Disclosure in accordance with EU Regulation no. 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and with Italian Legislative Decree no. 101/168
In accordance with EU Regulation no. 679/16 (GDPR) and Italian Legislative Decree no. 101/168, SIGE S.p.A. (01041550425), with registered office in Via Baiana n. 10 – 60020 – Polverigi (AN) Italy; tel. 071 9090000; fax 071 9068100; email address info@sige-spa.it; certified electronic mail: sige@legalmail.it, as the Data Controller for Clients’ personal data, makes the following disclosure.
1) The Personal Data we collect
In order to be able to provide our products and/or services and to respond to your requests (for information, quotations, updates, etc.), our company needs to collect certain data belonging to you.
These data may concern, for example: identifying data, addresses and reference names, telephone numbers, email addresses, tax codes, VAT numbers and bank details. Data related to offers made (even if not accepted), orders placed, and any general information regarding your organisation and activities (activities carried out, products and services provided, size and turnover, product sector, associations belonged to, etc.) may also be collected and stored.
2) Purposes (the objectives for which we collect your data)
Your data are collected and processed for the following purposes: )
in order to be able to respond to your requests, present and future, for information on our products and/or services, and in general for all requests preliminary to the formulation of a specific order/contract;
to fulfil the obligations and perform the activities required under established contracts (provision of products and services, potential follow-up technical assistance, management of receipts, payments, etc.) and contracts which may be established in the future;
to fulfil obligations and duties regarding administration, tax, accounting etc. arising from established contracts, as well as those imposed by applicable legislation, regulations and Community law, and from orders issued by authorities legally authorised to do so or by supervisory and control bodies (e.g. inspections by the tax authority);
promotional, commercial, marketing, by sending commercial communications and informational/promotional material, offers, satisfaction surveys, market research and statistics sampling. This information may be sent to you through traditional means (telephone calls with an operator, sending printed advertising material through the post, etc.) or automated means (sms messages, emails, telephone calls without operator). For the processing of data for promotional purposes, your explicit and specific consent is needed, and may be withdrawn at any time. If you do not authorise us to process the said data for promotional purposes, the performance of the contract remains possible nonetheless.
3) PROCESSING METHODS
Your data may be processed via operations carried out by means of either paper or computer archives (including portable devices). Processing consists of the collection, recording, organisation, storage, consultation, elaboration, modification, selection, extraction, comparison, use, interconnection, blocking, communication, erasure and destruction of the data. The processing is carried out by the controller and delegates expressly authorised by the controller.
4) PROVISION OF DATA AND REFUSAL
The provision of your data is necessary for the performance of the activities listed above, and refusal on your part to provide them renders the performance of such activities impossible, apart from the hypothesis described in letter d of Article 2.
5) COMMUNICATION OF THE DATA
In compliance with the principles of lawfulness, purpose limitation and data minimisation, your data may be communicated – only when strictly necessary – exclusively to those public and private parties to whom communication of the data is necessary for the correct performance of services as well as the fulfilment of legal obligations.
6) PROFILING, DISTRIBUTION AND TRANSFER OF DATA OVERSEAS
Your personal data are not subject to distribution, nor to any fully automated decision-making process, including profiling, and shall not be transferred to third countries outside of those in the European Union.
7) DATA STORAGE
- The data collected for contractual purposes are processed and stored at our registered office for as long a time as necessary for the fulfilment of the contract;
- The data collected exclusively for promotional purposes are stored for a maximum period of 24 months.
8) RIGHTS OF DATA SUBJECTS
By sending an appropriate application to SIGE S.p.A. (01041550425), with registered office in Via Baiana n. 10 – 60020 – Polverigi (AN) Italy; tel. 071 9090000; fax 071 9068100; email address info@sige-spa.it; certified electronic mail: sige@legalmail.it, you may at any time exercise your right to:
– request access to your personal data and the information regarding them; the rectification of inaccurate data or the integration of incomplete data; the erasure of personal data concerning you (in the case of any of the conditions listed in Article 17, Paragraph 1 of the GDPR and in accordance with the exceptions made in Paragraph 3 of the same article); or the restriction of the processing of your personal data (where one of the grounds provided for in Article 18, Paragraph 1 of the GDPR applies);
– request and obtain – in cases where the legal basis for processing is the contract or consent, and where the processing is carried out by automated means – your personal data in a structured and machine-readable format, including for the purposes of communicating said data to another data controller (the so-called right to data portability);
– to object at any time to the processing of your personal data, when particular circumstances affecting you prevail, bearing in mind that this may make it impossible for the company to perform the required service and/or to comply with legal obligations;
– withdraw consent at any time, exclusively in cases where processing is based on your consent for one or more specific purposes and concerns common personal data (e.g. date and place of birth or place of residence), or special categories of data (e.g. data which reveal racial origin, political opinions, religions beliefs, health conditions or sex life). Processing based on consent and carried out prior to its withdrawal retains, in any case, its lawfulness;
– to object to automated decision-making processes, including profiling;
– when the necessary conditions prevail, to lodge a complaint with a supervisory authority (Italian Authority for the Protection of Personal Data – www.garanteprivacy.it), without prejudice in any case to the right to effective judicial remedy should you believe that your rights pursuant to the provisions of the GDPR have been violated following the processing of your personal data.