Information on the processing of personal data (EU Reg. 2016/679)
Janata Exchange Company s.r.l. informs you that this page describes how the website (“Site”) is managed with regard to the processing of personal data of visitors and users who consult it.
This policy establishes the following:
- who processes user data
- what personal data of the user is collected and processed through the use of our website and for what reason;
- where we obtain the data and the nature of its provision;
- what we do with this data;
- how we store the data;
- to whom we transfer/disclose this data;
- how we guarantee your rights;
- how we comply with data protection regulations.
This information is provided in compliance with Italian and European legislation on the protection of personal data (EU Regulation 2016/679) to those who interact with the web services of the Site and, therefore, does not apply to information collected through channels other than this website.
Who processes user data
Data controller:
The data controller for data collected following consultation of this website is Janata Exchange Company s.r.l., VAT number 06932451005, with registered office at Via Giacomo Pagliari n. 15, 00198 Rome (Italy), Tel. 06/44341389, email janataexchangesrl@gmail.com, certified email janataexchange@legalmail.it
Data Protection Officer:
We have appointed a Data Protection Officer (DPO) to verify the compliance of our personal data processing with this policy and with Italian and European legislation.
The Data Protection Officer can be contacted at the following addresses: privacy@janataexchange.it
The DPO is the point of contact for requesting and receiving information on the processing of your personal data and the contact for the Supervisory Authority.
What personal data we collect and for what purpose
Personal data refers to all information relating to the user that allows us to identify them, such as their first name, last name, contact details, telephone number, and information about their access to our website.
We may collect your personal data when you contact us at the Front Office or on dedicated numbers, or when you send us an email.
By using or consulting this Website, Janata Exchange Company s.r.l. will therefore process the data of visitors and users in order to:
- provide information services on the activities of the Data Controller;
- verify the necessary and automatic collection of data relating to user interaction with the website;
- manage data voluntarily provided (e-mail, fax, etc.) to provide specific information and/or assistance services or to manage complaints or reports;
- perform analyses on aggregated data on the behavior of visitors and users or analyses, on aggregated data, of behavior on the website (such as, for example, data relating to traffic and user time on the website or their IP address);
- promote our activities by publishing (with prior written consent) photos of internal staff and service users during their stay at our facilities or organized events;
- prevent or detect fraudulent activities or abuses that are harmful to the Website.
We will only process your personal data if we have a legal basis for doing so. The legal basis will depend on the reasons why we collected and need to use your personal data. In some cases, these reasons consist of the need to respond to your requests (contractual or pre-contractual purposes), the performance of tasks in the public interest (or of significant public interest), compliance with certain legal and/or regulatory requirements, the pursuit of the legitimate interests of the Data Controller and, for the collection of photos and their publication on the Website, the consent of the data subject.
Browsing data
During normal operation, the IT systems and software procedures used to operate this website acquire some personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes IP addresses or domain names of computers used by users connecting to the site, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment. etc.) and other parameters relating to the user's operating system and IT environment.
This data is used solely to obtain anonymous statistical information on the use of the site and to check its correct functioning, and is deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site: except for this possibility, the data on web contacts does not currently persist for more than seven days.
Data provided voluntarily by the user
The optional, explicit, and voluntary sending of personal data to make requests via email entails the subsequent acquisition of the sender's address or any other personal data that will be processed exclusively to respond to the request or to provide the service.
Where we obtain data and the nature of its provision (including the consequences of a refusal to provide it)
Your data may be collected online when you browse the website or if you send emails, faxes, or make phone calls to our Front Office; in particular, personal data, email address, and, where requested, telephone number are necessary for the pursuit of the purposes indicated above.
Please note that failure to provide optional personal data will not result in any obligation or disadvantage.
