{"version":"1.0","provider_name":"SISMA","provider_url":"https:\/\/www.sisma.com\/en\/","title":"Full Privacy Statement \u2013 Suppliers - SISMA","type":"rich","width":600,"height":338,"html":"<blockquote class=\"wp-embedded-content\" data-secret=\"EPKXwpF6xz\"><a href=\"https:\/\/www.sisma.com\/en\/full-privacy-statement-suppliers\/\">Full Privacy Statement \u2013 Suppliers<\/a><\/blockquote><iframe sandbox=\"allow-scripts\" security=\"restricted\" src=\"https:\/\/www.sisma.com\/en\/full-privacy-statement-suppliers\/embed\/#?secret=EPKXwpF6xz\" width=\"600\" height=\"338\" title=\"&#8220;Full Privacy Statement \u2013 Suppliers&#8221; &#8212; SISMA\" data-secret=\"EPKXwpF6xz\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\" class=\"wp-embedded-content\"><\/iframe><script>\n\/*! This file is auto-generated *\/\n!function(d,l){\"use strict\";l.querySelector&&d.addEventListener&&\"undefined\"!=typeof URL&&(d.wp=d.wp||{},d.wp.receiveEmbedMessage||(d.wp.receiveEmbedMessage=function(e){var t=e.data;if((t||t.secret||t.message||t.value)&&!\/[^a-zA-Z0-9]\/.test(t.secret)){for(var s,r,n,a=l.querySelectorAll('iframe[data-secret=\"'+t.secret+'\"]'),o=l.querySelectorAll('blockquote[data-secret=\"'+t.secret+'\"]'),c=new RegExp(\"^https?:$\",\"i\"),i=0;i<o.length;i++)o[i].style.display=\"none\";for(i=0;i<a.length;i++)s=a[i],e.source===s.contentWindow&&(s.removeAttribute(\"style\"),\"height\"===t.message?(1e3<(r=parseInt(t.value,10))?r=1e3:~~r<200&&(r=200),s.height=r):\"link\"===t.message&&(r=new URL(s.getAttribute(\"src\")),n=new URL(t.value),c.test(n.protocol))&&n.host===r.host&&l.activeElement===s&&(d.top.location.href=t.value))}},d.addEventListener(\"message\",d.wp.receiveEmbedMessage,!1),l.addEventListener(\"DOMContentLoaded\",function(){for(var e,t,s=l.querySelectorAll(\"iframe.wp-embedded-content\"),r=0;r<s.length;r++)(t=(e=s[r]).getAttribute(\"data-secret\"))||(t=Math.random().toString(36).substring(2,12),e.src+=\"#?secret=\"+t,e.setAttribute(\"data-secret\",t)),e.contentWindow.postMessage({message:\"ready\",secret:t},\"*\")},!1)))}(window,document);\n\/\/# sourceURL=https:\/\/www.sisma.com\/wp-includes\/js\/wp-embed.min.js\n<\/script>\n","description":"About us and what we do with your personal dataSisma S.p.A., with registered office in Via Industria 1, (36013) Piovene Rocchette (VI) (hereinafter also the Data Controller), in its capacity as data controller, is concerned with the confidentiality of your personal data and guarantees that they will be protected against any event that may put them at risk of breach.To this end, the Data Controller implements policies and practices regarding the collection and use of personal data and the exercise of the rights recognised by the applicable legislation. The Data Controller is responsible for updating the policies and practices adopted for the protection of personal data whenever necessary and in any case in the event of regulatory and organisational changes that could affect the processing of your personal data. The Data Controller has appointed a Data Protection Officer (DPO) who you can contact if you have questions about the policies and practices adopted: dpo@sisma.com How and why does the Data Controller collect and process your personal data?The Data Controller collects and\/or receives information about you, such as: name, surname tax code or VAT number place and date of birth address email telephone number identification code current account number data relating to criminal convictions and\/or offences exclusively in the case of litigation The personal data concerning you will be processed for the following purposes: 1) the management of the contractual supply relationship and the consequent obligations, including regulatory Purpose Legal basis \u2013 the management of the contractual relationship in all its phases, from negotiations to its definition, whatever the cause \u2013 monitoring and updating of supply conditions and\/or services and assignments \u2013 registration, invoicing and accounting Carrying out contractual and pre-contractual activities Adempimento di obblighi di legge e dipendenti dal contratto e dal rapporto instaurato, quali, tra gli altri, quelli discendenti da: \u2013 Presidential Decree n. 633\/1972 and subsequent amendments. \u2013 Presidential Decree n. 600\/1972 and subsequent amendments. \u2013 Code of Ethics of the Owner Fulfillment of economic, financial and social reporting obligations Your data may also be collected from third parties such as, for example: other data controllers, for example companies in the Group to which the Data Controller belongs; IT service provider. I dati che La riguardano possono essere ottenuti mediante la consultazione di: lists kept by public or equivalent bodies or under the control of the public authority on the basis of specific national legislation. 