Privacy

With the entry into force of EU Regulation 679/2016 GDPR, containing provisions for the protection of persons and other subjects regarding the processing of personal data, : SCATOLIFICIO SIGMA srl, as Data Controller, is required to provide some information regarding the use of personal data. We, therefore, inform you that the personal data provided, or otherwise acquired in compliance with current legislation – concerning, connected and/or instrumental to the existing relationships, may be processed, in compliance with the legislation referred to above and the obligations of confidentiality. Processing of personal data means the collection, recording, organisation, storage, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, deletion and destruction of personal data or the combination of two or more of such operations.

• Purposes of the processing for which the data are intended;
  The data collected through the communication to the e-mail address of SCATOLIFICIO SIGMA srl will be processed only in relation to the formalities required to allow the provision of the requested service. The data recorded may also be used for administrative reports of our activity, it will not be used for the time being to send the data subject commercial information relating to the same beyond that explicitly requested by the data subject.
• Methods of data processing; Data processing will be carried out by means of suitable instruments to guarantee security and confidentiality and the data will be processed mainly by means of IT tools and stored both on IT and paper supports and on any other type of suitable support. We also inform you that personal data will be processed in accordance with the procedures set out in the EU 679/2016 GDPR, which provides, among other things, that the data itself are:
  • processed lawfully and fairly;
  • collected and recorded for specific, explicit and legitimate purposes;
  • accurate and, where necessary, kept up to date;
  • relevant, complete and consistent with the purpose for which they have been collected.
The data processing is carried out by the Data Controller through his or her data processors and by any third parties appointed as data processors previously appointed on the basis of Articles 24 – 25 -26 – 27 – 28 – 29 -30 – 31, who operate under the control and responsibility of the Data Controller.

3. Subjects to whom the data may be communicated
Where necessary for the purposes referred to in point 1), the data may also be communicated to third parties who are appointed within our company to process personal data; to our consultants, to the extent necessary for the performance of their duties in our company.

4. Rights of the data subject

In relation to the aforementioned processing, the rights set out in EU Regulation 679/2016 GDPR Chapter III – Rights of the data subject may be exercised.

• • Transparency and modalities Art. 12
  • Information and access to personal data Articles 13 – 14 – 15
  • Correction and deletion Articles 16 – 17 – 18 – 19 – 20 – 21 – 22
  • Right of objection and automated decision making related to natural persons Art. 23

In short, the data subject has the right to obtain confirmation as to whether or not personal data concerning him/her exist, even if they have not yet been recorded, and communication of such data in an intelligible form.

 The data subject has the right to know:

• the origin of the personal data;
• the purpose and methods of data processing;
• the logic applied in the event of processing carried out with the help of electronic tools;
• the identification details of the Data Controller, of the Data Processors and of the designated representative;
• • the subjects or categories of third parties to whom the personal data may be communicated or who may become aware of them as data processors.

The data subject has the right to obtain:

• the updating, correction or, if he/she has an interest therein, integration of the data;
• the deletion, transformation into anonymous form or blocking of data which have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;
• • certification that the data have been deleted, as well as by the data controller, by third-party data processors to whom they have been communicated or disseminated to carry out the formalities required by the data subject or by law, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected. The data subject has the right to object, in whole or in part:
• to the processing of their personal data for legitimate reasons, even if pertinent to the purpose of collection;
• to the processing of personal data for the purpose of sending advertising materials, for direct sales or for carrying out market research or commercial communications.

The Data Controller:

• Name: SCATOLIFICIO SIGMA srl
• Registered office: Via Pianacci, 9 Pian di Scò (AR)
• Tax Code and VAT number 01818820514
• REA-AR 141503 Chamber of Commerce of AREZZO 49235