Cookie Policy

On the processing of personal data for browsing the website and cookies

Arts. 12 et seq of Regulation (EU) 2016/679 (GDPR)

 

Foreword

In compliance with the provisions of EU Regulation 2016/679 (hereafter GDPR) we hereby provide information regarding the processing of personal data provided by the data subject, relating to the relationships with the Data Controller (as defined hereafter). 

The information is provided pursuant to art. 13 GDPR.

Identity and contact details

The Data Controller is Rateboard GmbH, with registered office in Fallmerayerstr 6, 6020 Innsbruck, Austria and the contact data are: email: info@rateboard.io, tel: +43 6644567803.

Data Protection Officer (DPO) and Contact Person:

Simon Falkensteiner, Fallmerayerstr 6, 6020 Innsbruck, Austria, simon@rateboard.io, +43 664 4567803

Personal data processing purposes

For all website users, personal data may be used to:

  • browsing of the public web pages on our website;

  • respond to requests received via the e-mail addresses published on the website;

  • respond to requests received via the website chat;

  • react on form submission done by website users;

  • collect anonymous statistical information about use of the website (e.g. analysis of the most visited web pages);

  • collect anonymous statistical information about the geographical areas of arrival;

  • check the proper functioning of the website;

  • determine responsibilities for any illegal activity carried out to the detriment of the website.

 

In addition to the purposes described above, the personal data of users who register with the website will also be used for purposes connected with the services requested and, in particular, to:

  • request information about the solutions offered by the Data Controller;

  • examine information about and demos of Data Controller’s products and services;

  • browse the private web pages on our website;

  • register users for the requested service;

  • fulfill the contractual obligations associated with the requested service, where applicable;

  • send technical communications and/or those relating to the management and provision of the services requested;

  • marketing and remarketing purposes;

  • send advertising and promotional information by e-mail;

  • make direct sales via the website.

Cookies

Please note that by browsing this website technical cookies will be downloaded, such as:

  • session cookies; authentication cookies; cookies for multimedia content, such as Flash Player, that are deleted at the end of the session; customization cookies (e.g. to choose the browsing language), etc.;

  • "analytics” cookies for the statistical analysis of access/visits to the website, which are used solely for statistical purposes and to collect information in an aggregated form.

 

In addition, by browsing this website you may be redirected to features on other sites which in turn use cookies, such as:

  • Linkedin: This cookie is utilized to show relevant publicity on Linkedin, to analyze if someone has seen ads on Linkedin and if actions (e.g. download of a whitepaper) have been taken on the website.

  • VidYard: This cookie is utilized to identify the optimal video quality based on device setup and network settings of the visitor.

  • Universal Analytics (Google): This cookie is utilized to analyze the surfing behavior of website visitors, like frequency, time on page and conversions.

  • Vimeo: This cookie is utilized to optimize the service feature.

  • Facebook: This cookie is utilized to track the users on the website to show (or hide) advertisements on Facebook, to optimize campaign performance or to monitor measures.

  • GoogleAds: This cookie is utilized to attract new visitors to the website, improve sellings, receive more phone calls and to build customer loyalty by sending ads linked to the website during their navigations.

  • Google AdSense: This cookie is utilized to improve the efficiency of advertising containing no personal data.

  • Youtube: This cookie is utilized to register a unique user ID to store the statistics of the video that has been viewed.

  • SalesViewer®: This website uses SalesViewer® technology from SalesViewer® GmbH on the basis of the website operator’s legitimate interests (Section 6 paragraph 1 lit.f GDPR) in order to collect and save data on marketing, market research and optimisation purposes. In order to do this, a javascript based code, which serves to capture company-related data and according website usage. The data captured using this technology are encrypted in a non-retrievable one-way function (so-called hashing). The data is immediately pseudonymised and is not used to identify website visitors personally. The data stored by Salesviewer will be deleted as soon as they are no longer required for their intended purpose and there are no legal obligations to retain them. The data recording and storage can be repealed at any time with immediate effect for the future, by clicking on https://www.salesviewer.com/opt-out in order to prevent SalesViewer® from recording your data. In this case, an opt-out cookie for this website is saved on your device. If you delete the cookies in the browser, you will need to click on this link again.

Retention period of your data:

The personal data collected during the browsing session will be retained for the time needed to carry out the specified activities and for no more than one year, if no other services are requested by the data subject; Data provided voluntarily by the user will be retained until the user revokes the related consent given.

Personal data collected and mandatory or optional nature of data provision and consequences of any refusal to do so

Like all websites, this website also uses log files to retain the information collected during visits by users in an automated manner. The following types of information may be collected: 

  • internet protocol (IP) address;
  • type of browser and parameters of the device used to connect to the website;
  • name of the Internet service provider (ISP);
  • date and time of the visit;
  • the web page from which the visitor arrives (referral) and exits to;
  • the number of clicks, if any.

The above information is processed automatically and collected in order to check the proper functioning of the website, as well as for statistical or security reasons.

For security reasons (anti-spam filters, firewall, virus detection), the data recorded automatically may also include such personal data as the IP address, which may be used in compliance with the relevant current legislation to block attempts to damage the website or other users or, in any case, to block other detrimental activities or crimes. Such data is never used to identify or profile the user, but solely to safeguard the website and its users. 

As a consequence of normal use, the IT systems and software procedures dedicated to the functioning of this website acquire certain personal data whose transmission is inherent to the use of Internet communications protocols. This category of data includes the IP addresses or domain names of the computers used to link to the website, the addresses of the resources requested in URI (Uniform Resource Identifier) notation, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the reply given by the server (success, error, etc.) and other parameters relating to the operating system and IT environment of the user.

