Privacy

WHY THIS NOTICE
This page describes the management methods of the site in relation to the processing of personal data of users who consult it.
This information is also provided pursuant to EU General Regulation 2016/679 (hereinafter "GDPR") regarding the protection of personal data to those who interact with the web services of SD Impianti Tecnologici s.r.l.s., accessible electronically from the address: www.sdimpiantitecnologici.it (hereinafter "website").
This information is provided only for the website www.sdimpiantitecnologici.it of SD Impianti Tecnologici s.r.l.s. and not for other websites that may be consulted by the user via links.
This information is also based on Resolution no. 13 of March 1, 2007, "On the Internet and E-mail," issued by the Italian Data Protection Authority (Garante della Privacy), to identify certain minimum requirements for the collection of personal data online, and, in particular, the methods, timing, and nature of the information that data controllers must provide to users when they connect to web pages, regardless of the purpose of the connection. The Recommendation and a summary description of its purposes are available on the official website of the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).
Consulting this site may result in the processing of data relating to identified or identifiable persons.

LOCATION OF DATA PROCESSING
The processing operations connected to the web services of this site take place at the registered office of SD Impianti Tecnologici s.r.l.s., with registered office in Via Raiale 110 - 65128 Pescara (PE) and are handled only by technical personnel of the Office in charge of processing, or by any persons in charge of occasional maintenance operations.
The hosting/housing/cloud servers are located at ARUBA S.p.A., which is located in the European Economic Area and operates in compliance with European standards (Privacy Policy).
No data deriving from the web service is communicated or disseminated.

TYPES OF DATA PROCESSED
Navigation data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is essential. implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters relating to the operating system and the user's IT environment.
This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to verify its correct functioning and is deleted immediately after processing. The data may be used to ascertain liability. in the event of hypothetical computer crimes against the site: except for this eventuality, web contact data is currently not retained for more than 30 days.

Data provided voluntarily by the user
To use the Services offered by SD Impianti Tecnologici s.r.l.s., you may be asked to complete contact request forms and/or registration forms, containing fields for the provision of mandatory and optional personal data. Providing the personal data indicated as mandatory is necessary to complete the contact request or registration process; therefore, failure to provide such data, or partial provision of such data, makes it impossible to register for and/or use the Services. Providing non-mandatory data is optional; therefore, failure to provide such data, or partial provision of such data, does not prevent you from registering for and/or using the Services.
The personal data requested by SD Impianti Tecnologici s.r.l.s. The terms and conditions for registering for the Services may differ depending on the registration forms used.
The voluntary and explicit sending of e-mails to the addresses indicated in the various access channels of this site does not imply a request for consent and involves the acquisition of the sender's address and data, necessary to respond to requests, as well as any other personal data included in the message. This data is voluntarily provided by the user when requesting the service.

COOKIES
As further explained in the "Cookie Policy," the Website uses "cookies," defined as short text files (letters and/or numbers) that allow the web server to store information on the client (the browser) to be reused during the same visit to the website (session cookies) or for subsequent visits to the same website (persistent cookies).

For further information, please visit the Cookie Policy page to set the types of cookies used.

PURPOSE AND LEGAL BASIS OF DATA PROCESSING
The Personal Data provided through the Site will be processed for the following purposes:

Purposes aimed at marketing products and services available through the Site (e.g., contact requests via the forms on the site, account registration, purchases of products and services, etc.);
Purposes of research/statistical analysis on aggregate or anonymous data, therefore without the possibility of identifying the user, aimed at measuring the functioning of the Site and its operational functions, including the resolution of any technical problems;
Purposes aimed at preventing or preventing unauthorized access to the Site and its operational functions; Fraudulent or improper use that may damage the site or compromise the security of operations;
Purposes related to the fulfillment of a legal obligation to which we are subject;
Purposes necessary to ascertain, exercise, or defend a right in court or whenever judicial authorities exercise their jurisdictional powers.
Purposes for sending advertising, informational, promotional materials, and periodic updates on SD Impianti Tecnologici s.r.l.s. initiatives, services, products, and events (so-called marketing)

The processing of personal data for the purposes referred to in points a) to e) above does not require your express consent (Article 24, letters a) and b) of the Code and Article 6, letters b) and e) of the GDPR) as they are part of a service contract, and the legal basis for the processing is the Data Controller's legitimate interest in fulfilling contractual obligations towards the data subjects based on their respective requests.

