Privacy Policy Information pursuant to Art.13 EU Regulation 2016/679
Dear visitor,
Sistematica S.p.A. as the data controller, wishes to provide you with some information on the navigation data acquired
by accessing www.grupposistematica.it, pursuant to art. 13 of EU Regulation 2016/679, in compliance with the Directive on
Electronic Communications 2009/136/EC, Directive 2002/58/EC concerning the processing of personal data and the protection of privacy
in the electronic communications sector and the General Measure of 8 May 2014 of the Guarantor for the
protection of personal data.
Place of data processing
Processing related to the website takes place at the host servers.
No data from the web service will be disseminated.
Data controller
Sistematica S.p.A.
email: info@grupposistematica.it – privacy@grupposistematica.it – phone: +39074461221
Data protection officer
Email: dpo@grupposistematica.it
Data processed
Browsing data (personal data)
– IP addresses or the domain names of computers and terminals used by users, the
URI/URL addresses of the requested resources, the time of the request, the method used in submitting the
request to the server, the size of the file obtained in response, the numerical code indicating the
status of the response given by the server (successful, error, etc.) and other parameters related to the system
operating system, device used for connection by the user, no. of clicks
The data are provided by the data subject
Purpose of processing
– establish the communication required by the user in order to be able to navigate within our
site and be able to take advantage of the services offered by our business
Stakeholders
site visitors
Legal basis for processing
Personal data:
the processing of personal data is essential to fulfill a legal obligation to which the data controller is
subject
Provision of data
mandatory – in order to navigate the site
Period of data retention
Browsing data will be retained for 3 days, subject to any need for investigation
of crimes by the judicial authority.
Categories of recipients
– information technology (IT) services
– consultants, professionals and/or companies to carry out specific entrusted activities and
regulated by formal assignments
Transfers to third countries
There are no plans to transfer data outside the EEA (European Economic Area). Should it
become necessary, the Controller assures as of now that the transfer of data outside the EU will take place
in accordance with the applicable legal provisions and the provisions of the Data Protection Authority
Data processed
Contact form (personal data)
– name, e-mail address
The data are provided by the data subject
Purpose of processing
– managing contacts and queries
– answering queries
Stakeholders
site visitors
Legal basis for processing
Personal data:
pursuant to Art. 6 co. 1(b) of the GDPR the processing of personal data is indispensable
to the performance of an agreement to which the data subject is a party
Provision of data
mandatory – inability to provide the requested service
Period of data retention
data will be kept for as long as necessary to process the request
Categories of recipients
– personnel involved at different levels
– consultants, professionals and/or companies to carry out specific activities entrusted and
regulated by formal assignments
Transfers to third countries
There are no data transfers outside the EEA (European Economic Area).
Data processed
Newsletter subscription (personal data)
– name, e-mail address
The data are provided by the data subject
Purpose of processing
– newsletter subscription
Stakeholders
users
Legal basis for processing
Personal data:
pursuant to Art. 6 co. 1 lett. b) of the GDPR the processing of personal data is indispensable
to the performance of an agreement to which the data subject is a party
Provision of data
mandatory – failure to provide or incorrect provision will result in the inability to continue in the
activities envisaged and listed in the purposes
Period of data retention
for a period of 24 months from the last transaction, after which
will be submitted to the user to remain on the mailing list
Categories of recipients
– internal staff identified
– consultants, professionals and/or companies to carry out specific entrusted activities
Transfers to third countries
There are no data transfers outside the EEA (European Economic Area).
Hosting Provider
Data related to the user’s browsing and any data collected (voluntarily given by the user) and stored directly
through www.grupposistematica.it will be stored at our IT facilities
Rights of data subjects
As a data subject, you are entitled to the rights set forth in Articles 15 et seq. of GDPR 2016/679 by addressing your requests to
Data Controller whose contact details are provided in this document. Requests will be processed as soon as possible
and in any case within one month. Data subjects have the right to obtain from the Data Controller, in the cases provided for, access to their
personal data and the rectification or deletion thereof or the restriction of the processing concerning them or to object to the processing.
Data subjects who believe that the processing of personal data relating to them is being carried out in violation of the provisions of the
Regulations have the right to lodge a complaint with the Guarantor or take appropriate legal action.
