Privacy Policy

This communication is made available to you – in order to the article 13 of the European Regulation on the protection of personal data (“GDPR”) 679/2016, to the Italian Legislative Decree 30/06/2003 n. 196 (“Privacy Code”) and subsequent amendments and addition, – by ELDES S.R.L. (also called “The Company”).

The purpose of this information notice is to inform the user about the methods of processing personal data.

The Data Controller is ELDES S.R.L., with legal address in Scandicci (FI), Via di Porto, n. 2/B

The point of contact is Alessandro Cucchi

E-mail gdpr@eldes.it.

Type of data processed

Like all websites, this site also makes use of log files in which information processed in an automated form and collected in aggregate form during user visits is stored, in order to verify the correct functioning of the site.

The website offers informative and, sometimes, interactive content. During the navigation on the site of the Company will be able, therefore, to acquire information on the visitor, in the following ways:

Navigation data

The computer systems and software procedures, preceded to the operation of this website, acquire, during their normal operation, some personal data whose transmission is implicit in the use of the internet communication protocols. This category of data includes: the IP address, the type of browser used, the operating system, the name of service provider (ISP), the addresses from which the access has been affected, information on pages visited by users inside the site, the access time, the permanence on the single page, the internal path analysis and other parameters relating to the operating system and to the computer environment of the customer.

Further categories of data

The site uses a contact form, automatically detecting and recording some user identification data, including the email address. These data are voluntarily provided by the user at the time of the request for information, a quote, or any other nature indicated by the form header. By filling out the form, the user expressly accepts the privacy policy.

The data received will be used exclusively for the provision of the requested service and only for the time necessary for the provision of the service.

Purpose of the treatment

The data provided are processed for the following purposes:

to provide the good and/or service required by the user, to manage the contracts improved by the user, to carry out administrative procedures, accounting, tax and legal fulfillments, as well as to escape the requests submitted by the user. The processing, set in to be for these purposes, are necessary for the fulfillment of contractual obligations and they do not require specific consent from the Data subject;
to recognize the experience of use of our platforms, of the products and services that we offer and to ensure the proper functioning of the web pages and their contents. The processing, set in to be for these purposes, are based on a legitimate interest of the Data Controller;
to carry out softspam activities that allows the Owner to send promotional communications by e-mail to the User concerning Products and / or Services purchased without the need for the express and prior consent of the User, as required by art. 130, paragraph 4, of the Privacy Code, and provided that the user does not exercise the right to object; This treatment is based on art. 130, paragraph 4, of the Privacy Code as amended by Legislative Decree 101 of 2018;
to do statistical analysis on aggregate and anonymous data, to analyze the behavior of the User, to improve the products and services provided by the Owner and to meet the User’s expectations;
manage both spontaneous applications and those for open positions.

Sharing and transfer of personal data

The data collected by the Company will be shared only for the purposes mentioned above; we will not share or transfer your personal data to third parties other than those indicated in this Privacy Policy.

During our activities and exclusively for the same purposes of those listed in this Privacy Policy, your personal data may be transferred to the following categories of recipients:

Company staff;
Service provider (etc. IT system providers, cloud service providers, database vendors and consultants)
Public Administration for law purposes;
Every public and/or private subject to whom it is necessary to communicate your personal data in relation to the purposes indicated above.

The updated list of Processors is available at controller’s legal address and it will be provided with a prior written application.

The Company could have to transfer your personal data to countries situated outside the European Union/European Economic Area (EEA), so called “third-country”. These transfers to third countries can include all the activities indicated above.

This Privacy policy is also applicable in the case of transfer of data in which the level of protection of the data is different in comparison of that of the European Union. Every transfer of personal data to third will be affected only after having you informed and, where in demand, after having received your consent. Every transfer of data toward different countries from those for which the European Commission has taken an adequacy decision is based on agreements that use standard contractual clauses adopted by the European Commission or other appropriate guarantees in the compliance with applicable laws.

Protection of personal data

The Data Controller have implemented appropriate technical and organizational measures to provide an appropriate level of security and privacy to personal data.

These measures concerning:

the state of technology;
the implementation costs;
the nature of the data;
the risk of treatment.

The aim is to protect them from accidental or unlawful destruction, accidental loss, unauthorized disclosure/access and other form of illegal processing. Furthermore, the processing of personal data must be

adequate, relevant and not excessive and the Data Controller must ensure that such data remains up-to-date and accurate.

Data Retention time

The Company will maintain your personal data for the time strictly necessary to achieve the purposes for which they were processed or, alternatively, for the time required by applicable law or regulatory requirements, except your right to object to data processing or the right to be forgotten.

When this period will expire, your personal data will be removed from active system of the Company

Your right

Your rights are:

RIGHT TO RECTIFICATION.

You have the right to obtain from the Company the rectification of your personal data. The Data Controller shall make reasonable efforts to ensure that the personal data it holds are accurate, complete current and relevant.

RIGHT TO RESTRICTION TO THE PROCESSING.

You can obtain a restriction to the processing your personal data, where:

the accuracy of the personal data is contested by the data subject, during the period when the Company must verify the accuracy of the personal data;
the processing is unlawful and you require the erasure of personal data or the restriction of their use instead;
the Data Controller no longer needs the personal data for the purposes of the processing, but they are required by you to establishment, exercise or defend of legal claims;
you have objected to the processing, while the Company checks whether your legitimate reasons prevail over your own.

RIGHT TO ACCESS.

You have the right to obtain from the Data Controller information about your personal data, and also information on which categories of personal data the Company owns or controls, for what purpose they are used, where they have been collected and to whom they may have been communicated.

RIGHT TO DATA PORTABILITY.

As a result of your application, the Company will transmit the data to another Controller on condition that the processing is based on your consent or is necessary for the execution of a contract.

RIGHT TO ERASURE.

Unless the processing of data is necessary for compliance with a legal obligation or to establishment, exercise or defend of legal claims, you have the right to obtain from the Data Controller the erasure of personal data if:

the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
you objected to the processing of your personal data;
the personal data have been unlawfully processed.

RIGHT TO OBJECT.

You object at any time to the processing of your personal data, on the condition that the data processing is not based on your consent but on the legitimate interest of , the Company or third party. The Data Controller shall no longer process the personal data, unless the Controller demonstrates mandatory and legitimate reasons for the processing, an overriding interest in treatment, or the exercise or defend of legal claims. When you object to processing, specify if you’re going to erasure your personal data or limiting the processing.

RIGHT TO LODGE A COMPLAINT.

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place where the alleged infringement took place.

Changes to this Privacy Policy

Any future changes or additions to the processing of personal data as described in this privacy notice will be notified in advance through an individual notification, through the usual communication channels used by the Company (etc. e-mail or through the internet).