Privacy Policyai sensi dell’art. 13 del Regolamento (UE) n. 679/2016

Dear user,
we inform you that the Regulation no. 2016/679/EU and the Legislative Decree no. 196/2003, and related amendments, and (hereafter the “applicable legislation”) regulate the protection of the fundamental rights and freedoms of natural persons (hereafter “data subject”), concerning the processing of personal data.
Cefla Tech S.r.l., acknowledging the importance of the protection of personal data processed and considering their protection as one of the main target of its business, provides this information (hereinafter “Notice”), in order to describe the processing methods of personal data collected through its website (hereinafter referred to as the “Website”).

Please note that, where necessary, specific notes on data processing are reported on the pages relating to the individual services offered with the aims of defining the purpose and methods of data processing of each service.

Name: Cefla Tech S.r.l., in the person of the legal representative pro tempore (hereinafter ” Controller”)
Address: Via Selice Provinciale, 23/A, 40026, Imola (BO), Italy
Contact details: e-mail: info@ceflatech.it

In the Website, may be collected and processed the following data:
I. common personal data provided voluntary by the data subject (by way of example but not limited to: name, surname, address, telephone number, e-mail, contact details) to request and/or to receive a specific service;
II. navigation data (by way of example but not limited to: IP address, location – country -, information on the pages visited, access and navigation time on each page, clickstream analysis);
III. cookie (i.e. small text files that can be sent and stored on the user’s computer by the websites visited and to be then re-transmitted during subsequent navigation and any use of the same websites). For further details, please refer to the Cookie Policy present on the Website.

Personal data collected may be processed for the following purposes:

a) Purpose of service
executing a specific request of the data subject and / or providing a requested service;
and/or fulfilling any legal or regulatory obligations;
and/or allow browsing and use of the services offered through the Website.

b) Statistical purpose
doing statistical research/analysis on aggregated or anonymous data, aimed at measuring the functioning of the Website, measuring traffic and evaluating usability and interest.

c) Marketing purpose
sending promotional and/or commercial mailing lists/ newsletters relating to Cefla Tech S.r.l. services and activities;
and/or analyzing behaviours, attitudes of the data subject, in order to improve services provided by Cefla Tech S.r.l.

The processing put in place for the purposes of service is necessary for the performance of a contract or in order to take steps at the request of the data subject prior to entering into a contract, as well as, where applicable, for compliance with a legal obligation to which the Controller is subject or for the purposes of the legitimate interest of the same Controller and, therefore data subject specific consent is not required.
The processing put in place for statistical purposes is based on aggregate and / or anonymous data and data subject specific consent is not required.
The processing put in place for marketing purposes is carried out only with the specific consent of the data subject.

Personal data may be communicated and processed:
– to/by Cefla Tech S.r.l.’s employees and / or collaborators belonging to the offices involved for the purposes set out above as authorized / designated persons, as well as to/by the parent company Cefla S.c., as Data Processor, related to the services performed;
– to/by agents, distributors and the entire commercial network of Cefla Tech S.r.l. or to the Cefla Tech S.r.l. parent company, associates companies or, in any case, companies of the same corporate group to which Cefla Tech S.r.l. belongs, in Italy, in the European Economic Area (EEA);
– to/by Cefla Tech S.r.l. suppliers, such as the suppliers of technology services, email marketing service, consultants and/or freelancers who provide assistance, consultancy or collaboration in accounting, administrative, legal, tax and financial matters and who have undertaking an obligation of security and confidentiality with Cefla Tech S.r.l. and, where necessary, are appointed data processor, according to art. 28 of Regulation no. 2016/679/EU
– to/by judicial authorities and/or public administration in the exercise of their institutional functions.
The Data will not be disseminated.

Exclusively for purposes related to the requested services and occasionally, some data may be transferred outside the EEA territory, also by including them in databases managed by third-party companies, operating on behalf of Cefla Tech S.r.l. . In the event that it is necessary to transfer data to areas outside the EEA, this will be done in compliance with the standard contractual clauses adopted by Cefla Tech S.r.l., suitable to guarantee an adequate level of data protection and in compliance with the security and protection measures required by applicable legislation on the protection of personal data.

The personal data will be processed according to the principles of lawfulness, fairness and transparency, using manual, computerized and telematic tools with logic strictly related to the purposes of the processing and, in any case, in order to guarantee the security and confidentiality of the data.
With reference to the service purpose, personal data will be kept for the period strictly necessary for the related contractual fulfilment. In any case, Cefla Tech S.r.l. may continue to store the data in compliance whit the terms provided by the law or in case of judicial litigation.
With reference to the marketing purpose and without the revocation of the consent by the data subject, the personal data will be kept for a maximum period of 24 months starting from the date of collection of the same and, in any case, within the limits term permitted by current legislation.
At the end of the data processing period, the data will be deleted, or permanently anonymised.

At any time a data subject may exercise the following rights:

• to obtain access to personal data;
• to obtain the rectification of inaccurate personal data;
• to obtain the erasure of personal data(‘right to be forgotten’);
• to obtain the restriction of the processing of personal data;
• to object to the processing;
• to obtain the data portability;
• not to be subject to a decision based solely on automated processing, including profiling;
• withdraw the consent at any time without prejudice to the lawfulness of the treatment based on the consent previously given;
• to lodge a complaint with the competent Supervisory authority (in Italy, il “Garante per la protezione dei dati personali”), in the case of a personal data breach.

The data subject may send a registered letter to Cefla Tech S.r.l., Via Selice Provinciale, 23/A, 40026, Imola (BO), Italy or write an e-mail to: privacy@cefla.it to exercise the above rights, report problems or request clarification on the processing of personal data.

Links to third-party websites are provided only for user convenience. The interactions and consequent processing of personal data carried out by and on external platforms are to be considered regulated and subject exclusively to the privacy policies established by the respective data controllers, i.e. the companies that manage the related websites and social networks.

This Notice is updated to 12 February 2024. In case of future amendments, Cefla Tech S.r.l. will give appropriate communication by publishing the updated version of the Notice on this Website.