Dear Customer,
In compliance with the obligations set forth by the European Privacy Regulation EU 2016/679 (GDPR) and Legislative Decree No. 196 of June 30, 2003 (Personal Data Protection Code), we hereby inform you that Sivit Srl, as the Data Controller, will process your personal data that has been or may be provided or communicated to us, by you or by other parties, during our relationship.
The processing of your data, whether freely provided by you or otherwise collected, will be carried out in accordance with current privacy laws, based on principles of fairness, lawfulness, and transparency, and conducted in observance of the principles of relevance, completeness, and non-excessiveness.
Data Controller Identification
The Data Controller for all purposes specified below is Sivit Srl, Via Centallo 56, 10156 Turin (TO), Italy, VAT No. 01012820013, email: info@sivit.it.
Purpose of Data Processing
- To address inquiries submitted through the website contact form.
- To manage requests related to courses offered by the company.
Categories and Nature of Data Processed
The categories of data processed include personal identification data, such as name, surname, and email address.
Data Retention Period
In accordance with Article 5, paragraph 1, letter e) of the GDPR, personal data is retained in a form that allows identification of the data subject for no longer than necessary for the purposes for which the data was collected or subsequently processed, or as required by law. The relevance and necessity of the retained data are periodically reviewed under the supervision of the Data Controller.
- When processing is necessary for the execution of a contract and/or pre-contractual measures, data will be processed until completion of the contract and retained for the subsequent 10 years, except where the Data Controller has a legitimate interest, such as legal disputes.
- When processing is necessary to comply with a legal obligation, data will be retained as long as permitted by law.
- When processing is based on the legitimate interest of the Data Controller, data will be retained as long as permitted by law.
- Personal data will in any case be retained to fulfill obligations, including fiscal and accounting obligations, that persist after termination of the contract. For these purposes, the Data Controller will retain only the data necessary for such compliance for the subsequent 10 years, except in cases of legitimate interest in legal disputes.
Processing Methods
Processing will be carried out manually and/or using electronic or telematic tools, in compliance with Article 32 of the GDPR, by authorized persons and in accordance with Article 29 of the GDPR. Appropriate security measures will be observed to prevent data loss, unlawful or incorrect use, and unauthorized access.
Nature of Data Provision
- The provision and processing of data are mandatory and do not require your consent for purposes related to legal obligations, regulations, or EU legislation.
- They are essential and do not require your consent for all personal data necessary for the proper establishment, management, and continuation of the professional service.
- They are optional and require your explicit consent for all personal data collected for purposes not directly or indirectly related to contractual, pre-contractual, legal obligations, protection of vital interests, public tasks, exercise of public powers, or pursuit of legitimate interests.
Any refusal to provide the above-mentioned data, even if legitimate, could compromise the regular conduct of the relationship with our company and, in particular, for data defined as mandatory and essential, could make it impossible for us to carry out the professional assignment and provide the requested services.
Data Communication
The subjects or categories of subjects who may become aware of your data or to whom personal data may be communicated, in addition to the Legal Representative of the Data Controller, are authorized personnel, such as employees, and Data Processors, such as consultants, freelancers, and software service providers. The updated list of Data Processors and Authorized Persons is kept at the registered office of the Data Controller.
Your personal data will not be disseminated. Your personal data may also be communicated to Public Administration, Social Security and Assistance Entities, Public Bodies, Police Forces, Judicial Authorities, or other public and private entities, exclusively for the purpose of fulfilling the professional assignment and legal obligations.
The data in question will not be communicated to other subjects beyond those specified in this notice, and data revealing the data subject health status will not be disseminated under any circumstances.
Processing of Special Categories of Data
If processing also concerns personal data falling within the special categories as per Article 9 of the GDPR, including data revealing racial or ethnic origin, religious, philosophical, or other beliefs, political opinions, trade union membership, data concerning health or sex life, or judicial data, the processing will be carried out within the limits and according to the methods provided by the GDPR and Legislative Decree 196/2003, and for purposes strictly necessary for the regular conduct of business activities, execution of professional assignments, and compliance with contractual and/or legal obligations.
In such cases, the subjects or categories of subjects who may become aware of the data or to whom the data may be communicated, in addition to the Legal Representative of the Data Controller, are authorized personnel and Data Processors. The updated list of Data Processors and Authorized Persons is kept at the registered office of the Data Controller.
Data Storage Location
Your personal data is processed and stored at the operational headquarters of the Data Controller and is archived in both paper and electronic formats at the company servers and archives, located at Via Centallo 56, Turin.
Data Subject Rights
You may, at any time, request from the Legal Representative of the Data Controller, using the contact details provided in this notice, a copy of your personal data, information about where your personal data is processed, and an updated list of all Data Processors and System Administrators authorized to process your data.
At any time, you may freely revoke the consent given, without any charge and without prejudice to the lawfulness of processing carried out up to that point, and exercise the rights of Access, Rectification, Erasure, Restriction, Objection, Data Portability, and Complaint to the Data Protection Authority against the Data Controller as provided by Article 15 of the GDPR.
- Obtain confirmation of the existence or non-existence of personal data concerning you, even if not yet recorded, and their communication in an intelligible form.
- Obtain information about the origin of the personal data, the purposes and methods of processing, the logic applied in case of processing carried out with electronic tools, the identification details of the Data Controller, Data Processors, and designated representatives, and the subjects or categories of subjects to whom personal data may be communicated.
- Obtain updating, rectification, integration, erasure, anonymization, or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data was collected or subsequently processed.
- Obtain certification that the operations referred to above have been notified to those to whom the data was communicated or disseminated, unless this requirement proves impossible or involves a disproportionate effort compared to the protected right.
- Object, in whole or in part, for legitimate reasons, to the processing of personal data concerning you, even if pertinent to the purpose of collection.
- Object to the processing of personal data concerning you for the purpose of sending advertising materials, direct selling, market research, or commercial communication, using automated calling systems without an operator, email, telephone, or paper mail.
Data Controller Contact Information
To exercise your rights, please contact Sivit Srl, Via Centallo 56, 10156 Turin (TO), Italy, VAT No. 01012820013, email: info@sivit.it.
