Source: http://www.scspa.it/en/cookie-privacy-policy/
Timestamp: 2019-04-22 10:59:46+00:00

Document:
The Data Controllers process identifying personal data, (for example, name, surname, company name, address, telephone number, email address, bank and payment details) – hereinafter, “personal data” or also “data”) that you have provided when concluding contracts or orders for the services of the Data Controllers.
Please note that if you are already a customer, we may send you commercial communications relating to services and products of the Data Controllers, similar to those you have already used, subject to your lack of consent (Article 130 par.4 PDPC).
Processing of your personal data consists in the operations or group of operations indicated in art. 4 of the PDPC and art. 4 no. 2 of the GDPR more precisely: the collection, registration, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, erasure and destruction of data. Your personal data are processed using both paper and electronic and/or automated means.
The Data Controllers shall retain the Personal Data for the time necessary to fulfil the aforementioned purposes and, in any case, for no more than 10 years from the termination of relations for Service purposes, and for no more than 2 years from the collection of data for Marketing purposes.
Without the need for express consent (pursuant to Art. 24 letter a), b), d) of the PDPC and art. 6 lett. b) and c) GDPR) the Data Controllers is authorised to disclose your Data for the purposes indicated in art. 2.A) to Supervisory Bodies (such as IVASS), Judicial Authorities, to insurance companies for the provision of insurance services, in addition to all subjects to whom such disclosure and communication is mandatory by law in order to fulfil said purposes. These subjects shall process the data in their capacity as independent data controllers.
Personal data are stored on servers located: at the registered office in VIA CRESTANI, 14 MELEDO DI SAREGO (VI), within the European Union, and at the Microsoft Corporation offices, outside the European Union (contract stipulated with the company Microsoft Ireland Operations Ltd, VAT no.: IE8256796U).
It remains understood that the Data Controllers, as and where necessary, shall have the right to move the servers again, also outside the EU. In this case, the Data Controllers hereby guarantee that the transfer of data to non-EU locations shall take place in accordance with the applicable laws in force, following the stipulation of the standard contractual clauses provided by the European Commission.
Collection of personal data for the purposes indicated in art. 2.A) is mandatory. Without such data we can not guarantee the Services indicated in art.2.A).
Collection of personal data for the purposes indicated in art. 2.B) is however optional. You can therefore decide not to consent to the collection of any data or to subsequently withdraw your consent to process data already provided: in this case, you will not receive newsletters, commercial communications and advertising material concerning the Services provided by the Data Controllers. However, you will continue to be entitled to the Services referred to in art. 2.A).
Where applicable, the data subject also has the rights referred to in articles 16-21 GDPR (Right of rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object), as well as the right to lodge claims with the Supervisory Authority.
The Data Controllers is KATIA BICEGOwith legal and operational headquarters inVIA CRESTANI, 14 – 36040 MELEDO DI SAREGO (VI).
The updated list of the Data Processors and designated processing officers shall be filed and retained by the Data Controllers.

References: art. 4
 art. 4
 Art. 24
 art. 6
 art. 2
 art. 2
 art.2
 art. 2
 art. 2