The processing of personal data for the purposes referred to in point f) above requires your express consent (Article 23 of the Code and Article 7 of the GDPR). This consent concerns both the automated and traditional communication methods described above.
You will have You always have the right to easily and freely object, in whole or in part, to the processing of your data for these purposes, for example by excluding automated contact methods and expressing your wish to receive commercial and promotional communications exclusively through traditional contact methods.
The legal basis for the processing is based on the data subject's consent.

DETAILS ON THE PROCESSING OF PERSONAL DATA
Personal Data is collected for the following purposes: and using the following services:

Direct contact
Contact form
By filling out the contact form with their data, the User consents to their use to send and receive requests for information or quotes or any other kind indicated in the form header.
Personal data collected: email.

Contact by telephone
Users who have provided their telephone number may be contacted for informational or promotional purposes by SD Impianti Tecnologici s.r.l.s., as well as by telephone. such as fulfilling support requests.
Personal Data collected: telephone number.

Interaction with social networks and external platforms
This type of service allows interaction with social networks, or other external platforms, directly from the pages of the website.
The interactions and information acquired from the website are in any case subject to the User's privacy settings for each social network.
If a service for interaction with social networks is installed, it is possible that, even if Users do not use the service, it may collect traffic data relating to the pages on which it is installed.

Facebook Like button and social widgets (Facebook, Inc.)
The "Like" button Facebook and social widgets are services for interacting with the Facebook social network, provided by Facebook, Inc.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA -Privacy Policy.

YouTube embedded videos (Google Inc.)
YouTube embedded videos, i.e. Videos directly present within the website are interaction services with the YouTube social network, provided by Google Inc.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA - Privacy Policy - Terms of Use.

Google Maps (Google Inc.)
The Google Maps on this website are interaction services with the Google Maps system, provided by Google Inc.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA - Privacy Policy - Terms of Use.

Platform Monitoring
This type of service allows the website to monitor the use and behavior of the website, so as to improve its performance and functionality, maintenance, or troubleshooting.
The Personal Data processed depends on the characteristics and implementation methods of these services, which by their nature filter the website's activity.

Statistics
The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to track User behavior.

Google Analytics (Google Inc.)
Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google uses the Personal Data collected for the purpose of tracking and examining the use of the website, compiling reports and sharing them with other Google services.
Google may use the Personal Data to contextualize and personalize the ads of its own advertising network. The website contains IP Anonymization service active
Personal Data collected: Cookies and Usage Data.
Place of processing: USA -Privacy Policy-Opt Out.

Google AdWords Conversion Tracking (Google Inc.)
Google AdWords Conversion Tracking is a service provided by Google Inc. a statistics service provided by Google Inc. that connects data from the Google AdWords advertising network with actions performed on the website.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA - Privacy Policy.

Facebook Ads Conversion Tracking (Facebook, Inc.)
Facebook Ads Conversion Tracking is a web analysis service provided by Google Inc. that connects data from the Google AdWords advertising network with actions performed on the website. A statistics service provided by Facebook, Inc. that connects data from the Facebook advertising network with actions performed on the website.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA - Privacy Policy.

Statistics collected directly
The website may use an internal statistics system, which does not involve third parties, for further statistics.
Personal Data collected: Cookies and Usage Data.

OPTIONAL DATA PROVISION
Except as specified for navigation data, the user is free to provide personal data in the request forms or otherwise indicated in contacts with the Office to request orders, materials, information, or other communications.
Therefore, your refusal, even partial, to provide such data would make it impossible to establish and manage the relationship itself and to provide the requested service.

METHODS DATA PROCESSING
Data processing occurs both using paper media and with the aid of automated electronic tools (via our IT system, in which case the data will be recorded on protected computer media) for the time strictly necessary to achieve the purposes for which they were collected.

Such media, both electronic and paper, will be properly maintained and protected by us for the entire time necessary for processing through procedures that guarantee their security and confidentiality to prevent data loss in compliance with the security measures referred to in Article 32 of GDPR 2016/679, from illicit or incorrect use, and from unauthorized access.

