Privacy policy - UrbiStat - Geomarketing & Market Research

The original text is in Italian. The translation is below.

This Notice is addressed to any person (hereinafter, the Interested Party) who provides their personal data to UrbiStat S.r.l., for one or more of the purposes indicated below.

UrbiStat S.r.l. (hereinafter “UrbiStat” or the “Data Controller”) is committed to protecting the personal data entrusted to it. Therefore, their management and security are guaranteed with the utmost care, in accordance with the requirements of the privacy legislation in force, EU Regulation 2016/679 (GDPR) and the relevant Italian national legislation.

The identifying details of the Data Controller are as follows:

UrbiStat S.r.l.
with registered office in Modena (MO),
via Vellani Marchi, 20
E-mail: info@urbistat.com

This Notice explains in simple terms the essential points regarding the data we collect, the reasons why we process them and the rights of the Interested Party.

The following definitions apply in this information notice:

«personal data»: any information relating to an identified or identifiable natural person («data subject»); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

«processing»: any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

‘controller’ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;

‘processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;

‘consent of the data subject’ means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

UrbiStat S.r.l. will use the data exclusively for the following purposes:

Performance of the contract or use of the service.

Performance of the contractualization activity and provision of the requested service. UrbiStat S.r.l. processes the contact details, relating to the company or entity to which they belong, for the execution of the contract to which the Interested Party and/or the entity represented by the same is a party and to allow them to use the requested service or activity. The service can also be used through the involvement of services provided by third parties or owned by third parties with whom UrbiStat S.r.l. has relationships; in this case, said third parties will act as data controllers pursuant to Article 28 of the GDPR.

UrbiStat S.r.l. does not process special data under any circumstances.

UrbiStat S.r.l. aims to protect the personal data entrusted to it, basing their processing on the principles of correctness, lawfulness and transparency. The interested party is therefore informed that his/her personal data will be processed using tools and procedures suitable for guaranteeing maximum security and confidentiality, through archives and paper supports, with the aid of digital supports, IT and telematic means. The communications that we will send for purposes related to marketing activities will be conveyed both in traditional ways (e.g. by post, by telephone) and in automated and similar ways (e.g. e-mail, messaging).

With specific reference to the purposes related to the execution of the contract or the use of a service, the contact details will be processed for up to ten years from the end of the execution of the contract, the use of the service or the payment deadline, exclusively to ensure the tax, accounting and administrative obligations required by law, except for longer terms, not determinable a priori, as a result of different conditions of lawfulness of the processing (for example legal actions that make processing necessary for over ten years).

Personal data are not subject to disclosure.

Without prejudice to the communications carried out in compliance with legal and contractual obligations, all data collected and processed may be communicated in Italy and transferred abroad exclusively for the purposes specified above to companies and professional firms that may process the data provided for purposes strictly connected with the company’s activity; in this case, said third parties will act as data controllers pursuant to Article 28 of the GDPR.

In relation to the data, the interested party may exercise the following rights specifically indicated in the European Regulation n. 679/2016 reported below:

Article 15 – Right of access: the interested party has the right to obtain from the data controller confirmation as to whether or not his/her data is being processed and to obtain access to it with the relevant information.

Article 16 – Right to rectification: the interested party has the right to obtain from the data controller the rectification of inaccurate personal data without delay.

Article 17 – Right to erasure: the interested party has the right to obtain the erasure of his/her personal data if the reasons expressly indicated exist.

Article 18 – Right to restriction of processing: the interested party has the right to obtain the restriction of processing when the hypotheses expressly indicated apply.

Article 20 – Right to data portability: the interested party has the right to receive his/her personal data in a structured, commonly used and machine-readable format.

Article 21 – Right to object: the interested party has the right to object to the processing of his/her data under the conditions expressly indicated.

The interested party has the right to obtain the indication of the origin of the personal data, the purposes and methods of processing, the logic applied in the case of processing carried out with the aid of electronic instruments, the identification details of the owner, the managers and the designated representative, the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them in their capacity as designated representative in the territory of the State, managers or agents.

It will be possible to revoke, at any time, the consent given without this being able, however, to prejudice the lawfulness of the processing based on the consent given before the revocation or to prejudice further processing of the same data based on other legal bases (for example, contractual obligations or legal obligations to which UrbiStat S.r.l. is subject).

UrbiStat S.r.l. has appointed a “Data Protection Officer (DPO)”, as required by Article 37 of EU Regulation 2016/679. The Data Protection Officer is a figure whose role consists in monitoring compliance with the Regulation itself, assessing the risks, for the Interested Parties (customers, potential customers, employees, suppliers), of any processing of personal data carried out by UrbiStat S.r.l.; provides support to UrbiStat S.r.l. to inform employees about the obligations arising from the Regulation and other provisions on data protection; also cooperates with the Personal Data Protection Authority and is the point of contact, for UrbiStat S.r.l., on any issue related to the processing of personal data.

The DPO can be contacted for all issues relating to the processing of personal data and/or to exercise the rights provided for by the Regulation at the following addresses:

Email: dpo@aigen.it

Last update: 28 April 2025