Privacy Policy

This Privacy Policy is provided pursuant to Article 13 of European Regulation No. 679/2016 and applies exclusively to all Data collected through the Sitap.it website. This Privacy Policy is subject to updates, which will be published promptly on the Website. This Privacy Policy, any other documents referred to herein, and the Cookie Policy establish the basis on which the personal data of the data subject will be processed.

Data Controller

The Data Controller of the Data collected by this Website is SITAP S.R.L, VAT number 01113920332, with registered office in Via Giulio Natta, 37 - 29010 Pontenure (PC), email: privacy@sitap.it

Personal Data

Personal Data means any information relating to an identified or identifiable natural person (Data Subject). A natural person is considered identifiable if they can be identified, directly or indirectly, with particular reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to their physical identity.

Category of Personal Data processed
Among the Personal Data processed by this Website, either independently or through third parties, there are Common Data such as: Cookies, Usage Data, contact details including name, email address, telephone and shipping number, billing address; personal data and information on payment methods or credit cards; personal preferences as well as preferences regarding marketing and cookies.

Methods of Processing Personal Data

The Personal Data provided or acquired will be processed in accordance with the principles of fairness, lawfulness, transparency, and confidentiality in accordance with current regulations. The Data Controller processes Users' Personal Data by taking appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data. The processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the purposes indicated.

Purpose of Personal Data Processing and Legal Basis

Personal Data may be collected independently by the Data Controller or through third parties. In this case, the computer systems and software procedures used to operate this Website acquire some Personal Data of Users, of a technical-IT nature (e.g., IP address, type of browser used, operating system, domain name and addresses of websites from which access or exit, etc.), the transmission of which is inherent in the normal functioning of the internet. Such Data may be processed for the sole purpose of obtaining anonymous statistical information on the use of the site and/or to check its correct functioning and will be deleted immediately after processing.

The Data that the Data Subject chooses to provide voluntarily will be processed in compliance with the conditions of lawfulness ex art. 6 GDPR and will be processed to enable the Website to provide its services, as well as for the Purposes indicated below, and will be stored for the time necessary to fulfill the aforementioned Purposes.

The Purposes of the processing are:

1) Responding to requests and providing information

The Data will be processed for the purpose of being contacted or following up on specific requests made to the Data Controller by the Data Subject for communications relating to the Services and/or Content of the Data Controller, via email or other means of communication.

Legal basis: this processing is optional and based on the consent of the Data Subject, however, the provision of Data is necessary for the pursuit of the indicated purpose.

Data retention period: until the data subject withdraws their consent.

2) Website registration form

The Data will be processed for the purpose of registering on the Data Controller's website for the purchase of the Data Controller's Products.

Legal basis: this processing is optional and based on the consent of the Data Subject, however, the provision of Data is necessary for the pursuit of the indicated purpose.

Data retention period: until the data subject withdraws their consent.

3) Pre-contractual information and obligations

The Data will be processed for the purpose of being contacted or following up on specific requests made to the Data Controller by the Data Subject for communications of an informative nature and/or for information about the purchase of the Data Controller's Products, via email messages or by filling in the contact form and other communication tools.

Legal basis: this processing is optional and based on the consent of the Data Subject, however, the provision of Data is necessary for the pursuit of the indicated purpose.

Data retention period: until the data subject withdraws their consent.

4) Processing necessary in the context of a contract

The Data will be processed in order to fulfill the obligations arising from the contract between the Data Subject and the Data Controller for the sale of Products on the Website, to contact the Data Subject in relation to the Contract and for the management thereof, for the management of requests for legal guarantees, assistance, requests for withdrawal, management and termination of the Contract itself. 4) Processing necessary within the scope of a contract The Data will be processed in order to fulfill the obligations arising from the contract between the Data Subject and the Data Controller for the sale of Products on the Website, to contact the Data Subject in relation to the Contract and for the management thereof, for the management of requests for legal guarantees, assistance, requests for withdrawal, management and termination of the Contract itself. p>

Legal basis: this processing is necessary for the performance of the contract to which the Data Subject is a party, for the execution of pre-contractual measures or to fulfill a legal obligation to which the Data Controller is subject.

Data retention period: 10 (ten) years or other legal obligation.

