INFORMATION TO WEBSITE USERS
(includes processing of browsing data and cookies)
The company Sicma S.p.A., with registered office in Sicma S.p.A. – C.da Cerreto, 39 – 66010 Miglianico (Ch), VAT number 00227220696, as Data Controller
INFORMS
users who connect to the website www.sicma.it, registered and unregistered, that the personal data collected by the Owner, acquired from third parties or spontaneously provided by the interested parties, will be processed lawfully and fairly, in compliance with the principles established by the European and Italian legal system. The main rules that regulate the processing of personal data are the European Regulation 679/2016 and Legislative Decree 196/2003, as amended by Legislative Decree 101/2018.
In order to ensure independent control over the effective application of the regulations in force for the protection of natural persons with regard to the processing of their personal data, the Data Controller has appointed a Data Protection Officer pursuant to art. 37 of EU Reg. 679/2016, who can be contacted at privacy@sicma.it
Definitions
|
Interested |
Natural person to whom the data processed by the Owner or the Manager belongs |
|
Holder |
the natural or legal person, public authority, service or other body which, individually or together with others, determines the purposes and means of the processing of personal data |
|
Responsible |
the natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller on the basis of a contract regulating the conditions of the assignment |
Purpose of the processing
The data processing activities collected through the website are carried out by the Data Controller at the company’s offices, in compliance with the security measures and requirements imposed by European Regulation 679/2016, by persons appointed or delegated by it (specifically selected and equipped with the necessary professionalism), with manual and computerized procedures, to allow the user a simple and rewarding browsing experience, to collect useful elements to improve the offer of products and services via the web, to execute specific requests of the interested party, for pre-contractual and contractual obligations, for ordinary administrative, financial and accounting activities, to manage customer requests during the marketing and sale of products or the provision of services, for after-sales assistance, for compliance with legal obligations.
The processing is also aimed at the elaboration of statistics in anonymous form or after a pseudonymization process. Upon request of the interested party or after obtaining specific consent, the processing may also be carried out for the detection of the degree of satisfaction, tastes, preferences and habits of the customer, for the sending of commercial information or advertising material, for direct marketing campaigns, for the issuing of loyalty cards connected to particular conditions of sale, for participation in games, competitions or prize operations, for involvement in events and demonstrations, for the provision of services, for market research and other operations directly or indirectly attributable to marketing activity. Other data may be forwarded to the Data Controller by the interested party for the possible establishment of employment relationships or commercial collaboration.
|
Browsing data |
Standard |
IP address, operating system and browser used for navigation, date and time of connection and disconnection, time spent on the site, pages visited, activity carried out, location (if the relevant service is active) and any other information made available or transmitted by the interested party’s device, based on the chosen security settings |
|
Contacts |
Standard |
Name, Surname, email address, other data sent by the interested party to the email addresses of the Data Controller or via the pre-set forms |
|
Newsletter |
Standard |
Email address of the interested party for sending periodic communications on the products, services and initiatives of the Data Controller |
|
Work with us |
Standard, Special |
Name, Surname, email address, telephone and postal contact details, previous studies and work experience, as well as any other information useful for the selection of personnel and the possible establishment of an employment relationship (the data forwarded by the interested party may include particular data in any case connected to the purposes pursued) |
|
Partnership |
Standard |
Name, surname, email address, telephone and postal contact details, other information useful for the possible establishment of a commercial collaboration relationship |
Filling out the forms on the website to receive information on products and services involves the acquisition of customer data in the Data Controller’s computer system. The information is protected by an authentication system and can only be accessed by those in possession of the relevant credentials. In other cases, the procedure generates an email message addressed to the Data Controller, which is checked based on the requests of the interested party. Communications via email involve the storage of the interested party’s email address, which is necessary to respond to the requests made. The data stored in the message is included. The Data Controller suggests not transmitting data or personal information of third parties, unless absolutely necessary.
Data of Minors
The data of minors are processed exclusively with the consent of their parents and within the limits imposed by law, without prejudice to the provisions of art. 2-quinquies, Legislative Decree 196/2003, as introduced by Legislative Decree 101/2018. The Data Controller will not be in any way responsible for any false declarations that may be provided by minors and, should it ascertain the falsity of the declaration, it will proceed to the immediate cancellation of any personal data and any information acquired.
Nature of the provision
The processing of contact data is essential to satisfy the requests of the interested party and fulfill contractual obligations. The provision is therefore necessary, otherwise the processing cannot take place. Any incorrect or insufficient communication of the requested data may result in the total or partial impossibility of executing the requests of the interested party and the possible lack of correspondence of the results of the processing to the agreements entered into or the obligations imposed by rules and regulations. Further information may be necessary for the purposes of personnel selection (professional training, previous work experience) and commercial collaboration (previous work experience, financial solvency).
