Privacy information pursuant to Art. 13 of EU Regulation 679/2016

Pursuant to art. 13 of EU Regulation 679/2016 (hereinafter also just “EU Reg. 679/2016” or GDPR 679/2016), Seride s.r.l. (hereinafter also only the “Company”), as better identified below, as “Data Controller” of the processing, provides you with some information regarding the use of any personal data provided by users who consult and/or interact with web services accessible electronically from the address: www.seride.it corresponding to the home page of the official Seride s.r.l. website. The information is provided only for the site in question and not for others websites that may be consulted by the user via links and is aimed at users of this site. In compliance with the obligations dictated regarding the protection of personal data, this site respects and protects the privacy of visitors and users. Users are expressly prohibited from sending particular data referred to in the art. 9 of EU Reg. 679/2016.

  1. Owner of personal data:

The owner of the personal data is:

SERIDE S.R.L. (tax code and VAT number 00426570131), with registered office in Portichetto di Luisago (Co), via Gorizia 13, in the person of the legal representative pro tempore (telephone number +39 031 8820111 – email address: privacy@seride.com).

The list of data controllers and any authorized persons is kept at the owner’s headquarters and made available upon request of the interested party.

  1. Personal data being processed

The company may collect the following categories of personal data for the purposes described in this information:

  • Identifying information and contact details such as name, address, telephone number or email address provided by you to request the sending of informative material or other communications also relating to any new services that will be implemented in the future;
  • Information made known or published by you in a public place, on the social pages or websites of Seride s.r.l.;
  • information about the browser used;
  1. Purpose of processing

Your personal data will be processed for the following purposes:

  1. obtain anonymous statistical information on the use of the site and to check its correct functioning;
  2. ascertain responsibility in case of hypothetical computer crimes against the site;
  3. respond to requests for information received through the website, send informative material or other communications, inform of changes to the site or updates to services, request feedback regarding the terms of the web service offered;
  4. for sending communications via newsletter following an express request from the recipient; e) for legal, administrative and audit purposes;
  5. for marketing purposes forwarding of commercial communications and/or advertising material in order to propose announcements of products, services and offers (via e-mail, post and/or SMS and/or telephone contacts and other digital communication channels therein including inclusion in dedicated mailing lists) of the Owner or third parties (business partners) as well as to carry out market analyzes or internal statistics;
  6. assert or defend a right in judicial, extrajudicial or administrative proceedings.
  1. Legal basis

In accordance with the art. 6 of EU Reg. 679/2016, the conditions of lawfulness (legal basis) for the processing of your personal data are the following:

  • for the fulfillment of the activity aimed at responding to requests for information (c): the consent of the customer/user of the site, in compliance with article 6, paragraph 1, letter a), EU Reg. 679/2016 ;
  • to ascertain responsibility in case of hypothetical computer crimes against the site (b) as well as for navigation data (a) and for the purposes referred to in letter e): the legitimate interest of the data controller, in compliance of the art. 6 lett. f), EU Reg. 679/2016;
  • for processing relating to marketing activities and market surveys-surveys (letter f): the consent of the interested party, in compliance with article 6, paragraph 1, letter a), GDPR 679/ 2016;
  • for the forwarding of newsletters (letter d): consent of the customer/user of the site, in compliance with article 6, paragraph 1, letter a), EU Reg. 679/2016 obtained through the compilation and sending the newsletter subscription form.

The provision of such personal data is optional, but failure to provide it may make it impossible to obtain what is requested.

  1. Methods of processing of personal data

In relation to the purposes described above, the processing of personal data takes place using manual, IT and telematic tools, in any case, in order to guarantee the security and confidentiality of the data themselves. Collection, recording, storage, organization, processing, profiling for organizational purposes, selection, extraction, comparison, interconnection, communication, blocking, cancellation, destruction is permitted.

