Privacy Policy
Privacy Policy
INFORMATION PROCESSING OF PERSONAL DATA
Pursuant to Article 13 of the EU Regulation 2016/679, hereinafter referred to as GDPR (General Data Protection Regulation), considering also Legislative Decree. 196/2003 as amended by Leg. 101/2018, we inform you regarding the following:
Data controller
The data controller is: Samec Elettronica SRL
Vat: 01231330240
Registered office: Vicenza (VI), Via delle Prese, 16/18, 36015
Tel. 0445 575346
E-mail: info@samecelettronica.it
Purpose of processing and legal basis
Navigation data
The Data Controller will process some personal data of users who interact with the computer systems and software procedures responsible for the operation of the site. Will be processed, in particular, navigation data that computer systems automatically acquire during the use of the site, such as IP address, domain names and browser types, which are not accompanied by any additional personal information and are used to obtain anonymous statistical information on the use of the site, needs to control the way the site is used; as well as for the detection of responsibility in case of hypothetical computer crimes.
Data voluntarily provided by the user
The personal data you provide will be processed exclusively for the following purposes:
- a) conclusion and execution of the contract (registration, use of site services) and all related activities, such as, but not limited to, billing, credit protection, protection of the rights and interests of the Owner, administrative, management, logistical/organizational and functional services for the execution of the contract;
- b) fulfillment of obligations under the law, regulations, applicable legislation and other provisions issued by Authorities and Supervisory and Control Bodies provided by the Law.
The legal bases for the processing of personal data for the purposes mentioned above (a) and b) are: the performance of a contract and/or the adoption of a pre-contractual measure at the request of the Data Subject, and the fulfillment of one or more legal obligations or exercise of legitimate interest.
- (c) carrying out promotional/advertising information activities by means of sending periodic newsletters or personalized advertising communications. Only the processing of personal data for the purposes mentioned in c) above requires your express consent art. 7 of the GDPR. Said consent covers both the automated and traditional modes of communication described above.
For Data Subjects who are already customers
of the Data Controller, the sending of information for the purposes referred to in c) above may also be based on the legitimate interest of the Data Controller in accordance with Art. 6(1)(f) and recital no. 47 of the GDPR.
The Data Subject shall always have the right to object easily and free of charge in whole, or even in part, to the processing of his or her data for the purposes referred to in c) above.
Methods of data processing
The processing of personal data is carried out by means of the operations specified in Art. 4 n. 2) GDPR, for the above purposes, whether on paper or in computer/telematic form, by means of electronic and/or automated tools, in compliance with current legislation in particular on confidentiality and security and in accordance with the principles of fairness, lawfulness and transparency and protection of the Client’s rights. The processing is carried out directly by the Owner’s organization, its Article 28 Managers and designated internal .
Compulsory or optional nature of providing data and consequences of refusal to provide personal data
The data requested for the purposes referred to in the preceding point must be compulsorily provided for the fulfillment of legal obligations and/or for the conclusion and execution of the contractual relationship you have requested or for the exercise of the legitimate interest of the Data Controller. Therefore, your refusal, even partial, to provide such data would make it impossible for the Owner to establish and manage the relationship itself. The provision of personal data necessary for the purposes referred to in (c) above is optional, so your refusal to provide such data may result in the impossibility of putting in place the activities described therein (marketing and promotional).
Communication and Outreach
Your personal data may be disclosed, to the extent strictly relevant to the above obligations, tasks and purposes and in accordance with the relevant regulations, to the following categories of subjects:
– Subjects to whom such communication must be made in order to fulfill or to require the fulfillment of specific contractual obligations or those provided for by laws, regulations and/or EU legislation;
– external natural and/or legal persons who provide services instrumental to the activities of the Owner for the above purposes (e.g. business partners, suppliers, consultants, companies, entities, professional firms). These individuals will act as data controllers ex art 28 GDPR.
