Legal Notices and GDPR Privacy Policy
SAN.CO COSTRUZIONI TECNOLOGICHE SPA
SAN.CO Costruzioni Tecnologiche SPA – P.IVA 01229680226, Via Fornaci 26 – 38062 Arco (TN) ITALY
COPYRIGHTS
All of the content—i.e. text, graphics, files, tables, images, and information—found within this site is protected in accordance with applicable law with regard to copyrights, patents, and intellectual property. Any products or companies mentioned on this site are the trademarks of their respective owners and may be protected by patents and/or copyrights deposited with or granted by the competent authorities. As such, said content may only be downloaded or used for personal, non-commercial purposes. Therefore, the content may not, in whole or in part, be copied, altered, or resold for a profit or for any other benefit.
USE OF THE SITE
In no case may SAN.CO Costruzioni Tecnologiche SPA be held liable for damages of any kind caused, directly or indirectly, by accessing the site, by the inability to access the site, or from your reliance on and use of the information contained therein. SAN.CO Costruzioni Tecnologiche SPA shall take steps to provide up-to-date information on the site, but does not guarantee its accuracy or completeness. SAN.CO Costruzioni Tecnologiche SPA reserves the right to alter the content of the site and of these legal notices at any time and without notice.
ACCESS TO LINKED EXTERNAL SITES
SAN.CO Costruzioni Tecnologiche SPA assumes no responsibility with respect of any sites that may be accessed by way of links found within this site, which are provided solely as a service to online users. The fact that SAN.CO Costruzioni Tecnologiche SPA provides these links does not imply approval of the related sites, and SAN.CO Costruzioni Tecnologiche SPA assumes no responsibility for the quality, content, graphics of said sites. Therefore, the accuracy and completeness of the information found there are the responsibility of the owners of the sites accessed under the conditions said owners have established. SAN.CO Costruzioni Tecnologiche SPA offers no assurances as to any software found on this site or on external sites and cannot guarantee their quality, security, or compatibility with any other systems in use.
SITE PRIVACY POLICY AND USE OF COOKIES
In accordance with the obligations of the Italian data protection code (Legislative Decree no. 196 of 30 June 2003) and the European Union’s General Data Protection Regulation (GDPR, Regulation no. 679/2016) as amended, this site respects and safeguards the privacy of its users and visitors and makes every effort possible and appropriate to not infringe upon the rights of its users.
This privacy policy applies solely to the online activities of this site and applies to site visitors/users. It does not apply to any information that may be received by way of channels other that this web site.
The purpose of this privacy policy is to ensure the utmost transparency with regard to the information gathered on the site and how it is used.
LEGAL BASIS OF THE PROCESSING
This site processes data based on the consent provided. By viewing and making use of this site, visitors and users explicitly approve this privacy policy and consent to the processing of their personal information in relation to the methods and purposes described below, including any disclosure to third parties as necessary in order to provide a service.
Provision of the information and consent to its collection and processing is voluntary. Users may deny consent or revoke consent at any time (by email: info@sancoct.com). However, failure to consent may result in the inability to provide certain services, which may compromise the experience of using the site.
By “processing” of personal data we mean any transaction or set of transactions conducted with or without the aid of electronic or otherwise automated means in relation to the collection, logging, organization, conservation, processing, modification, selection, extraction, viewing, comparison, use, interconnection, blocking, communication, disclosure, cancellation, and destruction of said data.
As of 25 May 2018 (the effective date of the GDPR), this site shall process certain data based on the legitimate interests of the data controller.
DATA COLLECTION AND PURPOSES
Like all web sites, this site makes use of log files to store information gathered automatically during a user’s visit to the site. The following information may be gathered in this way:
- internet protocol (IP) address;
- type of browser and parameters of the device used to connect to the site;
- name of the internet service provider (ISP);
- date and time of the visit;
- referral web page and outbound page;
- country of origin;
- possibly the number of clicks.