To whom we communicate/disclose your data
For the purposes of using online content, as well as to comply with certain legal and/or regulatory requirements or for the legitimate interests of the Data Controller, your data may be communicated:
- to our employees and internal collaborators;
- to third-party companies contractually linked to the organization, or other entities that perform outsourced activities and services on its behalf (third-party technical service providers, hosting providers, etc.), appointed where necessary as external Data Processors.
Social media: we may use social media plug-ins on our website. As a result, data will be shared with the social media service and may be shared on your social media profile. Please refer to the privacy policies of these third-party social media providers to learn more about these practices.
Personal data will not be disclosed in any case (except for the publication of photographs in specific sections of the website and subject to written consent that the data subject may give at the headquarters of the Data Controller). In any case, the communication of data requested, in accordance with the law, to the Police, the Judicial Authorities, information and security bodies or other public entities for purposes of defense or security of the State or prevention, investigation or suppression of crimes is reserved.
Who we transfer your data to
Personal data will be managed and stored in Italy and, in any case, within the European Union. The data will not be transferred outside the European Union. In any case, it is understood that, if we deem it necessary, we will have the right to change the location of the servers in Italy and/or the European Union and/or non-EU countries. In this case, we will ensure that the transfer of data outside the EU will take place in accordance with the applicable legal provisions, stipulating, if necessary, agreements that guarantee an adequate level of protection and/or adopting the standard contractual clauses provided for by the European Commission or only in the presence of other requirements in accordance with applicable Italian and European legislation.
How long we retain your data
The data collected by the Website during its operation is used exclusively for some of the purposes indicated above and retained for the time strictly necessary to carry out our activities.
We will not retain data for longer than is necessary to fulfill the purpose for which it was processed. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the purposes for which we process it, and whether we can achieve those purposes through other means.
The data collected by the Website will therefore be stored for as long as necessary to respond to requests and, even after termination, to manage any legal obligations connected with or arising from them, unless you have given your explicit consent in relation to some of the services offered (e.g., publication of photographs on the Website); in the latter cases, the processing may continue until consent is revoked.
We must also take into account the periods for which we may need to retain personal data in order to comply with our legal obligations or to examine complaints/reports, requests for information, or defend our legal rights.
How we process your data and how we comply with data protection regulations
Personal data is processed using electronic and automated tools for the time strictly necessary to achieve the purposes indicated above. Specific technical and organizational security measures are observed to prevent data loss, illicit or incorrect use, and unauthorized access.
We adopt a set of technical and organizational security measures to ensure the confidentiality, integrity, and availability of your data.
Data processing is carried out in a lawful and correct manner, in accordance with the principle of minimization.
How we guarantee your rights
Janata Exchange Company s.r.l. informs you that, according to the new European legislation on data processing, in certain circumstances you have the right to:
1) ask us to confirm whether or not we are processing personal data concerning you and, if so, to obtain access to that data and all information relating to the processing itself;
2) obtain the rectification and correction of inaccurate personal data and supplement incomplete data, including by providing a supplementary statement;
3) obtain erasure if:
- the data are no longer necessary for the purposes for which they were collected or processed,
- the data have been unlawfully processed,
- the data must be erased to comply with a legal obligation,
- you have withdrawn your consent,
- you object to the processing.
4) to obtain the restriction of processing (and therefore to suspend it) when one of the following cases applies:
- if the accuracy of the personal data is contested, for the period necessary for us to verify said accuracy;
- if the processing is unlawful and the erasure of the personal data is opposed and instead the restriction of use is requested;
- if the personal data is necessary for the establishment or exercise of a legal claim by the data subject;
- if the data subject has objected to the processing, pending verification of whether our legitimate grounds override yours.
5) to request the transfer of your personal information in electronic and structured form to another party (“data portability”);
6) to object, in whole or in part, to the processing;
7) to withdraw your consent at any time (in such cases, the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal);
8) to lodge a complaint with the Data Protection Authority (for more information, please visit the website www.garanteprivacy.it).
If you wish to exercise any of these rights, please send a request to the Data Controller or Data Protection Officer at the above addresses.
Last updated January 2026