INFORMATION ON PERSONAL DATA TREATMENT

A. Introduction

This information on the processing of personal data (hereinafter, “Information”) is made pursuant to art. 13 of Regulation (EU) no. 679/2016 (General Data Protection Regulation – hereinafter, “GDPR”).

B. Owner of treatment

The owner and manager of the treatment of personal data is Signature S.r.l.
Corporate Finance, with legal head office in Milan, Via Leopardi, 21, VAT no. 10423460962 (hereinafter, “Owner”).

C. Categories of personal data processed

The Owner will process the following categories of personal data, related to users of the website www.signaturecf.com (hereinafter, respectively, “Interested Party/Parties” and “Site”):

a) Navigation data

By way of example and not limited to, the following data may be processed: information about the visited pages and sections of the Site, user activity on the Site, time spent on each page and section of the Site, IP address of the device connected to the Site , type of browser used to visit the Site, name of the Internet Service Provider, date and time of visit.
For specific information regarding the data collected through the cookies used by the Owner, please refer to the Website Cookie Policy: Cookies Policy

D. Purposes of the treatment and legal basis

The personal data of the Interested Parties are collected from the Interested Party while browsing the Site. They will be processed for these purposes, according to the legal bases listed below.

 PurposeLegal basis
1To allow the Interested Party to browse the Site, to obtain anonymous statistical information on the Site, to check its correct functioning, to carry out monitoring activities in support of its safety and identify actions aimed to the improvement of the SiteTreatment necessary for the pursuit of the legitimate interest of the Owner – art. 6.1 (f) GDPR
2To allow the Interested Party to send messages to the Owner through the contact form on the SiteTreatment necessary for the pursuit of the legitimate interest of the Owner – art. 6.1 (f) GDPR
3To comply with legal obligations the Owner is bound to.
For example: observe the requests made by administrative, jurisdictional or public security Authorities
Treatment necessary in fulfillment of legal obligations to which the Data Controller is subject – art. 6.1 (c) GDPR
4To allow the Owner to ascertain, exercise or defend his or her own rights, both in judicial and extrajudicial casesTreatment necessary for the pursuit of the legitimate interest of the Owner – art. 6.1 (f) GDPR
With reference to the Purposes of treatment referred to in nos. 1., 2. and 4., as above, the following is specified:
 PurposeLegitimate interests pursued
1To allow the Interested Party to browse the Site, to obtain anonymous statistical information on the Site, to check its correct functioning, to carry out monitoring activities in support of its safety and identify actions aimed to the improvement of the SiteInterest of the Owner to check the correct functioning of the Site, its safety and its improvement
2To allow the Interested Party to send messages to the Owner through the contact form on the SiteInterest of the Owner to facilitate communication with the Interested Party
3To allow the Owner to ascertain, exercise or defend his or her own rights, both in judicial and extrajudicial casesInterest of the Owner to safeguard his or her rights in the event of any disputes

E. Categories of recipients of personal data

In order to fulfill the aforementioned Purposes, the personal data of the Interested Party may also be processed by third parties other than the Owner.

Some of them will carry out the aforementioned treatments on behalf of the Owner (in this case, they will act as Data Controllers, ex art. 28 GDPR):

a) ICT service providers;
b) Hosting service providers;
c) Suppliers of IT platforms and software applications.

The data of the Interested Parties may be communicated to other subjects, who will treat them as independent holders. In particular:
a) Subjects and judicial or administrative authorities, whose right of access to personal data is expressly recognized by law, regulations or provisions issued by the competent authorities;
b) Lawyers.

F. Data transfer outside the European Economic Area

The personal data collected by the Owner may be transferred outside the European Economic Area.

G. Retention period of personal data

The personal data covered by this Information will be retained for the amount of time strictly necessary to the achievement of the Purposes.

Notwithstanding the foregoing, the Owner specifies that:
• Browsing data will be kept for no more than 7 (seven) days;
• Information collected through cookies will be stored for a lapse of time not exceeding the period indicated in the Cookie Policy of the Site;
• The data collected by the Owner in order to allow him to defend himself before judicial court will be kept for the prescription period established by law, starting from the date of collection.

These terms may be extended in the event of any disputes which may arise, requests from the competent Authorities or if provided for in the applicable legislation.

At the end of the retention periods described above, personal data will be deleted, or in any case made unintelligible by the Owner, e.g. by means of adequate anonymisation techniques.

H. Methods of data processing

The Owner will process personal data by adopting adequate technical, physical and organizational security measures.
The IT systems and application procedures used to operate the Site automatically acquire personal data during the normal course of operation.
Data processing through automated decision-making processes is not envisaged, including profiling pursuant to art. 22.1 and 22.4 GDPR.

I. Failure to provide personal data

The provision of navigation data (described in section B, letter a) is necessary for the Owner to allow the best possible browsing experience and to provide all the features available on the Site. The Interested Party can restrict the processing of personal data by following the indications described in the Cookie Policy.

J. Rights regarding the processing of personal data

In the cases provided by the GDPR, the Interested Parties have the right to be granted access to their personal data, their correction or cancellation or the limitation of their processing, or to oppose the treatment, pursuant to articles 15-22 GDPR.
The above rights may be exercised by the Interested Party by contacting the owner in writing at the email address ____________.

K. Right to complain to the Supervisory Authority and right to appeal to the Judicial Authority

Interested Parties who recognize a violation of the processing of personal data, according to the provisions of the GDPR, have the right to lodge a complaint before a Supervisory Authority (as provided for by art.77 GDPR), or to appeal before the court of the Member State in which the data controller has an establishment, or before the of the Member State in which the Interested Party habitually resides (pursuant to art. 79 GDPR).

L. Changes, updates and availability of information

This information may be subject to changes and additions, also in response to the implementation and updating of the legislation on the protection of personal data. All the Information are available on the Site.

Signature S.r.l.
Corporate Finance

Via G. Leopardi, 21
20123 Milan – Italy

VAT no. and Tax Code 10423460962
Nominal Capital. 10.000€ i.v.