Privacy and Cookies Policy

Last update: 27/06/2018

PRIVACY INFORMATION PURSUANT TO ART. 13 OF EU REGULATION 2016/679

With this privacy policy Socomet S.n.c., pursuant to art. 4 of EU Regulation 2016/679 on the protection of individuals with regard to the processing of personal data, as well as the free circulation of such data (hereinafter “EU Regulation”), wants to inform all those who visit this website on how they will be used and processed your personal data.

For more information click on the links below:

Definitions

Who is the Data Controller? And where can I contact him?

Data processing

Use of cookies

Notice concerning children under 16

Changes and updates

Regulatory references on the rights of the interested party

 

Definitions

By “personal data” (pursuant to article 4 number 1 of EU Regulation 2016/679), we mean any information concerning an identified or identifiable natural person (“concerned”); an identifiable natural person can be identified, either directly or indirectly, with particular reference to an identifier such as a name, an identification number, location data, an online ID or one or more characteristic elements of his physical identity, physiological, genetic, psychological, economic, cultural or social.

By “treatment” (pursuant to article 4 number 2 of EU Regulation 2016/679), we mean any operation or set of operations, performed with or without the aid of automated processes and applied to personal data or sets of personal data, such as the collection, registration, organization, structuring, preservation, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available; comparison or interconnection, limitation, cancellation or destruction.

Who is the Data Controller? And where can I contact him?

Business name: Socomet S.n.c.

Registered office address: S. S. 10 for Voghera n. 16 – 15057 Tortona (AL)

Data contact telephone: +39 0131 811766 – 820368

Contact details email: info@socomet.net

This website is managed by Gamma Innovation S.r.l.

Socomet S.n.c. he can be contacted at the addresses above.

Data processing

Personal Data collected

Socomet S.n.c. collects and processes personal data provided by the interested parties, such as identification and personal data (for example, name, surname, address, telephone number and e-mail address).

Furthermore, the computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified.

Among the information that can be collected we have the IP addresses, the type of browser or the operating system used, the addresses in notation URI (uniform resource identifier), the domain name and the addresses of the websites from which the access or exit (referring / exit pages), the time at which the request was made to the server, the method used and information on the response obtained, further information on the user’s navigation on the site (see also the related section to cookies) and other parameters relating to the operating system and the user’s computer environment.

These same data could also be used to identify and ascertain responsibilities in case of any computer crimes against the site.

Purpose of the treatment

Socomet S.n.c. process the data of the interested party through electronic means, and possibly paper for the following purposes:

1. respond to requests or questions presented by you, solve problems related to our goods or services and receive useful advice to improve our offer;
2. execution and organizational management of existing and / or future commercial relationships;
3. fulfillment of the legal obligations related to or in any case connected with existing and / or future legal relationships;
4. protection of their rights, including in connection with fraud or debt collection;
5. internal statistical analysis in aggregate form;

The following table specifies for each of the purposes identified above the legal basis, the categories of data, the categories of personal data, and the relative retention period:

TABLE 1

*Target categories

In relation to the purposes indicated, the data may be disclosed to the following persons and / or categories of persons indicated below, or may be disclosed to companies and / or persons, in EU countries, which provide services, including external, on behalf of the Owner. Among these ** are indicated for greater clarity and a mere exemplary but not exhaustive their different type:

• IT services company;
• Accounting management consultants;
• Control and supervisory bodies.

(**) the list of External Recipients / Managers with additional data useful for identification is available from the Data Controller.

Transfer of data to non-EU third country

The Data Controller does not transfer personal data to non-EU territory.

Retention period

Please refer to table 1 in column 4 (“Retention period for personal data”).

Rights of the interested party

The interested party, in relation to the personal data subject of this information, has the right to exercise the rights provided for by the EU Regulation below:

• right of access by the interested party [art. 15 of the EU Regulation];
• right to rectify personal data [art. 16 of the EU Regulation];
• right to cancel their Personal Data without unjustified delay (“right to be forgotten”) [art. 17 of the EU Regulation];
• right to limit the processing of personal data [art. 18 of the EU Regulation];
• right to data portability [art. 20 of the EU Regulation];
• right to object to the processing of personal data [art. 21 of the EU Regulation];
• the right not to be subjected to automated decision-making processes [art. 22 of the EU Regulation].

