PRIVACY POLICY
Pursuant to Arts. 13 and 14 of EU Reg. 2016/679 (“GDPR”)
SE LAB s.r.l. is highly attentive to privacy and the protection of personal data. This notice describes the processing methods for the personal data you enter in the “Contact Us” box on the SE LAB website page https://se-lab.com/;
- Data controller: The Data Controller is SE LAB s.r.l. (VAT No. 04485930160), with its registered and operational office at Via Buratti, 21 – 24124 Bergamo (BG);
- Processed data and processing methods: The data we collect via the contact box, if freely and spontaneously entered by you therein, are as follows:
– identifying data (e.g., first and last name);
– contact data (e.g., address, phone number, email)
– The collected data are processed in electronic and/or paper format; data processing is carried out using technical and organisational security measures suitable to ensure that they do not become accessible to unauthorised parties, are not lost, and are not altered.
The collected data will not be subject to automated decision making processes pursuant to Art. 22 of the GDPR. Should the Data Controller need to use such processes, it will provide specific information as required by law.
The data we collect via the contact box, if freely provided by you, are processed for the following purposes:
– to contact you.
– to answer your questions.
– to provide the user with the requested information.
– The personal data collected via the contact box are also processed, provided you give your specific consent, for commercial contact and/or marketing purposes through the sending of newsletters.
The legal basis for the processing aimed at providing you with the requested information is the performance of pre-contractual obligations or the response to your requests, pursuant to Art. 6(1)(b) of the GDPR.
The legal basis for the processing aimed at commercial contact and/or marketing via the sending of newsletters is consent, pursuant to Art. 6(1)(a) of the GDPR, which we enable you to provide in an informed, specific, freely given, revocable, and documented manner.
Your data will be processed by subjects authorised to process them by SE LAB s.r.l. (e.g., employees and/or external collaborators) as they are specifically assigned to personnel selection roles and trained for the fulfilment of their respective duties.
Your personal data may be communicated to any qualified subjects who provide SE LAB s.r.l. with services or activities instrumental to the purposes indicated in this notice, including: subsidiary, associate and/or affiliated companies; IT service providers; consultants who assist the Data Controller in various capacities, with particular reference to legal, tax, social security, accounting, and organisational matters; any other subject to whom the data must be communicated based on an express provision of law.
The processed data will be processed within the European Economic Area (EEA), at the operational office of SE LAB s.r.l.; any transfer of such data outside of it may only occur towards subjects performing services on behalf of the Joint Controllers (e.g., cloud service providers) who adopt legal, technical, and organisational security measures compliant with the regulatory requirements in force in the European Economic Area (EU Regulation 2016/679 “GDPR”) and in Italy (Legislative Decree 196/2003, Legislative Decree 101/2018).
The data you enter in the contact box will be retained for no more than 24 months. Upon expiration, the data will be deleted, unless there are further purposes for their retention, which will be communicated to you if applicable and subject to a request for specific consent, where necessary.
You have the right to request access to the data, their rectification or erasure, the restriction of processing, and to object to their use by us, as well as the right to request the delivery of some of them, by contacting SE LAB s.r.l. at the contact details indicated in the Contact details section.
The data subject has the right to obtain from the data controller confirmation as to whether or not personal data concerning them are being processed, and, where that is the case, access to the personal data and the following information:
a) the purposes of the processing;
b) the categories of personal data concerned;
c) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations and, in such case, the existence of appropriate safeguards;
d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
e) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
f) the right to lodge a complaint with a supervisory authority;
g) where the personal data are not collected from the data subject, any available information as to their source;
h) the existence of automated decision-making, including profiling, which produces legal effects concerning them or similarly significantly affects them and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
The data subject has the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning them.
You have the right to request access to the data, their rectification or erasure, the restriction of processing, and to object to their use by us, as well as the right to request the delivery of some of them, by contacting SE LAB s.r.l. at the contact details indicated in the Contact details section.
The data subject has the right to obtain from the controller the erasure of personal data concerning them without undue delay, and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:
a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
b) the data subject withdraws consent on which the processing is based and where there is no other legal ground for the processing;
c) the data subject objects to the processing and there are no overriding legitimate grounds for the processing;
d) the personal data have been unlawfully processed;
e) the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
The data subject has the right to obtain from the controller restriction of processing where one of the following applies:
a) the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
c) the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
d) the data subject has objected to processing pending the verification whether the legitimate grounds of the controller override those of the data subject.
The data subject has the right to object at any time to processing of personal data concerning them based on the legitimate interest of the controller, including profiling. The data subject has the right to object at any time to processing of personal data concerning them for direct marketing purposes, which includes profiling to the extent that it is related to such direct marketing.
The data subject has the right to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used and machine-readable format and has the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:
a) the processing is based on consent or on a contract; and
b) the processing is carried out by automated means.
In exercising their right to data portability, the data subject has the right to have the personal data transmitted directly from one controller to another, where technically feasible.
Any complaints may be lodged with the Data Protection Authority, reachable at the following contacts, or with your competent supervisory authority:
Garante per la Protezione dei Dati Personali
Piazza Venezia n. 11
00187 Roma
Fax: (+39) 06.69677.3785
Tel: (+39) 06.696771
E-mail: garante@gpdp.it
Certified email (PEC): protocollo@pec.gpdp.it
The Data Controller can be contacted at the following details:
SE LAB srl: email: info@se-lab.com PEC: se.lab@legalmai.it
This Privacy Policy may be subject to changes and updates. Any modifications will, in any case, guarantee the full protection of your rights. Should changes be made that could limit the guarantees protecting your data or your rights compared to the current version, before the processing of your data begins under the new methods, you will be promptly informed via the provided contacts.
