Privacy Policy & Cookie Policy

INFORMATIVE NOTE ON PERSONAL DATA PROCESSING PURSUANT TO ART. 13 REG. (EU) 679/2016

At SIARE ENGINEERING INTERNATIONAL GROUP S.p.A. (hereinafter SIARE), we take the protection of your personal data very seriously, and for this reason, we are constantly committed to ensuring your privacy is respected.

Bearing this in mind, we would like to provide you with some information regarding the processing of your personal data, how and why we collect them, and how we manage them.

We process your personal data when you visit our website; when you purchase our services and products, or when you require assistance or simply information; when you request to receive promotional communications about our services or products, or when you decide to participate in one of our recruitment processes (including unsolicited applications) or attend one of our training webinars.

In any case, in compliance with Regulation (EU) 2016/679, we will process your data responsibly, in accordance with the principles of lawfulness, fairness, transparency, accuracy, purpose limitation, data minimization, and storage limitation, guaranteeing its integrity and confidentiality.

Given the above, in accordance with Article 13 of Regulation (EU) 2016/679, we would like to provide you with some information regarding this processing.

DATA CONTROLLER
The data controller is SIARE ENGINEERING INTERNATIONAL GROUP S.p.A. headquartered at Via Giulio Pastore, 18, 40053, Crespellano-Valsamoggia (BO), Tel: +39 051 969802, mail: mail@siare.it

PURPOSES OF THE PROCESSING	Legal basis and DATA RETENTION
Website navigation: We process your data to allow you to browse and consult our websites. The computer systems and software resources required to operate the websites acquire, during their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols. This category of data includes IP addresses, information relating to the device used to connect to the site, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), other parameters relating to the operating system and/or the user’s IT environment, as well as other identifiers that alone and/or together with other information may allow the identification of a natural person. Cookies also are included in this category, for which, however, please refer to the specific information.	Processing is based on art. 6, paragraph 1, letter b) of EU Regulation 2016/679, as it is necessary for the implementation of pre-contractual measures adopted at your request or for the performance of a contract to which you are a party. Regarding the processing of non-technical and non-essential cookies, please refer to the specific information, specifying that in this case, processing is based on art. 6, paragraph 1, letter a) of EU Regulation 2016/679, as the data subject’s consent is required. The data collected in this way will be processed until consent is revoked and in any case for no longer than 24 months. You can easily revoke your consent by writing to mail@siare.it, or by using the opt-out procedure on the cookie management banner.
Execution of pre-contractual and contractual measures (customer and supplier management): We process your data as part of preliminary activities, related to and/or consequent upon the purchase of one of our services and/or products, or a purchase from us. This purpose includes processing related to the pre-contractual phase (such as a simple request for information, including via the contact form on the website), the conclusion and management of the contract, including technical support, invoicing, and/or fulfillment of any other legal obligations arising from the execution of the contract. For this purpose, we will process the following personal data: company name, i.e., first and last name, address or registered office, telephone number, fax number, email address, tax and commercial information.	Processing is based on art. 6, paragraph 1, letter b) of EU Regulation 2016/679, as it is necessary for the implementation of pre-contractual measures taken at your request or for the performance of a contract to which you are a party. The data will be retained for ten years from the termination of the relationship, pursuant to art. 2946 of the Italian Civil Code regarding ordinary limitations, and/or pursuant to art. 2220 of the Italian Civil Code and 22 of Presidential Decree no. 600/1973, as applicable.
Direct Marketing – Newsletter: The processing of personal data is aimed at sending, via email, commercial and/or promotional communications regarding services and/or products similar to those already purchased. This specific purpose also includes subscribing to the SIARE SPA newsletter. For this purpose, we will process the following personal data: first name, last name, company name, email address, and telephone number.	Processing is based on Art. 6, paragraph 1, letter a) of EU Regulation 2016/679, with the data subject’s consent required. The data collected in this way will be processed until consent is revoked and, in any case, no later than 60 months after the last contact. You can unsubscribe from the newsletter by simply writing to mail@siare.it or by using the opt-out option at the bottom of each promotional communication.
Staff selection: The processing is aimed at selecting professionals to join the company’s staff and assessing whether they match the required profiles. This purpose includes both CV screening and the actual selection and interview phases, as well as those necessary to formalize and finalize any employment contracts. For this purpose, we will process the following personal data: identification and contact details, CV data, data relating to previous employment, and any sensitive data, such as health data, indicated in CVs.	Processing is based on Art. 6, paragraph 1, letter b) of EU Regulation 2016/679, as it is necessary to fulfill obligations strictly related to the hiring of personnel and the management of the employment relationship, or to implement pre-contractual measures adopted at your request. The processing of any sensitive data contained in CVs, such as health-related data, is based on Art. 9, paragraph 2, letters b) and h). The data collected in this way will be processed no later than 24 months after the last contact.
Webinar Participation: The processing is intended to allow you to participate in our webinars, and therefore to provide you with access to the platform, as well as to allow us to administratively organize the event. For this purpose, we will process the following personal data: identification and contact details, and data relating to your work organization.	Processing is based on art. 6, paragraph 1, letter b) of EU Regulation 2016/679, as it is necessary for the implementation of pre-contractual measures taken at your request or for the performance of a contract to which you are a party. The data will be retained for 24 months.

DATA COMMUNICATION

Where the legal basis is not consent, your provision of personal data is necessary, as it will not be possible to follow up on the requested actions without it.

DATA RECIPIENTS

Depending on the purpose, the personal data provided to SIARE SPA may be disclosed to its own personnel expressly authorized to perform processing operations, as well as to IT service providers and/or consultants acting as data processors, to credit institutions acting as independent data controllers, and to public bodies in compliance with legal obligations. The list of recipients can be requested from the data controller.

EXERCISE OF RIGHTS

You have the right at any time to obtain confirmation from the data controller as to whether or not personal data concerning you is being processed, and, where that is the case, access to your personal data and the following information:

the purposes of the processing;
the categories of personal data processed;
the recipients or categories of recipients to whom the personal data have been or will be disclosed;
the retention period or the criteria used to determine that period;
the existence of automated decision-making, including profiling.

Furthermore, you may request:

the rectification of your data, if inaccurate;
cancellation, in the following cases: i) where the personal data is no longer necessary for the purposes for which it was collected and/or processed; ii) where you withdraw your consent, unless there is another legal basis for the processing; iii) where you object pursuant to Art. 21, paragraphs 1) and 2) of the Regulation; iv) where it is necessary to comply with a legal obligation;
restriction of processing in the following cases: i) where you contest the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the data; ii) where the processing is unlawful, and you intend to oppose the erasure, requesting the restriction of its use; iii) where the controller no longer needs the personal data, but you require it for the establishment, exercise, or defense of legal claims; iv) where you exercise your right to object pursuant to Art. 21, for the time necessary for the owner to verify whether the legitimate reasons of the owner for processing prevail over yours;
to receive, in a structured, commonly used, and machine-readable format, the personal data processed by automated means based on consent or a contract;
to no longer process the data for direct marketing purposes, by objecting pursuant to Art. 21(2) of the Regulation.

Finally, you have the right to make a complaint with the Italian Data Protection Authority, located in Rome at Piazza Venezia 11, if you believe that any of our processing activities violate the Regulation.