The aforementioned rights may be exercised according to the provisions of the Regulations by sending an e-mail to info@socomet.net

Socomet S.n.c., in accordance with the art. 19 of the EU Regulation, the recipients to whom the personal data of the eventual corrections, cancellations or requisites of the requested treatment have been communicated, where this is possible.

If the processing purpose pursued by Socomet S.n.c. the consent has its legal basis, the interested party has the right to proceed, at any time, to the revocation by sending an e-mail to info@socomet.net. Pursuant to Article 7 of the EU Regulation, the withdrawal of consent does not affect the lawfulness of the processing of consent before the revocation.

If the interested party considers that his rights are compromised, he has the right to complain to the Guarantor for the protection of personal data, according to the methods indicated by the Authority at the following Internet address: http: //www.garanteprivacy. en / web / guest / home / docweb / – / docweb-display / docweb / 4.535.524.

For more information on the rights and exercise of the same please refer to Right of access of the interested party.

Mandatory provision of personal data

Please note that when the treatment rules have become legal or contractual (or even pre-contractual) basis, the goal is to provide the requested data.

Otherwise, it will be impossible for the Data Controller to proceed with the pursuit of specific processing purposes.

The Company did not make use of any automated decision-making process.

Method of treatment

Personal data are processed in paper form, computerized and telematic and incorporated into databases (customer customers, customers, users, etc.), which are accessible, the employees expressly appointed by the owner as managers and persons in charge of processing personal data, which require operations for consultation, use, processing, comparison and any other appropriate operation, even automated, in compliance with the law, the updating and relevance of the data with respect to the stated purposes.

Use of cookies

The following information is made to the user in implementation of the provision of the Guarantor for the protection of personal data of May 8, 2014 “Identification of simplified procedures for the disclosure and acquisition of consent for the use of cookies”.

WHAT ARE COOKIES?

Cookies are small text strings that a website can send, while browsing, to your device (be it a PC, a notebook, a smartphone, a tablet, usually stored directly on the browser used for navigation) . The same website that transmitted them, then can read and record cookies that are on the same device to obtain information of various kinds. Which? For each type of cookie there is a well-defined role.

HOW MANY TYPES OF COOKIES EXIST?

There are two basic macro-categories, with different characteristics: technical cookies and profiling cookies.

Technical cookies are generally necessary for the proper functioning of the website and to allow navigation; without them you may not be able to view the pages correctly or use some services. For example, a technical cookie is essential to keep the user connected throughout the visit to a website, or to store the language, display, and so on. Technical cookies can be further distinguished in:

• navigation cookies, which guarantee the normal navigation and use of the website (allowing, for example, to make a purchase or authenticate to access restricted areas);
• analytics cookies, similar to technical cookies only when used directly by the site operator to collect information, in aggregate form, on the number of users and how they visit the site.
• functionality cookies, which allow the user to navigate according to a series of selected criteria (for example, the language, the products selected for purchase) in order to improve the service provided.

Profiling cookies are more sophisticated! These cookies have the task of profiling the user and are used in order to send advertising messages in line with the preferences expressed by the user during his navigation.

Cookies can still be classified as:

• session cookies, which are deleted immediately when the browser is closed;
• Persistent cookies, which – unlike session cookies – remain in the browser for a certain period of time. They are used, for example, to recognize the device that connects to the site facilitating authentication operations for the user.
• first-party cookies (first-part cookies) or cookies generated and managed directly by the manager of the website on which the user is browsing.
• third-party cookies (third-part cookies), which are generated and managed by parties other than the operator of the website on which the user is browsing (in force, as a rule, a contract between the owner of the website and the third part).

WHICH COOKIES DOES SOCOMET S.N.C.?

We use technical cookies, designed to ensure the proper functioning of our site, without which your browsing experience would not be pleasant. To improve our site and understand which parts or elements are most appreciated by users, as an anonymous and aggregate analysis tool, we use third-party cookies, ie Google Analytics. This cookie is not a tool of our ownership, for more information, therefore, you can consult the information provided by Google at the following address: http://www.google.it/policies/privacy/partners/.

The following table shows specifically the cookies used.

* When accessing this site for the first time, a banner will appear that will show a brief information on the use of these third-party cookies. By expressing your consent or continuing to browse or accessing other elements on the site, you consent to the installation of these cookies. You can always proceed with their cancellation as indicated in the instructions below.

