Articles 13–14 of EU Regulation 2016/679 “GDPR”
Data Controller
Sige S.p.A.
Via Baiana, 10
60020 Polverigi (AN) – Italy
VAT No. 01041550425
Email: info@sige-spa.it
WHAT IS THE PURPOSE OF THE PROCESSING?
In compliance with EU Regulation 2016/679 on the processing of personal data and the free movement of such data, as well as with Italian Legislative Decree 196/2003, as amended, known as the “Personal Data Protection Code”, we hereby inform you, as the “Data Subject”, that we process your contact details in order to respond to your requests, provide information about our services and, where appropriate, keep you informed about our activities.
WHAT IS THE LEGAL BASIS FOR PROCESSING?
Pursuant to Article 6(1)(b) of the GDPR, the processing is necessary for the performance of a contract to which the Data Subject is party or in order to take pre-contractual measures at the request of the Data Subject.
FROM WHOM DO WE COLLECT THE DATA?
Whenever possible, we collect personal data directly from the Data Subject.
WHAT CATEGORIES OF DATA DO WE PROCESS?
We mainly request and process personal data classified as “common data”, such as, by way of example, first name and surname, email address and telephone number.
Providing the common personal data specifically requested is necessary in order to use our services. Without such data, we will not be able to receive or process your requests.
TO WHOM DO WE DISCLOSE PERSONAL DATA?
The data is processed at the registered and operational offices of the Data Controller and at any other location where the parties involved in the processing may be located.
Your personal data may be disclosed to public bodies and competent institutions in order to comply with obligations imposed by laws and regulations.
It may also be disclosed to external companies carrying out outsourced activities on behalf of the Data Controller, acting as Data Processors.
These Data Processors are selected and authorised in advance by us and may process the data solely for the purposes described above, including the proper management of the contractual relationship established between the parties.
All Data Processors are individually identified within our management system and receive appropriate instructions aimed at safeguarding the rights of Data Subjects, together with the obligation to comply with confidentiality requirements.
HOW DO WE PROCESS THE DATA?
Your personal data will be processed using both analogue and digital systems.
Only personnel authorised by the Data Controller may access your data in order to carry out processing operations or system maintenance activities.
We adopt all appropriate technical and organisational measures to prevent unauthorised access, disclosure, alteration or destruction of personal data.
We also specify that our organisations do not use automated decision-making processes, including profiling, which produce legal effects concerning you or similarly significantly affect you.
Website Contacts Notice v.1 – Rev. 2026-06
IS THE DATA TRANSFERRED TO COUNTRIES OUTSIDE THE EU?
Your data will not be transferred to third countries outside the European Union whose personal data protection laws are not aligned with EU Regulation 2016/679.
Furthermore, your data will not be disclosed by us to unauthorised third parties for purposes other than those described in this notice.
HOW LONG DO WE RETAIN THE DATA?
We will process your data for the time necessary to achieve the purposes described above and for the period required by applicable law.
At the end of the applicable retention period, the data will be deleted, returned or otherwise processed in compliance with the data minimisation principle, while safeguarding the rights and freedoms of the Data Subject and continuing to apply appropriate technical and organisational security measures.
WHAT ARE YOUR RIGHTS?
The Data Subject has the right to request from the Data Controller access to their personal data, as well as the rectification or deletion of such data, the restriction of processing concerning them, or to object to the processing.
The Data Subject also has the right to data portability under the GDPR and may therefore request, at any time, a digital copy of their data or its direct transfer to another organisation.
Where applicable, the Data Subject may also object to the processing or withdraw the consent previously given.
The Data Subject retains the right to lodge a complaint with the Italian Data Protection Authority.
Any request to exercise these rights will be assessed within the limits set out in Article 23 of the GDPR and Articles 2-undecies and 2-duodecies of the Italian Privacy Code.
To exercise these rights or to obtain further information about them, please send a request by email to the address indicated above.
In the event of significant changes or amendments to the purposes of the processing, you will be informed in advance through our communication channels.