1. Data Controller

The Data Controller of your Personal Data is SIGNORINI COCO & C SRL, responsible for the legitimate and correct use of your Personal Data and that may be contact for any information or request at the following addresses:

Data Controller: SIGNORINI COCO & C SRL

Registered Office: VIA LAZIO 41 – 56035 – FRAZ. CASCIANA TERME LARI – CASCIANA TERME (PI)

Telephone : (+39) 0587 616198

Fax : (+39) 0587 617540

Email : info@signorinicoco.com

Certified Email : signorinicocosrl@pec.it

You may also address the Data Protection Officer to have more information and request information regarding your Data or report disservices or any problem you may have encountered.  SIGNORINI COCO & C. SRL has appointed AKSILIA S.R.L. as the Data Protection Officer with registered office in Via Fontana 22, Milan, which you may contact at the following addresses:

Telephone: 0583 578787

Email: dpo@consilia.srl

Certified Email: dpo.consilia.srl@pec.it

The reference person to be addressed is Turri Michela, that can be reached at the contact addresses above and at the following cell phone no.: +39 347 3674033.

2. Types of Data collected, purposes of the processing and legal basis

The Personal Data processed are collected as provided directly by the User/Data Subject or collected automatically through the website.

Data provided directly by the User/Data Subject:

The Data provided directly by the User/Data Subject are all the Personal Data entered by the same within the website or which are otherwise provided to the Data Controller in any manner. Such Data will be processed in compliance with the privacy guarantees and security measures required by current legislation, including the help of electronic tools directly and/or through third parties, for the purposes set out below together with the legal basis of reference:

	PURPOSES	PROCESSED DATA	LEGAL BASIS
A	Purposes strictly connected to the execution of pre-contractual measures and to respond to specific requests of the User/Data Subject  and with reference to the reserved area for the management of registration and for the provision of related services.	“Looking for more information?” form: Name, Surname, E-mail Reserved Area registration form: Username, Name, Surname, organization data, Email, Telephone, address, data relating to the activity carried out.	Contract which the Data Subject is part of and/or execution of pre-contractual measures adopted at the Data Subject’s request.
B	Exercise of the rights of the Data Controller, for example the right of defense in court.	“Looking for more information?” form: Name, Surname, E-mail Reserved Area registration form: Username, Name, Surname, organization data, Email, Telephone, address, data relating to the activity carried out.	Legitimate interest
C	Purposes of direct and indirect marketing and market surveys, aimed at the dispatch of informative and advertising material.	Newsletter form: Name, Surname, E-mail “Looking for more information?” form: Name, Surname, E-mail Reserved Area registration form: Username, Name, Surname, organization data, Email, Telephone, address, data relating to the activity carried out.	Consent

The User/ Data Subject assumes the responsibility of the Personal Data of third parties obtained, published or shared through this Application and guarantees to have the right to communicate or disseminate them, freeing the Data Controller from any liability to third parties.

Data collected automatically through the website:

The Data collected automatically is the information collected through the WWW.SIGNORINICOCO.COM website (including third-party applications integrated in this Application), including for example: IP addresses or domain names of computers used by the User/Data Subject in connecting with this website, the URI (Uniform Resource Identifier) ​​addresses, the time of the request, the method used to forward the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response from the server (success, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal connotations of the visit (for example the time spent on each page) and the details relating to the itinerary followed within the Application, with particular reference to the sequence of the pages consulted, to the parameters relating to the operating system and the IT environment of the User/Data Subject. Full details on each type of Data collected are provided in the dedicated sections of the cookie policy of this website. 

The Data collected automatically is processed exclusively for the purposes for which they are collected, as described below. 

The Data Controller processes the Data provided by the User/Data Subject to allow the website to function, to allow the display of content from external platforms, statistics, optimization and traffic distribution in addition to the additional purposes described in this document and in the Cookie Policy.

3. Compulsory or optional nature of the provision of Data and consequences of a refusal to provide 

The provision of the data for the purposes referred to in points a) and b) is optional but necessary to be able to respond to specific requests of the Data Subject and to be able to implement pre-contractual measures.

The provision of Data for the purposes referred to in points c) is optional and your Data may be used with your written consent, in case of non-consent your Data can not be processed for the purposes described in this point.

Unless otherwise specified, all Data required for browsing the website is mandatory. If the User/Data Subject refuses to communicate them, it may be impossible for this Application to provide the Service. In cases where this Application indicates certain Data as optional, Users are free to refrain from communicating such Data, without this having any consequence on the availability of the Service or on its operation.