Finally, below are links to the most popular browsers, where there is information about how to disable the storage or delete cookies already stored on the browser:

• Internet Explorer
• Google Chrome
• Mozilla Firefox
• Apple Safari

 

Notice concerning children under 16

Children under 16 can not provide personal data. will not be in any way responsible for any collection of personal data, as well as false statements, provided by the minor, and in any case, if you notice its use, will facilitate the right of access and cancellation forwarded by the legal guardian or from those who exercise parental authority.

Changes and updates

This informative report shows the date of its last update in its header.

It could also make changes and / or additions to this privacy policy also as a consequence of any subsequent amendments and / or regulatory additions.

Regulatory references on the rights of the interested party

Article 15
Right of access of the interested party

1. The data subject has the right to obtain from the data controller confirmation that the processing of personal data concerning him or her is in progress and, in this case, to obtain access to personal data and the following information:
   a) the purposes of the processing;
   b) the categories of personal data in question;
   c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if recipients of third countries or international organizations;
   d) where possible, the retention period of the personal data provided or, if not possible, the criteria used to determine this period;
   e) the existence of the right of the interested party to request the data controller to rectify or delete personal data or limit the processing of personal data concerning him or to oppose their treatment;
   f) the right to lodge a complaint with a supervisory authority;
   g) if the data are not collected from the data subject, all information available on their origin;
   h) the existence of an automated decision-making process, including the profiling referred to in Article 22 (1) and (4) and, at least in such cases, significant information on the logic used, and the importance and expected consequences of such processing for the interested party.
2. Where personal data are transferred to a third country or to an international organization, the data subject shall have the right to be informed of the existence of adequate safeguards pursuant to Article 46 relating to the transfer.
3. The data controller provides a copy of the personal data being processed. In case of further copies requested by the data subject, the data controller may charge a reasonable fee contribution based on administrative costs. If the interested party submits the request by electronic means, and unless otherwise indicated by the interested party, the information is provided in a commonly used electronic format.
4. The right to obtain a copy referred to in paragraph 3 shall not affect the rights and freedoms of others.

 

Article 16
Right to correct

The data subject has the right to obtain from the data controller the correction of inaccurate personal data concerning him without undue delay. Taking into account the purposes of the processing, the data subject has the right to obtain the integration of incomplete personal data, also by providing an additional declaration.

Article 17
Right to cancellation (“right to be forgotten”)

1. The interested party has the right to obtain from the data controller the deletion of personal data that the they concern without undue delay and the data controller is obliged to cancel the personal data without undue delay if one of the following reasons exists:a) personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;
   b) the data subject revokes the consent on which the processing is based in accordance with Article 6 (1) (a) or Article 9 (2) (a) and whether there is no other legal basis for the processing;
   c) the data subject opposes the processing pursuant to Article 21 (1) and there is no legitimate overriding reason to proceed with the processing, or opposes the processing pursuant to Article 21 (2);
   d) personal data have been processed unlawfully;
   e) personal data must be deleted to fulfill a legal obligation under Union or Member State law to which the controller is subject;
   f) the personal data have been collected in relation to the information society service offer referred to in Article 8 (1).
2. The controller shall, if he / she has made personal data public and is obliged, pursuant to paragraph 1, to delete it, taking into account the available technology and implementation costs, shall take reasonable steps, including technical measures, to inform the data controllers who are processing personal data of the request of the person concerned to delete any link, copy or reproduction of his personal data.
3. Paragraphs 1 and 2 shall not apply to the extent that processing is necessary:
   a) for exercising the right to freedom of expression and information;
   b) for the fulfillment of a legal obligation requiring treatment under Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority of which the data controller is invested;
   c) for reasons of public interest in the field of public health in accordance with Article 9 (2) (h) and (i) and Article 9 (3);
   d) for archival purposes in the public interest, for scientific or historical research or for statistical purposes in accordance with Article 89 (1), insofar as the right referred to in paragraph 1 risks making it impossible or seriously prejudices the achievement of the objectives of this treatment; or
   e) for the assessment, exercise or defense of a right in court.

