Site: https://sicomitalia.com

General informations

The company informs data subjects (Art.4, c.1 del GDPR) of the following general profiles, valid for all areas of processing:

• all data processing activities are carried out in compliance with current regulations on privacy (Reg.Ue 2016/679 &"GDPR" and D.Lgs.196 / 2003, as amended and integrated by Legislative Decree 101/18);
• all the data processed in a lawful, correct and transparent manner, in compliance with the general principles established by Art.5 of the GDPR;
• specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access, pursuant to Article 32 of the GDPR.

Data Controller and Data Protection Officer

The Data Controller is the undersigned company (in person of the legal representative), which can be contacted for any information regarding privacy or to exercise the rights listed below, at the following addresses:

DATA CONTROLLER

Name: Sicom Italia Srl
Email: info@sicomitalia.com

DATA PROTECTION OFFICER

Name: Galli Data Service Srl
Email: dpo@gallidataservice.com

Rights of the data subjects

• the right to request the presence and access to personal data (Art.15 &"Right of access")
• the right to obtain the correction / integration of incorrect or incomplete data (Art.16 &"Right of rectification")
• the right to obtain, if there are justified reasons, the cancellation of data (Art.17 &"Right to cancel")
• the right to obtain the processing limitation (Art.18 &"Right to limitation")
• the right to receive data in a structured format (Art.20 &"Right to portability)
• the right to oppose the processing and automated decision-making processes, including profiling (Art.21, 22)
• the right to revoke a previously granted consent;
• right to present, in case of non-reply, a complaint to the Data Protection Authority.

Object of the processing

The company processes personal identifying data of customers / suppliers (for example, name, surname, company name, personal / fiscal data, address, telephone, e-mail, bank and payment details) and its operative contacts (name surname and data contact information) acquired and used for managing the services provided by the company.

Purpose and legal basis of processing

Data are processed for:

• conclude contractual / professional relationships;
• fulfill the pre-contractual, contractual and tax obligations deriving from existing relationships, as well as manage the necessary communications connected to them;
• fulfill the obligations established by law, by a regulation, by the community legislation or by an order of the Authority
• exercise a legitimate interest of the Controller (for example: the right of defense in court, the protection of credit positions, the ordinary internal needs of an operational, managerial and accounting nature).

Failure to provide the aforementioned data will make it impossible to establish the relationship with the Controller. The aforementioned purposes represent, pursuant to Article 6, commi b, c, f, suitable legal bases for the lawfulness of the processing. If it is intended to carry out treatments for different purposes, a specific consent will be required from the interested parties.

Methods of the processing and data retention

The processing of personal data is carried out by means of the operations indicated in Art. 4 n. 2) GDPR and exactly as: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion and destruction of data. Personal data are subjected to both paper and electronic processing. The Data Controller will process personal data for the time necessary to fulfill the purposes for which it was collected and related legal obligations.

Scope of processing

The data are processed by internal subjects regularly authorized and instructed pursuant to Article 29 of the GDPR. It is also possible to request the scope of communication of personal data, obtaining precise indications on any external subjects (consultants, technicians, banks, transporters, etc.). The data are not normally disclosed or transferred outside the EU (they may be transferred outside the EU only in compliance with the conditions set out in Chapter V of the GDPR, aimed at ensuring that the level of protection of the persons concerned is not affected “Art .45 Transfer on the basis of an adequacy decision, Art.46 Transfer subject to adequate guarantees, Art.47 Binding company rules, Art.49 Specific derogations &"). The data are not subject to automated processes that produce significant consequences for the data subject.