DURATION OF PROCESSING AND PERIOD OF RETENTION OF PERSONAL DATA
The data collected is processed for the time necessary to achieve the purposes for which it was collected, and in any case no longer than the time required by law. Data required for tax purposes is retained until the assessments relating to the corresponding tax period are finalized, therefore for at least 10 years and longer if the relevant year is not yet statute-barred for tax purposes. Upon expiration of this period, the data will be deleted or anonymized, unless there are additional purposes for its retention (e.g., warranty obligations, tax obligations).
Personal data that is no longer necessary, or for which there is no longer a legal basis for its retention, is irreversibly anonymized (and can thus be retained) or securely destroyed.
Below we report the retention periods in relation to the different purposes listed above:

Fulfillment of contractual obligations: Data processed to fulfill any contractual obligation may be retained for the entire duration of the contract and in any case for no longer than 10 years thereafter, in order to verify any outstanding payments, including accounting documents (e.g., invoices).
Operational management and strictly related purposes for accessing the website: Data may be retained for 12 months from the date we received your last consent for this purpose (with the exception of opting out of receiving further communications), after which it will be destroyed or anonymized.
Customer satisfaction survey purposes: Data processed for this purpose may be retained for 12 months from the date we received your last consent for this purpose. (except for opting out of receiving further communications).
Disputes: In the event that we need to defend ourselves, take action, or even make claims against you or third parties, we may retain the personal data we deem reasonably necessary to process for such purposes, for as long as such a claim can be pursued.
If the data collected is processed on the basis of explicit consent, it will be processed until such consent is revoked, or until the service provided ends. Failing this, it will be retained for a maximum period of 12 months, after which it will be destroyed or anonymized.

SOCIAL NETWORK PLUGINS
This site may also incorporate plugins and/or buttons for social networks, to allow easy sharing of content on your favorite social networks. These plugins are programmed so as not to set any cookies when you access the page, to safeguard your privacy. Cookies are set, if required by the social networks, only when the user actually and voluntarily uses the plugin. Please note that if you browse while logged in to the social network, you have already consented to the use of cookies conveyed through this site when you registered with the social network. The collection and use of information obtained through the plugin are governed by the respective privacy policies of the social networks, to which we ask you to refer.

RIGHTS OF DATA SUBJECTS
We inform you that, in your capacity as data subject, pursuant to Articles 15 to 23 of GDPR 2016/679, you have the rights listed below, which you may exercise by submitting a specific request to the Data Controller and/or the Data Processor, in addition to the right to lodge a complaint with a supervisory authority:

Art. 15 - Right of access
The data subject has the right to obtain from the data controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and information relating to the processing.

Art. 16 - Right to rectification
The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Art. 17 - Right to erasure (right to be forgotten)
The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay, and the controller shall have the obligation to erase personal data without undue delay.

Art. 18 - Right to restriction of processing
The data subject shall have the right to obtain from the controller restriction of processing where one of the following applies:

The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
The controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims;
The data subject has objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of the controller override those of the data subject.

Art. 20 - Right to data portability
The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided.
In exercising his or her right to data portability pursuant to paragraph 1, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible.

Art. 21 - Right to object
The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1), including profiling based on those provisions.

Art. 22 - Right not to be subject to automated decision-making, including profiling
The data subject has the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.

COMMUNICATION AND DISSEMINATION
We will not "disseminate" your data (this term means disclosing it to unspecified parties in any way, including by making it available or consulting it, unless the data subject specifically consents in a separate document).

We may, however, "communicate" your data (this term means disclosing it to one or more specific parties) in the following cases:

to persons appointed within SD Impianti Tecnologici s.r.l.s. to process your data, and in particular to administrative and commercial office staff;
to persons who can access the data pursuant to provisions of law, regulation, or EU legislation, within the limits set by such provisions;
to persons who need to access your data for purposes ancillary to the relationship between you and us, to the extent strictly necessary to carry out the ancillary tasks assigned to them;
to our consultants, to the extent necessary to carry out their duties at SD Impianti Tecnologici s.r.l.s., or under an Outsourcing arrangement, as external Data Processors subject to our letter of appointment imposing the duty of confidentiality and security in the processing of your data.

HOW TO EXERCISE YOUR RIGHTS
You may: You may exercise your rights or withdraw your consent at any time by sending a communication to the addresses and using the methods indicated below.

THE "DATA CONTROLLER"
We hereby inform you that the Data Controller is SD Impianti Tecnologici s.r.l.s., represented by its pro tempore Legal Representative, with registered office at Via Raiale 110 - 65128 Pescara (PE), with elective domicile at the headquarters of SD Impianti Tecnologici s.r.l.s., to whom communications for the exercise of the rights granted to the data subject pursuant to Articles 15 to 23 of the GDPR must be sent by registered letter, certified email, or email, where a complete list of entities to whom the data may be communicated is also available.
Requests should be addressed to: info@sdimpiantitecnologici.it, certified email: sdimpiantitecsrls@pec.it - Telephone: +39 327 47 63 189

This privacy policy is updated as of February 10, 2020

Reasons to Choose Us