Privacy Policy
(in compliance with Article 13 of the EU Regulation 2016/679)
SR Mecatronic S.r.l. considers the protection of the personal data of the users of the website https://www.srmecatronic.it/ (hereinafter referred to as the “Website“), of its own and/or potential customers and of the subjects with whom it has a contractual relationship, to be of fundamental importance and, therefore, by means of this Policy, issued pursuant to Article 13 of EU Regulation 2016/679 (General Data Protection Regulation), SR Mecatronic S.r.l. has agreed to share its policy on the processing of personal data.
Data Controller
SR Mecatronic Srl, in the person of its pro tempore legal representative, with registered office in Alto Reno Terme (BO), loc. Porretta Terme, Via Aldo Moro 1-3, PI 03206011201. The Data Protection Officer of SR Mecatronic S.r.l. can be contacted at the e-mail address dpo@studiolegaledds.it
Type of data processed through the Websit, purpose, legal basis and retention period
Browsing data
The computer systems and software procedures used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols (Internet domain and IP protocol, type of browser and operating system of the computer used, date, time and permanence on the site, pages viewed, any search engine from which you entered the website). Such information is not collected to be associated with identified interested parties, however, by its very nature it could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes IP addresses or the domain names of the computers used by Users who connect to the Website, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the User's operating system and computer environment. This data is only used to obtain anonymous statistical information on use of the Website and will be deleted immediately after processing, without prejudice to the Judicial Authority's need to investigate crimes.
Data provided by Users
a) Customer User
| Purpose of processing | Request for information and/or quotes relating to specific products selected by the User |
|---|---|
| Personal data | Data necessary for the identification of the User (name and surname, telephone number and email address) and the consequent processing of requests by the Data Controller and/or by any Data Processors pursuant to Article 28 of EU Regulation 2016/679 (e.g. Authorised Retailers) |
| Legal basis | Execution of pre-contractual measures (Article 6 paragraph 1 letter b) EU Reg. 2016/679) |
| Consequences of omitted or incomplete communication of data | Inability to follow up on requests sent by the User |
| Duration of processing | Proportionate to the pursuit of the purposes underlying the processing |
b) Retailer User
| Purpose of processing | Access to your own Private Area and to the major functions reserved for the Retailer User |
|---|---|
| Personal data | Data required for access to your Private Area (email address) and, consequently, to the functions it provides. In particular, by means of the Private Area, the Retailer User is able to place purchase orders, view the order history as well as the data and estimates forwarded by the Customer Users, register product warranties and modify personal data (name, surname, email address, telephone number). |
| Legal basis | Performance of the contract (Art. 6 c.1 lett. b) EU Reg. 2016/679) |
| Consequences of omitted or incomplete communication of data | Inability to complete the access procedure to the Private Area and, consequently, inability to use the major functions reserved for Retailer Users. |
| Duration of processing | Until the Account is closed by the Retailer User |
| Purpose of processingo | Purchase of products offered through the Website following access to the Private Area |
|---|---|
| Personal data | Customer details (pre-filled) - data necessary for billing (Paypal, Stripe, credit cards) |
| Legal basis | Performance of the contract (Art. 6 c.1 lett. b) EU Reg. 2016/679) |
| Consequences of omitted or incomplete communication of data | Inability to conclude the negotiation agreement |
| Duration of processing | 10 years from the termination of the contractual relationship |
c) Customer User and Retailer User
| Purpose of processing | Data necessary for the identification of the User (name and surname, email address) and for the consequent fulfilment of requests by SR Mecatronic S.r.l |
|---|---|
| Personal data | Name and email address |
| Legal basis | Execution of pre-contractual measures (Article 6 paragraph 1 letter b) EU Reg. 2016/679) |
| Consequences of omitted or incomplete communication of data | Inability to follow up on requests sent by the User |
| Duration of processing | Proportionate to the pursuit of the purposes underlying the processing |
| Purpose of processing | “Sending promotional communications/newsletters from SR Mecatronic S.r.l. (Direct marketing). Sending of communications with commercial/promotional content to the User through the traditional contact channels of email/sms/instant messaging relating to the activities and products offered by SR Mecatronic S.r.l.“ |
|---|---|
| Personal data | Data necessary for the purpose of sending commercial communications |
| Legal basis | Consent of the interested party (Article 6 c.1 letter a) EU Reg. 2016/679) |
| Consequences of omitted or incomplete communication of data | Inability to update the User on new products and services provided by SR Mecatronic Srl |
| Duration of processing | Until withdrawal of consent by the User |
Data processing methods
The personal data of the Users will be processed with the aid of computerised/telematic or paper means, ensuring the use of adequate technical and organisational security measures, pursuant to and for the purposes of Art. 32 EU Reg. 2016/679, suitable to reduce the risk of destruction, loss, unauthorised access or processing of personal data that is not permitted or otherwise not in accordance with the purposes of its collection.