2) for communication to third parties and for dissemination Purpose Legal basis comunicazione a terzi quali: \u2013 societ\u00e0 del Gruppo a cui appartiene il Titolare \u2013 Suppliers possibly involved in administrative and accounting management IT consultants \u2013 Public bodies Carrying out contractual and pre-contractual activities Fulfillment of obligations arising from the contract Compliance with legal obligations, including those deriving from: \u2013 Presidential Decree n. 633\/1972 and subsequent amendments. \u2013 D.P.R. n. 600\/1972 Fulfillment of transparency and economic-social reporting obligations The Data Controller does not transfer your personal data abroad (non-EU countries). Your personal data may be disseminated and disclosed through the Data Controller&#8217;s websites, where lists of suppliers and consultants are published in accordance with the Code of Ethics and the obligations of transparency and economic-social reporting.Disclosure and disclosure concern the categories of data whose transmission and\/or disclosure are necessary for the performance of the activities and purposes pursued by the Data Controller in managing the established relationship. The relevant processing does not require the data subject&#8217;s consent if it is required by law or to fulfill obligations arising from the contractual relationship,or if another exclusion applies (in particular, application of the provisions of the Code of Ethics and\/or the Data Controller&#8217;s legitimate interest), expressly provided for or dependent on the laws and regulations applied by the Data Controller, or through third parties identified as data processors; 3) for IT security activities Purpose Legal basis \u2013 control and monitoring of the services displayed online and on the platforms belonging to the Data Controller and made available to you also by virtue of the activities carried out on behalf of the Data Controller (access to reserved areas, websites, email inbox, administration of the systems in use, etc.) \u2013 implementation of procedures for detecting and notifying personal data breaches Carrying out activities dependent on the established relationship Fulfillment of legal obligations (detection and notification of data breach events) Legitimate interest How, where and for how long is your data stored?HowData processing is carried out using paper or computerized procedures by specifically authorized internal personnel. These personnel are granted access to your personal data to the extent and within the limits necessary to carry out the processing activities concerning you.The Data Controller periodically verifies the tools used to process your data and the security measures implemented for them, which are constantly updated. It verifies, also through authorized personnel, that no personal data is collected, processed, archived, or retained that is unnecessary or whose processing purposes have been fulfilled. It verifies that thedata is stored with guarantees of integrity and authenticity and that it is used for the purposes of the processing actually performed.The Data Controller guarantees that the data, even after verification, is found to be excessive or irrelevant and will not be used, except for the possible retention, in accordance with the law, of the deed or document containing it. WhereThe data is stored in paper, computer, and electronic archives located within the European Economic Area, and adequate security measures are ensured. Your personal data may be transferred to the following non-EU countries, fully complying with the guarantees required by European legislation:\u2022 USA, existence of an adequacy decision, Commission Implementing Decision (EU) 2016\/1250 of 12 July 2016 pursuant to Directive 95\/46\/EC of the European Parliament and of the Council on the adequacy of the protection provided by the EU-US Privacy Shield [notified under document C(2016) 4176]; MEXICO: existence of standard contractual clause no. 27 December 2004 no. 50071\/2004; T\u00fcrkiye: existence of standard contractual clause no. 27 December 2004 no. 50071\/2004; RUSSIA: existence of standard contractual clause of 5 February 2010 n\u00b02010\/87; CHINA: existence of"}