Pursuant section 13 and 14 of regulation (EU) 2016/679
Dear User,
in compliance with sections 13, 14 of Regulation (EU) 2016/679 (so called GDPR), Advanced Group S.r.l. informs you about the processing of your personal data in the context of your visit to the website.
Who will process your personal data?
Your personal data will be processed by Advanced Group S.r.l. (hereinafter, also “Advanced Group”), with registered office in 20043 Vanzago (MI), Via della Corte Bruciata n°21, Italy, which will act in quality of “Data Controller”; you will be able to contact the Data Controller at the following email address: info@sc-project.com.
Personal data can be processed in the name and on behalf of Advanced Group also by others subjects who will be duly appointed “Data Processors”, belonging to the following categories: IT services providers, payment-platforms providers, carriers, social media, marketing-services providers, consultants.
Data Controller appointed a Data Protection Officer (so called, DPO), who can be contacted at the following email address: dpo@sc-project.com.
How and why we will process your personal data?
Your personal data – with reference to the purpose below – will be processed as following:
REF. | PURPOSE | PERSONAL DATA | LEGAL BASE | PERIOD OF STORAGE |
H1 | Evaluation of job applications | Anagraphics | – Execution of a | 1 year from the receiving of the Curriculum Vitae |
WE1 | Online sale as a guest user | Anagraphics | – Execution of a contract | 10 years from the termination of the contract |
WE2 | Registration on the website with the purpose to facilitate a future purchase or registration at the same time of the purchase. | Anagraphics | – Execution of a contract | 5 years (in case the customer does not make an order) |
WE3 | Responding to contact requests (pre-sale phase) | Anagraphics | Execution of a contract | 10 years from the termination of the contract |
WE4 | Responding to contact requests from customers from any channel for after-sales issues (returns, withdrawal contract, non-conforming products) | Anagraphics | Execution of a contract | 10 years from the termination of the contract |
WE5 | Marketing comunications | Anagraphics | Consent | Up to withdrawal of the consent |
WE6 | Social media marketing (interaction with the user on the social network page of Advanced Group) | Anagraphics | Consent | Up to withdrawal of the consent |
WE7.1 | Make the navigation easier (cookies) – see Cookies policy for more details | Technical Cookies | Legitimate interest | Up to the end of the session |
WE7.2 | User experience and services improvement through the use of marketing Cookies – for more details see the Cookies policy | Marketing cookies | Consent | Up to withdrawal of the consent |
WE8 | Marketing communications (so called “soft-spam”) aimed to communicate to the users information related to a product similar to the one that you purchased. | Anagraphics | Section 130, p. 4 Italian Privacy Code | Up to your objection |
IT1 | Maintenance, operation and security of computer systems | All personal data above | – Legitimate interest | Until the end of the intervention |
Furthermore, please take in due consideration the following information:
DATA PROVISION | – When Advanced Group requests your consent, the provision of your personal data is not mandatory. Therefore, if you fail to provide your data, the only consequence will be that Advanced Group will not be able to process your data for specific purposes. |
CATEGORIES OF RECIPIENTS | Data processing should be perfomed by further Data Controller (e.g. Income Revenue Authority). |
AUTOMATED DECISION- MAKING PROCESS | No automated decision-making processes. |
TRANSFERS EXTRA EU | Subject to our prior verification on the subsistence of adequate guarantee, some of the Data Processors shall transfer your personal data to extra EU countries. |
LEGITIMATE INTEREST OF DATA CONTROLLER | The legitimate interest – pertaining purpose under point WE7 – is the facilitation of the web-experience of the user on Advanced Group’s website. |
Which are your rights?
You can exercise the following rights by sending a specific request to the Data Controller at the following email address: info@sc-project.com
RIGHT | DESCRIPTION |
ACCESS | Right to have confirmation of the existence or otherwise of the processing and to access the data and information relating to: purposes of the processing, categories of data processed, possible recipients, possible transfers and appropriate safeguards, storage period, rights of the data subject, possible existence of an automated decision-making process.The controller provides a copy of the personal data. If the request is made by electronic means, and unless otherwise specified, the information is provided in a commonly used electronic format. |
RECTIFICATION | The data subject has the right to obtain the rectification of wrong personal data and the integration of incomplete personal data. |
DELETE | The data subject shall have the right to obtain from the Data Controller the erasure of his personal data in the following cases: the personal data are no longer necessary in relation to the purpose for which they were collected or otherwise processed, withdrawal of consent (and there is no other legal bases for the processing), he opposes the processing for the reasons related to his particular situation (and the are no overriding legitimate grounds for the processing), he opposes the processing for direct marketing purposes, the personal data have been unlawfully processed, the personal data have to be erased for compliance with legal obligation, the data have been collected in relation to the offer of information society services. The right shall not apply if the processing is necessary for exercising the right of freedom of expression and information, for compliance with legal obligation, for the performance of a task carried out in the public interest or in the exercise of official authority, for reasons of public interest in the area of public health, for archiving purpose in the public interest, scientific and historical research purpose or statistical purpose, for the establishment, exercise or defence of legal claim. |
RESTRICTION OF PROCESSING | The data subject shall have the right to obtain from the Data Controller the restriction of processing if: the accuracy of the personal data is contested by the the data subject (for a period enabling the Controller to verify the accuracy), the processing is unlawful (but the data subject opposes the erasure of the personal data and requests the restriction of their use rather than erasure), the personal data are required by the data subject for the establishment, exercise or defence of legal claim e, although the Data Controller no longer needs it, he exercised the right to object (while the Data Controller verifies the existence of legitimate and prevailing reasons). |
OBJECTION | The data subject shall have the right of object to processing of personal data if (i) it is based on public interest or legitimate interest and (ii) if personal data are processed for direct marketing purpose, including profiling. |
DATA PORTABILITY | The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a data Controller, in a structured, commonly used and machine- readable format (applicable to automated decision- making processes). |
WITHDRAWAL | The data subject has the right to withdraw the consent any time without affect the lawfulness of processing based on the consent before withdrawal. |
COMPLAINT | The data subject has the right to lodge a complaint with a supervisory authority for any alleged breach of the GDPR. |