Website Privacy Policy

This page describes how the personal data of every user (registered or unregistered) is managed when collected while visiting this Website, www.generalsistem.it, owned by General Sistem Srl.

This document contains information provided to users in compliance with Regulation (EU) 2016/679 (GDPR) and refers exclusively to the website named above, not to any other websites that may be accessed through links contained herein. The term “Personal Data” refers to any information that allows the Company to identify the user (or a third party whose data the user provides), directly or indirectly, including any information connected to the purchase of goods or services, or that the user chooses to communicate to the Company or share with it, or with third parties, while using the Website.

1. Data Controller

The “Data Controller” is General Sistem Srl, with registered office at Via Pietro Marigo 134, 35040 Granze (PD), Italy. The Data Controller can be contacted at the email address amministrazione@generalsistem.it, or at the certified email (PEC) address general.sistemsrl@legalmail.it.

2. Types of Data Processed and Purposes of Processing

Browsing data. The Company processes certain personal data of users interacting with the IT systems and software procedures used to operate the site. In particular, browsing data that IT systems automatically acquire during use of the site is processed — for example, IP address, domain names, and browser types — which is not accompanied by any additional personal information and is used to derive anonymous statistical information on site usage, to monitor how the site is used, and to establish liability in the event of hypothetical computer crimes.

Data voluntarily provided by the user. Sending email to the addresses shown on this site results in acquisition of the sender’s email address, as well as any other personal data included in the message. Pages of the site dedicated to on-request services will include their own specific summary notices.

Personal data requested via forms will be processed:

a) Without your consent, for the following purposes:

  • fulfilling pre-contractual, contractual, and tax obligations arising from existing relationships;
  • fulfilling obligations under tax and accounting regulations;
  • fulfilling obligations required by law, by a regulation, by EU legislation, or by an order of a public authority;
  • preventing or detecting fraudulent activity or abuse harmful to the website;
  • exercising the Data Controller’s rights, such as defense in legal proceedings.

b) Only with your prior consent, for the following purposes:

  • sending commercial communications and/or promotional material about products or services offered by the Data Controller;
  • information relating to payment instruments;
  • information on habits and profiles, such as data relating to purchases, information on activities and initiatives related to customer relationship management, purchasing habits and preferences, and other information (occupation, education, hobbies, and lifestyle) that applicable law permits to be collected.

Your data will also be processed in order to fulfill obligations under tax and accounting regulations and to comply with any obligations incumbent on the Data Controller under applicable law.

3. Legal Basis

Users’ personal data is processed if:

  • the data subject has given consent for one or more purposes, and only in relation to the purpose to which that consent refers;
  • processing is necessary for the performance of a contract entered into with the data subject.

4. Recipients

Personal data collected through the site may be processed by other parties involved, in various capacities, in the Company’s organization, in particular:

  • persons who have access to and process personal data under the authority of the Controller or the Processor (authorized personnel);
  • natural or legal persons who process personal data on behalf of the Data Controller (Data Processors).

The user may at any time request from the Data Controller an updated list of Data Processors by using the Controller’s email address.

Except as indicated above, the user’s personal data will not be disclosed to third parties unless:

  • the user has given express consent to such disclosure;
  • disclosure is necessary to provide the product or service requested by the user;
  • disclosure is required by the Judicial Authority or by Public Security Authorities.

5. Data Processing Methods

Personal data is/is not collected through fully automated procedures; the consent of the user entering their data into the forms provided on the site is always required.

6. Cookies

This site uses certain cookies. The dedicated cookie section explains what these are and, where applicable, how to disable them.

7. Data Retention

Personal data will be processed and retained for the time necessary to achieve the purposes for which it was collected. In particular:

  • for purposes relating to contract management: data will be retained for the period necessary to carry out the engagement received and, subsequently, for as long as the Controller is subject to retention obligations for tax purposes or other purposes required by law or regulation. In any case, data will be retained for the period necessary for the statute of limitations on any liability claims (10 years);
  • for marketing and profiling purposes: 24 months from collection, without prejudice to the data subject’s right to modify and/or withdraw consent at any time;
  • for the newsletter: 24 months from collection, without prejudice to the data subject’s right to modify and/or withdraw consent at any time.

8. Rights of the Data Subject

The data subject has the right to ask the Data Controller whether personal data concerning them is being processed and, if so, to obtain access to the following information:

  • the purposes of the processing;
  • the categories of personal data processed;
  • the recipients of the personal data;
  • the envisaged retention period, where possible;
  • the existence of the right to request rectification or erasure of the data, or restriction of processing;
  • the right to receive their personal data in a structured, commonly used, machine-readable format, and to request its transmission to another controller, where technically feasible;
  • the right to lodge a complaint with a supervisory authority (the Italian Data Protection Authority – Garante per la protezione dei dati personali – www.garanteprivacy.it);
  • where the data is not collected directly from the data subject, all available information on its source;
  • where personal data is transferred to a third country or an international organization, the right to be informed of the existence of appropriate safeguards for the transfer.

9. How to Exercise Your Rights

You may exercise your rights at any time by sending: