The company Sansedoni Siena S.p.A, with registered office at Via Garibaldi 60, Siena (SI), (53100), owner of the website www.sansedoni.com, hereby provides information on the management of the same in relation to the processing and protection of personal data of the subjects (users) who use it, either by directly accessing it from the home page or from its internal pages.
This document provides information in compliance with article 13 of Legislative Decree no. 196 of 30 June 2003 (Code regarding the protection of personal data). This information shall be used exclusively for the website www.sansedonispa.it of which the company is the owner, and not for other sites visited by the user through any link activated within the pages of said website. Data referring to identified or identifiable persons can be collected by simply browsing the site.
The data controller is the company Sansedoni Siena S.p.A., with registered office at Via Garibaldi 60, Siena (SI), (53100).
An updated list of supervisors, appointed by the Owner pursuant to art. 29 Legislative Decree no. 196/2003 is available at the registered office of the Owner. For any communication under articles 7 et seq. of Leg. Dec. no. 196/2003 as amended and supplemented the Owner provides the following email address firstname.lastname@example.org
The computer systems and software procedures used for the functioning of the website acquire, during their normal use, certain personal data, the transmission of which is implicit when using the Internet communication protocols.
This information is collected not in order to be associated with identified data subjects, but by their nature could, through processing and associations with data held by third parties, allow the identification of users.
This category of data includes IP addresses or domain names of computers used by users connecting to the site, URI (Uniform Resource Identifier) addresses of resources requested, the time of request, the method used to submit the request to the server, the size of the file obtained in reply, the numeric code indicating the state of the response given by the server (received, error, etc.) and other parameters regarding the operating system and the user’s computer environment.
The data so collected could be used to ascertain responsibility in the event of any computer-related offences that damage the site.
Data provided directly by the user:
The optional, explicit and voluntary mailing of data as requested by the various sections of this site are used for the purpose of processing the user’s requests (including but not limited to: cases in which information or clarification is requested by writing to the email addresses found on the site, either in the home page or in the internal pages – or when curriculum vitae are spontaneously sent for the purpose of applying for an employment position, or when direct calls are made or faxes sent to the numbers indicated in the “contacts” section). This particularly applies to data entered by companies and professionals in the specific pages for registration required to request and apply for training.
The site contains specific information regarding special services requested by the user.
NATURE OF DATA PROVISION
Browsing data is processed as it is required to start IT and web protocols: the conferment of the personal data by the users is free and optional.
The data collected through this site is processed with IT and web procedures. Data of a technical nature is kept with the company’s servers to which all the safety measures provided for by Legislative Decree 196/2003 and enclosures are guaranteed.
No personal data of the user is acquired by the site for this purpose. Cookies are not used for the transmission of information of a personal nature, nor are ‘persistent’ cookies of any type used, or any system for the tracing of users.
The use of session cookies (that are not persistently stored in the user’s computer memory and vanish when the browser is closed) is strictly limited to the transmission of session identifiers (made up of random numbers generated by the server) necessary to allow the safe and efficient exploration of the site.
The session cookies used in this site do not resort to other IT techniques that may potentially put at risk the confidentiality of the user’s browsing and do not allow the acquisition of the user’s identifying personal data.
The Owner uses certain cookies as described in detail in the information sheet on cookies on the company’s website.
DATA SUBJECT’S RIGHTS
Data subjects may exercise their rights under articles 7, 8, 9 and 10 of Legislative Decree no. 196 of 30 June 2003 by contacting the data controller. In particular, under article 7, a data subject shall have the right to obtain confirmation as to whether or not personal data concerning him/her exists, regardless of its being already recorded, and communication of such data in intelligible form. A data subject shall have the right to be informed of: a) the source of the personal data; b) the purposes and methods of the processing; c) the logic applied to the processing, if carried out with the help of electronic means; d) the identification data concerning the data controller, data processors and the representative designated pursuant to article 5, paragraph 2; e) the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative(s) in the State’s territory, data processor(s) or person(s) in charge of the processing. A data subject shall have the right to obtain: a) updating, rectification or, where interested therein, integration of the data; b) erasure, anonymization or blocking of data that has been processed unlawfully, including data whose retention is unnecessary for the purposes for which it has been collected or subsequently processed; c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data was communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected. A data subject shall have the right to object, in whole or in part: a) on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection; b) to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising material or direct selling or else for the performance of market and commercial communication surveys.
COMMUNICATION AND DISSEMINATION OF DATA
The data collected will not be disclosed, sold or exchanged with third parties without the data subject’s express consent, except for any communications to authorized third parties – which have committed to confidentiality or if appointed data processors ex art. 29 of Legislative Decree no. 196 / 2003 – (computer consulting companies and hosting companies) where necessary for the purposes referred to in this information sheet. The data can be communicated to the appropriate authorities, under the terms of the law.
PLACE OF DATA PROCESSING OF PERSONAL DATA
The personal data collected through the web services offered by the company Sansedoni Siena S.p.A. are held at the registered office located in Siena (SI), Via Garibaldi 60, (53100). The data is managed only by technical personnel in charge of processing or persons in charge of occasional maintenance operations.