5) Fulfilment of any obligations under applicable laws

The Data will be processed to fulfil any type of obligation contemplated and provided for by applicable laws, regulations, related regulations, commercial practices, and tax/fiscal matters, including for the purposes provided for by the anti-money laundering legislation (Legislative Decree 231/2007 and subsequent amendments).

Legal basis: this processing is necessary to fulfill a legal obligation to which the Data Controller is subject.

Data retention period: 10 (ten) years or other legal obligation.

6) Newsletter
The Data will be processed for the purpose of sending communications and promotional, commercial, and advertising material or material relating to initiatives and events of the Data Controller, via newsletter.

Legal basis: this processing is based on the freely given consent of the Data Subject pursuant to Article 6, paragraph 1, letter A of the GDPR.

Data retention period: until the data subject revokes their consent using the appropriate tool at the bottom of the newsletter or by sending a request to the Data Controller.

7) Statistics

The Data will be processed to perform statistical analyses on aggregated and anonymous data in order to analyze the behavior of the Data Subject, improve the products and services provided by the Data Controller, and meet the expectations of the Data Subject.

Legal basis: this processing is based on the freely given consent of the Data Subject.

Data retention period: until consent is revoked by the Data Subject.

Communication of Data

In addition to the Data Controller, in some cases, the following may have access to the Data:

1. a) categories of specially trained persons involved in the organization of the Website (administrative, commercial, marketing, legal, system administrators);
2. b) external parties (such as third-party technical service providers, hosting providers, IT companies, communication agencies) also appointed as Data Processors by the Data Controller pursuant to Article 28 of the GDPR. The updated list of Data Processors, if appointed, can always be requested from the Data Controller;
3. c) public or private entities that may access the Data in compliance with legal obligations;
4. d) entities that perform ancillary and instrumental tasks with respect to the Data Controller's activities;

Processing Times

As expressly provided for in Article 5, paragraph 1, letter e) of the GDPR, the Data is stored for the time necessary for its Processing in relation to the performance of the service requested by the Data Subject, or required by the Purposes described above in this document.

At the end of the retention period, Personal Data will be deleted and therefore the rights of access, deletion, rectification, and portability of the Data can no longer be exercised.

Cookies

This Website uses cookies. Cookies are small text files that can be used by websites to make the experience for the Data Subject more efficient and to personalize content and ads, provide social network features, and analyze traffic. Cookie Policy

Place of Processing and Transfer of Data Abroad

The Data is processed at the Data Controller's operational headquarters. For further information, please contact the Data Controller. The Data may be processed by natural persons and/or legal entities operating on behalf of the Data Controller and under specific contractual obligations, based in EU or non-EU member countries. In the event that the Data is transferred outside the EEA, the Data Controller will take all appropriate contractual measures to ensure adequate protection of the Data.

Exercise of the rights of the data subject

The Data Subject has the right to exercise the rights provided for in Articles 7, 15-22 of European Regulation 679/2016. In particular, they have the right to withdraw their consent at any time and, upon simple request to the Data Controller, they may request access to their Personal Data, receive the Personal Data provided to the Data Controller and, where possible, transmit it to another Data Controller without hindrance (so-called portability), obtain the updating, restriction of processing, rectification of the Data and erasure of those processed in breach of current legislation. You have the right, for legitimate reasons, to object to the processing of Personal Data concerning you and to the processing for the purposes of sending advertising material, direct sales, and market research. You also have the right to lodge a complaint with the Privacy Guarantor as the supervisory authority for the protection of personal data or to take appropriate legal action. The data subject may exercise their rights by contacting the Data Controller by email at: privacy@sitap.it.

Tools used for the processing of personal data

CONTACT FORM

By filling in the contact form with their data, the data subject consents to its use to respond to requests for information or for any other purpose indicated in the form header. Personal data collected through the contact form: Email, First and Last Name, Telephone Number, and City.

EMAIL ADDRESS MANAGEMENT

These services allow you to manage a database of email contacts, telephone contacts, or any other type of contact used to communicate with the Data Subject. These services may also allow you to collect Data relating to the date and time the messages were viewed by the Data Subject, as well as the 39;interaction of the Data Subject with them, such as information on clicks on links inserted in the messages.

