The purpose of this document is to inform Users of the Personal Data collected from the sga-spizzi.com website (hereinafter the “ Application “).
In case of non-acceptance of the changes made to this Privacy Notice, the User is required to cease using this Application and may request the Data Controller to remove their Personal Data.
1. PERSONAL DATA COLLECTED BY THE APPLICATION
The Data Controller collects the following types of Personal Data:
A. Content and information provided voluntarily by the User
Contact data and contents : these are the Personal Data that the User voluntarily provides to the Application during its use, such as personal data, contact details, access credentials to the services and / or products provided, personal interests and preferences and other contents personal, etc.
B. Failure by the User to provide Personal Data, for which there is a legal or contractual obligation or if they constitute a necessary requirement for the use of the service or for the conclusion of the contract, will make it impossible for the Data Controller to provide in whole or in part its services.
The User who communicates the Personal Data of third parties to the Data Controller is directly and exclusively responsible for their origin, collection, processing, communication or dissemination.
C. Data and contents acquired automatically during the use of the Application
Technical data: the computer systems and software procedures used to operate this Application may acquire, during their normal operation, some Personal Data whose transmission is implicit in the use of internet communication protocols. This information is not collected to be associated with identified Users, but which by their very nature could, through processing and association with data held by third parties, allow Users to be identified. This category includes IP addresses, or domain names used by Users who connect to the Application, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained, etc.
Usage data: Data relating to the use of the Application by the User may also be collected, such as the pages visited, the actions performed, the functions and services used.
The Personal Data collected may be used for the execution of contractual and pre-contractual obligations and for legal obligations as well as for the following purposes:
A. management of user databases
B. monitoring, analysis and tracking of User behavior by communicating Data to Google Inc., https://policies.google.com/privacy?hl=it&gl=ZZ and Addthis, https://www.addthis.com/ privacy /
3. PROCESSING METHODS
The processing of Personal Data is carried out using IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated.
In some cases, subjects involved in the organization of the Data Controller may also have access to Personal Data (such as, for example, personnel management personnel, sales personnel, system administrators, etc.) or external subjects (such as IT companies, suppliers of services, postal couriers, hosting providers, etc.). If necessary, these subjects may be appointed as Data Processors by the Data Controller, as well as access the Personal Data of the Users whenever necessary and will be contractually obliged to keep the Personal Data confidential.
The updated list of Managers can be requested via email at firstname.lastname@example.org .
4. LEGAL BASIS OF THE PROCESSING
The Owner processes Personal Data relating to the User if one of the following conditions exists:
A. processing is necessary for the execution of a contract with the User and / or for the execution of pre-contractual measures
B. processing is necessary to fulfill a legal obligation to which the Data Controller is subject
C. the processing is necessary for the pursuit of the legitimate interest of the Data Controller or third parties
D. However, it is always possible to ask the Owner to clarify the concrete legal basis of each treatment.
The Data is processed at the Data Controller’s operating offices and in any other place where the parties involved in the processing are located. For more information, contact the Data Controller at the following email address email@example.com .
7. SECURITY MEASURES
The processing is carried out in a manner and with suitable tools to guarantee the security and confidentiality of the data, having the owner adopted adequate technical and organizational measures that guarantee, and allow to demonstrate, that the processing is carried out in compliance with the relevant legislation.
8. DATA RETENTION PERIOD
The Data Controller will process the Personal Data for the time necessary to fulfill the purposes connected with the execution of the contract between the Data Controller and the User no later than 10 years from the termination of the relationship with the User and in any case until the end of the term. prescription required by the regulations in force.
When the processing of Personal Data is necessary for the pursuit of a legitimate interest of the Data Controller, the Personal Data will be kept until such interest is satisfied.
If the processing of personal data is based on the consent of the user, the owner may keep the personal data until revocation by the same.
Personal Data may be kept for a longer period if necessary to fulfill a legal obligation or by order of an authority.
All Personal Data will be deleted upon expiry of the retention period. At the end of this term, the right of access, cancellation, rectification and the right to data portability can no longer be exercised.
9. AUTOMATED DECISION MAKING PROCESSES
All collected data will not be subject to any automated decision-making process, including profiling, which may produce legal effects for the person or which may significantly affect him.
Users can exercise certain rights with reference to the Data processed by the Data Controller. In particular, the User has the right to:
A. withdraw consent at any time;
B. oppose the processing of their data;
C. access their data;
D. verify and request rectification;
E. obtain the limitation of the processing;
F. obtain the cancellation of their Personal Data;
G. receive their data or have them transferred to another owner;
H. propose a complaint to the supervisory authority for the protection of Personal Data and / or take legal action.
11. EXERCISE OF RIGHTS
To exercise their rights, Users can direct a request to the contact details of the Owner indicated in this document. The requests are made free of charge and processed by the Data Controller as soon as possible, in any case within 30 days.
12. DATA CONTROLLER
The Data Controller is SGA SNC Spizzi, with registered office in Via Riva di Trento 1, 20139 Milan, Italy – VAT number IT11984000155, e-mail address firstname.lastname@example.org , PEC address email@example.com .