Privacy Policy

Foreword

The purpose of this Privacy Policy is to describe how the website, currently avaible at https://www.s3k.it/ is managed with regard to the processing of personal data of users/visitors who consult it.

This disclosure is also provided pursuant to Article 13 of Regulation (EU) 2016/679 (hereinafter also "General Data Protection Regulation" or "GDPR") to those who access the aforemmentioned site.

The above website is in the ownership of S3K S.p.A.-Security of the third millennium (hereinafter "S3K").

The disclosure is provided by S3K exclusively for the above-mentioned site.

Users/visitors are invited to read this Privacy Policy carefully.

Identity and contact details of the Holder

The Data Controller is S3K S.p.A.-Security of the third millenium, in the person of the legal representative p.t., based in Via del Serafico, 200 - Rome, email: [email protected], in accordance with Articles 4, no. 7) and 24 of EU Regulation 2016/679 of April 27, 2016.

The Data Controller has appointed a Data Protection Officer ("DPO"), who can be contacted at the following address: Via del Serafico 200, 00142 -Rome; or by sending an email to: [email protected].

Type of data processed and purpose

The computer systems and software procedures used to operate this site acquire, in the normal course of operation, certain personal data that are then implicitly transmitted in the use of Internet communication protocols.

This information that by its nature could, through association and processing with data held by third parties, allow identification of users/visitors (e.g. IP address, domain names of computers used by users/visitors connecting to the site, etc.).

This data is used for the sole purpose of obtaining statistical information (so it is anonymous) and to check the proper functioning of the site.

Recipients of personal data

No data resulting from the web service will be communicated or disclosed to third parties, except to fulfill obligations under laws, regulations or EU regulations.

Personal data expressly provided by users/visitors will be communicated to third parties only if the communication is necessary to comply with the requests of the users/visitors themselves.

Data transfer to third countries

Within the scope of the purposes set out in point 2 of this disclosure, your Personal Data will not be communicated/transferred to third parties established in countries outside the European Union, with the possible exception of the provisions for the use of Cookies in relation to which please refer to the relevant "Cookie Policy" section.

If necessary, for reasons of a technical and/or operational nature, the Data Controller reserves the right to transfer your Personal Data to countries outside the European Union or international organizations for which there are "adequacy" decisions by the European Commission, i.e. on the basis of adequate guarantees provided by the country to which the data is to be transferred or on the basis of the specific exceptions provided for in the Regulations, in accordance with the procedures set out in the binding rules pursuant to Article 47 of the RGPD.

The updated list of recipients of data transfers established in countries outside the European Union may be requested by recipients by contacting the data controller through the channels indicated in point 1 of this disclosure.

Processing methods and data retention period

Personal data will be processed by computer and/or by manual processing for the time necessary to achieve the purposes for which it was collected. In addition, it should be noted that your personal data will not be subject to profiling or subject to any fully automated decision-making process.

Personal data will be kept for the amount of time strictly necessary to pursue the specific purposes of the processing and, in particular for the data indicated in point 2, for the time necessary to carry out the specified activities, except in the case of any investigation of computer crimes to the detriment of the site.

Rights of the data subject

The user will be able to, (pursuant to Articles 15, 16, 17, 18, 19, 20, 21 and 22 of EU Reg. 2016/679), at any time, exercise the rights set forth below.

• Withdrawal of consent: The data subject has the right to withdraw his/her consent at any time. The withdrawal of consent does not affect the lawfulness of the processing based on the consent before withdrawal;
• Access to personal data: to obtain confirmation or otherwise that data concerning him or her is being processed and, if so, access to the following information: the purposes, the categories of data, the recipients, the period of storage, the right to lodge a complaint with a supervisory authority, the right to request rectification or erasure or restriction of processing or opposition to processing as well as the existence of an automated decision-making process;
• Request for the rectification or erasure of the same or restriction of the processing concerning him/her; "restriction" means the marking of retained data with the aim of limiting their processing in the future;
• Objection to processing: to object on grounds related to your particular situation to the processing of data for the performance of a task of public interest or in pursuit of a legitimate interest of the Controller;
• Data portability: in the case of automated processing carried out on the basis of consent or in performance of a contract, to receive in a structured, commonly used and machine-readable format the data concerning him/her;
• To lodge a complaint pursuant to Article 77 of the GDPR with the competent supervisory authority based on your habitual residence, place of work or the place of violation of your rights; for Italy, the competent authority is the Data Protection Authority, which can be contacted through the contact details given on the website http://www.garanteprivacy.it.

The aforementioned rights may be exercised by sending an appropriate request through the contact channels indicated in point 1 of this disclosure.

Communication and provision of data

The provision of data by the user is aimed solely at the correct and complete execution of the purposes set out in point 2 (navigation data, the failure to provide them coincides with the failure to navigate the website).

Updating and amending the Privacy Policy

This Privacy Policy may be subject to change over time - also related to the possible entry into force of new sector regulations, the updating or provision of new purposes or to intervening technological innovations - so the user/visitor is invited to consult this page periodically.