About us and what we do with your personal data 

Sisma S.p.A., with registered office at Via Industria 1, (36013) Piovene Rocchette (VI), henceforth Data Controller, protects the confidentiality of your personal data and guarantees the necessary protection from any event that may cause them to be at risk of breach.

To this end, the Data Controller implements policies and practices regarding the collection and use of personal data and the exercise of the rights recognised by the applicable legislation. The Data Controller is responsible for updating the policies and practices adopted for the protection of personal data whenever necessary and in any case in the event of regulatory and organisational changes that could affect the processing of your personal data. 

The Data Controller has appointed a Data Protection Officer (DPO) who you can contact if you have questions about the policies and practices adopted: dpo@sisma.com 

How does the Data Controller collect and process your data? 

The Data Controller collects and/or receives information about you, such as: IP address and personal identification data (such as name, surname, email address) provided while browsing this website. This information is used by the Data Controller to follow up on the management of the site and, subject to your consent, to subscribe to the promotional newsletter. The communication of your personal data takes place mainly towards third parties and/or recipients whose activity is necessary for the performance of the activities related to the aforementioned purposes, and also to meet certain legal obligations. Any communication that does not comply with said purposes will be subject to your consent in advance.

Your personal data will not be disseminated or disclosed in any way to undetermined or unidentifiable parties, not even as third parties. Your personal information will be processed:

1. to subscribe to the newsletter to send promotional communications by the Data Controller

Subject to your consent, your data may be processed for sending promotional newsletters (commercial information, invitations to events, etc.) concerning the services offered by the Data Controller. The processing of your data (such as name, surname, email address) can be done by email. The processing in question can be carried out if:

1. you give your consent for use of the data, also with reference to the methods of communication, both traditional and automated, with which the processing takes place;
2. you have not objected to the processing and/or if it is the case, you have not specifically and separately objected to sending the communications through traditional methods and/or through automated means.

What happens if you do not give your consent to the processing of personal data to subscribe to the newsletter to send promotional communications by the Data Controller?

The processing of your personal data will not take place for this purpose. If you have given your authorisation and you subsequently withdraw it or object to the processing for this purpose, your data will no longer be processed for promotional activities.

How, where and for how long are your data stored? 

The processing of your data takes place through both electronic and manual means and tools made available to the parties acting under the authority of the Data Controller and who have been authorised and trained for the purpose. Personal data are stored, if necessary in electronic archives protected by effective and adequate security measures to counteract the risks of breach considered by the Data Controller.

Personal data may be transferred outside the European Economic Area, and the following safeguards are ensured pursuant to Articles 45 et seq. of the GDPR:

• application of the Data Privacy Framework;
  • Standard Contractual Clauses;
  • Adequacy Decision.

The personal data processed by the Data Controller for the purposes of subscribing to the newsletter with promotional content will be kept for 24 months by the Data Controller unless the consent given is withdrawn and/or you object to the processing.

What are your rights? 

In accordance with the time limits established for the processing of personal data concerning you, the rights that are recognised allow you to always have control over your data. Your rights are those of: 

• access;
• rectification;
• erasure;
• restriction of processing;
• objection to processing;
•  

Your rights are guaranteed without any specific duties or formalities needed to request their exercise which is essentially free of charge. 

You have the right: 

• to obtain a copy, also in electronic format, of the data for which you have requested access. If you need to request additional copies, the Data Controller may charge you a reasonable fee; 
• to obtain the erasure of the same or the restriction of processing or also the updating and rectification of your personal data and at your request, that third parties/recipients should comply with this request in the event they receive your data, unless there are legitimate reasons that override those that led to your request (e.g. environmental investigations or reduction of a risk determined by an emergency managed for them through the Data Controller); 
• to obtain any useful communication regarding the activities carried out following the exercise of your rights without delay and in any case, within one month of your request, unless extended and justified, for up to two months, which must be duly communicated to you.
• For any further information and in any case to send your request, you must contact the Data Controller at privacy@sisma.com.

How can you lodge a complaint? 

Without prejudice to any other administrative or judicial action, you can lodge a complaint with the competent supervisory authority, i.e. the authority that carries out its duties and exercises its powers in Italy, where you have your habitual residence or work, or if not in Italy, in the Member State where the breach of Regulation (EU) 2016/679 occurred.  

Any update of this privacy statement will be communicated to you promptly and by appropriate means and will also be communicated to you if the Data Controller continues to process your data for purposes other than those referred to in this privacy statement before proceeding and in time to give your consent if necessary.

GIVING CONSENT 

If you have read this information notice and understood its content, the Data Controller would like to know if you consent to subscribe to the newsletter to send promotional communications by the Data Controller by email

c  YES, I give my consent

c  NO, I do not give my consent

Piovene Rocchette (VI), ___/___/______

                                                                                               ______________________________________

                                                                                                                           signature