Other data, however, are collected for the sole purpose of adapting navigation, promotional campaigns, offers, production and stocks, as well as, in general, the company activity, to the tastes and interests of customers. Their provision, therefore, is not mandatory and any denial to processing or revocation of consent already given does not prejudice the establishment and continuation of the main relationship.
The legal bases of the processing carried out by the Data Controller are the fulfillment of the pre-contractual and contractual phases of the relationship, the obligations imposed by law, the legitimate interest of the Data Controller to manage the data necessary to improve the offer of products and services, the consent expressed by the interested parties. It is possible to ask the Data Controller to specify the legal basis of each processing.
Retention terms
The data processed by the Data Controller, without prejudice to legal obligations, are retained until the Data Subject expressly requests their deletion and in any case periodically verified, including with automatic procedures, in order to guarantee their updating and effective compliance with the purposes of the processing. If the purpose for which they were acquired no longer applies, the data will be deleted, unless they must be processed to comply with regulatory obligations, to protect rights in court or at the express request of the Data Subject (10 years from the termination of the relationship, 12 months for CVs). At the end of the processing and following the deletion, the rights of the Data Subject can no longer be exercised.
Browsing data
The IT system and software used for the company web portal acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication products: IP addresses and domain names of the computer used by the user to connect to the site, URL (Uniform Resource Locator) of the requested resource, time of the request, method used to send the request to the server, size of the file received, numerical code used to indicate the status of the response given by the server (done or error, etc.) and other parameters relating to the operating system and the user’s computer. This information is not stored to identify the interested parties but, due to its nature, can, through processing and association with other data, allow the identification of the user. They are used to create anonymous statistics on the use of the site and to check its correct functioning. They are normally deleted immediately after processing. They can be used and provided to law enforcement and the judiciary to ascertain responsibility in the event of damage to the site or illicit acts perpetrated via the network.
Cookies
Some information regarding navigation is stored on the customer’s computer and read by the system at the next connection. This file, called “cookie” contains data that are not personal in nature, as they do not allow the specific identification of the user, but through interconnection with other data they can allow it. The information contained in cookies allows us to see the frequency of visits to a site and the activity carried out during navigation. In this way, over time, it is possible to improve the contents of the site and make it easier for the user to use. Companies that transmit content to the site or whose sites are accessible via links can also use cookies when the user selects the relevant link. In these cases, the use of cookies is not under the direct control of the Data Controller. Most browsers automatically accept cookies, but it is possible to reject them or select only some, according to the preferences set by the user. However, if the user inhibits the loading of cookies, some components of the site may stop working and some pages may be incomplete.
|
Essential technical cookies |
These are cookies necessary to ensure the correct and smooth functioning of the site: they allow navigation of pages, sharing of content, memorization of login credentials to make entry to the site faster and to keep preferences active during navigation, facilitating the browsing or purchasing experience. Without these cookies it is not possible to provide, entirely or in part, the services for which users access the site. |
|
Statistical cookies |
They allow us to understand how users use the site so that we can then evaluate and improve its functioning, in order to create increasingly appropriate content. They allow us to know which pages are most and least frequented, how many visitors there are to the site, how much time the average user spends on the site and how visitors arrive at the site. In this way it is possible to determine which are the optimal functions and the most appreciated contents and how the contents and functionality of the pages can be improved. |
|
Analysis cookies |
They are used to keep track of the searches performed by the user in order to submit products and services in line with previous navigation and searches. They are normally used for remarketing operations, through which advertising relating to consultations already performed and similar products and services is conveyed to the user during navigation. |
|
Profiling cookies |
They are tools suitable for memorizing the choices made by the user during navigation and consultation, in order to create personal profiles capable of classifying and cataloging tastes, preferences, navigation and consumption habits. Through the generation of such profiles, the user’s navigation experience can be improved but above all be oriented to his preferences, capacity and possibility of purchasing or using services. They can be deactivated without creating any obstacle or impediment to navigation. |
|
Third Part Cookies |
These are cookies used by third parties not directly controlled by the Owner. The company cannot provide guarantees regarding the use that will be made of the data, the processing of which is directly operated by an external party |
Cookie management
By selecting the OK button shown by the overlay banner, you authorize the installation of cookies on the device used by the Data Subject. You can change the cookie settings using the specific selectors or through the browser functions. It is possible to prevent the installation of third-party cookies and remove previously installed cookies, including those containing tastes, habits and preferences. To adjust or change the browser settings, you must consult the guide of the software or application manufacturer. Information on how to manage cookies on your browser is available at the addresses: Google Chrome, Mozilla Firefox, Apple Safari, Microsoft Internet Explorer, Microsoft Edge. More information on the cookies used by the site can be requested directly from the Data Controller
Third-party sites
The site, even if only periodically, may contain links to third-party sites and applications (Google Adwords, Analitycs, Youtube, Vimeo, etc.), to provide additional services and information to the user. When the user uses these links, he leaves the company site and accesses other resources that are not under the direct control of the Data Controller, who, therefore, will not be responsible for the procedures relating to navigation, security and processing of personal data operated by other sites, even in the presence of co-branding or display of the company logo. We recommend a careful examination of the security and confidentiality procedures of the site visited, which may transmit additional cookies, read those already present on the user’s hard drive and ask / acquire further personal information.
