Pursuant to and for the purposes of art. 13 of the EU Regulation 2016/679, hereafter “GDPR” (General Data Protection Regulation), and with reference to D. Lgs. 196/2003 as amended by D.Lgs. 101/2018, we inform you of the following:


Data Controller

The "Data Controller" is Hyb Srls company with legal headquarters in Re Umberto, 73 - 10128 Turin. The Controller can be contacted via registered mail by using the specified address


Purpose of data collection and legal bases

Navigation data

The Controller will process some personal data of users who interact with IT systems and software procedures in charge of the website's operation. In particular, navigation data that computer systems acquire automatically during the normal operation of the website will be processed, such as IP address, domain names and types of browsers that are not accompanied by any additional personal information and are used to obtain anonymous statistical information concerning the use of the site, check its correct operation and also to ascertain responsibility in case of hypothetical computer crimes.


Data voluntarily provided by users Personal data provided by you will be processed for the following purposes:

a) stipulation and execution of the contract (registration, usage of website services) and all the activities related to it, such as, for example, invoicing, credit protection, protection of Data Controller's rights and interests, administrative, management, organizational and functional services for the execution of the contract;

b) fulfillment of legal obligations, such as regulations, applicable legislation and other provisions issued by authorities and by supervisory and control bodies empowered to do so by law.

Legal bases for the processing of personal data for the aforementioned purposes in points a) and b) are: the execution of a contract with the interested party and / or for the execution of pre-contractual measures adopted upon request, the fulfilment of legal obligations or the pursuit of legitimate interests.

c) carrying out marketing and promotional/advertising activities by sending recurring newsletters. The processing of personal data for the aforementioned purposes in point c) requires your express consent in compliance with art. 7 of the GDPR. This consent concerns both the automated and the traditional methods of communication described above.

For interested parties who are already customers of the Controller's company, the sending of information for the purposes referred to in point c) may also be based on the legitimate interest of the Data Controller in accordance with the provisions of art. 6, paragraph 1 letter f) and recital n. 47 of the GDPR.

The interested party will always and in any case have the right to object totally or even partially, easily and free of charge, to the processing of personal data for the purposes referred to in point c).


Methods of personal data processing

Methods of personal data processing The processing of your personal data is carried out by means of the operations indicated in art. 4 n. 2 of the GDPRfor aforementioned purposes, both on paper and computer/telematic media, by electronic and / or automated instruments, in compliance with the law in force in particular in terms of confidentiality and security and in accordance with the principles of lawfulness, fairness, transparency and protection of Customer rights. The processing is carried out directly by the company of the Data Controller, its Data Processors ex art. 28 and internal designated subjects.

Compulsory or optional provision of data and possible consequences of failure to provide such data

The data required for the purposes referred to in the preceding letters a) and b) must be provided for the fulfilment of the legal obligations and / or for the conclusion and execution of the contractual relationship requested or for the exercise of the legitimate interest pursued by the Data Controller. Therefore your eventual refusal, even partial, to provide such data would make it impossible for Hyb Srls to establish and manage the relationship itself. The provision of personal data necessary for the purposes referred to in letter c) above is optional, therefore Your refusal to provide such data would make it impossible to implement the activities described therein (marketing and promotional activities).


Communication and disclosure

Your personal data may be communicated, within the limits strictly relevant to the obligations, tasks and purposes set out above and in compliance with current legislation on the subject, to the following categories of subjects :

- subjects to whom such communication must be carried out in order to fulfill or to demand the fulfillment of specific obligations provided for by laws, regulations and / or Community legislation;

- physical and / or legal persons that provide services to the activities of the Controller for the aforementioned purposes (e.g. business partners, suppliers, consultants, companies, institutions, professional offices). These subjects will operate as data processors pursuant to ex art. 28 of the GDPR.

Your personal data is not subject to disclosure unless you provide your explicit consent or written request.


Retention period for personal data

Personal data will be retained for the time necessary for the performance of the contract with the Controller, after which personal data will be kept to fulfill the obligations required by law and for the conservation of administrative documents in compliance with current legal provisions.


Data transfer

Personal data are stored on servers within the European Union. In any case, it is understood that the Data Controller, if necessary, will have the right to move the servers even outside the EU. In this case, the Controller ensures from now that the transfer of data outside the EU will take place in accordance with applicable laws, subject to the stipulation of the standard contractual clauses provided by the European Commission.


Data subject rights

As a data subject, you have the rights referred to in GDPR and precisely the rights to:

1. obtain the confirmation of the existence or not of personal data concerning you, even if not yet registered, and their communication in an intelligible form;

2. obtain the following information about: a) the source of personal data; b) the purposes and method of processing; c) the logic applied in case of processing carried out with the aid of electronic instruments; d) the identification details of the Data Controller, Data Processors and the designated subject mentioned in art. 3, subsection 1, GDPR; e) subjects or categories of subjects to whom personal data may be disclosed or who may become aware about them as appointed representative in the territory of the State or as persons in charge;

3. obtain: a) updating, rectification or, when you are interested, data integration; b) cancellation, transformation in an anonymous form or blocking of data processed unlawfully, including data whose storage is unnecessary for the purposes for which they have been collected or subsequently processed; c) the evidence that operations referred to letters a) and b) have been notified, including their content, to those to whom the data have been communicated, unless the fulfillment of this requirement proves impossible or involves manifestly disproportionate use of means compared with the right protected;

4. oppose, totally or partially: a) for legitimate reasons to the processing of your personal data, even if related to the purpose of processing; b) to the processing of your personal data for the purpose of sending advertising material, or direct sale, or marketing analysis or communication, by means of calling systems with a human operator, and / or by email and / or conventional marketing procedures by telephone and/or paper mail. It should be noted that the data subject has the right to object, totally or partially, to processing of personal data for marketing purposes. Therefore, the subject can decide to receive only traditional communications or only automated communications or none of the two. Where applicable, the subject has also the rights stated in art. 16-21 of the GDPR (right to rectification, right to erasure, right to restriction of processing, right to data portability and right to object), in addition to the right to appeal to the Supervisory Authority.

To exercise the aforementioned rights, for questions or information about the processing of personal data and security measures implemented, the data subject, in any case, can forward his/her requests to our company to the following address: