Report under art.13 of EU regulation 2016/679 (GDPR)

This report is given by Sis.Ter Srl, whose legal head office is located in via Emilia 69, 40026 Imola (BO), being owner of handling of personal data. This report is valid even for other companies, and laboratories related to Sis.Ter, listed below:
• UP Urban Planning Srl, whose legal head office is located in via Emilia 67, 40026 Imola (BO)
• GeoSMART Lab, owned by Sis.Ter Srl
• Infocommercio.it, web portal owned by Sis.Ter Srl

Data collected are handling respecting fairness, lawfulness, transparency and protection of your privacy and your rights.
Processing of Data takes place by manual, telematic and IT procedures; safety measures are adopted to avoid unauthorized access, destruction or loss risks or even treatment not allowed or not in accordance with purposes of the collection. The provision of personal data is necessary to ensure the sending of periodic communications and for using web services provided in SaaS. This transfer is a necessary requirement and its absence could imply the impossibility of providing related services.

Categories of Personal Data Processed

Sis.Ter Srl will process these following personal Data:
• Name, surname, Company / Reference body, working position and contact details (telephone, mobile phone, e-mail address), and in case of service delivered, username and password (encrypted), date and time of the last access, total accesses to the service, passwords history (encrypted).
Purpose and legal basis of the processing
The data provided are processed for the following purposes:
1. The provision of the services provided for by the respective types of contract stipulated;
2. Sending of informative and promotional communications related to Sis.Ter’s services and to the main application sectors, subject to consent;
Legal basis of the treatment is the contract for the provision of related services.

Categories of third parties to whom Data can be communicated

For the execution of the contract and for respecting legal obligations, Sis.Ter Srl may communicate personal data to the following categories:
• Subsidiaries;
• Subjects that perform services of technical and organizational nature on behalf of Sis.Ter Srl;
• Studies, consultants and companies about assistance and consultancy relationships;
• Public authorities, where the conditions are met.
These subjects will process Data as Data Controllers of the processing or Data Processors on behalf of Sis.Ter Srl.
An updated list of data processors is available at the Sis.Ter Srl headquarters and can be obtained through a specific email request to the address indicated on website www.sis-ter.it at the “Privacy” section.

Categories of third parties to whom Data can be communicated for commercial purpose

For sending of commercial communications or for profiling, with previouse consent, Sis.Ter Srl may communicate personal data to following categories of subjects:
• Agencies or companies with which agreements are stipulated
• Other subjects who have title

Duration of treatment and storage period

Data will be processed only for the time needed for the purposes listed.
Periods of use and storage of personal data with reference to the different purposes of processing are listed below:
1. Data processed for providing services will be retained by Sis.Ter Srl for the duration of the service contract and for a period of 10 years after the end of the contract, unless there is a need for further conservation, to allow Sis.Ter Srl to defend its rights;
2. Data processed for the fulfillment of legal obligations will be kept by Sis.Ter Srl within limits established by law.
3. Data will be processed for sending informative, institutional and promotional communications until the possible revocation of the consent given for this purpose;
4. Data will be sent to subsidiaries for sending of commercial communications until the possible revocation of the consent given for this purpose;

Access rights, cancellation, limitation and portability

The interested parties are granted rights referred to articles from 15 to 20 of the GDPR. For example, each interested party can:
1. To obtain confirmation that personal data processing is being processed for him or her;
2. If a processing is in progress, obtain access to personal data and information related to the processing and request a copy of personal data;
3. Obtain the correction of inaccurate personal data and the integration of incomplete personal data;
4. To obtain, if conditions foreseen by the art. 17 of the GDPR, the cancellation of personal data concerning him or her;
5. To obtain, in cases foreseen by the art. 18 of the GDPR, the limitation of the treatment;
6. Receive personal data concerning him or her in a structured format, in common use and readable by automatic device and request their transmission to another holder, if technically possible.

Right of opposition

Any interested party has got the right to oppose in every moment to the processing of his/her personal data carried out for the pursuit of a legitimate interest. In the event of opposition, your personal data will be no longer processed, unless there are legitimate reasons to proceed with the processing that prevail over the interests, rights and freedoms of the interested party or for the assessment, exercise or defense of a right in court.

Right of consent’s withdrawal

In the event that consent for processing personal data is required, each interested party may also revoke the consent already given at any time. The consent can be revoked by writing an email to sister@sis-ter.it.
The opposition to the treatment exercised through this method also extends to the sending of commercial communications by post or telephone calls with operator, without prejudice the possibility of exercising this right partially, for example opposing only to the processing carried out by automated systems.

Right of complaint to Privacy Authority

Also, each interested party may arise a complaint with the Privacy Authority in case he / she believes that his / her rights have been violated according to the GDPR, following procedures indicated on the website of the Privacy Authority: www .garanteprivacy.it
The exercise of rights of the interested party is for free.
If the person who is giving data is under the age of 18, such processing is lawful only if such consent is given or authorized by at least one of the holders of parental responsibility for which the identification data are acquired and copy of the identification document.

People in charge of protection of Data (DPO)

The owner of the processing of personal data is:
• Sis.ter Srl, based in Imola, Via Emilia 69, 40026 Imola (BO), by the person of the President and Legal Representative Arch. Alessandro Seravalli.
• The Data Protection Officer (DPO) is Eng. Carlo Pelliconi of Sis.Ter Srl, via Emilia 69, 40026 Imola (BO), e-mail address: c.pelliconi@sis-ter.it