Newsletter

By registering for the newsletter, the Data Subject's email address is automatically added to a list of contacts to whom email messages containing information, including commercial and promotional information, relating to this Website may be sent. The email address of the Data Subject may also be added to this list as a result of registering on this Website or after making a purchase. The Data Subject may choose to unsubscribe from the newsletter at any time by clicking on a specific button found within the emails. After clicking on the unsubscribe button, the Data Subject's Data will be immediately deleted from the “email marketing” software. Personal Data collected: email and Name. This Website uses the newsletter service provided by:

MailUp (Growens S.p.A.)

is a service that organizes and analyzes the distribution of newsletters. If a data subject does not want their data to be managed by Growens S.p.A., they will need to unsubscribe from the newsletter. A link is provided in every newsletter sent for this purpose. Personal Data collected: email and name. Place of Processing: Italy – Privacy Policy (link to be activated https://www.mailup.it/informativa-privacy/)

STATISTICS

Statistical services allow the Data Controller to monitor and analyze traffic data exclusively and are used to track the behavior of the Data Subject. This Website uses the following services:

Google Analytics (Google Ireland Limited)

Google Analytics is an analytics service provided by Google Ireland Limited. Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports, and sharing them with other services developed by Google. Google may use the Personal Data to contextualize and personalize the ads of its own advertising network. Google may also transfer this information to third parties where required to do so by law or where such third parties process the information on Google's behalf. The IP address anonymization function is active on this website. The IP address transmitted by the browser for purposes related to Google Analytics will not be merged with other data already held by Google.

At the following link https://tools.google.com/dlpage/gaoptout?hl=it Google has made available a browser add-on for deactivating Google Analytics. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy (link to be activated https://policies.google.com/privacy?hl=it)

Facebook Pixel Conversion Tracking (Meta Platforms, Inc.)

Facebook conversion tracking (Facebook pixel) is a statistics service provided by Facebook. The Facebook pixel tracks conversions that can be attributed to Facebook ads. Personal Data collected: Cookies; Usage Data. Place of processing: Ireland - Privacy Policy. (link to be activated https://www.facebook.com/about/privacy/)

Google Search Console (Google Ireland Limited)

is an analytics service provided by Google Ireland Limited. Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports, and sharing them with other services developed by Google. Google may use the Personal Data to contextualize and personalize the ads of its own advertising network. Google may also transfer this information to third parties where required to do so by law or where such third parties process the information on Google's behalf. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy (link to be activated https://policies.google.com/privacy?hl=it)

TAG MANAGEMENT

Google Tag Manager (Google Ireland Limited)

Google Tag Manager is a service that allows you to manage and monitor all third-party tags on the Website in order to obtain information about the interest shown by Users in the Website itself and, consequently, about the quality of the content. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy (link to be activated https://policies.google.com/privacy)

INTERACTION WITH SOCIAL NETWORKS

These services allow you to interact with social networks directly from the pages of this Website. The interactions and information acquired by this Website are in any case subject to the privacy settings of the Data Subject relating to each social network. If a service for interaction with social networks is installed, it is possible that, even if Users do not use the service, it will collect traffic data relating to the pages on which it is installed.

REMARKETING AND RETARGETING

These services allow this Website to communicate, optimize, and serve advertisements based on the Data Subject's past use of this Website. This activity is carried out by tracking Usage Data and using Cookies. This Website uses the following services:

Facebook Remarketing (Meta Platforms, Inc.)

Facebook Remarketing is a remarketing and behavioral targeting service provided by Facebook, which connects the activity of this Website with the Facebook advertising network. This Website uses the Facebook Pixel tool to measure conversions. Thanks to the Facebook Pixel, it is possible to understand the actions that people perform on the Website. The data collected can be used to:

- ensure that ads are shown to the right people; - create audience groups to target with ads;

- take advantage of additional advertising tools on the platform on which you advertise

The information collected is anonymous to the operators of this Website and cannot be used to identify an individual Data Subject. However, the information is saved and analyzed by Facebook, which may link the action to a single profile and use this information for internal advertising purposes on Facebook, as outlined in Facebook's privacy policy. This will allow Facebook to display ads both on Facebook and on third-party sites. The Site Owner has no control over how this data is used. For more information on how users can protect their privacy, please refer to Facebook's Privacy Policy. (link to be activated https://www.facebook.com/about/privacy/)

