ELFATECH SRL recognises the importance of protecting personal data and undertakes to respect the privacy of users, to process user data carefully and confidentially and not to use it for any purpose other than the ones specified below.
This policy sets out the ways in which we process the personal data of users of this website. This notice is produced in compliance with EU Regulation 679/2016 (hereafter the GDPR) for users who interact with the ELFATECH SRL web services which are accessible electronically via the www.elfatechsrl.it pages.
This Policy may be modified or updated at any time by ELFATECH SRL
The information relates to this website only and not for any other websites that users may consult by following links, except those indicated above.
1. Data Controller
The Data Controller is ELFATECH SRL with registered office at Via dei Mugnai 2, 25016 – Ghedi (BS), VAT number and tax code 04413520984.
2. 2. Data and purposes of processing
ELFATECH SRL hereby informs users of the website that the data collected will be used only for the purposes set out below. The personal data processed is data relating to navigation and data provided voluntarily by users. The personal data processed is navigation data and data provided voluntarily by users.
2.1. 2.1. Navigation data
The computer systems and software procedures used to operate this website require certain types of personal data to be collected during normal operation, the transmission of which is implicit in and required by the use of internet communication protocols. The data thus collected is not intended for association with identified persons but may, by its nature, be able to identify users when it is processed and associated with data held by third parties.
Certain data relating to the browser session and general data on the device used by the user is also collected. All data is acquired anonymously and cannot be traced back to a specific user.
This data is only used to gather anonymous statistics concerning use of the website and to check that it is functioning correctly. It is deleted immediately after processing.
Purposes of processing
The data is used to acquire anonymous statistical information on use of the website, to check that it is functioning properly, to improve the quality of the services offered and to optimise the functionality of the site. It is processed only to the extent that is strictly necessary and proportionate to safeguard the security of the networks and information that passes through them.
Legal basis for processing
Processing is based on the legitimate interest of the data controller in the secure operation of its website (GDPR article 6.1. item f).
2.2. Data provided voluntarily by users
To facilitate access to various services offered on the website, users voluntarily provide ELFATECH SRL with different types of data after reading this notice and any consent required to its processing for one or more of the purposes listed below.
The optional, explicit, voluntary provision of this data by users entails its subsequent acquisition by ELFATECH SRL. Acquisition of the data is necessary to access the requested services.
2.2.1. 2.2.1. Contact Area
The website’s CONTACT area is https://elfatechsrl.it/en/contacts/
Users can send specific requests to ELFATECH SRL via this contact area.
In this section the following types of personal data are collected:
- NAME and SURNAME
- COMPANY NAME
- EMAIL ADDRESS
- MESSAGGE
Purpose of processing
This data is processed exclusively to manage and respond to requests sent by completing the CONTACT form.
Legal basis for processing
Processing is based on the assumption of legality in carrying out the pre-contractual measures taken at the request of the data subject (GDPR article 6.1. item b).
2.2.2. 2.2.2. Newsletter
Completing the contact form also allows users to subscribe to the SRL newsletter, through which they will receive informative communications at the email address they supply.
Purpose of processing
This data is processed exclusively for the purpose of subscribing to ELFATECH SRL information newsletters.
Legal basis for processing
Processing is based on the consent given voluntarily by data subjects (GDPR article 6.1. item a).
3. 3. Processing method
The data is processed via the following operations in accordance with GDPR article 4, no 2): collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion and destruction of data.
Personal data is processed using both paper and electronic and/or automated methods.
It is stored for a period consistent with the purposes of the processing as of the time it is received or updated, as indicated above. For more information on the terms of data storage, please contact info@elfatechsrl.it
4. 4. Communication and transfer of data
The data processed will not be disseminated. However, for the purposes set out in this notice, it may be communicated to third parties including business partners, consultants and independent professionals, banks and credit institutions, service companies, auditors, marketing and communication agencies, IT companies, public bodies for compliance with legal, regulatory or community obligations, or for aspects concerning the management and execution of the legal relationship with you.
The data will be processed by the following parties:
- Employees of the ELFATECH SRL companies whoa are authorised to process the data in order to fulfil the responsibilities for which they are suitably trained.
- Data processors as provided for under GDPR article 28.
A list of data processors is available at the Company’s registered office.
The data may also be disclosed, for all the purposes indicated in this policy, both inside and outside the European Union, in compliance with the rights and guarantees stipulated by current legislation, subject to verification that the country in question guarantees an ‘adequate’ level of protection as defined by the provisions of the GDPR.
5. 5. Rights of the data subject
Any data subject may, at any time, request:
- a) access to their personal data (GDPR article 15);
- b) rectification of their data in the event of inaccuracy (GDPR article 16);
- c) deletion of the data relating to them (GDPR article 17);
- d) limitation of its processing (GDPR article 18);
- e) the right to data portability, i.e. to receive the personal data provided in a structured, commonly-used and machine-readable format (GDPR article 20);
- f) the right to object to processing of their data where the relevant conditions are met (GDPR article 21).
For any issue not expressly mentioned under the provisions referred to above, please see the current regulations on the subject of privacy, in particular articles 15, 16, 17, 18, 20 and 21 of the GDPR.
Users may also submit complaints to the Personal Data Protection Authority, in accordance with article 77 of the GDPR.
For further clarification on this policy or on any privacy issue, or to exercise any of the above-mentioned rights, please contact info@elfatechsrl.it