This information on the processing of personal data (hereinafter, “Information”) is made pursuant to art. 13 of Regulation (EU) no. 679/2016 (General Data Protection Regulation – hereinafter, “GDPR”).
B. Owner of treatment
The owner and manager of the treatment of personal data is Signature S.r.l.
Corporate Finance, with legal head office in Milan, Via Leopardi, 21, VAT no. 10423460962 (hereinafter, “Owner”).
C. Categories of personal data processed
The Owner will process the following categories of personal data, related to users of the website www.signaturecf.com (hereinafter, respectively, “Interested Party/Parties” and “Site”):
a) Navigation data
By way of example and not limited to, the following data may be processed: information about the visited pages and sections of the Site, user activity on the Site, time spent on each page and section of the Site, IP address of the device connected to the Site , type of browser used to visit the Site, name of the Internet Service Provider, date and time of visit.
D. Purposes of the treatment and legal basis
The personal data of the Interested Parties are collected from the Interested Party while browsing the Site. They will be processed for these purposes, according to the legal bases listed below.
|1||To allow the Interested Party to browse the Site, to obtain anonymous statistical information on the Site, to check its correct functioning, to carry out monitoring activities in support of its safety and identify actions aimed to the improvement of the Site||Treatment necessary for the pursuit of the legitimate interest of the Owner – art. 6.1 (f) GDPR|
|2||To allow the Interested Party to send messages to the Owner through the contact form on the Site||Treatment necessary for the pursuit of the legitimate interest of the Owner – art. 6.1 (f) GDPR|
|3||To comply with legal obligations the Owner is bound to.|
For example: observe the requests made by administrative, jurisdictional or public security Authorities
|Treatment necessary in fulfillment of legal obligations to which the Data Controller is subject – art. 6.1 (c) GDPR|
|4||To allow the Owner to ascertain, exercise or defend his or her own rights, both in judicial and extrajudicial cases||Treatment necessary for the pursuit of the legitimate interest of the Owner – art. 6.1 (f) GDPR|
|Purpose||Legitimate interests pursued|
|1||To allow the Interested Party to browse the Site, to obtain anonymous statistical information on the Site, to check its correct functioning, to carry out monitoring activities in support of its safety and identify actions aimed to the improvement of the Site||Interest of the Owner to check the correct functioning of the Site, its safety and its improvement|
|2||To allow the Interested Party to send messages to the Owner through the contact form on the Site||Interest of the Owner to facilitate communication with the Interested Party|
|3||To allow the Owner to ascertain, exercise or defend his or her own rights, both in judicial and extrajudicial cases||Interest of the Owner to safeguard his or her rights in the event of any disputes|
E. Categories of recipients of personal data
In order to fulfill the aforementioned Purposes, the personal data of the Interested Party may also be processed by third parties other than the Owner.
Some of them will carry out the aforementioned treatments on behalf of the Owner (in this case, they will act as Data Controllers, ex art. 28 GDPR):
a) ICT service providers;
b) Hosting service providers;
c) Suppliers of IT platforms and software applications.
The data of the Interested Parties may be communicated to other subjects, who will treat them as independent holders. In particular:
a) Subjects and judicial or administrative authorities, whose right of access to personal data is expressly recognized by law, regulations or provisions issued by the competent authorities;
F. Data transfer outside the European Economic Area
The personal data collected by the Owner may be transferred outside the European Economic Area.
G. Retention period of personal data
The personal data covered by this Information will be retained for the amount of time strictly necessary to the achievement of the Purposes.
Notwithstanding the foregoing, the Owner specifies that:
• Browsing data will be kept for no more than 7 (seven) days;
• The data collected by the Owner in order to allow him to defend himself before judicial court will be kept for the prescription period established by law, starting from the date of collection.
These terms may be extended in the event of any disputes which may arise, requests from the competent Authorities or if provided for in the applicable legislation.
At the end of the retention periods described above, personal data will be deleted, or in any case made unintelligible by the Owner, e.g. by means of adequate anonymisation techniques.
H. Methods of data processing
The Owner will process personal data by adopting adequate technical, physical and organizational security measures.
The IT systems and application procedures used to operate the Site automatically acquire personal data during the normal course of operation.
Data processing through automated decision-making processes is not envisaged, including profiling pursuant to art. 22.1 and 22.4 GDPR.
I. Failure to provide personal data
J. Rights regarding the processing of personal data
In the cases provided by the GDPR, the Interested Parties have the right to be granted access to their personal data, their correction or cancellation or the limitation of their processing, or to oppose the treatment, pursuant to articles 15-22 GDPR.
The above rights may be exercised by the Interested Party by contacting the owner in writing at the email address ____________.
K. Right to complain to the Supervisory Authority and right to appeal to the Judicial Authority
Interested Parties who recognize a violation of the processing of personal data, according to the provisions of the GDPR, have the right to lodge a complaint before a Supervisory Authority (as provided for by art.77 GDPR), or to appeal before the court of the Member State in which the data controller has an establishment, or before the of the Member State in which the Interested Party habitually resides (pursuant to art. 79 GDPR).
L. Changes, updates and availability of information
This information may be subject to changes and additions, also in response to the implementation and updating of the legislation on the protection of personal data. All the Information are available on the Site.