Pursuant to Legislative Decree n. 196/2003 and EU Regulation 2016/679 containing "General Data Protection Regulation" ("Regulation EU / 679/2016"), Si-Net (hereinafter "the Company"), as Data Controller, is required to provide information on the use of the personal data of the interested parties.
This information also refers to the processing carried out by the subjects who carry out, on behalf of the Company, the tasks of a technical and organizational nature described in paragraph 1.
The personal data held by the Company are provided directly by the person to whom the personal data refer ("Interested").
Personal data are processed within the normal activity of the Company for the following purposes:
The provision of personal data necessary for these purposes is not mandatory, but the refusal to supply them may make it impossible for the Company to provide the service in relation to the relationship between the data and the service requested. Their treatment does not require the consent of the interested party;
The provision of personal data necessary for these purposes is mandatory and the relative processing does not require the consent of the interested party;
The provision of data necessary for the purposes referred to in the previous letter. c) it is not mandatory and their treatment requires the consent of the interested party.
In relation to the purposes described, the processing of personal data takes place through manual processing or electronic or in any case automated tools, according to logic strictly related to the purposes themselves and in any case in order to guarantee the confidentiality, integrity and availability of personal data.
In relation to the purposes described in paragraph 1 above, the Company and the other subjects who carry out, on behalf or in favor of the same, the tasks described in paragraph 1 above, process personal data relating to:
In providing the services and activities indicated in this information, the Company does not need to process personal data that art. 9 of the aforementioned Regulation defines as "particular", (such as, for example, personal data suitable for revealing the state of health, political and trade union opinions, religious beliefs, etc.).
For the pursuit of the purposes described in paragraph 1, the Company needs to communicate the personal data of the interested parties to third parties belonging to the following categories:
The recipients of the communications described in this statement operate in total autonomy, as separate data controllers, or, in some cases, have been designated by the Company as data processors. Their constantly updated list is available from the Company.
Some categories of persons, as authorized to the treatment, can access the personal data of the interested parties for the purpose of carrying out the tasks assigned to them. In particular, the Company has designated, as authorized to process the data of the interested parties, the employees of the Company itself, including the system administrators, for the purpose of carrying out the tasks assigned to them, the temporary workers used by the Company, interns.
Furthermore, the subjects designated by the Company as Data Processors may also become aware of the personal data on the occasion of the execution of the tasks assigned to them. The identity of the data processors designated by the Company can be known in the manner indicated in paragraph 11 below.
The personal data processed by the Company and by the subjects who carry out the tasks of a technical and organizational nature on its behalf described in paragraph 1, are not subject to disclosure.
Normally the data provided by the interested party to the Company are not transferred outside the European Union. In some certain circumstances and for purposes related to the verification of creditworthiness and capital solidity, some data may be transferred to third countries.
In this case, the Company ensures that the recipient, who acts as the data processor, complies with the provisions of the GDPR including the rules specifically dictated for the transfer of personal data to third countries. In particular, it guarantees that these transfers take place on the basis of an adequacy decision or the signature by the manager of standard contractual clauses of data protection approved by the European Commission.
The actual transfer of personal data to third countries and related further information can be requested by contacting the Company at the addresses indicated in paragraph 11 below.
Following consultation of this Site, personal data may be processed.
The computer systems and software procedures used to operate this website record, during their normal operation, some personal data whose acquisition takes place automatically and unavoidably, if Internet communication protocols are used. These data, although not found with the specific purpose of identifying the respective interested parties, could well, due to their very characteristics, be associated with third party databases and thus allow the identification of users. This category of data includes, for example, the IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the IT environment of the user. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Portal and to check its correct functioning and are deleted immediately after processing.
It should be noted that the data could be used to ascertain responsibility in the event of any IT crimes against the Portal, in accordance with the procedures in force at the competent Authorities.
By constant interpretation, the e-mail addresses and the information contained in the messages are personal data. The optional, explicit and voluntary sending of e-mails to the addresses indicated in the various pages of this Site (for example, on the "Contacts" page), entails the subsequent acquisition of the sender's address by the respective recipient, necessary to respond to the requests, as well as other personal data included in the message. In particular, the e-mail addresses of these users will not be extracted and used to communicate information on the services provided by the structure, unless this constitutes the very reason for the message sent by the user.
It is necessary to specify that the treatments carried out through the various pages of the Site will only concern common data: the user is therefore invited not to send data suitable for revealing racial and ethnic origin, religious, philosophical or other beliefs, political opinions, membership of parties, trade unions, associations or organizations of a religious, philosophical, political trade union nature, as well as personal data suitable for revealing the state of health and sexual life or information that can be qualified as "sensitive data" pursuant to of the art. 4, paragraph 1 letter d) of the Privacy Code. Otherwise the relevant message will be immediately destroyed.
Personal data will be processed for the entire duration of the contractual relationships established, and also subsequently, for the fulfillment of all legal obligations and in any case for a period not exceeding 10 years from the termination of the contractual relationship or beyond in the cases expressly requested by the law.
Personal data processed for Marketing and Profiling purposes will be processed by the Company until the consent given by the Data Subject is revoked and subsequently stored for a period not exceeding 3 years.
We inform you that the legislation on the protection of personal data gives the interested parties the possibility to exercise specific rights. In particular, each interested party has:
The Company will provide the interested party with information relating to one or more of the actions taken as per the previous list without undue delay and, in any case, at the latest within one month of the request itself. This deadline can be extended by two months, taking into account the complexity and number of requests, with consequent information to the interested party of this extension and the reasons for the delay, to be provided within one month of receipt of the request.
The exercise of the rights referred to in this article may be exercised by the interested party at the following email address: email@example.com
The owner of the processing of personal data is Si-Net Srl, with registered office in Viale Premuda 46 - 20129 Milan - Tel. 0331.474747 - Fax 0331.474748
The requests relating to the exercise of the rights recognized by Regulation 2016/679 such as the requests relating to the identity of the other Data Processors designated by Si-Net Srl as well as the requests referred to in paragraph 9 above can be sent in writing also by means of a message. e-mail sent to the firstname.lastname@example.org
This Information is effective from 25 May 2018. Si-Net Srl reserves the right to modify or simply update its content, in part or completely, also due to changes in the applicable legislation. Therefore, the interested party is invited to regularly visit this section to become aware of the most recent and updated version of the Information in order to be always updated on the Personal Data collected and on the use that Si-Net Srl makes of it.