Personal data will not be disseminated in any way except with your explicit consent or request in writing.
Period of retention of personal data
Personal data will be retained for as long as necessary for the execution of the contract entered into with the Holder, after which the data will be retained to fulfill legal obligations and for the storage of administrative documents in accordance with current legal provisions.
Data Transfer
Personal data are stored on servers located within the European Union. It is in any case understood that the Holder, should it become necessary, will be entitled to move the servers outside the EU as well. In this case, the Data Controller hereby ensures that the transfer of data outside the EU will take place in accordance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses provided by the European Commission. If the User uses online payment methods, he/she may be redirected to platforms managed by third parties (such as Multisafepay, Paypal, others…) that operate as autonomous Data Controllers with any consequent obligation under the GDPR and applicable regulations.
Minors
The Holder does not intentionally collect personal information referring to minors.
Rights of the data subject
As a data subject, you have the rights under the GDPR, namely the rights to:
- obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet registered, and their communication in intelligible form;
- Getting the indication: (a) of the origin of personal data; (b) of the purposes and methods of processing; (c) of the logic applied in the case of processing carried out with the aid of electronic instruments; (d) of the identification details of the owner, managers and designated representative under Art. 3(1) GDPR; e) of the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them in their capacity as designated representative in the territory of the State, managers or appointees;
- obtain: (a) updating, rectification or, when interested, supplementation of data; (b) the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including data whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed; (c) certification that the transactions referred to in subparagraphs. (a) and (b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated, except where this proves impossible or involves the use of means manifestly disproportionate to the right protected;
- Oppose in whole or in part: a) for legitimate reasons to process personal data concerning you, even if relevant to the purpose of collection; b) to the processing of personal data concerning you for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication, through the use of call systems with the intervention of an operator, and/or through e-mail and/or through traditional marketing methods by telephone and/or paper mail. Please note that each Data Subject has the right to object in whole or in part to data processing for marketing purposes. Therefore, the data subject may choose to receive only communications by traditional means or only automated communications or neither type of communication. Where applicable, it also has the rights set forth in Articles 16-21 GDPR (right to rectification, right to be forgotten, right to restrict processing, right to data portability, right to object), as well as the right to complain to the Data Protection Authority.
For the exercise of the above rights or for questions or information regarding the processing of your data and the security measures taken, any Interested Party may in any case forward their requests to our company at the following address: info@samecelettronica.it
1. DATA CONTROLLER
“Data controller” is the company Samec Elettronica with registered office in Schio (VI), Via delle Prese, 16/18, 36015. The owner may be contacted by registered mail, by mail at info@samecelettronica.it.
2. TYPE OF DATA PROCESSED and PURPOSE OF THE PROCESSING.
Navigation data
The Data Controller will process some personal data of users who interact with the computer systems and software procedures responsible for the operation of the site. Will be processed, in particular, navigation data that computer systems automatically acquire during the use of the site, such as IP address, domain names and browser types, which are not accompanied by any additional personal information and are used to obtain anonymous statistical information on the use of the site, needs to control the way the site is used; as well as for the detection of responsibility in case of hypothetical computer crimes.
Data voluntarily provided by the‘user
Any e-mail sent to the address indicated on this site involves the acquisition of the e-mail address of origin, as well as any other personal data included in the missive.
Personal data requested through forms will be processed, even without your consent, for the following purposes:
– fulfillment of pre-contractual and/or contractual obligations;
– Fulfillment of expected tax and accounting obligations;
– fulfillment of obligations under the law, a regulation, EU legislation or an order of the authority;
– Prevention or discovery of fraudulent activity or abuse detrimental to the website;
– Exercise of the Holder’s rights, such as defense in court.
Your data will also be processed in order to: fulfill the obligations provided for in the tax and accounting field, comply with the obligations in any capacity incumbent on the data controller and provided for by current legislation.