This data is gathered for the following purposes:
- solely in aggregate and anonymous form in order to verify the proper functioning of the site. None of this information is connected to the actual person/user of the site and cannot be used to make such an identification (as of 25 May 2018, this information is to be processed based on the legitimate interests of the data controller);
- for the purposes of security (anti-spam filters, firewalls, virus detection), the data logged automatically may also include personal information such as the IP address, which may be used, in accordance with applicable law, to block attempts to harm the site, harm other users, or otherwise cause damage or commit a crime. This data is never used for user identification or profiling and is not cross-checked with other data or provided to third parties; it is used solely for the purpose of protecting the site and its users (as of 25 May 2018, this information is to be processed based on the legitimate interests of the data controller);
- to provide data to third parties that provide functions that are necessary to service provision, such as the management of comments on the site, requests for information, site maintenance, accounting and administration, or managing requests for cost estimates by sending data to retailers or dealers in the area of the requester.
In the event the site allows for the posting of comments or the user requests specific services (by way of the Contact Us section), the site automatically gathers and logs certain data identifying the user, including the e-mail address and nickname. This information is understood to be provided voluntarily by the user upon provision of the service and is processed with the user’s consent. By posting a comment or other information, the user expressly accepts the privacy policy and, in particular, consents to the content posted being freely viewable by other visitors to the site.
The data received will be used solely for provision of the service requested and solely for the time necessary to provide the service.
Information that users of the site decide to make public by way of the services and tools provided is provided by them voluntarily and consciously, thereby exempting the Site Owner and the Data Controller from any and all liability with regard to any violations of the law. It is up to the users to ensure that they are authorized to disclose personal data of third parties or content that may be protected by national or international law.
If comments are managed by way of an external service (e.g. Disqus), see the policies of that service for further information (see the section on cookies).
Data gathered by the site during its use is used solely for the purposes specified above and is stored for solely for the time needed to execute the activities specified. In any event, personal data gathered by the site will not be provided to third parties for any reason, unless there is a legitimate request by law enforcement and only in the cases required by law. However, data may be provided to third parties if necessary for the provision of a specific service requested by the User (e.g. sending a cost estimate to dealers, sending replies to inquiries, sending comments) or in order to conduct security checks or for site optimization.
The methods of processing personal data provided by way of this web site include the use of manual, electronic, and screen-based mechanisms (including fax, phone, electronic mail, and other electronic and/or automated systems of communication) in a manner that ensures security as well as observance of the principles of fairness, legality, transparency, and confidentiality of the data. This personal information is processed by SAN.CO Costruzioni Tecnologiche SPA solely for the time necessary to fulfill the purposes for which the information was gathered.
The personal data provided by users who make purchases or request materials or information by way of this web site will be processed for the purpose of executing the request sent and for the provision of services or execution of agreements entered into and for which registration is required, as well as for all other purposes specified herein, and may be disclosed to third parties in the event it should be necessary for said purposes.
Upon consent of the data subject, SAN.CO Costruzioni Tecnologiche SPA may process any personal data provided for commercial purposes and to carry out direct marketing efforts, such as sending informational materials and commercial communications, as well as to conduct market research.
This data may be processed by personnel hired for the purpose by SAN.CO Costruzioni Tecnologiche SPA only in the event said processing is necessary to the completion of their duties and solely conducting the operations necessary to said duties. To this end, the data provided, or a portion thereof, may be disclosed to affiliated companies; individuals, professional firms, and other enterprises that provide consulting and support to SAN.CO Costruzioni Tecnologiche SPA in relation to accounting, administration, and legal, fiscal or financial affairs; parties allowed access to the data by law or by order of law enforcement; and parties responsible for the technical functioning of the web site.
PROCESSING LOCATION
The data gathered by the site is processed at the offices of the Data Controller, SAN.CO Costruzioni Tecnologiche SPA – Via Fornaci 26 – 38062 Arco (TN) ITALY, and at the data center of the web hosting provider. The web hosting provider (InfoServizi Sas con sede in Viale del Lavoro 33 – 37036 San Martino Buon Albergo (VR) responsible for handling and processing the data on behalf of the controller is located within the European Economic Area and acts in compliance with European legislation.
COOKIES
In line with standard practice, this web site makes use of “cookies”, i.e. small text files that are used to store information related to visitor preferences, in order to improve the functioning of the site, to simplify navigation by automating procedures (e.g. logging in, interface language, etc.), and to analyze site usage.
Session cookies are essential in order to distinguish between the connected users and are used to prevent a requested function from being provided to the incorrect user, as well as for security purposes in order to prevent cyber attacks on the site. Session cookies contain no personal data and last solely for the duration of the current session, i.e. until closing the browser. No consent is required for such cookies.
Functionality cookies used by the site are strictly necessary in order to use the site and are connected with an explicit request for a function by the user (e.g. logging in). No consent is required.
By using the site, continuing to navigate around the site, or clicking “OK” on the banner displayed when first accessing the site, visitors expressly consent to the use of cookies and similar technologies, and specifically to the storage of these cookies on the device being used for the purposes specified above and the access of information on the device by way of the cookies.
Disabling cookies
Cookies are tied to the browser being used. They may be disabled directly within the browser, thereby refusing/revoking consent for the use of cookies. It is important to note that disabling cookies could prevent the proper use of certain functions of the site.
Instructions for disabling cookies may be found on the following web pages:
Opera –
THIRD-PARTY COOKIES
This site also acts as an intermediary for the cookies of third parties, which are used to provide additional services and functionality to visitors and to improve the use of the site, such as in the case of social-media buttons. This privacy policy does not apply to the services provided by third parties, and this site has no control over their cookies, which are managed entirely by the third parties themselves, nor does it have any access to the information gathered by way of these cookies. The data-provision agreement is directly between the user/visitor and the third parties, and this site is in no way involved in said provision. As a result, the policies concerning the use and purposes of these cookies, as well as the procedures for disabling them, are provided directly by the third parties on the pages specified below.
Specifically, this site uses cookies from the following third parties:
– Google (Google Analytics cookies): Google Analytics is a Google analysis tool that uses performance cookies to gather anonymous navigation data (truncated to the last octet) in order to analyze use of the site, compile reports on site activity, and provide other information, such as the number of visitors and the pages visited. Google may also transfer this data to third parties where allowed by law or in the event said third parties process this data on Google’s behalf. Google will not associate the IP address with any other data in Google’s possession. The data transmitted to Google is stored on Google’s servers in the United States.
Further information on Google Analytics cookies may be found on the page Google Analytics Cookie Usage on Websites.
Users may opt out of the collection of data by Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
– Google (YouTube cookies). YouTube is a platform owned by Google for the sharing of videos and uses cookies to gather information on users and on the devices used.
Most of the videos found on the site do not generate cookies when accessing the page as a result of setting “Privacy Enhanced Mode (no cookies)”, which ensures that YouTube does not store any information on visitors unless they voluntarily play the video.
For more information on the use and processing of data by Google, we recommend reading Google’s policy here, as well as the page How Google uses information from sites or apps that use our services.
– Disqus. A comment hosting service for web sites that sets cookies for pages that include a comment box. Data gathered: number of users and their actions, IP address, browser used, identifier of the web site that includes the comment box, information connecting site visits with the user’s Google, Facebook, Twitter, or Disqus account if logged in. This cookie does not identify the User personally unless logged into Disqus in the event the user has logged in with a Disqus, Google, Facebook, or Twitter account. For more information on the use and processing of data, we recommend reading the Disqus privacy policy. Users may also selectively disable Disqus collection of personal data by visiting the opt-out page.
SOCIAL NETWORK PLUGINS
This site also includes social network plugins and buttons that simplify the sharing of content to your favorite social networks. These plugins are programmed so as not to set any cookies upon accessing the page, so as to protect user privacy. Cookies may be set, if required by the social network, only when the user actually and voluntarily uses the plugin. It is important to note that, if users visit the site while logged into a given social network, they have already consented to the use of cookies distributed by way of this site when signing up for that social network.
Collection and use of the information obtained by way of the plugin is governed by the respective privacy policies of the various social networks. See the following:
- Facebook(cookie policy)
- Twitter(cookie policy)
- LinkedIn(cookie policy)
- Google+(cookie policy).
- PayPal (cookie policy)
TRANSFER OF DATA TO COUNTRIES OUTSIDE THE EU
This site may share certain data collected with services located outside of the European Union, particularly with Google, Facebook and Microsoft (LinkedIn) by way of social plugins and Google Analytics. Said transfer is authorized in accordance with specific decisions of the European Union and of Italy’s data protection authority, specifically Commission Implementing Decision 2016/1250 (see also the Privacy Shield); therefore, no further consent is required. The companies mentioned above also ensure their participation in the Privacy Shield.
SECURITY MEASURES
This site processes user data in a legal and proper manner and implements safety measures aimed at preventing the unauthorized disclosure, alteration, destruction of, or access to data. Processing is done with the aid of electronic and/or screen-based mechanisms and following organizational procedures and approaches that are strictly correlated to the purposes specified. Site management software is also constantly updated and scanned regularly to detect any viruses or dangerous code.
In certain cases, in addition to the controller, certain categories of parties involved in site organization (e.g. personnel in administration, sales, marketing, or legal affairs, and system administrators) or external parties (such as technical service providers, postal couriers, hosting providers, marketing agencies, and other IT firms) may have access to the data.
USER RIGHTS
In accordance with European General Data Protection Regulation (GDPR) 679/2016 and with Article 7 of Italian Legislative Decree no. 196 of 30 June 2003 (http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1311248), Users may, based on the procedures and limitations defined by applicable laws and regulations, exercise the following rights:
- to oppose, for just cause, the processing, in whole or in part, of personal data that concerns them for the purpose of sending marketing or direct-sales materials or for conducting market research or other commercial communications;
- to request confirmation of the existence of personal data that concerns them (right to access);
- to know the origin of the data;
- to have the data communicated to them in intelligible form;
- to receive information concerning the methods, procedures, and purposes of the processing;
- to request updates, corrections, integrations, cancellations, anonymization, or blocking of illicit data processing, including processing that is not necessary for the purposes for which it was collected;
- to receive, in the event of processing based on consent and at the cost solely of any medium used, their data provided to the controller in a structured form that is readable by data-processing systems and in a format that is commonly used by electronic devices;
- to file a complaint with the competent authority (e.g. the Italian data-protection authority, see here); and
- generally, to exercise all rights granted by applicable law.
In the event the data has been processed based on legitimate interests, the rights of the data subject (with the exception of the right to portability, which is not established by law), and particularly the right to oppose to processing, are still ensured and may be exercised by sending a request to the data controller.
SAN.CO Costruzioni Tecnologiche SPA would also like to reiterate that failure to provide personal information that has been marked as mandatory would make it impossible to perform the agreement concerned, whereas failure to provide information that has not been marked as mandatory shall have no consequences in terms of executing the request.
Data subjects may exercise their rights and request information concerning the processing of personal data by sending a message to the e-mail address info@sancoct.com
DATA CONTROLLER AND DATA PROCESSOR
The Data Controller and Data Processor as defined by applicable law is the site administrator:
The pro tem company representative of SAN.CO Costruzioni Tecnologiche SPA – Via Fornaci 26 – 38062 Arco (TN) ITALY – TEL +39 0464588222, registered with the P.IVA 01229680226
EXTERNAL DATA PROCESSOR
In addition to the internal data processor, SAN.CO Costruzioni Tecnologiche SPA has appointed the following external data processors for the purpose of web hosting.
Infoservizi sas, located in Viale del Lavoro 33, 37036 San Martino Buon Alberto (VR), is an appointed data processor on behalf of the controller. Infoservizi sas is located within the European Economic Area and act in accordance with European legislation (Infoservizi sas privacy policy).
Google is an appointed data processor on behalf of the controller (Google Analytics).
Updates
This privacy policy was last updated on 9 May 2018.
Notice provided in accordance with and for the purposes of art. 13 of Legislative Decree no. 196/03 and GDPR EU 2016/679
regarding personal data protection.
Zanini S.p.A. protects the confidentiality of your personal data and guarantees protection against all
incidents that could represent a risk of a violation of this confidentiality. As required by European Union Regulation no. 679/2016
(“GDPR”), and specifically art. 13, the user (”Data Subject”) is hereby provided with the information required under the personal
data processing regulation.
Zanini S.p.A., in the person of its legal representative at the time, acts as Data Controller and may be
contacted at the e-mail address mail@sancoct.com.
Zanini S.p.A. will process your personal data under the following
circumstances, among others:
- If you contact us directly, for example through our internet sites (under the menu items: About us – Work with us – Contact
information), by e-mail or by telephone via our direct line, in order to request information on our products and services;
- If you buy one of our products or services;
- If you respond to our marketing campaigns, for example by filling in a reply form or entering data in one of our internet sites;
- If we obtain your personal data from another source (e.g. from intermediaries), in full compliance with the applicable regulations.
If you provide personal data on behalf of somebody else, it is your responsibility to ensure that the data subject has viewed this
Privacy Notice before you do so. If you are under 16 years old, please do not supply us with any personal data.
We request your assistance keeping your personal data up to date, by informing us of any changes thereto.
PERSONAL DATA CATEGORIES PROCESSED
The following categories of personal data on you may be collected through various services and channels of contact described in
this Privacy Notice:
- Contact information – information on your name, address, telephone number and e-mail address.
- Other personal data – information you supply us regarding your date of birth, education or professional situation.
- Contract information – customer number, contract number.
- Use of the web site and communications – information regarding the methods by which you use our web site and open or
forward correspondence from us, including information collected using cookies and other tracking technologies (refer to
Cookies information).
- Information on sales and assistance service – information on your purchases, technical support and assistance, including
complaints.
PURPOSES OF DATA PROCESSING
Customer Fidelity and Marketing: to supply you with information and special offers.
Justification of data processing: consent
Choice: Your consent may be revoked at any time by e-mail (mail@sancoct.com)
Fulfilment of a customer’s request: to respond to your requests (such as requests for estimates)
Justification of data processing: execution of precontractual measures
Personal data collected for the purpose of “Fulfilment of a customer’s request” may also be processed for the additional
purpose of Verifying the efficacy of the response to your requests, in order to improve the service we provide our customers.
Legitimate interest: This form of processing is based on Zanini S.p.A.’s legitimate interest in assessing
the efficacy of its responses to customers’ requests, in order to check its quality standards and adopt any measures that may be
required for improvement, also in the customers’ own interests.
Support for Sales and Service
Justification of data processing: fulfilment of contractual obligations, legitimate interest
Legitimate interest: this form of data processing is based on Zanini S.p.A.’s legitimate interest in
responding to customers’ requests and problems that arise during sales and assistance services.
Choice: – opposition in the presence of a legitimate interest, with grounds.
Sales – for the sale of products and the supply of related services.
Justification of data processing: fulfilment of contractual obligations
Compliance with legally binding requests for your personal data and protection of rights in court: to fulfil our obligations under
laws, regulations or orders of court authorities, and to protect our rights in court.
All data controllers are subject to the laws of the countries where they operate and must comply with these laws.
If we are obliged to do so, we will supply information on you to the organisations in charge of the application of laws,
regulations and court orders in any part of the world.
Moreover, Zanini S.p.A. may use your personal data if necessary to defend its own rights in court.
Justification of data processing: legal obligation, legitimate interest
Legitimate interest: the legal basis of this form of data processing is Zanini S.p.A.’s legitimate interest in protecting and
defending its own rights
Choice: objection with a legitimate interest, in the presence of the appropriate conditions
Quality Control, Research and Development: in order to improve its products and services, Zanini S.p.A.
may use any information received in the context of its business relations in anonymous form for quality control and for the
purposes of development of products and services. Before beginning this form of processing, your data will be rendered
anonymous so that it can no longer be traced to you.
Basis of data processing: legitimate interest
Legitimate interest: the legal basis of this form of data processing is Zanini S.p.A.’s legitimate interest in meeting its customers’ high
expectations for the quality of our existing products and premium services and their desire for innovative new solutions
Choice: objection with a legitimate interest, in the presence of the appropriate conditions
SECURITY OF DATA STORAGE
Though it is impossible to provide an absolute guarantee of security against intrusion during transmission of data over the internet
and web sites, we take all possible measures to provide physical, electronic and procedural protection for your personal data in
accordance with data protection requirements.
DURATION OF DATA STORAGE
We will keep your personal data only for the amount of time necessary to achieve the goals for which the data have been collected
or for any other related legitimate purpose (for example, if the data are of significance for defence against claims made against us,
or in the presence of a legitimate interest).