Newsletter management services
The newsletter, if present, is managed by a software that uses a database of email addresses to send communications to registered users (via the appropriate section of the site) and that provides an automatic cancellation procedure that the interested party can use independently, recalled by each communication sent by this tool.
Personnel search forms
They acquire the information necessary for an initial assessment of the candidate to decide whether to call him for an interview and to examine his actual correspondence to the position he should fill in the company. Normally, a series of standard information (name, surname, telephone and postal contact details, electronic contact details, level of education and previous work experience) is associated with the CV drawn up and produced by the candidate. If the selection is successful, the data is sent to the office responsible for hiring, otherwise it is kept for a period deemed appropriate with respect to the necessary updating by the candidate.
Partner and Franchise Search Forms
They acquire the information needed for an initial assessment of the business partner and the current business carried out, in order to make a selection before the interviews aimed at signing the contract.
Interaction with social networks and external platforms
The site, through widgets and buttons, can interact with external platforms and social networks. In this case, the information acquired depends on the settings of the profiles used by the user and not by the Data Controller. The “Like” buttons on Facebook, “Tweet” on Twitter, “Recommend” on Linkedin, etc., allow you to share the pages or topics of the site with the respective social platforms and acquire data from the interested party. More information can be acquired from the sites of the companies that offer the service. In this case, the data are not managed by the site of the Data Controller, which connects these buttons only to offer an additional service to the interested party but has no control over them.
Automated decision-making processes
The Data Controller does not use automated decision-making processes (or uses the following automated decision-making processes (processes) for the following processing (processing))
Communication and dissemination
The data processed through the site are exclusively of a common nature and are not intended for dissemination. The Data Controller does not request and has no interest in collecting and processing data classified by the Regulation as “special” (health, genetic, biometric, etc.) or “criminal”, without prejudice to legal obligations and the acquisition of CVs through the “work with us” section or sent spontaneously by the Interested Party via email (which will in any case be processed in compliance with the rules on the management of the established or potential employment relationship). The data will be communicated to third parties, who may assume, based on the type of relationship, the qualification of data controller pursuant to art. 28, EU Reg. 679/2016 or mere recipients of the communication, for activities connected to or deriving from that of the Data Controller or in fulfilling obligations deriving from laws or regulations (Institutions, Law Enforcement, Judicial Authorities, etc.). By way of example and not limited to:
- Entities that need to know the interested party’s data for purposes relating to the relationship with the Data Controller (credit institutions, insurance companies, financial intermediaries, electronic money and payment management institutions, debt collection companies, customer verification companies, communications companies, etc.);
- Controlled and/or associated companies that may access the data, to the extent strictly necessary to carry out tasks assigned by the Data Controller;
- Controlled and/or associated companies that may access the data, to the extent strictly necessary to carry out tasks assigned by the Data Controller;
- Post offices, couriers, transporters;
The updated list of data controllers is available at the Data Controller’s headquarters.
Transfer abroad
The data whose provision is optional may, within the limits of the signed consent or contractual agreements stipulated by the Data Controller, be communicated to subjects operating within the European Union or in countries that guarantee the same level of protection required by European Regulation 679/2016.
Rights of the Interested Party
The interested parties are recognized the rights referred to in articles 15 to 22 of GDPR 679/2016. In particular, the interested party has the right to access their data (art. 15) to request rectification, updating, integration (art. 16) and cancellation (art. 17), to limit their use by the Data Controller (art. 18), to obtain a copy in a structured format, commonly used and readable by an automatic device (art. 20), to oppose the processing if the conditions are met (art. 21 and 22). The rights can be exercised to the extent that the processing is not mandatory by law or regulation. Requests relating to the exercise of the rights of the interested party can be forwarded to the Data Controller at privacy@sicma.it. If the interested party is not satisfied with the response to his/her requests, he/she may lodge a complaint with the Authority for the protection of personal data. Citizens of other member states of the European Union may contact the supervisory authority of their country.