Privacy notice
This notice (hereinafter the "Privacy notice") is intended to inform users about the processing of personal data, meaning any information that allows a natural person to be identified directly or indirectly (hereinafter "Personal Data" or "Data"), collected through the website www.sys-man.it (hereinafter the "Site").
The "Data Controller" is Sysman Progetti & Servizi Srl, with registered office at Via Benedetto Croce 62 A/1, 00142 Rome, email privacy@sys-man.it.
The Data Controller may amend or update this Privacy Notice in whole or in part, informing users of the changes. Changes or updates will be binding as soon as they are published on the Site. Users are therefore encouraged to read the Privacy Notice periodically. If a user does not accept any changes to the Privacy Notice, they must stop using the Site and may ask the Data Controller to remove their Personal Data.
Personal Data collected by the Site
The Data Controller collects the following categories of Personal Data:
Content and information voluntarily provided by the user
This includes Personal Data that users voluntarily provide through their use of the Site, such as personal details, contact information, access credentials for the services and/or products provided, and personal interests and preferences.
If a user chooses not to provide Personal Data relating to a contractual relationship, the Data Controller will be unable to provide the relevant services in whole or in part.
Users who provide the Data Controller with third parties' Personal Data are directly and exclusively responsible for its origin, collection, processing, communication and/or disclosure.
Data and content acquired automatically while using the Site
This information includes:
- Technical data: during normal operation, the IT system and software procedures supporting the Site may acquire Personal Data whose transmission is implicit in the use of internet communication protocols. This information is not collected with the intention of associating it with specific individuals; however, by its nature it could identify users through processing and association with data held by third parties. This category includes the IP addresses or domain names used by users connecting to the Site, the URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to send it to the server, the size of the file obtained, etc.
- Usage data: Personal Data relating to the user's use of the Site may be collected, such as pages visited, actions performed (for example, clicking links or downloading files), and features and services used.
- Geolocation data: the Site may collect Personal Data about the user's location, consisting of GNSS (Global Navigation Satellite System, such as GPS) data, as well as data identifying the nearest cell tower, Wi-Fi and Bluetooth access points, communicated when location-based products or features are enabled.
Personal Data collected through cookies or similar technologies
The Site uses cookies, web beacons, unique identifiers and similar technologies to collect Personal Data about pages and links visited and other actions performed while using the Site. This data is stored so that it can be communicated to the same website on the user's next visit.
Users can read the full Cookie Policy at https://www.sys-man.it/cookie-policy.
Purposes of processing
The Personal Data collected may be used to fulfil contractual, pre-contractual and/or legal obligations.
Personal Data may also be used to respond to users' requests and provide assistance with problems, and to monitor and analyse users' behaviour on the Site.
The Personal Data collected is communicated to Google Inc. in accordance with its privacy policy, available at https://policies.google.com/privacy.
How Personal Data is processed
Personal Data is processed using paper-based, computerised and/or electronic tools, with organisational methods closely related to the stated purposes.
In some cases, parties other than the Data Controller who are involved in its organisation (such as administrative and sales staff or system administrators) or external parties (such as IT companies, service providers, postal couriers or hosting providers) may have access to Personal Data. Where necessary, these parties will be appointed as Data Processors by the Data Controller. They will have access to users' Personal Data only when required and will be contractually obliged to keep it confidential and comply with applicable legislation.
An updated list of Data Processors may be requested by email at privacy@sys-man.it.
Transfer of Personal Data outside the European Union
The Personal Data collected may be transferred to countries outside the European Union (EU) or European Economic Area (EEA). In such cases, the Data Controller ensures that transfers comply with applicable legal provisions, in particular through standard contractual clauses approved by the European Commission or adequacy decisions issued by the Commission, to ensure an adequate level of protection for Personal Data. Users may request further information or a copy of the safeguards adopted by contacting the Data Controller at privacy@sys-man.it.
Legal basis for processing
Users' Personal Data is processed on the following legal bases:
- The user's consent for one or more specific purposes;
- Processing is necessary for the performance of a contract with the user and/or pre-contractual measures;
- Processing is necessary to comply with a legal obligation or an order from an Authority to which the Data Controller is subject;
- Processing is necessary for a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
- Processing is necessary for the legitimate interests pursued by the Data Controller or third parties, such as security measures, fraud prevention, or internal and administrative management;
- Processing is necessary to protect the vital interests of the Data Controller or third parties.
The Data Controller may always be asked to clarify the legal basis for each processing operation at privacy@sys-man.it.
Location
Personal Data is processed at the Data Controller's operating offices and wherever the parties involved in processing are located. For further information, contact the Data Controller by email at privacy@sys-man.it or by post at Via Benedetto Croce 62 A/1, 00142 Rome.
Security of processing
Personal Data is processed using appropriate measures and tools to ensure its security and confidentiality, as the Data Controller has implemented appropriate technical and organisational measures that demonstrably ensure processing complies with applicable law.
Data retention period
Personal Data will be retained for as long as necessary to achieve the purposes for which it was collected. For example, Personal Data will be retained for the full duration of any contractual relationship with the user and for the time needed to fulfil obligations arising from and following the contract.
Where processing is based on the user's consent, the Data Controller may retain Personal Data until that consent is withdrawn.
Personal Data may be retained for longer to comply with a legal obligation or an order from a public Authority.
All Personal Data will be deleted or retained in a form that does not allow the user to be identified within 30 days of the end of the retention period. After that period, the rights of access, rectification, erasure and portability of Personal Data can no longer be exercised.
Automated decisions
The Data collected will not be subject to automated decision-making, including profiling, that could produce legal effects for the user or significantly affect them.
User rights
Users may exercise specific rights regarding their Personal Data processed by the Data Controller. In particular, users have the right to withdraw consent at any time, object to processing, access their Data, monitor and request rectification of their Data, obtain restriction of processing, have their Personal Data removed, receive their Data or have it transferred to another controller, lodge a complaint with the data protection supervisory Authority, or take legal action.
To exercise these rights, users may send a request to the Data Controller using the contact details in this document. Requests are free of charge and will be handled as quickly as possible and in any event within 30 days.