  1. Period of retention of personal data

Your personal data will be processed:

  • in relation to personal and contact data: for the period of time necessary to fulfill the request forwarded and in any case no later than 7 days from the contact request or, if earlier, until the revocation of consent by the ‘interested;
  • in relation to the data relating to the browser used, they are deleted immediately;
  • for the entire duration of any extrajudicial and/or judicial proceedings and until the expiration of the terms for the possibility of judicial protection and/or appeal actions.

The data processed based on the consent of the interested party may be retained until the latter withdraws their consent and in any case for a period not exceeding 10 years, including processing carried out for marketing purposes. The verification of the obsolescence of the data stored in relation to the purposes for which they were collected is carried out periodically and, after the retention terms indicated above, the data are deleted.

  1. Recipients of personal data

Your personal data may be communicated to:

  1. persons authorized for processing and responsible for processing pursuant to art. 28 GDPR;
  2. service providers who offer services on behalf of the company;
  3. financial administrations, public bodies, judicial authorities, law enforcement agencies;
  4. third parties exclusively for accounting, tax, legal, insurance needs, or in the case of checks by police bodies or if required by law;

It is specified, in particular, that such data will not be disclosed and will be processed by subjects duly appointed to carry out these tasks, constantly identified and/or appointed, appropriately trained and made aware of the constraints imposed by law, as well as through the use of security measures aimed at guaranteeing the protection of your confidentiality and avoiding the risks of loss or destruction, unauthorized access, processing that is not permitted or does not comply with the aforementioned purposes.

  1. Possibility of transferring personal data to third countries:

Your personal data will not be transferred to third countries not belonging to the European Union.

  1. Right of access to personal data and methods of complaint:

It is specified that, with reference to the personal data provided, you are the holder of the following rights pursuant to the articles. from 15 to 22 of EU Reg. 679/2016, (all compatibly with the purposes of the processing itself):

  • ask the data controller for access to personal data, rectification or cancellation of the same or limitation of processing. The rectifications, cancellations or limitations of processing carried out at the request of the interested party, unless this proves impossible or involves a disproportionate effort, will be communicated by the data controllers to the recipients to whom the personal data have been transmitted (art. 15, 16, 17 , 18 EU Reg. 679/2016);
  • object in whole or in part: a) for legitimate reasons to the processing of personal data concerning him, even if pertinent to the purpose of the collection; b) to the processing of personal data concerning you for the purpose of sending advertising material or for carrying out market research or commercial communication, through the use of automated call systems without the intervention of an operator via e-mail and/or through traditional marketing methods via telephone and/or paper mail. Please note that the right of opposition of the interested party, set out in the previous point b) for direct marketing purposes through automated methods extends to traditional ones and that in any case the possibility remains for the interested party to exercise the right of opposition even if only partly. Therefore, the interested party can decide to receive only communications via traditional methods or automated communications or neither of the two types of communication (art. 21 EU Reg. 679/2016);
  • ask the Data Controller that the data be transmitted to another data controller (data portability as regulated by art. 20 of EU Reg. 679/2016);
  • revoke consent at any time without prejudice to the lawfulness of the processing based on the consent given without revocation (it is specified that the right to revoke consent obviously cannot concern cases in which the processing, for example, is necessary to fulfill a legal obligation to which the data controller is subject or for the execution of a task of public interest or connected to the exercise of public powers vested in the data controller) (art. 7 EU Reg. 679/2016) ;
  • propose a complaint to the Guarantor for the protection of personal data, following the procedures and indications published on the official website of the Authority (art. 77 EU Reg. 679/2016) if you believe there is a problem in the management method of personal data.

To exercise these rights, you can send a request using the specific form called “Form for the exercise of rights regarding the protection of personal data” published on the website of the data controller at the following link www.seride.it – privacy section or contact the Company by email at the following email address privacy@seride.com. The procedure for exercising the rights of interested parties is published on the website www.seride.it in the specific privacy section. When contacting the Data Controller, the user must make sure to include their name, email address, postal address and/or telephone number(s) as well as a copy of a valid document for recognition purposes, to be sure that the same can manage your request correctly. The Company is required to provide a response within one month of the request; term extendable up to three months in case of particular complexity of the request.

Seride s.r.l.
Revision dated 07.07.2023