Sipec, gadget aziendali

Privacy Policy

 

 

 

Sipec Spa

via Kuliscioff 16/18 - Milan (MI)

VAT Reg. No. 04441130152      Tax code 04441130152

 

PRIVACY DISCLOSURE PURSUANT TO ARTICLE 13 OF EU REGULATION 2016/679 (GENERAL DATA PROTECTION REGULATION – GDPR)

 

Sipec Spa’s Privacy Policy conforms to the latest legislation regarding personal data protection (GDPR) and is constantly updated. Therefore, we encourage you to visit this page on a regular basis to keep in touch with the latest changes.

 

Sipec has always shown a strong commitment to the security of the data of its users/clients. This page outlines all the measures adopted by us to protect your personal data, namely:

1. What data we store 
2. How we protect your personal data
3. How we use your data, who we share them with and for what purposes
4. How data can be modified or erased.

 

 

1. What data do we store?

 

What sort of data are stored and used when browsing the Sipec.com site?

We do not record any personal data concerning site browsing before the user logs in. Using the site registration form, you can access the restricted area of the site only after due authorisation granted by our staff.

After logging in, we will be able to provide you with all the information needed to use the service. Website authentication is thus essential for making purchases. 

 

What data are stored and used after entering the site’s restricted area as a customer?

Once the login details have been given for accessing the site, financial and organisational information regarding the company will be requested, in addition to the company’s general information. This information will be used to provide the service and to carry out market studies. Some of this information, such as financial data, is supplied to us by external companies specialising in Credit information. 

Website login details are confidential and personal, and cannot be shared with third parties.

 

What data are stored and used for site browsing statistical analysis purposes?

We use Google Analytics, a service provided by Google Inc., to analyse the behaviour of site users from a statistical perspective. Google uses cookies, small text files used to analyse website behaviour.

The information obtained from these cookies is stored on Google servers. You may stop Google from saving cookies on your computer by changing your browser settings.

 

Use of cookies

In order to create a meaningful and smooth experience when visiting our website, some site functions rely on information stored in the cookies. In most cases, these cookies will be erased when the browser is closed. Other cookies will remain stored on your computer to allow us to recognise you, making it easier for you to access site functions you may request.

The browser can be configured so that notification is given for each cookie, giving you the possibility of choosing whether to accept or refuse the storage of a specific cookie. If you decide to refuse some cookies on our website, some parts of the site may not work properly.

 

 

2. How do we protect your personal data?

Personal data supplied by users when registering with the site or via other ways of requesting services are collected and managed with the utmost care by Sipec staff, who are always aware of the latest rules governing personal data protection.

Data are collected on servers protected by adequate security measures, ensuring that these servers cannot be accessed by unauthorised employees or by external entities.

The site is protected by means of an SSL certificate (https). SSL technology is used to encrypt information on servers, making it impossible for unauthorised persons to retrieve such data.

 

Personal data will be managed and stored on servers located inside the European Union. These data will not be transferred outside the European Union. It is hereby agreed that if necessary the Data Controller will have the option of re-locating servers in Italy and/or the European Union and/or non-EU countries. In such cases, the Data Controller hereby guarantees that the transfer of data to outside the European Union will take place in compliance with applicable law provisions, entering if necessary into agreements that ensure a suitable level of protection and/or adopting the standard contractual clauses as provided for by the European Commission. 

 

The personal data given by you will be processed by the Data Controller using hard-copy, electronic or online means.  

 

3. How do we use data, who do we share them with and for what purposes?

 

Under no circumstances will we sell or rent User Data to third parties. 

 

Your personal data are processed in compliance with the provisions of Article 6(1)(b) of the GDPR for the following purposes: 

1. Process and handle your requests submitted via the website, by mail or other online and offline contacts;
2. Send communications, promotions, updates, market surveys via mail or newsletter;
3. Fulfil pre-contractual and contractual obligations arising from the provision of the service requested by you;
4. Fulfil all legal, regulatory, EU and supervisory authority obligations; 
5. Exercise the rights of the Data Controller, e.g. the right of defence in legal claims. 

 

The processing of your personal data involves the following steps: collection, registration, organisation, storage, access, processing, rectification, selection, retrieval, comparison, use, interconnection, blocking, communication, erasure and destruction of data.

 

Your data may be accessed for the above purposes by:

• Employees and collaborators of the Data Controller, in their capacity as data agents
• External entities for accounting, tax and payment management purposes
• Suppliers, hardware and software helpdesk personnel providing outsourced services to the Data Controller
• Consulting firms used by the Data Controller.

 

Data storage methods

1. With regard to point 3.a, the personal data provided will be stored for the time needed to deal with the request. For denied requests, data will in any case be kept for no more than 10 years, and no direct operations will be performed on them.
2. With regard to point 3.b, the personal data provided will be kept for the time needed for newsletter delivery purposes, until the data subject submits an unsubscribe request.
3. With regard to point 3.c, the data will be kept for the entire duration of the contract, and for the 10 year period after its conclusion for accounting and tax purposes, in accordance with applicable law provisions.
4. With regard to point 3.d/e, the data will be stored for the time required under applicable law provisions.

 

4. How can data be modified or erased?

 

In your capacity as data subject, you are entitled to the rights as under Article 15 of the GDPR. In particular, you have the right to: 

 

1. Obtain confirmation of whether or not personal data concerning you are being processed; 
2. Obtain information about: (a) the source of personal data; (b) processing purposes and methods; (c) the logic applied for processing using electronic devices; (d) the data controller, data processors and designated representatives in accordance with Article 3(1) of the GDPR; (e) the recipients or categories of recipients to whom personal data may be disclosed or who may acquire knowledge thereof, in their capacity as designated representatives in the State territory, data processors or data agents; 
3. Obtain: (a) the updating, correction or, if in your interests, integration of your data; (b) the erasure, anonymisation or blocking of data processed in breach of the law, including data that do not need to be kept for those purposes for which the data were collected or subsequently processed; (c) acknowledgement that the operations as under a) and b) above have been notified, including with regard to their content, to those to whom the data have been disclosed, except when this is impossible to achieve or requires the use of means that are manifestly disproportionate in respect of the protected right;  
4. Object, in full or in part: (a) on legitimate grounds, to the processing of personal data concerning you, even if relevant to the purpose of collection; (b) to the processing of personal data concerning you for the purposes of sending advertising materials or direct sales materials or for conducting market researches or commercial communications. If applicable, you also have the rights as per articles 16-21 of the GDPR (right to rectification, right to be forgotten, right to restriction of processing, data portability of contractual data and raw browsing data, right to object), as well as the right to lodge a complaint before the Supervisory Authority.

 

You may exercise these rights at any time by sending an email, fax or registered letter (with advice of receipt) to the Data Controller ( This email address is being protected from spambots. You need JavaScript enabled to view it. )

The Data Controller is Sipec Spa, 

Address: via Anna Kuliscioff 16/18, 20152, Milan (MI), ITALY

Tel. 024839111

Fax: 0248391150

VAT Reg./Tax ID No. 04441130152

certified email: This email address is being protected from spambots. You need JavaScript enabled to view it.

The updated document concerning Sipec’s GDPR procedures is kept at the Data Controller’s registered office.