PRIVACY POLICY

Pursuant to EU Regulation no. 2016/679 (hereinafter “GDPR 2016/679”), containing provisions for the protection of persons and other subjects with regard to the processing of personal data, we wish to inform you that the personal data you provide will be processed in compliance with the aforementioned legislation and the confidentiality obligations by which Restart Engineering srl is bound. This privacy policy (hereinafter also referred to as the “Policy”) concerns the processing of the data disclosed by the user.

Data Controller and Data Processors

The Data Controller is Restart Engineering Srl, with registered offices at no. 22 via N. Sauro, Novellara (RE) Italy. The list of subjects identified as Data Processors may be requested by writing to the following e-mail address: bellini@restart-progetti.it.

Data processed, purposes of the processing, and nature of the data’s provision

The Data Controller collects and processes the following data:

1. Browsing data: the computer systems and software procedures that govern the website’s functionality collect certain browsing data items, the transmission of which is implicit in the use of Internet communication protocols. This category of data includes: IP addresses, the type of browser used, the operating system, the domain name and addresses of the websites from which access was carried out, information on the pages visited by users on the website, access time, the length of time spent on the individual pages, and the internal path analysis and other parameters relating to the user’s operating system and computer environment. In this regard, the user is invited to read the Cookie Policy on the company’s website, which regulates this type of data.
2. Data provided voluntarily by the user online: the personal data provided voluntarily by the user via the forms contained on the company website consist of the following: personal data and contact details. These data will be processed exclusively for the purposes of contacting the user and responding to the requests submitted. While the user’s provision of their personal data and consent to their processing for these purposes is optional, the failure to provide such data and consent will prevent the user from being contacted by the Data Controller.
3. Data provided voluntarily by the user to the Company: the personal data provided voluntarily by the user to the Company consist of the following: name, surname, place and date of birth, residence, tax code, Certified e-mail address/SDI code for electronic invoicing. While the provision of such data is optional, the failure to provide such data, or the provision of partial or inaccurate information, will prevent the requested services from being provided.
4. Contact data provided voluntarily by the user to the Company: the user may also provide the Company with further contact data, such as a telephone number, e-mail address and/or mobile phone number for communications concerning the provision of the requested services. The provision of such data is optional, and any refusal or withdrawal thereof shall not affect the provision of the requested services.

Data processing methods

With the exception of the reference to the browsing data, regulated by the cookie policy, the personal data collected are provided voluntarily by the user by entering them into the forms contained on the company’s website or directly at the facility, as specified above. The personal data provided may be processed by paper, electronic, computer and automated means, and the data are always protected to guarantee their security and confidentiality, and to ensure that they can only be accessed by authorised personnel.

Legal basis for processing and retention period

With the exception of the browsing data, with regard to data processing carried out for the purposes: – referred to under points 2) – 4), the legal basis of the data processing resides in the respective consents provided by the user; – referred to under point 3), the legal basis of the data processing resides in the relationship existing between the parties for the provision of the services requested from the Data Controller. In compliance with the principles of lawfulness, limitation of purpose, and data minimisation, pursuant to article 5 of the GDPR 2016/679, the data will be retained for the period of time necessary to fulfil all legal obligations, as well as to achieve the purposes for which they have been collected and processed, in accordance with the requirements of the relevant regulations.

Data recipients

The user’s personal data are not disclosed to unspecified parties, but may be disclosed or communicated to public and private entities and institutions for the purposes specified above, and in the cases provided for under the current laws or regulations. By way of example, some of the subjects to whom the Data Controller may/must disclose your data are indicated below:

• any employees, consultants or collaborators of the Data Controller, within the context of their work duties, who act as data processors and, in that sense, receive instructions from the Data Controller;
• external consultants and third-party suppliers who assist the company in various ways, with particular regard to suppliers of technical and technological services, credit and banking institutions, suppliers of services instrumental to the management/maintenance of the website, and legal, accounting, and organisational aspects, as well as any other subject to whom the data must be disclosed pursuant to the current legal or regulatory provisions.

Transfer of data abroad

The user’s personal data collected by the Data Controller will mainly be processed in Italy or Member States of the European Union.

Rights of data subjects

Pursuant to articles 15 to 22 of EU Regulation no. 2016/679, concerning the processing of the personal data provided, the user has the right to request the following at any time:

• access: he/she may request confirmation as to whether or not data concerning him/her is being processed, as well as further clarification regarding the information set out in this Policy, as well as to receive the data itself, within the limits of reason;
• rectification: he/she may request that the data he/she has provided be corrected or supplemented, if inaccurate;
• erasure: he/she may request that the data acquired or processed be deleted if they are no longer necessary for the purposes indicated or if there are no longer any ongoing disputes or controversies, in the event of revocation of consent or objection to processing, in the event of unlawful processing, or if their erasure is required by law;
• restriction: he/she may request the restriction of the processing of their personal data, if any one of the conditions set out under article 18 of the GDPR applies;
• objection: he/she may object at any time to the processing of their data on the basis of a legitimate interest, unless there are prevailing legitimate reasons for the Data Controller to proceed with the data processing, e.g. for use in cases pending in court; the user’s objection will always prevail over the Data Controller’s legitimate interest to process the data for marketing and promotional purposes;
• portability: he/she may request to receive the data, or have them transmitted to another specified data controller, in a structured, commonly used, and machine-readable format. Furthermore, pursuant to article 7(3) of the GDPR, the user may exercise the right to withdraw consent at any time, without prejudice to the lawfulness of the data processing carried out based on the consent previously granted. Finally, he/she has the right to lodge a complaint with the Supervisory Authorities, which, in Italy, is the Garante per la Protezione dei Dati Personali.

To exercise the rights listed above, or to report problems or request clarifications regarding the processing of personal data, the user may write to the Data Controller, as identified above, by e-mail at bellini@restart-progetti.it or by letter, addressed to the Data Controller’s registered offices, specifying the subject matter of the request.