Google ADS

Google ADS is a service provided by Google Ireland Limited that connects this Website with the Google advertising network. This Website uses Google Analytics Remarketing features combined with Google ADS cross-device capabilities. This feature makes it possible to link target groups for promotional campaigns created by the Google Analytics Marketing function with the cross-device capabilities of Google ADS. This allows advertisements to be displayed based on the personal interests of the Data Subject, identified through an analysis of the Data Subject's behavior on the web, whether on a mobile device or other devices. It is possible to permanently disable targeting and remarketing functions by disabling the “personalized advertising” function in your Google account. To do so, simply follow this link: https://www.google.com/settings/ads/onweb/ Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy (link to be activated https://policies.google.com/privacy?hl=it)

LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company)

This Website uses a script called “LinkedIn Insight Tag.” The LinkedIn Insight Tag adds a cookie to Users' browsers each time they visit this Website. Thanks to this tool, the Data Controller can record when a LinkedIn member performs a specific action on the Website (such as booking a service or leaving an email address). This tool is used to collect statistical data that allows the effectiveness of paid advertising to be measured. Thanks to the LinkedIn Insight Tag, it is possible to understand the actions that people perform on the Website. The Data collected is used to: ensure that ads are shown to the right people; create audience groups to target with ads; take advantage of additional advertising tools on the platform where you advertise. This Website uses the LinkedIn Insight Tag to perform “remarketing” and “retargeting” activities; thanks to these activities, cookies that the Data Subject leaves on the Website are used, without however identifying them. Personal Data collected: Cookies and Usage Data. Place of Processing: Ireland– Privacy Policy (link to be activated https://www.linkedin.com/legal/privacy-policy?_l=it_IT)

Instagram Remarketing (Meta Platforms, Inc.)

Instagram Remarketing is a Remarketing and Behavioral Targeting service provided by Meta Platforms, Inc., which connects the activity of this Website with the Instagram advertising network. This Website uses the Pixel tool to measure conversions and understand the actions that people take on the Website. The information collected is anonymous to the operators of this Website and cannot be used to identify an individual Data Subject. However, the information is stored and analyzed by Facebook, which may link the action to an individual profile and use this information for internal Facebook advertising purposes, as outlined in Facebook's privacy policy. For more information on how users can protect their privacy, please refer to Instagram's Privacy Policy. (link to be activated https://help.instagram.com/519522125107875)

TikTok Ads (TikTok Technology Limited)

TikTok Ads is a remarketing and behavioral targeting service provided by (TikTok Technology Limited) that connects the activity of this Website with the TikTok advertising network. This Website uses the Pixel Tracking tool to measure conversions and understand the actions that people take on the Website. For more information on how users can protect their privacy, please refer to TikTok's Privacy Policy. (link to be activated https://www.tiktok.com/legal/new-privacy-policy?lang=it-IT)

Pinterest Ads (Pinterest Europe Ltd.)

Pinterest Ads is a remarketing and behavioral targeting service provided by Pinterest Europe Ltd that connects the activity of this Website with the Pinterest advertising network. This Website uses the Pixel Tracking tool to measure conversions and understand the actions that people take on the Website. For more information on how users can protect their privacy, please refer to Pinterest's Privacy Policy. (link to be activated https://policy.pinterest.com/it/privacy-policy)

PAYMENT MANAGEMENT

Payment management services allow this Website to process payments by credit card, bank transfer, or other means. The Data used for payment is acquired directly by the payment service provider without being processed in any way by this Website. Some of these services may also allow scheduled messages to be sent to the Data Subject, such as emails containing invoices or payment notifications.

Changes to this Privacy Policy

The Data Controller reserves the right to make changes to this Privacy Policy at any time by giving notice to Users on this page. Please therefore consult this page often, referring to the date of the last modification indicated at the bottom. If you do not accept the changes made to this Privacy Policy, you are required to stop using this Website and may request the Data Controller to remove your Personal Data. Unless otherwise specified, the previous Privacy Policy will continue to apply to Personal Data collected up to that point. The Data Controller is not responsible for updating all links displayed in this Privacy Policy, therefore whenever a link is not working and/or updated, Users acknowledge and accept that they must always refer to the document and/or section of the websites referred to by that link.

Privacy Policy updated in June 2023