Privacy Notice
Pursuant to Art. 13 of EU Regulation No. 679/2016 (GDPR)
SIRCOLOR S.r.l.
Registered office in Regione Batasiolo – 12064 – La Morra (CN), Italy, VAT and Tax Code 02248860047 (hereinafter the “Data Controller”), in its capacity as data controller, hereby informs you, pursuant to Art. 13 of Legislative Decree 196/2003 (hereinafter the “Privacy Code”) and Art. 13 of EU Regulation No. 679/2016 (hereinafter the “GDPR”), that your data will be processed in the manner and for the purposes set out below.
Notice
Privacy Notice pursuant to Legislative Decree No. 196 of 30 June 2003 and European Regulation No. 679 of 25/05/2016 (GDPR).
Please note that personal data processed by us, using both manual and electronic means, is collected at our registered office in order to comply with obligations imposed by law, by regulations, and by EU legislation, and to manage the relationship between the parties at every stage (pre-contractual, contractual, litigation, etc.), for the time necessary to perform the contract or to fulfil legal obligations. Such data will not be disseminated or disclosed to third parties for commercial purposes. Customers may exercise their rights, as recognised under Art. 7 of Legislative Decree 196/2003 and Articles 15–22 of Regulation (EU) 679/2016, at any time, by writing to: SIRCOLOR S.r.l., Regione Batasiolo – 12064 – La Morra (CN), Italy. Customers are entitled at any time to obtain confirmation as to whether or not personal data concerning them is held by the Data Controller, to know its content and origin, to verify its accuracy or request its completion or updating, to request its rectification or erasure, to obtain restriction of processing or data portability, and to object to processing on legitimate grounds, by sending a request to our company by registered mail, fax, or e-mail to the contact details provided in this catalogue, or to lodge a complaint with the competent supervisory authority.
Cookie Policy
Our website, https://www.sircolor.eu/ (hereinafter “the website”), uses cookies and other related technologies (for convenience, all such technologies are referred to as “cookies”). Cookies are also placed by third parties engaged by us. A separate document provides information on the use of cookies on our website.
Extended Privacy Notice
The Data Controller, as defined below, wishes to explain the purposes for which it collects and processes your personal data, which categories of data are subject to processing, what rights you are entitled to under data protection legislation and how they may be exercised, thereby also enabling you to give your informed consent to the processing, where required.
The Data Controller of your personal data is SIRCOLOR S.r.l., which is responsible to you for the lawful and correct use of your personal data and may be contacted for any information or request at the following details:
Data Controller: SIRCOLOR S.r.l. – Registered office: Regione Batasiolo 86 – 12064 – La Morra (CN), Italy. Contact details: Phone +39 0173 50735, Email: sircolor@sircolor.com.
The Data Controller processes the personal data you provide (e.g. company name, personal details, address, phone number, e-mail, banking and payment details) in compliance with the principles of fairness, lawfulness, transparency, and protection of your privacy and your rights, pursuant to applicable legislation:
- A) Without the need for your express consent (Art. 6(1)(b), (c) and (f) GDPR), for the following Service Purposes:
– to conclude contracts for the services provided by the Data Controller;
– to fulfil pre-contractual, contractual, and fiscal obligations arising from existing relationships with you;
– to fulfil obligations imposed by law, by regulation, by EU legislation, or by an order of a public authority (such as anti-money-laundering requirements);
– to exercise the Data Controller’s rights, such as the right to defend itself in legal proceedings.
The legal bases for such processing are legal obligation, pre-contractual and contractual purposes, and legitimate interest, which may consist of updating the services already provided by the Data Controller, promoting new services offered, and sending communications aimed at advertising new products with characteristics similar to those already covered by an existing contract.
- B) Only with your specific and separate consent (Art. 7 GDPR), for the following Marketing Purposes:
– to send you, by e-mail, commercial communications and/or advertising material concerning products or services offered by the Data Controller, and to survey your satisfaction with the quality of the services.
Providing the data processed for the purpose referred to in letter A) is mandatory, as it is necessary for carrying out the related obligations. Refusal to provide data for that purpose will make it impossible for the Data Controller to perform the contract and to carry out the activities instrumental to achieving those purposes. Providing the data processed for the purposes referred to in letter B) is optional, and you may in any case object at any time to receiving commercial communications by contacting the Data Controller at the contact details indicated above.