Except as specified for the browsing data, the user is free to provide additional personal data, with respect to that indicated above, when registering with the website.

Failure to provide this data may make it impossible to obtain the requested information or to provide certain services and the browsing experience on the website might be compromised.

The Data Controller confirms that your “sensitive” data is never collected.

Processing methods

Pursuant to and for the effects of Arts. 12 et seq of the GDPR, the personal data that the data subject provide to us will be recorded, processed and retained in the Data Controller’s hard-copy and electronic files, with the use of adequate technical and organizational measures in order to safeguard such data. The processing of data subject personal data may consist in any operation or set of operations described in art. 4, para. 1, point 2 GDPR.

Personal data will be processed with the use of suitable tools and procedures that guarantee security and confidentiality. Such processing activities may be carried out directly and/or via delegated third parties using IT equipment or electronic instruments.

Scope of knowledge of your data

The data of the data subject may be processed by the employees of the corporate functions of the Data Controller assigned to the pursuit of the purposes indicated above. These employees have been expressly authorized to process the data and have received adequate operating instructions pursuant to and for the purposes of Article 29 GDPR. 

The data may also be communicated by the Data Controller to: 

  • Companies of Zucchetti Group;

  • Commercial partners;

  • Interface Partners;

  • Consultants;

  • Zucchetti Accademia Office;

  • Managers of the fiduciary services delivered by Zucchetti.

Communication and dissemination

The personal data of the data subject, provided through registration, may be communicated, meaning by this term the giving of knowledge to one or more specific subjects, by the Data Controller to third parties in order to implement all the necessary legal and/or contractual obligations. In particular, the personal data of the interested party may be communicated to public bodies or offices or control authorities in order to fulfil legal and/or contractual obligations.

Your data may be may communicated as follows:

  • to parties able to access the data pursuant to laws, regulations or EU legislation, within the limits envisaged in such provisions;

  • to parties that need to access your data for purposes ancillary to the relationship that exists between you and us, within the limits strictly necessary to carry out the ancillary tasks;

  • to our consultants and/or professionals, within the limits required for them to carry out their work at our or their organization, following our appointment letter that imposes duties of confidentiality and security.

 

Dissemination - The Data Controller will not disseminate your data indiscriminately, i.e. they will not make it known to unspecified parties or make it available for use or consultation.

Trust and confidentiality - The Data Controller recognizes the importance of the trust shown by data subjects who consent to the processing of their personal data and, therefore, undertake not to sell, lease or rent such personal information to others. 

Data transfer to countries outside the EU

The data provided by the data subject will only be processed countries within the European Union. If the personal data of the data subjects are processed in a country outside of the EU, the data subject’s rights under EU legislation will be guaranteed and the data subject will be notified on a timely basis.

How to deactivate cookies?

Most browsers (Internet Explorer, Firefox, Chrome, etc.) are configured to accept cookies. The cookies stored on the hard disk of your device can however be deleted and, in addition, it is possible to deactivate cookies by following the instructions provided for the principal browsers at the links below:

Rights of the data subject

Pursuant to Articles 15 et seq of the GDPR, the data subject may exercise the following rights:

  1. access: to obtain confirmation of whether or not the personal data of the data subject are being processed and the right to access them; requests that are manifestly unfounded, excessive or repetitive cannot be answered;

  2. rectification: to correct/obtain the correction of personal data if incorrect or outdated and to complete data if incomplete; 

  3. erasure/to be forgotten: in some cases, to obtain the erasure of the personal data provided; this is not an absolute right, as the Data Controller may have legitimate or legal reasons to store them;

  4. limitation: the data will be stored, but cannot be processed further, in the cases foreseen by the regulation;

  5. portability: to move, copy or transfer data from the Data Controller’s databases to third parties. This applies only to data provided by the data subject for the performance of a contract or for which express consent has been given and the processing is carried out by automated means;

  6. objection to direct marketing;

  7. withdraw of the consent at any time if processing is based on consent.

Pursuant to Art. 2-undicies of Legislative Decree 196/2003, the exercise of data subjects rights may be delayed, restricted or excluded, following justification provided without delay, unless this might compromise the purpose of the restriction, for as long as and to the extent that this constitutes a necessary and proportionate measure, taking into account the fundamental rights and legitimate interests of the data subject, in order to safeguard the interests referred to in paragraph 1, letters a) (protected interests with regard to money laundering), e) (for the conduct of defensive investigations or the exercise of a right in court) and f) (for the confidentiality of the identity of the employee who reports offenses he becomes aware of on his duties). In such cases, data subjects’ rights may also be exercised through the Personal Data Protection Authority in the manner referred to in Article 160 of said Decree. In such case, the Personal Data Protection Authority will inform the data subject that it has carried out all the necessary checks or that it has carried out a review, as well as of the data subject right to take legal action.

It should also be noted that - before processing the requests - the Data Controller may ascertain the identity of the data subject, in order to evaluate the legitimacy of the same.

To exercise such rights, the data subject may contact the Data Controller at zprivacy.officer@zucchetti.com or call +43664456 7803 or write to the RateBoard GmbH, privacy office, Fallmerayerstr 6, 6020 Innsbruck, Austria. 

The Data Controller will respond within 30 days of receiving the data subject formal request. 

If the above mentioned rights concerning data subject personal data are infringed, the latest may complain to the competent authority.

THE DATA CONTROLLER