In accordance with Article 13 of the General Data Protection Regulation (GDPR),
Dear Customer,
We hereby inform you that the "Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data" (hereinafter referred to as GDPR) establishes the protection of individuals and other subjects regarding the processing of personal data. S4 Giubileo (hereinafter also referred to as the "Company"), as Data Controller, in accordance with Article 13 of the GDPR, therefore provides you with the following information:
Types of Data: The company may collect and use different types of personal data depending on the specific purposes pursued and described below:
a) Personal Data: name, surname, gender, age/date of birth, country of origin, and other personal data permitted by current regulations.
b) Contact Data: address, email address, landline or mobile phone number, fax number if applicable, and other contact data permitted by current regulations.
Data Source: Automatically collected data. The computer systems and applications dedicated to the operation of this website detect, in the course of their normal operation, certain data (whose transmission is implicit in the use of Internet communication protocols) potentially associated with identifiable users. The collected data includes IP addresses and domain names of the computers used by users who connect to the site, URI (Uniform Resource Identifier) addresses of the requested resources, time of the request, method used to submit the request to the server, size of the file obtained as a response, numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters relating to the operating system, browser, and computer environment used by the user. This data is processed, for the strictly necessary time, for the sole purpose of obtaining statistical information about the use of the site and verifying its correct functioning. The provision of this data is mandatory as it is directly related to the web browsing experience.
Data voluntarily provided by the user. Your contact and account data. We will retain the contact data you provide to us (e.g., name, surname, address, phone number, email address, country of residence, phone number) when you create an account on the site, purchase a product, and/or participate in our contests or promotions and/or call us for assistance. Your payment and billing data. We will retain the payment and billing data you provide to us (e.g., credit card number, postal code, and address when you purchase a product, in order to process your purchase orders and ship the products). If requested, we may also retain your payment and billing data to facilitate future purchases of products.
Information about site usage. Your use of the site involves the processing of data about the browser and device you are using and your IP address (this is the number that identifies a specific device on the Internet and is necessary for your device to communicate with the sites). Cookies. The site uses technical/first-party/third-party profiling cookies that may collect user browsing data, the supply of which is mandatory for technical cookies to allow browsing, while it is optional and occurs through the expression of free and informed consent for profiling and third-party cookies. Cookies are used to analyze the effectiveness of the site and make it easier and more intuitive over time.
Data Controller: S4 Giubileo srl headquartered in Rome (Rm) Via della Giustiniana, 990. Contact data: You can contact the Data Controller at: info@s4giubileo.com.
Data Processing: In this Privacy Policy, the term "Personal Data" refers to any information that allows the Company to identify the data subject, either directly or indirectly. Personal data will be processed in accordance with Regulation (EU) 2016/679.
The Company reserves the right to carry out further processing of the data when required by law or as part of criminal or other investigations or proceedings.
Purpose of Data Processing and Legal Basis: The processing of your data, collected and stored, is based on your consent and is carried out for the following purposes:
Responding to requests for information/quotes;
Providing assistance and support in the use of purchased products and/or services;
Subscription to newsletters/mailing lists;
Sending educational, informational, and commercial communications;
Management of commercial profiling activities;
Statistical analysis, market studies.
Additionally, your data may be collected, processed, and stored under a legal or contractual obligation or because it is a necessary requirement for the conclusion of a contract for the purchase of products or the provision of a service requested by you.
Recipients of Data: To the extent relevant to the stated purposes of processing, your data may be disclosed to associated companies, subsidiaries, or affiliates of S4 Giubileo, consulting firms, private companies, designated as Processors by the Data Controller. Only the category of these recipients is indicated, as it is subject to frequent updates and revisions. Therefore, data subjects may request the updated list of recipients by contacting the data controller through the channels indicated above. Your data will not be disseminated in any way. The current Data Controllers and Processors are promptly identified in the Privacy Policy Document, which is periodically updated and available upon request.
Security and Confidentiality of Data: The Company has implemented appropriate measures to protect the data subject's personal data against accidental loss and unauthorized access, use, alteration, and disclosure. In the unlikely event that the Company believes that the security of the data subject's personal data in its possession or under its control has been or may have been compromised, the Company will inform the data subject of the incident in the manner prescribed by applicable law.
Storage Period: The collected data will be retained for a period not exceeding the achievement of the purposes for which they are processed ("principle of storage limitation" art. 5, GDPR) or in accordance with the deadlines set by legal regulations. The obsolescence of the stored data in relation to the purposes for which they were collected is periodically verified.
Data Subject Rights: You may exercise your right to request from the data controller at any time:
a) access to your personal data (obtain confirmation of whether or not data concerning you are being processed. In that case, you will receive the following information: purposes, data categories, recipients, storage period, right to lodge a complaint with a supervisory authority, right to request rectification or erasure or restriction of processing or to object to processing, and the existence of automated decision-making);
b) rectification or erasure of the data or restriction of processing operations concerning you;
c) object to the processing and profiling of data concerning you for reasons related to your particular situation. The data controller will refrain from further processing personal data, except for legitimate reasons that prevail over the interests, rights, and freedoms of the data subject, or for the recognition, exercise, or defense of a right in legal proceedings.
d) request data portability. In case of automated processing based on consent or in execution of a contract, receive the data concerning you in a structured, commonly used, and machine-readable format;
e) withdraw consent to processing by exercising these rights under the GDPR, simply by notifying the Data Controller in writing; The exercise of this right will not affect the lawfulness of processing carried out before the revocation.
f) lodge a complaint, in accordance with Article 77 of the GDPR, with a supervisory authority, based on your habitual residence, place of work, or place of violation of your rights; in Italy, the competent authority is the "Garante per la protezione dei dati personali," to which you can address using the contact details provided on the website http://www.garanteprivacy.it.
The aforementioned rights can be exercised by sending a request to the Data Controller through the contact channels indicated above. Requests related to the exercise of your rights will be processed without undue delay and, in any case, within one month from the request; this period may be extended by two months if necessary, taking into account the complexity and number of requests.
Data Processing Methods: The personal data you provide to us will be processed in accordance with the aforementioned legislation and the confidentiality obligations governing the Data Controller's activities. Data will be processed both electronically and on paper, as well as on any other suitable support, respecting the appropriate technical and organizational security measures provided by the GDPR.