In addition, with your express and specific consent, the Data Controller may process your data for automated decision-making processes (customer profiling).
Profiling is carried out through Google Analytics, a third-party cookie that provides anonymous and aggregated analysis of visitors’ behaviour on the website (such as amount spent, purchase frequency, and cart value). For further information on how Google Analytics works, please refer to Google’s privacy notice at: http://www.google.it/policies/privacy/partners.
All information relating to purchases, and part of your personal data, is used by SIRCOLOR S.r.l. to send communications and printed catalogues containing the company’s products and services. Your data may be disclosed to the recipients or categories of recipients listed below: Categories of recipients: consultants and freelance professionals, whether operating individually or in association; banks and credit institutions; companies and businesses; cloud service providers.
The Data Controller may disclose some of your data to parties it engages to carry out activities necessary to achieve the purposes indicated and described above (parties with which the Data Controller has entered into contracts for the provision of payroll processing services, accounting management, IT systems and management software assistance and maintenance services, and occupational health services).
The parties mentioned above, which process your data on behalf of the Data Controller, have been specifically appointed by the Data Controller as Data Processors. The list of Data Processors may be requested by contacting the Data Controller at the following details: Phone +39 0173 50735, Email: sircolor@sircolor.com.
Data relating to you will be processed by the Data Controller only for the time necessary for the purposes mentioned above. In particular, to ensure the processing of your data is as correct and transparent as possible, you should be aware that the duration of processing is determined as follows:
– personal and/or sensitive data will be retained for accounting and fiscal purposes and to allow the Data Controller to exercise its right of defence, for a period of not less than 6 years from the termination of the contractual relationship with the Data Controller;
– for marketing purposes, data will be processed for the entire duration of the contract and for as long as obligations connected with the performance of the contract remain in place, unless you object to the processing or withdraw your consent. In any case, profiling activities take into account only data relating to the last 12 months.
Processing will be carried out using methods and tools suitable for ensuring the security of the data. While the Data Controller holds or processes your data, you, as the data subject, may at any time exercise the following rights:
– Right of access – you have the right to obtain confirmation as to whether or not processing of data concerning you is taking place, as well as the right to receive all information relating to such processing;
– Right to rectification – you have the right to obtain the rectification of your data held by us, where it is incomplete or inaccurate;
– Right to erasure (“right to be forgotten”) – in certain circumstances, you have the right to obtain the erasure of your data held in our archives, where it is no longer relevant for the continuation of the contractual relationship or required by law;
– Right to restriction of processing – under certain conditions, you have the right to obtain the restriction of processing of your data, where it is not relevant for the continuation of the contractual relationship or required by law;
– Right to data portability – you have the right to obtain the transfer of your data held by us to a different data controller;
– Right to object – you have the right to object, at any time, on grounds relating to your particular situation, to the processing of data concerning you based on legitimate interest, on the performance of a task carried out in the public interest, or in the exercise of official authority, including profiling, unless the Data Controller demonstrates legitimate grounds for the processing that override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise, or defence of a legal claim;
– Right to withdraw consent – you have the right to withdraw your consent to the processing of your data at any time, without affecting the lawfulness of processing based on consent before its withdrawal;
– Right to lodge a complaint with the following Supervisory Authority: the Italian Data Protection Authority (Garante per la protezione dei dati personali).
The above rights may be exercised against the Data Controller by writing to the contact details indicated above. The exercise of your rights as a data subject is free of charge, pursuant to Art. 12 GDPR.
However, in the case of manifestly unfounded or excessive requests, including due to their repetitive nature, the Data Controller may charge a reasonable fee, taking into account the administrative costs incurred in handling the request, or may refuse to act on the request. If, after data has been submitted to our company, no commercial relationship, purchase, or exchange of information aimed at a sale is concluded, the Data Controller may delete the account created without prior notice. In any event, your account only needs to remain active in our store in the event of a purchase, and paper records will be retained solely for tax compliance purposes. Accordingly, data may be deleted after the end of the financial year of purchase.
SIRCOLOR S.r.l. reserves the right, within the terms of the law, to designate the Court of Asti as the competent court.
