type of browser used, the operating system, the domain name and the addresses of websites from which access or exit has been made, information on the pages visited by users within the site, the access time, the stay on the single page, the analysis of the internal path and other parameters relating to the operating system and the user's IT environment. These technical / IT data are collected and used exclusively in an aggregate and anonymous manner and could be used to ascertain responsibility in the event of hypothetical computer crimes against the site. Data provided voluntarily by the visitor These are all personal data freely released by the visitor on the site to, for example, register for news letters and / or access a reserved area, request information on a specific product or service through an email contact, write to an e-mail address or call a toll-free number to have direct contact with customer service. Where provided, this information may be used for user profiling purposes. Where this occurs, appropriate information will be provided and free and specific consent will be acquired for marketing and / or profile delineating purposes, according to the techniques (initially during the collection of consent according to the "opt-in" concept and subsequently when refusing consent according to the "opt-out" concept) envisaged by current privacy legislation.

Cookies are packets of information sent by a web server (e.g. the site) to the user's Internet browser, which the latter automatically stores on the computer and automatically sent back to the server at each subsequent access to the site. By default, almost all web browsers are set to automatically accept cookies. Visitors can set their computer browser to accept / reject all cookies or display a warning every time a cookie is proposed, in order to evaluate whether to accept it or not. The user can, however, change the default configuration and disable cookies (i.e. block them permanently), setting the highest level of protection. MGvisio srl and third-party suppliers, including Google, use both proprietary and third-party cookies to determine the correlation between website visits and impressions of advertisements on the Google AdWords Display network, other uses of advertising services and interactions with these impressions and advertising services, and to determine reports on demographics and Google Analytics interests. This website uses Google Analytics, a web analysis service provided by Google, Inc. ("Google"). Google Analytics uses "cookies", which are text files stored on your computer to allow the website to analyze how users use the site. The information generated by the cookie about the use of the website (including your anonymous IP address) will be transmitted and stored on Google's servers in the United States. Google will use this information for the purpose of examining your use of the website, compiling reports on website activity for its operators and providing other services relating to website activity and internet use. Google may also transfer this information to third parties where this is required by law or where such third parties process the aforementioned information on behalf of Google. Google will not associate your IP address with any other data held by Google. You can refuse to use cookies by selecting the appropriate setting on your browser or by visiting the Google page dedicated to the deactivation functions currently available, but please note that if you do this you may not be able to use all the features of this website. By using this website, you consent to the processing of your data by Google for the methods and purposes indicated above.

The processing of personal data is carried out mainly using electronic procedures and supports (DB, CRM platforms, etc.) for the time strictly necessary to achieve the purposes for which the data were collected and, in any case, in accordance with the principles of lawfulness , correctness, non-excess and relevance provided for by the current privacy legislation.

The website can use social plug-ins. Social Plug-ins are special tools that allow you to incorporate the Social Network functions directly into the website (eg Facebook's "like" function). All social plug-ins on the site are marked with the respective logo owned by the social network platform (eg Facebook, Google+, Twitter, etc.). When you visit a page of our site and interact with the plug-in (eg by clicking the "Like" button) or decide to leave a comment, the corresponding information is transmitted by the browser directly to the social network platform and stored by this. For information on the purposes, type and methods of collection, processing, use and storage of personal data by the social network platform, as well as for the ways in which to exercise their rights, please consult the privacy policy adopted by the individual social networks.

The subjects to whom the personal data refer (so-called "data subjects"), processed through this website, have the right to exercise their rights in the manner and within the limits set by the privacy legislation applicable on the national territory. In particular, the exercise of the following rights is recognized: - the right to access personal data present in its paper and / or electronic archives; - the right to request their rectification, updating and cancellation, if incomplete or incorrect, and to oppose their treatment for legitimate and specific reasons; - the right to obtain the correction of inaccurate personal data without undue delay. Taking into account the purposes of the processing, the interested party has the right to obtain the integration of incomplete personal data, also by providing an additional declaration; - the right to obtain the cancellation of personal data concerning him without undue delay if one of the reasons set out in art. 17, paragraph 1 of the Regulations; - the right to obtain the limitation of treatment when one of the hypotheses referred to in art. 18, paragraph 1 of the Regulations; - the right to data portability within the limits and in the ways provided for by art. 20 of the Regulation and the Guidelines on data portability; - the right to lodge complaints with the competent authority. To exercise these rights, obtain the updated list of data processors (where designated), report problems or ask for clarifications on the processing of your personal data, please direct your requests to the Data Controller, specifying the subject of the request, to the following address (info@mgvisio.com). 8. Duration of processing and data retention times The Data will be processed for the time necessary to carry out the activity covered by the services provided and, also subsequently, limited to the fulfillment of any legal obligations.