Privacy Notice pursuant to Articles 13-14 of Regulation (EU) 2016/679
Data Subjects: Users browsing the portal spark.stem.it.
STEM S.R.L., in its capacity as Data Controller of your personal data, pursuant to and for the purposes of Regulation (EU) 2016/679 (hereinafter referred to as the “GDPR”), hereby informs you that the aforementioned regulation provides for the protection of individuals with regard to the processing of personal data, and that such processing will be based on the principles of fairness, lawfulness, transparency, and the protection of your privacy and rights.
Your personal data will be processed in accordance with the legislative provisions of the GDPR and the confidentiality obligations therein.
With your prior consent, your personal data may also be used for the following purposes:
- Management of non-technical marketing cookies on the portal (marketing cookies are used to track visitors across websites. The aim is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third-party advertisers);
- Management of non-technical statistical cookies on the portal (statistical cookies help website owners understand how visitors interact with websites by collecting and reporting information anonymously).
Providing your data for the purposes listed above is optional, and any refusal to consent does not affect the continuation of the relationship or the adequacy of the processing.
Processing methods. Your personal data may be processed in the following ways:
- by electronic computers using software systems managed by third parties;
- by electronic computers using software systems managed or programmed directly.
All processing shall be carried out in accordance with Articles 6 and 32 of the GDPR and through the adoption of appropriate security measures.
Your data will be processed solely by personnel expressly authorized by the Data Controller, specifically by the following categories:
- personnel managing the corporate web portal;
- the Marketing department.
Communication: Your data may be disclosed to external parties for the proper management of the relationship, specifically to the following categories of Recipients, including all Data Processors duly appointed:
- web service providers for the management and maintenance of the platform.
Third-party disclosures: Your data may be disclosed to external parties for the proper management of the relationship, in particular to the following third-party Recipients:
Disclosure: Your personal data will not be disseminated in any way.
Data transfers: Your personal data may be transferred, strictly for the purposes described above, to the following countries: EU member states.
Data retention period. In accordance with the principles of lawfulness, purpose limitation, and data minimization pursuant to Article 5 of the GDPR, we inform you that the retention period for your personal data is as follows:
- 730 days for Google Analytics;
- 90 days for Google.
Cookie management: If you have concerns or doubts regarding the use of cookies, you may always take steps to prevent their installation and reading, for example by changing the privacy settings within your browser to block certain types.
As each browser – and often different versions of the same browser – differs significantly, you may prefer to act autonomously by adjusting your browser preferences. Detailed information on the necessary procedures can be found in your browser’s help section. For an overview of how to manage cookies in the most commonly used browsers, you may visit www.cookiepedia.co.uk.
Advertising companies also allow users to opt out of receiving targeted ads, if desired. This does not prevent cookie installation, but it does stop the use and collection of certain data by those companies.
For more information and opt-out options, visit www.youronlinechoices.eu.
Data Controller: The Data Controller, pursuant to the law, is STEM S.R.L. (STRADA GHIAIE 12/D, 43014 MEDESANO (PR), VAT No. 01538380344).
You have the right to obtain from the Data Controller the erasure (right to be forgotten), restriction, updating, rectification, portability, objection to the processing of your personal data, and more generally to exercise all rights set out in Articles 15 to 22 of the GDPR.
Regulation (EU) 2016/679: Articles 15 to 22 – Rights of the Data Subject
- The data subject has the right to obtain confirmation as to whether or not personal data concerning him or her exists, even if not yet recorded, and to receive communication of such data in an intelligible form, as well as the right to lodge a complaint with the Supervisory Authority.
- The data subject has the right to obtain information concerning: a. the origin of the personal data;
b. the purposes and methods of the processing;
c. the logic applied in the event of processing carried out with the aid of electronic tools;
d. the identification details of the Data Controller, the Data Processors, and the designated representative pursuant to Article 5(2);
e. the entities or categories of entities to whom the personal data may be disclosed or who may become aware of it in their capacity as designated representatives in the State, Data Processors, or persons in charge of the processing. - The data subject has the right to obtain: a. the updating, rectification, or, where interested, integration of the data;
b. the erasure, transformation into anonymous form, or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which it was collected or subsequently processed;
c. certification that the operations referred to in points (a) and (b) have been notified, also regarding their contents, to the entities to whom the data were disclosed or disseminated, unless this proves impossible or involves a disproportionate effort with respect to the right being protected;
d. data portability. - The data subject has the right to object, in whole or in part: a. for legitimate reasons, to the processing of personal data concerning him or her, even if relevant to the purpose of the collection;
b. to the processing of personal data concerning him or her for the purpose of sending advertising materials, direct selling, carrying out market research, or commercial communication.
Data Subject’s Consent Form
Date: ………………………………………..
Place: ………………………………………………………………………………
Name and Surname: ……………………………………………………………………………………………………………….
Do you consent to the processing of your personal data for the optional purposes listed below?
□ YES □ NO – Processing of non-technical marketing cookies on the portal (marketing cookies are used to track visitors across websites. The aim is to display ads that are relevant and engaging for the individual user and therefore more valuable for publishers and third-party advertisers).
□ YES □ NO – Processing of non-technical statistical cookies on the portal (statistical cookies help website owners understand how visitors interact with websites by collecting and reporting information anonymously).