INFORMATION PROVIDED PURSUANT TO ARTICLES 13-14 OF GDPR 2016/679

The Data Controller (hereinafter referred to as the “Controller”), i.e., the legal entity that determines the purposes and means of the processing of personal data, is Simex srl, with its registered office at Via Biagi e D’Antona 5, 60025 Loreto AN, VAT No. 02031330422, Tel. +39 071 7500214 – E-mail: info@simexitaly.it. In accordance with the applicable regulations, we inform you that the processing will be carried out in accordance with the principles of fairness, lawfulness, transparency, and the protection of your privacy and rights.

Therefore, we provide you with the following information pursuant to EU Regulation No. 2016/679 (hereinafter, “GDPR”).

1. Subject of the processing

The Controller processes personal data, including identifying and non-sensitive data, such as

Name
Surname
Company name
Address
Tax code
VAT number
Email
Phone number
Website
IP address
(hereinafter, “personal data” or simply “data”) provided by you during registration and/or when sending a message or requesting assistance through the Controller’s website.

2. Purposes of the processing

The sensitive data you provide will be processed, by way of example but not limited to, for the following purposes:

• The management of customer/supplier personal data
• Administrative management
• Information about the services offered
• Compliance with legal obligations
• The sending of quotations.
• Receiving assistance.
• The issuance of invoices.
• Fulfilling pre-contractual, contractual, and tax obligations arising from existing relationships.
• Complying with obligations established by law, regulations, EU legislation, or an order from an Authority.
• Exercising the rights of the Controller, such as the right of defense in legal proceedings.

Statistics – Google Analytics

The services included in this section allow the Data Controller to monitor and analyze traffic data and are used to track User behavior.

Google Analytics with anonymized IP (Google Inc.).

Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google uses the Personal Data collected to track and analyze the use of this website, compile reports, and share them with other services developed by Google.

Google may use the Personal Data to contextualize and personalize ads within its advertising network.

This integration of Google Analytics anonymizes your IP address. Anonymization works by shortening the IP address of Users within the boundaries of member states of the European Union or in other countries that are part of the European Economic Area agreement. Only in exceptional cases will the IP address be sent to Google servers and shortened within the United States.

4o

Place of processing:
Stati Uniti – Privacy Policy

Hosting and backend infrastructure

These types of services are designed to host Data and files that allow this Application to function, enable its distribution, and provide an infrastructure ready for use to deliver specific functionalities of this Application.

Some of the services listed below, if present, may operate on geographically distributed servers, making it difficult to determine the exact location where Personal Data is stored.

Serverplan srl societá unipersonale

All the website data is hosted on Serverplan Datacenters.

Personal Data collected:
Usage data; various types of data as specified in the service’s privacy policy.

Place of processing:

Italy – Privacy Policy

3. Purposes of the processing

The processing of your personal data is carried out through the operations indicated in Article 4 of the Privacy Code and Article 4, No. 2) of the GDPR, specifically: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion, and destruction of data.
Your personal data is subject to both paper-based and electronic processing.

4. Duration of the processing

With regard to the personal data subject to processing, it will be retained in accordance with the principle of proportionality and, in any case, until the purposes of the processing have been achieved, or until – if earlier – the specific consent is revoked by the data subject, which can be done at any time.
The Controller will process personal data for the time necessary to fulfill the purposes mentioned above and, in any case, for no longer than 10 years after the termination of the relationship for Service Purposes.

5. Data Communication

Without the need for express consent (pursuant to Article 24, letters a), b), d) of the Privacy Code and Article 6, letters b) and c) of the GDPR), the Controller may communicate your data for the purposes set out in Article 2 to judicial authorities and to those entities to whom the communication is mandatory by law for the fulfillment of the aforementioned purposes.

These entities will process the data in their capacity as independent data controllers.

Your data will not be disseminated.

6. Data Transfer

Personal data is stored on Serverplan servers located in Italy, within the European Union.
However, it is understood that the Controller, if necessary, will have the right to move the servers outside the EU.
In such a case, the Controller ensures that the transfer of data outside the EU will take place in compliance with applicable legal provisions, following the execution of the standard contractual clauses provided by the European Commission.

7. Rights of the Data Subject

As a data subject, you have the rights outlined in Article 7 of the Privacy Code and Article 15 of the GDPR, specifically the rights to:

Obtain confirmation of the existence or non-existence of personal data concerning you, even if not yet registered, and their communication in an intelligible form; Obtain the following information: a) the origin of the personal data; b) the purposes and methods of the processing; c) the logic applied in case of processing carried out with the help of electronic tools; d) the identification details of the data controller, processors, and the representative designated in accordance with Art. 5, Paragraph 2 of the Privacy Code and Art. 3, Paragraph 1, GDPR; e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it as designated representatives in the territory of the State, processors, or persons in charge; Obtain: a) the updating, rectification, or, where interested, the integration of the data; b) the deletion, anonymization, or blocking of data processed unlawfully, including data that does not need to be retained for the purposes for which it was collected or subsequently processed; c) the certification that the operations referred to in letters a) and b) have been brought to the attention, including with regard to their content, of those to whom the data has been communicated or disseminated, except where this proves impossible or involves a disproportionate effort in relation to the right being protected; Object, in whole or in part: a) for legitimate reasons to the processing of personal data concerning you, even if relevant to the purpose of collection; b) to the processing of personal data concerning you for the purpose of sending advertising material, direct sales, or conducting market research or commercial communication, by means of automated call systems without the intervention of an operator, by email and/or traditional marketing methods such as telephone and/or postal mail. Where applicable, you also have the rights referred to in Articles 16-21 GDPR (Right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the Supervisory Authority.

8. Methods for exercising your rights

You may exercise your rights at any time by sending:

a registered letter with return receipt to Simex srl – Via Biagi e D’Antona 5 – 60025 Loreto (AN);
an email to the address info@simexitaly.it

9. Data Controller and Data Processor

Simex Srl – Via Biagi e D’Antona 5 – 60025 Loreto (AN)