The Data Controller guarantees that the personal data provided by the Users will be processed by expressly authorised personnel in accordance with the principles of correctness, lawfulness, transparency, protection of confidentiality and the rights of the data subject.
Scope of data communication
The personal data supplied by the Users can be communicated to public, institutional or professional bodies empowered by law to request their acquisition, as well as, exclusively for the purposes foreseen by the present privacy policy, to third party companies or professionals, of which SR Mecatronic S.r.l. avails itself in the performance of its business activities and for the provision of services such as, by way of example but not limited to, Authorised Dealers, third party IT service supply companies, legal and tax consultants.
It should be noted that such “third parties“, if not acting as Data Controllers, are, in accordance with the provisions of Art. 28 EU Reg. 2016/679, the role of Data Processors, and consequently, observe, by virtue of a specific contractual agreement, the security standards with regard to the processing of the data communicated to them. The list of third parties is available upon express request sent to SR Mecatronic S.r.l. at the addresses indicated at the bottom of this privacy policy.
Please note that, under all circumstances, the personal data of the data subjects will not be disseminated or transmitted to third countries (outside the EU).
Cookies
For information on the cookies used by this website, please refer to the cookie policy, available at this link https://www.iubenda.com/privacy-policy/95890854/cookie-policy.
Data Subjects' Rights
In accordance with the provisions of Articles 15 et seq. of EU Regulation 2016/679, at any time, the User may exercise his/her rights towards the Data Controller: “Right of access“ which allows the data subject to access his/her own personal data and obtain a copy thereof; “Right of rectification“ which allows the data subject to obtain the rectification of his/her own data, should the same prove to be inaccurate, or the integration of his/her own data, should the same prove to be incomplete; “Right to erasure“ which allows the data subject to obtain the erasure of his/her own data in the cases provided for by Art. 17 EU Reg. 2016/679; “Right to restriction of processing“ which allows the data subject to obtain the restriction of processing in the cases provided for by Art. 18 EU Reg. 2016/679; “Right to data portability“ which allows the data subject to receive, in a structured, commonly used and machine-readable format, their personal data as well as to request their transmission, by SR Mecatronic S.r.l., to another Data Controller; “Right to object“ which allows the data subject to object, at any time, for reasons related to their personal situation, to the processing of personal data concerning them carried out pursuant to Art.6 c.1 lett. e) or f) EU Reg.2016/679, as well as to object to the processing of data carried out for direct marketing purposes; “Right to lodge a Complaint“ which allows the data subject to lodge a complaint with the Data Protection Authority pursuant to and for the purposes of Article 77 EU Reg.2016/679. To exercise the rights referred to in Articles 15 et seq. of EU Regulation 2016/679, or to get more information about the Privacy Policy, the data subject can contact SR Mecatronic Srl by registered letter with return receipt, or contact the Data Protection Officer at dpo@studiolegaledds.it. Please note that before you can provide or change any information, it may be necessary to verify the identity of the person concerned. Information on the Privacy Policy This Privacy Policy was updated on 26/05/2021. The Data Controller reserves the right to modify or update this document and therefore invites Users to periodically consult this web page. It is expressly stated that SR Mecatronic S.r.l. is in no way responsible for the contents and services provided by websites managed by third parties and accessible through links present on the Site.