3. LEGAL BASIS.
Users’ personal data are processed if:
– the data subject has given consent for one or more purposes and only in relation to the purpose to which the consent relates;
– the processing of the data is necessary for the execution of the contract concluded with the data subject or the execution of pre-contractual measures requested by the data subject;
– processing is necessary for the pursuit of the legitimate interest of the data controller or a third party, provided that the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data are not overridden.
4. RECIPIENTS
Personal data collected on the site may be processed by other parties involved in various capacities and in particular:
– Those who have access to and process personal data under the authority of the owner or controller (contact persons/authorized persons);
– Individuals or legal entities that process personal data on behalf of the data controller (data controllers).
In any case, the user can always ask the data controller for the updated list of data processors using the controller’s email address.
Except in the above cases, the user’s personal data will not be disclosed to third parties except:
– The user has given his or her express consent to the communication;
– the communication is made necessary to provide the product or service requested by the user;
– Is requested by the Judicial Authority or the Public Security Authority.
5. MODE OF DATA PROCESSING
Personal data are collected using processes that are not fully automated, with the consent of the user who enters their data in the forms provided on the site. Personal data will be processed within the European Union.
6. COOKIE
A cookie is a text file that is stored, which contains some information and allows the website to remember, for example, the user’s preferences or the products in their shopping cart. The Electronic Communications Directive and the Privacy Guarantor’s Order of May 8, 2014, no. 229, on “Identification of simplified procedures for information and acquisition of consent for the use of cookies,” provide that the use of cookies can only be allowed with the user’s consent.
The site uses cookies.
7. DATA RETENTION
Personal data will be processed and stored for as long as necessary for the fulfillment of the purposes for which they were collected and in particular,
For contract management purposes, the data will be retained for the entire duration of the contract and, subsequently, for the period during which the data controller is subject to retention obligations for tax purposes or other purposes stipulated by laws or regulations. The data will, in any case, be retained for the maximum time period of 2 years starting from the end of the contract, based on the ordinary statute of limitations provided by the Civil Code;
formarketing and profilingpurposes : 2 years after collection, subject to the possibility for the data subject to modify and/or revoke consent;
Personal data will be kept for the time strictly necessary to achieve the purposes for which they are collected and processed. Once the purpose of the processing has been exhausted, i.e., in the event of exercising the right to object to the processing or to revoke the consent given, the controller will still be entitled to retain further to the personal data in whole or in part, for the purposes permitted by the GDPR (such as the need to enforce a right in court). After that time, the data will be deleted or made anonymous.
8. RIGHTS OF THE DATA SUBJECT
The data subject has the right to ask the Data Controller whether personal data concerning him or her are being processed and if so, to obtain access to the following information:
– purpose of processing;
– Type of data processed;
– recipients of personal data;
– expected retention period, if possible or a criterion for determining the period;
– existence of the right to obtain rectification or erasure of the same or restriction of processing;
– receive personal data concerning him or her in a structured, commonly used, machine-readable format and request its transmission to another data controller, if technically feasible.
– existence of the right to file a complaint with a supervisory authority (Data Protection Authority – http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4535524;
– where the data are not collected from the data subject, all information about their origin;
– where personal data are transferred to a third country or international organization, the data subject has the right to be informed of the existence of appropriate safeguards for the transfer.
9. WAYS OF EXERCISING RIGHTS
It is possible at any time to exercise rights by sending:
– A registered letter with return receipt to the Holder;
– An email to the Holder’s address;
– A pec to the Holder’s address.
The Owner will acknowledge the user within 30 days, without prejudice to the user’s right to file a complaint with the designated authority in the event of a violation.
10. CHANGES TO THE PRIVACY POLICY
The owner reserves the right to make changes to the privacy policy and notice at any time by informing users by posting on the site and, if in possession of an e-mail address, by e-mail.
If the changes affect processing whose legal basis is consent, the owner will re-collect the user’s consent if necessary.