This means that, if your personal data are processed for two different purposes, we will keep the data until the end of the longer
term; but we will no longer use your personal data for the purpose with the shorter term of storage.
We limit access to your data to people who need to use the data for significant purposes only.
When your personal data are no longer needed, or for which there is no longer a legal basis for storage, the data will be irreversibly
rendered anonymous (and then kept) or permanently deleted.
For this purpose, your personal data will be stored for the amount of time necessary for achievement of the purposes for which the
data were collected.
Data storage times for the principal purposes for which data are used are given below, for greater clarity:
Marketing purposes: personal data processed for marketing purposes may be stored for 10 years from the date on which we
obtained your most recent consent for processing (with the exception of objection to receiving any further communications).
Fulfilment of contractual obligations: data processed for the fulfilment of any contractual obligation with you may be kept for the
entire duration of the contract and for 10 years from the end of the fiscal year following the one in question, for the purposes of
possible tax assessments and/or disputes.
In the event of a dispute: in the event that it should be necessary to defend ourselves, act or file a claim against a third party, we
may store personal data we consider reasonably necessary for processing for these purposes, for the amount of time during which
the claim may be made.
DATA SHARING AND DATA SECURITY
Your personal data may be accessed by our personnel, agents and suppliers.
Zanini S.p.A. uses a series of suppliers providing assistance in the delivery of the services and forms of
processing listed. Though data transmission via Internet or web sites cannot be guaranteed to be absolutely safe against intrusion,
we take measures to maintain physical, electronic and procedural security measures in place to protect your personal data, in
accordance with the requirements of data protection regulations.
All your personal data will be stored on our protected servers (or printed copies securely stored) or those of our sub-suppliers or
business partners, and will be accessed and used on the basis of our standards and security policies (or equivalent standards, in the
case of our subcontractors and business partners).
HOW CAN I EXERCISE MY RIGHTS?
If you have any questions regarding our processing of your personal data, please contact Zanini S.p.A. by email
at the address: mail@sancoct.com.
On the basis of current regulations, you are entitled to request:
- further details of our processing of your data,
- a copy of the personal data you have supplied to us,
- updating of any inaccuracies in the data in our possession,
- deletion of any data for which we no longer have any legal basis for processing,
- revocation of your consent, in the event that the legal basis for the data processing is consent and applies to direct marketing
activities, in order to put an end to this form of data processing,
- objection to any form of data processing [including profiling] based on a legitimate interest, unless the reasons for which we are
obliged to perform the processing are more important than any effect this may have on your data protection rights,
- to limit the way in which we process your personal data while a claim is pending.
Exercise of these rights is subject to a number of exceptions aimed at protection of the public interest (such as prevention or
identification of crime) and of our own interests.
If you exercise any one of the rights listed above, we will ensure that you have a legitimate right to exercise this right, and we will
normally respond to your request within one month.
In the event that, in the presence of a legal basis to do so, you revoke your consent or exercise your right to erasure of your data,
please take into consideration that this operation will, for technical reasons, take a certain amount of time, which we will attempt
to reduce to a minimum, but during which you may still be contacted as part of marketing campaigns we already had underway at
the time of the request.
If you are not satisfied with the way in which we process your personal data, or with our response, you are entitled to file a claim
with the controlling authority.
Legal basis for the processing of personal data
Processing of your personal data as described above is authorised by European data processing regulations, on the basis of the
following legal foundations:
- Consent: if you have consented to use of your data, your consent, which you may revoke at any time by e-mail:
mail@sancoct.com;
- Execution of precontractual measures or fulfilment of contractual obligations: if necessary to conclude or fulfil a contract with
us, or to execute precontractual measures;
- Legal obligations: if it is necessary for us to use your personal data to fulfil our legal obligations;
- Legitimate interest: if we use your personal data to pursue a legitimate interest, and our reason for doing so is more important
than any infringement of your data protection rights that may result;
- Legitimate interest: where it is necessary for us to defend our rights, act in court or file claims against you, us or a third party.
Authorised data processing may be conducted on the grounds