INFORMATION ON THE PROCESSING OF PERSONAL DATA
PURSUANT TO ARTICLES 13 – 14 OF EU REGULATION 2016/679
Pursuant to EU Regulation 2016/679 (hereinafter “GDPR”) and current national legislation on the protection of personal data, SRA Instruments, as Data Controller, this information notice is required to be given to the natural persons, Data Subjects, who request to be informed about the services provided by SRA Instruments.
- Data controller – The data controller is SRA Instruments, with registered office in Via alla Castellana, 3, 20063 Cernusco sul Naviglio MI, Tax Code and VAT no. IT12844250154, tel +39 02.92.14.32.58, fax +39 02.92.47.09.01, e-mail email@example.com, website srainstruments.com.
- Type of data processed – The personal data processed is collected directly from the data subjects through a specific registration function available on the site of SRA Instruments. This common information is personal data (surname and first name, etc) and contact details (telephone number, email address, etc). SRA Instruments does not process any “sensitive” or “private” data (see article 9 of the GDPR), if need be, prior consent will be requested.
The processing of data for each of the purposes indicated below may be carried out in paper, automated or electronic form and, in particular, by ordinary post or email, telephone (e.g. automated calls, SMS, MMS), fax and any other computer channel (e.g. websites, mobile apps).
- Purposes, legal basis for processing and obligation for data provision – SRA Instruments processes the personal data provided for the following purposes:
- for purposes closely related and instrumental to the management and execution of customer relations, such as the management and execution of the contract, the assistance provided in relation to the services of SRA Instruments (e.g. acquisition of information prior to the conclusion of a contract, provision of services, management of requests for development, etc). The provision of personal data for these purposes and its processing is necessary to the extent that customer employees and contractors deem it necessary to provide it to SRA Instruments to ensure the effectiveness of pre-contractual activities, supply and support carried out by SRA Instruments itself. Such processing operations shall not require the consent of the data subject. The legal basis for processing is the need to perform the contract concluded with SRA Instruments.
- commercial information, offer of services from SRA Instruments; the provision of personal data for such purposes is not obligatory and the relative processing requires the consent of the data subjects. Failure to provide consent will not affect the satisfaction of Your requests being met but will make it impossible for the Data Controller to send you marketing communications; the legal basis of the processing is identified in the consent provided by you;
- to process personal data in the possession of the Data Controller relating to preferences and usage habits of the services provided; it is in fact in the interest of the Data Controller to offer specifically identified services and thus respond to current and future customer needs; the provision of data for this purpose is not obligatory and its processing requires the data subjects’ consent. Failure to provide consent will prevent the Data Controller from identifying the services suitable to his expressed needs, the legal basis for the processing is identified in the consent provided by you;
- to communicate the data to companies linked or connected to SRA Instruments, as well as to partner companies of the company belonging to the related sectors, that will be able to process the data to send commercial and/or promotional communications on products and services from the aforementioned companies, as well as to carry out market research (“Third Party Marketing”). The processing of data for each of the above purposes may be carried out in the manner provided for with the consent of the data subject.
- Categories for recipients of personal data: personal data, within the limits and for the purposes indicated, may be communicated or come to the knowledge of and therefore be processed by:
A. employees of SRA Instruments who are expressly appointed (marketing, technical, etc);
B. consultants of SRA Instruments, companies that provide computer services (website management, internet services, etc) possibly in their capacity as external controllers,
C. subjects who can access the data by virtue of the law, or EU legislation, within the limits provided for by law;
The complete list of recipients is available at the registered office of the Data Controller.
- Data retention period: The personal data in question is processed for a maximum of 2 years.
- Transfer of data to abroad: The data is processed exclusively within the European Economic Area (EEA).
- Automated decision-making: Automated decision-making is excluded.
- Rights of the data subjects: The Data Controller informs that, with reference to the data provided, the natural persons who operate in the name and on behalf of the Customers of SRA Instruments have the following rights:
- of access (article 15 of the Regulations);
- of rectification or cancellation of personal data (articles 16 and 17 of the Regulations);
- of limitation of the processing (article 18 of the Regulations);
- of opposition to the processing (article 21 of the Regulations);
- of portability of electronic data subject to automated processing (article 20 of the Regulations);
- of filing a complaint with the supervisory authority – Privacy Guarantor (article 77 of the Regulations).
- of withdrawal of consent (pursuant to article 7 of the Regulations)
- Contact information: for any clarification and to exercise their rights, data subjects may contact the Data Controller by writing to:
Via alla Castellana, 3, 20063 Cernusco sul Naviglio MI
or by writing an email to: firstname.lastname@example.org