PRIVACY POLICY
PRIVACY NOTICE PURSUANT TO ARTICLE 13 OF EU REGULATION 2016/679
(General Data Protection Regulation – GDPR)
In accordance with Articles 12 and 13 of the GDPR, ANTEKLAB S.R.L. would like to provide some useful information regarding the methods and purposes of processing the personal data of users who interact with the company’s web services, accessible online from the following web address: www.installatoriaylook.com
- DATA CONTROLLER (Article 4(7) of the GDPR)
The Data Controller for personal data is Anteklab S.R.L., with registered office at Via Manzoni No. 49 – 46047 Porto Mantovano (MN), Italy, VAT No. 01910240207, telephone +39 0376 397765; e-mail: aylook@antek.it
2. LEGAL BASIS FOR PROCESSING
A. Purpose: to respond to requests for information submitted through the website form. Legal basis: processing is carried out in pursuit of the legitimate interests of the Data Controller (Article 6(1)(f) of the GDPR), in order to provide information and training to customers and the public and, more specifically, to communicate with the industry as a whole (in general, installers operating in the security sector) and with those requesting specific information in the same field.
B. Purpose: marketing and advertising. Legal basis: the data subject has given consent (Article 6(1)(a) of the GDPR).
3. TYPES OF DATA PROCESSED
From the website – browsing data
The IT systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes the IP addresses or domain names of the computers and devices used by users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the response provided by the server (“successful”, “error”, etc.), and other parameters relating to the user’s operating system and IT environment. Such data, which is necessary for the use of web services, is also processed for the following purposes:
- obtaining statistical information on the use of the services (most visited pages, number of visitors by time or day, geographical areas of origin, etc.);
- checking the proper functioning of the services offered. Browsing data is not retained for more than six months.
From requested services – data provided by users
The optional, explicit, and voluntary sending of messages to the Data Controller’s addresses, as well as the completion and submission of any forms available on the Data Controller’s websites, result in the acquisition of the sender’s contact details necessary to respond (first name, surname, email address, and telephone number), as well as any personal data included in the communications. For specific processing activities, such as sending newsletters and/or carrying out general marketing and advertising activities, specific consent from users is always required. It is understood that, following the purchase of a specific product and/or service, the Data Controller may provide information regarding the same product/service in the form of advertising communications relating to updates or offers concerning products or services already purchased, without prejudice to the user’s right to unsubscribe from such communications by sending a specific request to the Data Controller.
4. DATA RECIPIENTS
Personal data may be disclosed to the Data Controller’s employees and collaborators and, in general, to all parties to whom disclosure is necessary for the proper fulfillment of the stated purposes. In addition, Anteklab S.R.L. collaborators, within the scope of their internal organization, may access the data only to perform the specific processing operations required (see Section 2), using appropriate technical and organizational measures to ensure the confidentiality, integrity, and availability of personal data.
Personal data may also be disclosed to the company responsible for the individual landing page managed by the Data Controller. In certain cases, some of these parties may act as Data Processors and are therefore appointed in writing by the Data Controller. A list of such parties may be requested from the Data Controller.
Data may also be disclosed to judicial and administrative authorities upon their express request or as required by law.
5. PROCESSING METHODS
Personal data is processed primarily using electronic and IT tools. The data is stored both on electronic media (primarily) and on paper (very rarely). Processing is carried out in compliance with the security measures, safeguards, and precautions required by applicable legislation (Article 32 of the GDPR), with the aim of ensuring the confidentiality, integrity, and availability of the personal data processed, as well as preventing risks such as loss of control over the data or theft. Processing is carried out by the Data Controller and/or any appointed Data Processors.
Website management and maintenance activities, as well as certain IT processing activities, are carried out at Anteklab’s premises and are supervised by the Data Controller.
6. PROVISION OF DATA AND CONSEQUENCES OF REFUSAL
Providing personal data is mandatory where necessary to fulfill the relevant purposes and comply with obligations imposed by law or other binding regulations. It is necessary to process the request submitted and, where applicable, to properly establish or continue a service relationship.
Processing carried out on the legal basis and for the purposes specified in Section 2, letter A does not require specific consent.
Processing carried out on the legal basis and for the purposes specified in Section 2, letter B requires specific consent.
7. TRANSFER OF DATA ABROAD
The personal data processed is stored in paper archives and on servers located within the European Union.
8. DATA RETENTION PERIOD
As provided for by Article 5(1)(e) of the GDPR, personal data is processed for the period strictly necessary to achieve the purposes for which it was collected and for the period required by applicable legislation. Data processed for Purpose A – contractual/service purposes – will be retained for the entire duration of the relationship and thereafter as necessary to fulfill legal and administrative obligations. As an indication, data may be retained for 10 years, as established by Article 2220 of the Italian Civil Code, without prejudice to any circumstances that may justify a longer retention period or where further retention is necessary to comply with legal obligations or orders issued by public authorities. Data processed for Purpose B – marketing and advertising – will be retained for three years from the last contact.
9. RIGHTS OF DATA SUBJECTS
The data subject has the right to request from the Data Controller access to their personal data and the rectification or deletion thereof, or restriction of processing concerning them, as well as the right to object to processing. The data subject also has the right to data portability pursuant to Articles 15 to 22 of the GDPR, where applicable and within the limits set out in Article 17(3) of the GDPR.
In addition, the data subject may withdraw their consent at any time, without affecting the lawfulness of processing based on consent given before its withdrawal (Article 7(3) of the GDPR).
To submit a request or exercise these rights, the data subject may write to: Anteklab S.R.L., Via Manzoni No. 49 – 46047 Porto Mantovano (MN), Italy; or send an email to aylook@antek.it (with “Privacy” in the subject line).
The data subject has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), as the supervisory authority, with registered office at Piazza Venezia 11 – 00187 Rome (RM), Italy.
10. DATA DISCLOSURE
Personal data is not disclosed publicly, meaning that it is not made available or accessible, by any means, to unspecified parties.
