Data Subjects: Users of the portal www.seredil.it.

Data Controller

The Data Controller, pursuant to the Law, is SER EDIL SRL (LARGO ANSPERTO, 7 , 20123 – MILAN (MI), VAT no. 00892980145, contactable at: e-mail info@seredil.it, phone 0342683340) represented by its legal representative pro tempore.

SER EDIL SRL, as Data Controller of your personal data, pursuant to and for the purposes of EU Reg. 2016/679 hereinafter ‘GDPR’, informs you that the cited regulation provides for the protection of data subjects with regard to the processing of personal data and that such processing will be based on the principles of fairness, lawfulness, transparency, and protection of your privacy and rights.

Your personal data will be processed in accordance with the provisions of the legislation referred to above and the confidentiality obligations therein.

Purpose and legal basis

Your data will be used for the following purposes:

– Browsing data
The computer systems and software procedures responsible for the operation of this site acquire, in the course of their normal functioning, certain personal data whose transmission is implicit in the use of Internet communication protocols.

This category of data includes IP addresses or domain names of the computers and terminals used by users, URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server response (successful, error, etc.), and other parameters relating to the user’s operating system and IT environment.

Such data, necessary for the use of web services, are also processed in order to:

– obtain statistical information on the use of services (most visited pages, number of visitors per time slot or daily, geographical areas of origin, etc.);

– check the proper functioning of the services offered.

Browsing data are not retained for more than seven days (except in the case of a need for investigation by the Judicial Authority).

Personal data will be stored for the time necessary to ensure the provision of the requested service and, subsequently, for the period required by law or applicable regulations.

– Personal data voluntarily provided by the user (first name, last name, company, email, phone) through the contact form will be processed solely in order to respond to the information request made by the data subject.

Such data will not be used for marketing or profiling purposes.

The legal basis for processing is the consent of the data subject, expressed by selecting the appropriate checkbox of acceptance of terms and conditions prior to submitting the form.

– Use of cookies and similar technologies.

See the cookie policy in the site footer.

Categories of recipients of the processed data

Your data will be processed only by personnel expressly authorized by the Controller, and in particular by the following categories of authorized personnel:

– internal operators managing the web portal;

– any technical personnel responsible for handling and responding to user information requests.

Disclosure

Your data may be disclosed to external parties for the proper management of the relationship, and in particular to the following categories of Recipients, including all Data Processors duly appointed:

– web service providers for the management and maintenance of the platform.

Dissemination

Your personal data will not be disseminated in any way.

Transfer of data to third countries

Your personal data may also be transferred, limited to the purposes described above, to the following countries:

– EU countries;

– United States.

Should it become necessary to transfer personal data of data subjects to countries located outside the EEA, such transfer will be carried out in compliance with the limits and conditions set out in Articles 44 et seq. of EU Reg. 2016/679.

Processing methods

The processing of the above-mentioned Personal Data will be carried out by the Controller using automated or manual methods.

Rights of the data subject – EU Reg. 2016/679: Arts. 15, 16, 17, 18, 19, 20, 21, 22

1. The data subject has the right to obtain confirmation of the existence or non-existence of personal data concerning him/her, even if not yet recorded, their communication in intelligible form, and the possibility of lodging a complaint with the Supervisory Authority.

2. The data subject has the right to obtain the indication of:

• the source of the personal data;
• the purposes and methods of processing;
• the logic applied in case of processing carried out with the aid of electronic means;
• the identifying details of the Controller, Processors, and the representative designated under Article 5, paragraph 2;
• the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them as designated representatives in the State’s territory, data processors, or authorized persons.

3. The data subject has the right to obtain:

• the updating, rectification, or, when interested, the integration of data;
• the erasure, anonymization, or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;
• certification that the operations referred to in letters a) and b) have been brought to the attention, also regarding their content, of those to whom the data were communicated or disseminated, except where this proves impossible or involves a manifestly disproportionate effort compared with the protected right;
• data portability.

4. The data subject has the right to object, in whole or in part:

• on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;
• to the processing of personal data concerning him/her for the purpose of sending advertising materials, direct sales, or for carrying out market research or commercial communication.

Amendments to this privacy notice

The Data Controller may change, amend, add, or remove any part of this Privacy Policy.