Privacy Policy

Information notice pursuant to Art. 13 of EU Regulation 2016/679
(General Data Protection Regulation – GDPR)

In accordance with Articles 12 and 13 of the GDPR, ANTEKLAB S.R.L. wishes to provide some useful information on how and for what purposes it processes the personal data of users who interact with the company's web services, accessible online starting from the web address: www.aylook.com

1. Data controller (Art. 4(7) GDPR)

The controller of personal data is Anteklab S.R.L., with registered office at Via Manzoni 49 – 46047 Porto Mantovano (MN), VAT no. 01910240207, telephone +39 0376 16262.00, email: aylook@antek.it

2. Legal basis for processing

A. Purpose: to respond to requests for information sent through the website form. Legal basis: processing is carried out for the pursuit of the controller's legitimate interests (Art. 6(1)(f) GDPR) – to provide information and training to customers and the public and, more specifically, to communicate with the whole sector (in general, installers working in the security field) and with those who request specific information in the same field.

B. Purpose: marketing and advertising. Legal basis: the data subject has given consent (Art. 6(1)(a) GDPR).

3. Types of data processed

From the website – browsing data

The IT systems and software procedures used to operate this website acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category includes the IP addresses or domain names of the computers and devices used by users, the URI/URL addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server's response (successful, error, etc.) and other parameters relating to the user's operating system and IT environment. This data, which is necessary to use the web services, is also processed in order to:

• obtain statistical information on the use of the services (most visited pages, number of visitors by time slot or day, geographical areas of origin, etc.);
• check that the services offered are working correctly. Browsing data is not kept for more than six months.

From the services requested – data provided by users

The optional, explicit and voluntary sending of messages to the controller's addresses, as well as the completion and submission of any forms on the controller's websites, involves the acquisition of the sender's contact details needed to reply (first name, surname, email address and telephone number), as well as any personal data included in the communications. For specific processing, such as sending newsletters and/or general marketing and advertising, specific consent from users is always required. It is understood that, following the purchase of a specific product and/or service, the controller may provide information on that service/product in the form of promotional information on updates or offers relating to what has already been purchased (with the option of cancelling this service by sending a specific communication to the controller).

4. Recipients of the data

Personal data may be disclosed to the controller's employees and collaborators and, in general, to all those parties to whom disclosure is necessary for the correct fulfilment of the purposes indicated. In addition, collaborators of Anteklab S.R.L., within their internal organisation, may access the data only to carry out the processing operations specifically requested (see point 2), with the appropriate technical and organisational measures to ensure the confidentiality, integrity and availability of personal data.

Personal data is also disclosed to the company that owns the individual "landing page" managed by the controller. In some cases, some of these parties may act as data "processors" and are therefore appointed in writing by the controller – a list of these parties can be requested from the controller.

Data may also be disclosed to judicial and administrative authorities at their express request or where required by law.

5. Methods of processing

Data is processed mainly with electronic and IT tools, and is stored both on electronic media (mainly) and on paper (very rarely). Processing is carried out in compliance with the security measures, precautions, safeguards and measures prescribed by law (Art. 32 GDPR), aimed at ensuring the confidentiality, integrity and availability of the personal data processed, and at avoiding risks (e.g. loss of control of the data and theft). Processing is carried out by the controller and/or by any appointed processors.

The management and maintenance of the website, as well as part of the IT processing, take place at Anteklab's premises and are supervised by the controller.

6. Provision of data and consequences of refusal

Providing personal data is mandatory to achieve the related purposes and to meet obligations under laws or other binding regulations, and is necessary to handle the request submitted and for the possible correct establishment or continuation of a service relationship.

Processing carried out on the legal basis and for the purposes stated in paragraph 2(A) does not require specific consent.

Processing carried out on the legal basis and for the purposes stated in paragraph 2(B) requires specific consent.

7. Transfer of data abroad

The personal data processed is kept in paper archives and on servers located within the European Union.

8. Data retention period

As provided for by Art. 5(1)(e) GDPR, personal data is processed for the time strictly necessary to achieve the purposes for which it was collected and as required by sector laws. Data processed for purpose A – contractual/service – will be kept for the entire duration of the relationship and afterwards, to fulfil legal obligations and for administrative purposes: as an indication, 10 years as established by Art. 2220 of the Italian Civil Code, without prejudice to any events justifying an extension and unless further retention is necessary to fulfil legal obligations or comply with orders issued by public authorities. Data processed for purpose B – marketing and advertising – will be kept for three years from the last contact.

9. Rights of data subjects

The data subject has the right to ask the controller for access to their personal data and for its rectification or erasure, or for restriction of processing concerning them, or to object to its processing, as well as the right to data portability under Articles 15 to 22 GDPR, where possible and within the limits of Art. 17(3) GDPR.

The data subject may also withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal (Art. 7(3) GDPR).

For any request and to exercise these rights, the data subject may write to: Anteklab S.R.L., Via Manzoni 49 – 46047 Porto Mantovano (MN), or by email to aylook@antek.it (with "Privacy" in the subject line).

The data subject has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), as the supervisory authority, at Piazza Venezia 11 – 00187 Rome (RM).

10. Dissemination of data

Personal data is not disseminated, meaning it is not made known to unspecified parties in any way, including by making it available or open to consultation.

For more information, write to us at aylook@antek.it or call us on +39 0376 16262.00.