PRIVACY NOTICE PURSUANT TO ARTICLES 13 AND 14 OF EU REGULATION 2016/679

This Privacy Policy applies to the website and all products and services offered by SINTRA SRL Società Benefit through it. Pursuant to Articles 13 and 14 of EU Regulation 2016/679 (hereinafter “Regulation” or “GDPR”), the personal data you provide to SINTRA SRL Società Benefit will be processed in accordance with European and national personal data protection laws. Your data will be processed in accordance with the principles of lawfulness, fairness, transparency, purpose and storage limitation, data minimization, accuracy, integrity and confidentiality, and accountability, ensuring your privacy and protecting your rights.

This Privacy Policy outlines how SINTRA SRL Società Benefit collects, uses, stores, protects, and discloses personal data from users of the website https://www.sintra-mixind.com (hereinafter referred to as the “Website”), as data subjects as defined by Article 4 of the GDPR. It also provides users with information on how data is collected and outlines how data subjects may exercise their rights, including access, rectification, and erasure.

DATA CONTROLLER

The Data Controller is SINTRA SRL Società Benefit, headquartered at Corso Europa 24, 28010, Fontaneto D’Agogna (NO), VAT and Tax Code: 01624740187.

The Data Controller can be contacted at:
Tel: +39 0322 863601
Email: sintra@mix-ind.it

TYPES OF PERSONAL DATA PROCESSED

The types of data collected through the Website may include so-called “common” personal data, such as identification information like names and contact details (address, phone/fax number, email, etc.).

SINTRA SRL Società Benefit only processes personal data voluntarily provided by users upon explicit request, in relation to the activities, services, features, or resources made available on our Website, for example.

Non-personal identification information may also be collected whenever users interact with the Website. Such information may include browser name, type of device used, and technical data related to the user’s connection to our Website, such as operating system, internet service providers, and similar information.

PURPOSES AND LEGAL BASES FOR DATA PROCESSING

SINTRA SRL Società Benefit processes personal data of Website users for the following purposes:

  • To provide customer service and respond more effectively to requests and support needs;

  • To improve the Website using feedback from users to enhance our products and services;

  • To carry out administrative and accounting activities related to the services offered via the Website;

  • To fulfill contractual and/or pre-contractual obligations;

  • To comply with legal obligations;

  • For the defense of the Controller’s rights or interests in legal proceedings, dispute management, contract breaches, warnings, settlements, debt recovery, and arbitration;

  • For statistical and historical purposes (using anonymous data only);

  • To manage reports as per Legislative Decree No. 24 of 10 March 2023 – “Whistleblowing” procedure.

For the purposes listed above, the applicable legal bases under Article 6(1) of the GDPR are: the data subject’s consent, the performance of a contract or pre-contractual measures, compliance with a legal obligation, and the legitimate interest of the Controller.

DATA PROVISION AND PROCESSING METHODS

Data processing is carried out solely for the management purposes listed above. Users may always choose not to provide personal and/or identifying information; however, failure to provide complete or accurate data may limit the use of certain services or features on the Website, and may prevent full or partial management of the existing or prospective relationship between the Controller and the Data Subject.

Where personal data processing requires the user’s consent, it will be obtained explicitly, clearly, and demonstrably, in accordance with Articles 6 and 7 of the GDPR. The provision of data for newsletter subscription (promotional, informational, or research purposes) is optional. Refusal to provide consent will result in the inability to receive updates on commercial initiatives, promotional campaigns, or personalized offers.

Data may be processed both electronically and in paper form by authorized personnel and, if necessary, by third parties appointed as external data processors under Article 28 of the GDPR. The Controller undertakes to adopt appropriate security measures to protect data from loss, misuse, or alteration, in compliance with the law, Data Protection Authority guidelines, and Article 32 of the Regulation.

DATA RETENTION AND DELETION TERMS

All data will be retained for as long as necessary to fulfill the stated purposes, and in any case, no longer than required to achieve the purposes for which they were collected or for contractual, pre-contractual, or legal obligations. Additional criteria for retention duration may include specific legal provisions regulating the Controller’s activities (e.g., tax law for accounting data). In the event of legal disputes, data will be retained for the duration of the case and until the end of the appeal period. After these terms, the data will be deleted or anonymized according to technical deletion and backup procedures.

DATA SHARING AND DISCLOSURE

Personal data will be processed by authorized individuals identified by the Controller, including employees and collaborators. Data may also be processed by third parties engaged by the Controller to provide services for the above purposes (e.g., accounting consultants, software or accounting system providers, credit institutions). These parties will process data in accordance with the instructions received and only to the extent necessary for the requested services. Personal data will not be disclosed to the public.

DATA SUBJECT RIGHTS

Pursuant to Articles 15 et seq. of the GDPR, users have the right to obtain confirmation as to whether or not personal data concerning them is being processed (within one month of the request, extendable by two months if necessary), and to lodge a complaint with the Data Protection Authority. Users may request access to their personal data and obtain information on:

  • The purposes of processing;

  • The categories of personal data collected and processed;

  • The recipients or categories of recipients of the data, especially third countries or international organizations;

  • The expected retention period or, if not possible, the criteria used to determine it;

  • The existence of rights to rectification, erasure, restriction, or objection to processing;

  • The right to lodge a complaint with a supervisory authority;

  • If data were not collected from the data subject, any available information about their source;

  • The existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and consequences of such processing (cf. Articles 12–15 and 22 GDPR).

To exercise your rights or request updated lists of data processors, you may contact the Data Controller at: sintra@mix-ind.it

You also have the right to lodge a complaint with the Italian Data Protection Authority regarding any aspect of the processing of your personal data. Forms are available at: www.garanteprivacy.it/home/modulistica-e-servizi-online

COOKIES

Our Website uses “cookies” to enhance the user experience. The web browser stores cookies on the user’s device (e.g., HDD, SSD) for record-keeping and sometimes to track information about them. Users can configure their browsers to refuse cookies or to notify them when cookies are sent.

More information can be found in our Cookie Policy section below.

CHANGES TO THIS PRIVACY POLICY

SINTRA SRL Società Benefit reserves the right to modify, supplement, or update this Privacy Policy in compliance with applicable legislation or rulings from the Data Protection Authority. Changes will be made available via a link on the Website’s Privacy Policy page and may also be communicated via email. We encourage users to regularly review this Privacy Policy to stay informed and decide whether to continue using the services offered.

ACCEPTANCE OF TERMS

Use of this Website constitutes acceptance of this Privacy Policy. Continued use of the Website after the publication of changes to this policy will be deemed acceptance of those changes.

DATA CONTROLLER

SINTRA SRL Società Benefit
Corso Europa 24, 28010, Fontaneto D’Agogna (NO)
Last update: 18/01/2023