Privacy Policy

Pursuant to Article 13 of the EU Regulation 2016/679, hereinafter referred to as GDPR (General Data Protection Regulation), considering also Legislative Decree. 196/2003 as amended by Leg. 101/2018, we inform you regarding the following:

Data controller

The data controller is: Samec Elettronica SRL

Vat: 01231330240

Registered office: Vicenza (VI), Via delle Prese, 16/18, 36015

Tel. 0445 575346

E-mail: info@samecelettronica.it

Purpose of processing and legal basis

Navigation data
The Data Controller will process some personal data of users who interact with the computer systems and software procedures responsible for the operation of the site. Will be processed, in particular, navigation data that computer systems automatically acquire during the use of the site, such as IP address, domain names and browser types, which are not accompanied by any additional personal information and are used to obtain anonymous statistical information on the use of the site, needs to control the way the site is used; as well as for the detection of responsibility in case of hypothetical computer crimes.

Data voluntarily provided by the user
The personal data you provide will be processed exclusively for the following purposes:

1. a) conclusion and execution of the contract (registration, use of site services) and all related activities, such as, but not limited to, billing, credit protection, protection of the rights and interests of the Owner, administrative, management, logistical/organizational and functional services for the execution of the contract;
2. b) fulfillment of obligations under the law, regulations, applicable legislation and other provisions issued by Authorities and Supervisory and Control Bodies provided by the Law.

The legal bases for the processing of personal data for the purposes mentioned above (a) and b) are: the performance of a contract and/or the adoption of a pre-contractual measure at the request of the Data Subject, and the fulfillment of one or more legal obligations or exercise of legitimate interest.

1. (c) carrying out promotional/advertising information activities by means of sending periodic newsletters or personalized advertising communications. Only the processing of personal data for the purposes mentioned in c) above requires your express consent art. 7 of the GDPR. Said consent covers both the automated and traditional modes of communication described above.

For Data Subjects who are already customers
of the Data Controller, the sending of information for the purposes referred to in c) above may also be based on the legitimate interest of the Data Controller in accordance with Art. 6(1)(f) and recital no. 47 of the GDPR.

The Data Subject shall always have the right to object easily and free of charge in whole, or even in part, to the processing of his or her data for the purposes referred to in c) above.

Methods of data processing

The processing of personal data is carried out by means of the operations specified in Art. 4 n. 2) GDPR, for the above purposes, whether on paper or in computer/telematic form, by means of electronic and/or automated tools, in compliance with current legislation in particular on confidentiality and security and in accordance with the principles of fairness, lawfulness and transparency and protection of the Client’s rights. The processing is carried out directly by the Owner’s organization, its Article 28 Managers and designated internal .

Compulsory or optional nature of providing data and consequences of refusal to provide personal data

The data requested for the purposes referred to in the preceding point must be compulsorily provided for the fulfillment of legal obligations and/or for the conclusion and execution of the contractual relationship you have requested or for the exercise of the legitimate interest of the Data Controller. Therefore, your refusal, even partial, to provide such data would make it impossible for the Owner to establish and manage the relationship itself. The provision of personal data necessary for the purposes referred to in (c) above is optional, so your refusal to provide such data may result in the impossibility of putting in place the activities described therein (marketing and promotional).

Communication and Outreach

Your personal data may be disclosed, to the extent strictly relevant to the above obligations, tasks and purposes and in accordance with the relevant regulations, to the following categories of subjects:

– Subjects to whom such communication must be made in order to fulfill or to require the fulfillment of specific contractual obligations or those provided for by laws, regulations and/or EU legislation;

– external natural and/or legal persons who provide services instrumental to the activities of the Owner for the above purposes (e.g. business partners, suppliers, consultants, companies, entities, professional firms). These individuals will act as data controllers ex art 28 GDPR.

Personal data will not be disseminated in any way except with your explicit consent or request in writing.

Period of retention of personal data

Personal data will be retained for as long as necessary for the execution of the contract entered into with the Holder, after which the data will be retained to fulfill legal obligations and for the storage of administrative documents in accordance with current legal provisions.

Data Transfer

Personal data are stored on servers located within the European Union. It is in any case understood that the Holder, should it become necessary, will be entitled to move the servers outside the EU as well. In this case, the Data Controller hereby ensures that the transfer of data outside the EU will take place in accordance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses provided by the European Commission. If the User uses online payment methods, he/she may be redirected to platforms managed by third parties (such as Multisafepay, Paypal, others…) that operate as autonomous Data Controllers with any consequent obligation under the GDPR and applicable regulations.

Minors

The Holder does not intentionally collect personal information referring to minors.

Rights of the data subject

As a data subject, you have the rights under the GDPR, namely the rights to:

1. obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet registered, and their communication in intelligible form;
2. Getting the indication: (a) of the origin of personal data; (b) of the purposes and methods of processing; (c) of the logic applied in the case of processing carried out with the aid of electronic instruments; (d) of the identification details of the owner, managers and designated representative under Art. 3(1) GDPR; e) of the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them in their capacity as designated representative in the territory of the State, managers or appointees;
3. obtain: (a) updating, rectification or, when interested, supplementation of data; (b) the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including data whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed; (c) certification that the transactions referred to in subparagraphs. (a) and (b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated, except where this proves impossible or involves the use of means manifestly disproportionate to the right protected;
4. Oppose in whole or in part: a) for legitimate reasons to process personal data concerning you, even if relevant to the purpose of collection; b) to the processing of personal data concerning you for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication, through the use of call systems with the intervention of an operator, and/or through e-mail and/or through traditional marketing methods by telephone and/or paper mail. Please note that each Data Subject has the right to object in whole or in part to data processing for marketing purposes. Therefore, the data subject may choose to receive only communications by traditional means or only automated communications or neither type of communication. Where applicable, it also has the rights set forth in Articles 16-21 GDPR (right to rectification, right to be forgotten, right to restrict processing, right to data portability, right to object), as well as the right to complain to the Data Protection Authority.

For the exercise of the above rights or for questions or information regarding the processing of your data and the security measures taken, any Interested Party may in any case forward their requests to our company at the following address: info@samecelettronica.it