INFORMATION ON THE PROCESSING OF PERSONAL DATA
This notice supplements the website browsing policy, in order to explain how the Data Controller will process, specifically, the data entered in this form: you are therefore invited to read the notice on browsing here.
Identity and contact details of the Data Controller
SIRCA S.P.A., headquartered in MASSANZAGO (PD) at Viale Roma 85, Tax Code and VAT No. 04969690280 (hereinafter “SIRCA”), e-mail info@sircaspa.com.
Categories of data and their source
SIRCA SPA processes common personal data (e.g., personal details, contact data, data relating to your product requests) communicated to us by you.
Purposes and legal bases:
- Handling of requests for information: personal data is processed for all needs related to the fulfillment of requests for information and/or quotes.
- Defensive purposes: the Data Controller may need to process personal data for the management of out-of-court or judicial claims and disputes.
| Purpose | Legal basis (common data) | Legal basis (special categories of data) |
| A. | Performance of pre-contractual measures. | – |
| B. | Legitimate interest of the Data Controller in establishing, exercising or defending a right. | – |
Retention period
| Purpose | Retention period |
| A. | 12 months from collection. |
| B. | For the entire duration of the dispute, until the time limits for bringing appeals have expired. |
Nature of the provision of data and consequences of refusal
| Purpose | Nature | Consequences |
| A. | Mandatory | Inability to receive the requested information. |
| B. | Mandatory | Inability to manage the dispute. |
Scope of disclosure
The data is processed by internal personnel authorized for specific duties and is disclosed externally according to the following rules:
| Purpose | Categories of external recipients |
| A. | IT service providers, agents, sales consultants. |
| B. | Law firms; debt collection or receivables assignment companies; judicial authority. |
Transfer of data to a third country or an international organization
The Data Controller does not transfer personal data outside the European Economic Area.
Rights of data subjects
The person to whom the personal data refers is granted the following rights:
Access: you can find out whether your personal data is being processed and, if so, obtain access to it and request a copy.
Rectification: you can request the updating of your personal data, its correction (if inaccurate) and the completion of incomplete data.
Erasure: you can obtain the erasure of your personal data where certain conditions are met (for more information, contact the Data Controller).
Restriction: you can request that the data be marked, so as to limit its processing in the future, where certain conditions are met (for more information, contact the Data Controller).
Objection: you can object to the processing of your personal data, on grounds relating to your particular situation, where the processing is based on legitimate interest or is necessary for the performance of a task carried out in the public interest or connected with the exercise of official authority vested in the Data Controller.
Portability: you can receive, in a structured format, the personal data provided to the Data Controller and transmit it to another data controller where the processing is based on consent or on a contract and is carried out by automated means.
Withdrawal of consent: you can withdraw your consent for the purposes that required it, without prejudice to the lawfulness of the processing carried out up to that point.
The rights that can actually be exercised with respect to the processing activities carried out are:
| Purpose | Right that can be exercised | ||||||
| Access | Rectification | Erasure | Restriction | Objection | Portability | Withdrawal of consent | |
| A. | X | X | X | X | X | ||
| B. | X | X | X | X | X | ||
| C. | X | X | X | X | X | ||
To exercise the above rights, you can use the form available at the link https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1089924 and send it to the following address: info@sircaspa.com. The data subject may request, at the same address, further details regarding the information set out above (e.g., the legitimate interest balancing test or the list of data processors).
You can lodge a complaint with a supervisory authority: for Italy, the Italian Data Protection Authority (Autorità Garante per la Protezione dei Dati Personali) (www.garanteprivacy.it).