Dear user,

Alfasigma S.p.A., with registered and administrative offices in Via Ragazzi del '99 - 40133 Bologna, as Data Controller wishes to inform you of the purposes and methods of processing your personal data.

This information is provided pursuant to art. 13 of European Regulation 2016/679, concerning the protection of individuals with regard to the processing of personal data (GDPR) and the related rule applicable on Italian territory, to all those who interact with the web services of the company Alfasigma S.p.A. while it does not apply to other websites that may be consulted through external links. 

The Data Controller of the Site is Alfasigma S.p.A.

The Data Protection Officer may be contacted for questions concerning the processing of your data at privacydpo@alfasigma.com

a) Navigation Data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes IP addresses or domain names of the computers used by users who connect to the site, URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc..) and other parameters relating to the operating system and computer environment.

This data, necessary for the use of the website, is used for the sole purpose of:

• obtain anonymous statistical information on the use of the site
• check the correct functioning of the site

The navigation data is deleted immediately after processing.

The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site: except for this possibility, at present the data on web contacts do not persist for more than seven days.

b) Data provided voluntarily by the user

The optional, explicit and voluntary sending of e-mails to the addresses indicated on this site, the eventual filling in of information and contact request forms, registrations and/or newsletters imply the subsequent acquisition of the sender's e-mail address, necessary to respond to requests, as well as any other personal data included in the message or according to the service requested.

Specific summary information will be progressively reported or displayed on the pages of the site prepared for particular services on request.

c) Cookies

This website uses cookies.

By using our website you declare that you accept and consent to the use of cookies in accordance with the terms of use of cookies expressed in our Cookie Policy which can be reached from the footer of the website.

Apart from what has been specified for navigation data, the user is free to provide personal data by sending e-mails to the addresses indicated on this site, filling in forms for information and contact requests, registrations and/or newsletters.

Failure to do so may result in the impossibility of obtaining what has been requested.

The personal data provided by the user, are processed by Alfasigma with different methods and legal bases:

• the user has expressed consent to the processing of his/her personal data
• processing is necessary for the performance of a contract to which the user is a party or for the performance of pre-contractual measures taken at the user's request
• the processing is necessary to fulfill a legal obligation to which the Data Controller is subject
• the processing is necessary for the pursuit of the legitimate interest of the Data Controller

Personal data are processed by automated tools for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.

The personal data collected, for the purposes of data processing indicated in the points above, may be communicated to:

• companies, whether they are the parent company, subsidiaries or associates under the Data Sharing Agreement.
• third parties, appointed as Data Processors pursuant to Article 28 of the Regulation

In addition, the personal data collected may be processed by Alfasigma personnel authorized to process them in accordance with Article 29 of the Regulation.

The complete list of external parties to whom your data is communicated is available upon your request by e-mail at privacy@alfasigma.com.

Please note that the communication of personal data to public or private entities will be made only if required by law or regulation or if it is necessary for the performance of institutional functions.

The management and storage of personal data will take place on servers, located within the European Union, of the Data Controller and/or third party companies appointed and duly appointed as Data Processors. Currently the servers are located in Italy. The data are currently not subject to transfer outside the European Union.

It remains in any case understood that the Data Controller, if necessary, will have the right to move the location of the servers, in Italy, within the European Union and/or in non-EU countries.

In this case, the Data Controller already ensures that the transfer of data outside the EU will take place in accordance with articles 44 ff. of the Regulation and the applicable legal provisions by entering, if necessary, into agreements that guarantee an adequate level of protection.

The data concerning you will be stored according to one of the following criteria:

• for a period not exceeding that necessary to achieve the purposes for which they are processed;
• for a period of time not exceeding that necessary to comply with regulatory obligations.

We inform you, with reference to the data processed by the Company, you may at any time exercise your rights under Articles 15 to 22 of GDPR.

In particular:

(a) You have the possibility to obtain from the Data Controller confirmation of the existence or not of personal data concerning you, and in this case, access to the following information:

• Purpose of treatment,
• Categories of personal data processed,
• Recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if they are recipients from third countries or international organisations;
• The period of retention of personal data or, if that is not possible, the criteria used to determine that period;
• If the data are not collected from the data subject, all available information on their origin shall be provided;
• The existence of an automated decision-making process and, in such cases, significant information on the logic used and the importance and expected consequences of such processing for the data subject;
• The existence of adequate safeguards within the meaning of Article 46 regarding transfer to third countries or international organizations.

(b) In addition, you have the right to:

• Obtain the updating, rectification or integration of your data, the cancellation, within the terms allowed by law, or request that they be anonymized, the limitation of processing, and you have the right to oppose, in whole or in part, for legitimate reasons, the processing of personal data concerning you;
• Obtain portability of electronically processed data, provided on the basis of consent or contract;
• Withdraw your consent, if any;
• Submit a complaint to a Control Authority.

Your rights may be exercised by compiling the form accessible via the "Data Subjects Rights" link in the footer of each page.

The data controller shall provide you with information on the action taken with regard to the request pursuant to Articles 15 to 22 without undue delay and, in any case, at the latest within one month of receipt of the request. This period may be extended by two months if necessary, taking into account the complexity and number of requests. The data controller shall inform the data subject of this extension, and the reasons for the delay, within one month of receipt of the request.