Source: https://www.sira.mi.it/en/web-privacy
Timestamp: 2019-04-20 00:20:06+00:00

Document:
SIRA S.r.l. with head offices in Caponago (MB) in Via Senatore Simonetta, no. 26, Italian Tax ID n. 03482660150 / V.A.T. 00752850966 (hereinafter, "Controller"), as the data processing controller, hereby informs you pursuant to Art. 13 of EU Regulation no. 2016/679 (hereinafter, "GDPR") that your data will be processed using the methods and for the purposes outlined below.
The Data Processing Controller processes personal data, identification and non-confidential (by way of example but not limited to, name, surname, company name, address, telephone number, e-mail address - hereinafter "personal data" or also "data") that you communicate when registering on the Controller's website www.sira.mi.it (hereinafter, "Site"), or fill in of the contact form via the Site, or make an on-line request for clarification or requests for support.
legal basis; performance of a service.
The processing of your personal data is carried out using the operations indicated in Art. 4 Privacy Code and Art. 4 n. 2) GDPR and more specifically: collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation, and destruction of data. Your personal data are subjected to processing on paper as well as electronic and/or automated supports.
The Controller will store personal data for the time necessary to fulfil the purposes indicated above.
The IT system and the software procedures used for the functioning of this website acquire, during the routine operations, some personal data, the transition of which is implicit to the use of Internet communications protocols.
This information is not collected to be associated with the person involved, but that by the very nature may, through processing and association with data held by third parties, make the identification of the users possible..
This category includes IP addresses or domain names of the computers operated by the users who connect to the site, the addresses of the resources requested in URI (Uniform Resource Identifier) notation, the method used in submitting the request to the server, the dimension of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relative to the user's operating system and the IT environment. These data are used only for the purpose of obtaining anonymous statistical information on the use of the site and to control that the site is functioning correctly. The data may also be used to ascertain liability in case of hypothetical IT crimes that may damage the site.
Sira S.r.l., in compliance with the provisions of the Regulation, have adopted technical and organisational security measures aimed at preventing the loss, even if only partial or accidental, of data and the access of unauthorised people. Technical and applicative security measures have been implemented, as well as procedures to identify personnel authorised to process data, legally bind authorised personnel to secrecy, adequately train and inform the personnel employed to process data, adopt adequate procedures to secure the data processed to pursue other potential legitimate requests made by the person involved.
The data concerning you will not be made accessible to third parties, but may be communicated to subsidiaries and affiliates of the group.
Without your express consent (pursuant to Art. 24 lett. a), b), d) Privacy Code and Art. 6 lett. b) and c) GDPR), the Controller may communicate your data to Supervisory Bodies, law enforcement authorities, as well as to all other subjects to whom the communication is obligatory by law for the completion of the abovementioned purposes.
The management and storage of personal data will take place in Europe on server located in Italy in possession of the Controller and/or third party companies charged and duly nominated as Data Processing Managers.
The granting of data for the purposes outlined in Art. 2 is obligatory in that it is necessary in order to respond to the request for information.
Right to lodge a complaint to the control authorities - Lodge a complaint with the Control Authority for the protection of personal data at Piazza di Montecitorio n. 121, 00186 Roma (RM).
- a certified return receipt letter to SIRA S.r.l. Via Senatore Simonetta no. 26, 20867 Caponago (MB).

References: Art. 13
 Art. 4
 Art. 4
 Art. 24
 Art. 6
 Art. 2