INFORMATION ON THE PROCESSING OF PERSONAL DATA
Increso S.R.L., hereinafter also referred to as "Increso" or "data controller," with registered office in Via Monte Asolone, 8, 00195 Rome, Italy, and contactable at the certified email address increso@legalmail.it or by telephone at 06 9823 2222, as the data controller of your personal data (hereinafter "Data Controller"), issues this privacy policy in compliance with European and Italian regulations on the protection of personal data, in order to inform you of the purposes and methods of processing the personal data that you may communicate while browsing this website (hereinafter "Website"). Please note that this policy refers only to the Site and not to third-party websites that may be accessed by the User through links on the Site.
The Data Controller has appointed a Data Protection Officer (DPO), whom the Data Subject may contact by writing to the following address: dpo@increso.it
CATEGORIES OF DATA PROCESSED
Navigation data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes, for example, the IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct operation and are deleted immediately after processing.
Â
Data voluntarily provided by the User
Sending e-mails to the addresses indicated in the Site - optional, explicit and voluntary - entails the subsequent acquisition of your e-mail address, which is necessary to respond to requests, as well as any further personal data that you may have communicated. On the Site there are forms for completion, accompanied by specific information on the processing of personal data carried out and, where necessary, requests for consent: we therefore invite you to read them before proceeding with the use of the form.
Cookie
For any information regarding the use of cookies by the Website, please access the specific policy by clicking here.
PURPOSE AND LEGAL BASIS FOR PROCESSING, NATURE OF DATA PROVISION AND CONSEQUENCES IN CASE OF REFUSAL
The Data Controller will process your data in order to facilitate your navigation and to provide the services you may request through the forms specifically provided on the Site. Apart from what is specified for navigation data and technical cookies, within the sections of the Site set up for particular services at your request you will be free to provide your personal data for the purposes set out in the respective notices, but failure to do so may make it impossible to obtain the requested service.
DATA RETENTION PERIOD
The Data Controller will process the personal data collected through the use of the Website for the time strictly necessary to achieve the purposes for which they were collected and, once this has been completed, for the time periods established by current regulations. In any case, for technical/organizational reasons, the processing will last for 30 days from the above-mentioned terms. For further details, please refer to any information notices prepared for specific services.
SCOPE OF DATA COMMUNICATION AND CATEGORIES OF RECIPIENTS
Exclusively for the purposes specified above, all data collected and processed may be communicated by Increso to internal figures authorized to process it due to their respective duties, as well as to the following categories of external subjects such as independent data controllers or external data processors:
- IT service providers, such as direct marketing, internet services, and cloud computing;
- individuals who perform customer service activities;
- firms and other entities that provide assistance, consulting, and services of a legal, fiscal, accounting, economic-financial, technical-organizational, data processing, or communication nature;
- subsidiaries, parent companies, investees, and affiliates;
- public authorities and supervisory and control bodies;
- third-party companies in the context of acquisitions or disposals of the company or a branch thereof.
Should these recipients process data on behalf of Increso, they are designated as data processors, with a specific contract or other legal document. The updated list of recipients of personal data is available upon specific request to the data controller Increso through the methods indicated in the paragraph "Rights of data subjects" below.
DATA TRANSFER TO A THIRD COUNTRY AND/OR INTERNATIONAL ORGANIZATION
Your personal data may be transferred, for the purposes for which it is collected, to the United States of America, a third country outside the European Economic Area. Such transfers are carried out in accordance with Article 45 of Regulation (EU) 2016/679 (GDPR), based on the Adequacy Decision adopted by the European Commission on July 10, 2023, relating to the EU-US Data Privacy Framework. The transfer is made exclusively to US organizations certified under the EU-US Data Privacy Framework, for which the European Commission has recognized the existence of an adequate level of personal data protection substantially equivalent to that guaranteed in the European Union. By virtue of this adequacy decision, the transfer of personal data does not require the adoption of additional safeguards pursuant to Article 46 of the GDPR. Data subjects may obtain further information on the transfer of personal data and the recipient organizations by writing to the Data Controller at the addresses indicated in this policy.
RIGHTS OF INTERESTED PARTIES
You have the right to ask the Data Controller to access your personal data and to correct it if inaccurate, to delete it or limit its processing if the conditions are met, to object to its processing for legitimate interests pursued by the Data Controller, and to obtain the portability of the data you have personally provided only if it is subject to automated processing based on consent or contract. You also have the right to withdraw your consent for the purposes of processing that require it, without prejudice to the lawfulness of the processing carried out until the moment of withdrawal. To exercise your rights, you can use the form available here and send it to the following address: privacy@increso.it Finally, we remind you that you also have the right to lodge a complaint with the competent supervisory authority, the Italian Data Protection Authority (www.garanteprivacy.it).
Last update: February 2026.
This policy may be subject to change: we therefore recommend that you check the date of the last revision. Any changes will take effect from the date of publication on the Website, but you will be notified of any changes deemed to be significant, where possible (for example, if you are subscribed to our newsletter service).
