VISITOR'S PRIVACY POLICY
pursuant to Article 13 of EU Regulation 2016/679


DATA CONTROLLER AND CONTACT DETAILS
TEKNE S.R.L.  is the Data Controller of the personal data processed.
The registered office is in in Contrada San Matteo 42, 66030 Poggiofiorito (CH). For all privacy matters, please contact the following email address: privacy@tekne.it ovvero il recapito telefonico tel. +390871938820.
The Company Website has the following address: https://www.tekne.it


DESCRIPTION OF THE PROCESSING AND CATEGORIES OF DATA SUBJECTS
TEKNE S.R.L. informs you that the personal data processed when registering at the reception will be processed in compliance with the mentioned legislation, in order to guarantee the rights, fundamental freedoms, as well as the dignity of individuals, with particular reference to confidentiality and personal identity.
We will collect visitors' personal data using automated or manual tools for registration at the access of the company headquarters. An electronic access pass will be generated with barcode or QR-code at the entry and exit. The visitor can request access to the wi-fi network.


TYPES OF DATA COLLECTED AND ORIGIN OF THE DATA
During the registration, the following personal data may be collected: Name, address or other elements of personal identification. The data is provided by Data Subject.
The following data is collected using wi-fi network: e-mail address, IP address of the visitor device for wi-fi access, names of the devices used, addresses in URI notation of the requested resources, start time and connection end, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server and other parameters relating to the operating system and the environment computer technician of the device.

PURPOSES OF DATA PROCESSING

  1. Internal control services;
  2. access management: visits at the headquarters;
  3. interviews or work sessions at the headquarters;
  4. delivery or collection of goods, packages, correspondence.


LEGAL BASIS
For the purposes provided for in points 1, 2: For the purpose provided for in point 2, 5: the processing is necessary for compliance with a legal obligation to which the Data Controller is subject. (Article 6, paragraph 1, letter c) of the GDPR).
For the purposes provided for in points 3, 4: The processing is necessary for the legitimate interest of the data controller or third parties.


RECIPIENTS AND CATEGORIES OF RECIPIENTS
The personal data processed by the Data Controller will not be disclosed.
The data may be communicated to external parties who collaborate with TEKNE S.R.L., as Data Processors or other parties involved in the company. Data may be communicated to the subjects entitled to access them under the provisions of the law, regulations, Community regulations. In order to comply with legal obligations or to ascertain responsibility in the event of computer crimes, the data may be communicated to, or allocated to, third parties.
The updated list of the Data Processors can always be requested from the Data Controller.
This is without prejudice to the obligation of TEKNE S.R.L. to communicate data to Public Authorities on specific request.


TRANSFER ABROAD
The data are processed at the Data Controller's operational headquarters and in any other place where the parties involved in the processing are located, therefore the Data Controller does not transfer this personal data to third countries or international organisations.
However, the Data Controller reserves the right to use cloud services; in which case, the service providers will be selected from among those who provide adequate guarantees, as provided for in Article 46 of the GDPR 2016/679. The equivalent levels of protection adopted for the processing of the personal data of the Data Controller's employees will be required for the processing of the information and data that may be communicated to these parties. In any case, only the data necessary for the pursuit of the intended purposes will be communicated and the regulatory tools provided will be applied.


DURATION OF PROCESSING
The processing will last no longer than is necessary for the purposes for which the data were collected, and will be kept for a maximum of 12 months from the date on which the data were provided.


METHODS AND NATURE OF PROVISION
The data are collected and recorded in a lawful and correct manner for the purposes indicated above in compliance with the principles of lawfulness and provisions of Article 5, paragraph 1 of the GDPR.
Personal data processing is carried out by means of manual, computerised and telematic tools with logic strictly related to the purposes and, in any case, in such a way as to guarantee security and confidentiality.
The provision of data for the aforementioned purposes is entirely optional. Any refusal by the Data Subject to provide personal data, the lack of consent or its revocation for one or more purposes, will make it impossible to use the services related to them.
The Data Subject may refuse to provide the Data Controller. Any refusal to communicate data will make it impossible to provide all or part of the requested services.

RIGHTS OF THE DATA SUBJECTS
In accordance with, within the limits and under the conditions provided for by the legislation on the protection of personal data regarding the exercise of the rights of Data Subjects (Articles 15 to 22), with regard to the processing operations covered by this Privacy Policy, as Data Subjects, users may exercise certain rights with reference to the data processed by the Data Controller.
In particular, the Data Subject has the right to:

  • Revoke consent at any time
  • Oppose the processing of their data
  • Access to their own Data
  • Verification and rectification
  • Restriction of processing
  • Deletion or removal of their personal data
  • Portability

Furthermore, the Data Subject has the right to lodge a complaint with the competent Data Protection Supervisory Authority or take legal action if he/she considers that the processing operations concerning him/her are in breach of the GDPR, pursuant to Article 77 of the GDPR.
The data subject may revoke consent at any time.
How to exercise your rights
If you wish to request further information on the processing of your personal data or to exercise your rights, you may do so in writing also to privacy@privacy.it using the "Exercise of Personal Data Protection Rights Form" too. Requests are filed free of charge and processed by the Data Controller as soon as possible, in any case within one month.


AUTOMATED DECISIONS
The Data Controller does not, under any circumstances, carry out processing operations consisting of automated decision-making processes with regard to the processing operations indicated.


CHANGES TO THIS PRIVACY POLICY
The Data Controller reserves the right to make changes to this Privacy Policy at any time by informing Users by email and on the Website. The Data Controller will collect the consent of the Data Subject again, if necessary.

Last modified: 09/01/2022