Information on the processing of personal data

(Art. 13 European Regulation 2016/679)

WHO PROCESSES YOUR PERSONAL DATA?
Owner of the treatment è SIFI S.p.A. with registered office at Via Ercole Patti 36, 95025 Aci Sant'Antonio (CT)
The Holder can be contacted at PEC sifispa@pec.sifigroup.com or to the e-mail address privacy@sifigroup.com

HOW CAN THE DPO (Data Protection Officer) BE CONTACTED?
The DPO designated by SIFI S.p.A. may be contacted at the e-mail address dpo@sifigroup.com

FOR WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA AND WHY IS THE PROCESSING LEGITIMATE?
Your personal data will be processed for the following purposes:

  1. Handling requests sent to us through the form and providing you with feedback. In this case, the processing of your data is based on the legitimate interest of the Data Controller to provide feedback to your requests within the scope of its freedom of enterprise;
  2. To send you a regular newsletter. The processing of your data for this purpose is only legitimate if you provide us with your consent.

WHAT HAPPENS IF YOU DO NOT PROVIDE YOUR DATA?
The provision of data is optional but if you do not provide us with them, you will not be able to send us any requests and will not be able to receive our newsletter.

TO WHOM WILL YOUR DATA BE DISCLOSED?
Your data will be disclosed to external companies that deal with the operation/maintenance of our website. A full list of the recipients of your personal data can be requested at privacy@sifigroup.com.
In any case, your personal data will not be disseminated.

WILL THE DATA BE TRANSFERRED TO COUNTRIES OUTSIDE THE EU?
Your data will be processed within the European Union.

HOW LONG WILL YOUR DATA BE STORED?
The data will be kept for as long as is strictly necessary to achieve the purposes for which we are collecting them and, specifically, for as long as is necessary to process your request and with regard to the sending of the newsletter for 5 years.
At the end of this period, the data will either be irreversibly deleted - by means of destruction or secure deletion methods - or will be stored in an anonymous form that does not allow, even indirectly, identification of the person to whom the data relate.

WILL BE SUBJECTED TO PROFILING?
Under no circumstances will your data be used to obtain information about your preferences or behaviour, nor will you be subject to any decision based solely on automated processing of your personal data.

WHAT RIGHTS CAN YOU EXERCISE?
You have the following rights recognised by Regulation (EU) 2016/679:

  • Right of Access: the right to obtain from the Controller confirmation as to whether or not personal data concerning you are being processed and, if so, to obtain access to your personal data - and a copy thereof - and to receive information about the processing;
  • Right of rectification: the right to obtain from the data controller the rectification of inaccurate personal data concerning you without undue delay and the integration of incomplete personal data, including by providing a supplementary declaration;
  • Right to data portability: the right to receive, in a structured, commonly used and machine-readable format, the data concerning him/her provided to the data controller and to transmit them to another data controller where the processing is based on consent or on contract and is carried out by automated means;
  • Right to cancellation: the right to obtain from the controller the deletion of personal data concerning you without undue delay if one of the following reasons applies
  • personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
  • You have withdrawn your consent to the processing of your data if they are processed on the basis of your consent;
  • You have objected to the processing and there is no overriding legitimate reason to proceed with the processing;
  • personal data have been unlawfully processed;
  • personal data must be deleted in order to comply with a legal obligation to which the Controller is subject;
  • personal data were collected in connection with the provision of information society services.
  • Right of restriction of processing: the right to obtain from the Controller the restriction of processing when one of the following cases occurs:
  • You challenge the accuracy of personal data for the period necessary for the Controller to verify the accuracy of such personal data;
  • processing is unlawful and you object to the deletion of your personal data and instead request that their use be restricted;
  • although the Data Controller no longer needs it for processing purposes, the personal data is necessary for the establishment, exercise or defence of a legal claim;
  • You objected to the processing pending verification as to whether the data controller's legitimate reasons prevail over those of the data subject.
  • Right to object to processing: the right to object to processing carried out for the performance of a task carried out in the public interest or in the exercise of official authority or on the basis of the legitimate interests of the data controller or a third party, as well as the right to object to the processing of personal data concerning you carried out for direct marketing purposes, including profiling insofar as it is related to such direct marketing;
  • Right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or significantly affects you in a similar way.

HOW CAN YOU EXERCISE YOUR RIGHTS?
Requests concerning the exercise of your rights may be sent to the PEC sifispa@pec.sifigroup.com or to the e-mail address privacy@sifigroup.com. We will get back to you as soon as possible and, in any case, no later than 30 days after your request.

MAY PRESENT A RECLAMO?
You may lodge a complaint regarding the manner in which the data controller processes your data or regarding the handling of a proposed complaint by lodging an application directly with the Data Protection Authority in the manner indicated in the link https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/4535524.  

SIFI S.p.A.

Data controller