Users who have doubts about which Data are mandatory, are encouraged to contact the Data Controller.

4. Processing methods

The Data Controller uses appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data.

Processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the purposes indicated.

5. Recipients

Your Data may be communicated, in addition to the personnel assigned to the processing, also to the following subjects also appointed, if necessary, Data Processors by the Data Controller:

a) consultants and companies that assist the Company from an IT and infrastructure point of view;

b) other companies, professionals and agents who collaborate with the Company for the performance of the services.

The updated list of Data Processors may always be requested from the Data Controller.

The Data will not be subject to other methods of dissemination.

6. Place of processing

The Data are processed at the Data Controller’s operating offices and in any other place where the parties involved in the processing are located. 

The Data provided directly by the Data Subject and collected automatically may be transferred outside the EEC. In this case SIGNORINI COCO & C. SRL ensures that the processing of your Personal Data by these subjects to whom the Data are transferred will be done in accordance with the European Regulation 679/2016, in compliance with the principles given in Art. 45 of GDPR 2016/679 in relation to the subsistence of adequacy decision by the European Commission, or in the absence of such decisions, in the presence of appropriate safeguards  pursuant to Art. 46 of GDPR 2016/679 or in compliance to Art. 49 paragr. 1 lett b) – transfer necessary for the execution of a contract concluded between the Data Subject and The Data Controller or for the execution of pre-contractual measures.

More informations on the place of processing are indicated in the Cookie Policy, or may be obtained by contacting the Data Controller.

7. Retention period

Data provided directly by the User/Data Subject:

The Personal Data provided directly by the User/Data Subject collected for the purpose of responding to specific requests and/or for the performance of pre-contractual negotiations will be processed and stored for the period of time necessary for the pursuance of the purposes indicated above and in any case not later than 5 years from their collection.

The registration data necessary for the creation and use of the reserved area account will be kept until the interested party’s request for cancellation.

Personal Data collected for purposes related to the legitimate interest of the Data Controller will be retained until such interest is satisfied. In the event of a pending trial, the data will be processed further until they are terminated. Furthermore, the Data Controller may be obliged to keep Personal Data for a longer period in compliance with a legal obligation or by order of an authority.

Personal Data collected for the purposes of direct and indirect marketing and market research, aimed at the dispatch of informative and advertising material, will be processed and kept for the time necessary for the pursuance of the aforesaid objectives and however for no more than 2 years from their collection. 

At the end of the retention period the Personal Data will be deleted. Therefore, at the end of this term the right of access, cancellation, rectification and the right to data portability can no longer be exercised.

Data collected automatically through the website:

The automatically collected data will be retained for the period specified in the Cookie Policy. 

At the end of the retention period the Personal Data will be deleted. Therefore, upon expiration of this term the right of access, cancellation, rectification and the right to the portability of the Data can no longer be exercised.

8.User/Data Subject rights

Pursuant to and of the art. 13 of the GDPR each User/Data Subject has the right to obtain confirmation of the existence or not of his/her Personal Data, even if not yet recorded, and their communication in an intelligible form.
In particular, the Data Subject has the right to obtain from the Data Controller the indication of:

• the origin of Personal Data;
• the purposes and methods of processing;
• the logic applied in the case of processing carried out with the help of electronic/IT tools;
• the identification details of the Data Controller, of the Data Processor and of the controller’s representative;
• the recipients or categories of recipients to whom the data may be communicated or who can be involved in the processing as Controller’s Representative, Data Processor or Authorised Personnel.

Furthermore the Data Subject has the right to obtain from the Data Controller:

• updating, rectification or integration of their data;
• erasure, transformation into anonymous form or object to processing of his/her personal data;
• access to his/her data, i.e. confirmation that his/her personal data is being processed or not;
• the restriction of the processing,
• the portability of the data, i.e. the right to receive in a structured format his/her Personal Data;
• right of complaint to the Supervisory Authority.

Finally, the Data Subject has the right to object, in whole or in part, for legitimate reasons to the processing of Personal Data concerning him/her, even if pertinent to the purpose of the collection. In particular, the Data Subject has the right to object to the processing of Personal Data concerning him/her for the purpose of sending commercial advertising material or for commercial communication purposes. The rights referred to in the preceding points may be exercised by writing to the contacts indicated in point 1 of this policy.