1. HOLDER OF THE TREATMENT

The data controller is EKR s.r.l., with headquarters in Viale della Repubblica 12 / I, 31020 Villorba (TV) – Italy, C.F. / P. Iva 04162630265 (hereinafter, the “Owner” or “Data Controller”).

2. PURPOSE OF PROCESSING AND LEGAL BASIS

Personal data (hereinafter also “Data”) provided by the data subject through the site will be processed for the following purposes: a) to allow user access to the pages of the Site to ensure its proper functioning; b) with specific consent, to send commercial and / or promotional communications on the products and services of the interested party as well as to carry out market research (“Direct Marketing”); c) on the basis of your specific consent, in order to analyze the characteristics of the company (size, location, product category, suppliers, activities carried out, systems installed) (“profiling activities”) and to send consistent commercial communications with the size profile, the business sectors and the location of the company. Personal data will also be processed anonymously for statistical purposes;

3. TYPES OF DATA PROCESSED

3.1 Navigation data

This category of data includes IP addresses or domain names of the computers used by users who connect to the site, the addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s computer environment.

3.2 Data provided voluntarily by the user

The optional, explicit and voluntary sending of e-mails to the addresses indicated on this site or the compilation of published forms entails the subsequent acquisition of the sender’s address to respond to requests, as well as any other data entered in the form.

4. CATEGORIES OF RECIPIENTS OF PERSONAL DATA

The data will be processed by employees and / or collaborators of the Data Controller appointed as authorized persons in charge of processing and may be disclosed to third-party companies, appointed for this purpose as data processors, which provide ancillary and instrumental services to the Data Controller’s activity. In no case will the data be disseminated.

5. TRANSFER OF PERSONAL DATA ABROAD

The management and storage of personal data takes place on servers located inside and outside the European Union owned and / or in the availability of the Data Controller and / or third-party companies duly appointed as data processors. Pursuant to art. 45 GDPR, for the purposes referred to in par. 2, lett. b) and c), the data may be transferred to The Rocket Science Group LLC d / b / a MailChimp and Salesforce.com inc., based in the USA, which guarantee an adequate level of protection for the Data Subject by being registered in the Privacy Shield List in compliance with the European Commission Implementing Decision (EU) 2016/1250, of 12 July 2016 cd “Privacy Shield” (in GUUE L 207 of 1.8.2016, pp. 1–112).

6. DATA STORAGE TIMES

The personal data concerning you, collected through the forms on our site, will be kept for the time necessary to respond to your requests. The data collected for direct marketing purposes will be processed for a maximum period of 24 months. The data collected for profiling purposes will be processed for a maximum period of 12 months. The data collected through cookies will be kept for the period of time established by the individual cookie. For more information, refer to the site’s cookie policy.

7. NATURE OF DATA CONFERENCE AND CONSEQUENCES OF REFUSAL TO RESPOND

The provision of the data necessary for the processing listed under (a) is optional, but is a necessary and indispensable condition for the use of the service: any refusal to provide the data therefore makes it impossible to perform the requested service. Consent to processing for further purposes is optional.

8. RIGHTS OF THE INTERESTED PARTY

The following rights are granted to the interested party: 1. right of access, ie the right to obtain from the Company confirmation that the data is being processed and, in this case, to obtain access; 2. right of rectification and cancellation, ie the right to obtain the correction of inaccurate data and / or the integration of incomplete data or the cancellation of data for legitimate reasons; 3. right to limitation of processing, ie the right to request the suspension of processing if there are legitimate reasons; 4. right to data portability, ie the right to receive the Data in a structured, commonly used and legible format, as well as the right to transmit the Data to another data controller; 5. right to object, ie the right to object to the processing of data if there are legitimate reasons, including the processing of data for marketing and profiling purposes, if any; 6. right to contact the competent data protection authority in the event of unlawful data processing.

9. METHOD OF EXERCISING RIGHTS

You can exercise these rights by simply sending: a registered letter with return receipt to EKR srl, Viale della Repubblica 12 / I 31020 Villorba (TV) an e-mail to privacy@ekr.it The Data Controller will take care of keep this information updated.

10. COOKIES POLICY

Please also read the Cookies Policy