 

Article 18
Right of limitation of treatment

1. The data subject has the right to obtain from the data controller the limitation of processing when one of the following hypotheses occurs:
   a) the interested party disputes the accuracy of personal data for the period necessary for the data controller to verify the accuracy of such personal data;
   b) the processing is illegal and the interested party opposes the cancellation of personal data and asks instead that its use is limited;
   c) although the data controller no longer needs it for processing purposes, personal data are necessary for the data subject to verify, exercise or defend a right in court;
   d) the interested party has opposed the treatment pursuant to Article 21 (1), pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.
2. If the processing is restricted pursuant to paragraph 1, such personal data shall only be processed, except for storage, with the consent of the data subject or for the establishment, exercise or defense of a right in court. or to protect the rights of another natural or legal person or for reasons of significant public interest of the Union or of a Member State.
3. The data subject having obtained the processing restriction pursuant to paragraph 1 and informed by the controller before the limitation is revoked.

 

Article 19
Obligation to notify in case of rectification or cancellation of personal data or limitation of processing

The controller shall inform each of the recipients to whom the personal data have been transmitted of any correction or cancellation or limitation of the processing carried out in accordance with Article 16, Article 17 (1) and Article 18, unless proves impossible or involves a disproportionate effort. The data controller informs the recipient of these recipients if the data subject requests it.

Article 20
Right to data portability

1. The data subject shall have the right to receive personal data concerning him / her provided to a data controller in a structured, commonly used and readable form by automatic device and has the right to transmit such data to another data controller without impediments on the part of the data controller to whom he has provided them if:
   a) the processing is based on consent pursuant to Article 6 (1) (a) or Article 9 (2) (a) or on a contract within the meaning of Article 6 (1) b): e
   b) the treatment is carried out by automated means.
2. In exercising its rights relating to the portability of data in accordance with paragraph 1, the data subject shall have the right to obtain direct transmission of personal data from one controller to another, if technically feasible.
3. The exercise of the right referred to in paragraph 1 of this Article shall be without prejudice to Article 17, This right shall not apply to the treatment necessary for the performance of a task carried out in the public interest or in connection with the exercise of official authority as and the owner of the treatment is invested.
4. The right referred to in paragraph 1 must not affect the rights and freedoms of others.

 

Article 21
Opposition right

1. You have the right to object at any time, for reasons connected with your particular situation, to the processing of your personal data pursuant to Article 6, paragraph 1, letters e) of), including profiling on the basis of these provisions, the data controller refrains from further processing personal data unless he demonstrates the existence of binding legitimate reasons to proceed with the processing that prevail over the interests, rights and freedoms of the interested party or for the assessment , the exercise or defense of a right in court.
2. If personal data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him / her for such purposes, including profiling in so far as it is related to such marketing direct.
3. If the data subject objects to processing for direct marketing purposes, personal data are no longer processed for these purposes.
4. The right referred to in paragraphs 1 and 2 shall be explicitly brought to the attention of the interested party and shall be presented clearly and separately from any other information at the latest at the time of the first communication with the data subject.
5. In the context of the use of information society services and without prejudice to Directive 2002/58 / EC, data subjects may exercise their right to object by automated means using technical specifications.
6. Where personal data are processed for the purposes of scientific or historical research or for statistical purposes in accordance with Article 89 (1), the data subject shall have the right to object to the processing of personal data for reasons connected with his particular situation concerning him, unless the processing is necessary for the performance of a task in the public interest.

 

Article 22
Automated decision-making process relating to natural persons, including profile

1. You have the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning yourself or which significantly affects your person.
2. Paragraph 1 shall not apply where the decision:
   a) is necessary for the conclusion or execution of a contract between the data subject and a data controller;
   b) is authorized by the law of the Union or of the Member State to which the controller is subject, which also specifies appropriate measures to protect the rights, freedoms and legitimate interests of the data subject;
   c) is based on the explicit consent of the interested party.
3. In the cases referred to in paragraph 2 (a) and (c), the controller shall implement appropriate measures to protect the rights, freedoms and legitimate interests of the data subject, at least the right to obtain human intervention from the holder treatment, to express their opinion and to challenge the decision.
4. The decisions referred to in paragraph 2 shall not be based on the particular categories of personal data referred to in Article 9 (1), unless Article 9 (2) (a) or (g) applies, and adequate measures to protect the rights, freedoms and legitimate interests of the data subject are not in force.