In accordance with Regulation (EU) 2016/679 (“GDPR”)
Website: www.skytool.it
1. Data Controller
The Data Controller for personal data collected via this website is:
Infotech S.r.l.
Galleria Spagna 28
35127 Padua (PD) – Italy
VAT No. / Tax Code IT03262490281
Tel. +39 049 8703958
Email: info@infotechsrl.it
For any enquiries regarding the processing of personal data or the exercise of rights under the GDPR, the data subject may contact the Data Controller at the contact details provided above, specifying “GDPR Request” in the subject line.
2. Scope of the policy
This policy applies exclusively to the website www.skytool.it and describes how the personal data of users who visit the site or interact with the services and forms on the site is processed.
This policy does not extend to other websites that the user may visit via external links on the site.
3. Types of data processed
The Data Controller may process the following categories of personal data:
a) Browsing data
The IT systems and software procedures used to operate the website acquire, during their normal operation, certain data whose transmission is implicit in the use of Internet protocols.
These may include, by way of example: IP addresses or domain names of the devices used, URI identifiers of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, a numerical code indicating the status of the server’s response, and other parameters relating to the user’s operating system and IT environment.
b) Data provided voluntarily by the user
The optional, explicit and voluntary sending of messages via the contact addresses published on the website or via the information request forms entails the processing of the data entered by the user, such as, for example: name, email address, company name, telephone number, subject of the enquiry and content of the message.
c) Data collected via cookies and similar tools
The website uses technical cookies and, subject to the user’s choice where required, any analytics cookies and/or other tracking tools, as described in more detail in the Cookie Policy section.
4. Purposes of processing and legal bases
Personal data is processed for the following purposes:
a) To enable navigation and the proper technical functioning of the website
Legal basis: Article 6(1)(f) of the GDPR, the Data Controller’s legitimate interest in ensuring the functionality, security and stability of the website.
b) To manage requests for information, commercial enquiries, demonstrations or communications sent by the user
Legal basis: Article 6(1)(b) of the GDPR, the performance of pre-contractual measures taken at the data subject’s request.
c) To ensure the security of the website, prevent abuse, unauthorised access, fraudulent activities or unlawful use
Legal basis: Article 6(1)(f) of the GDPR, the Data Controller’s legitimate interest in protecting its rights and systems.
d) To collect aggregated statistics on the use of the site and improve its content, performance and usability
Legal basis:
-
Article 6(1)(f) of the GDPR, if the analytics tools are configured in such a way that they are comparable to technical cookies under applicable legislation;
or -
Article 6(1)(a) of the GDPR, user consent, where required.
The Data Controller does not carry out processing based solely on automated decision-making processes, nor does it engage in automated profiling with legal or similarly significant effects for the data subject.
5. Nature of data provision
The provision of the data requested in the contact forms is optional, but necessary in order to respond to the user’s requests.
Failure to provide such data may make it impossible to respond to the requests submitted.
6. Methods of processing
Data processing is carried out using IT and telecommunications tools, as well as, where necessary, by manual means, in accordance with the principles of lawfulness, fairness, transparency, data minimisation and integrity set out in the GDPR.
The Data Controller implements appropriate technical and organisational measures to protect personal data from destruction, loss, alteration, unauthorised disclosure or unauthorised access.
7. Recipients of the data
Personal data may be processed, on behalf of the Data Controller, by parties providing services essential to the operation of the website and the provision of related services, such as, by way of example:
-
hosting and IT infrastructure providers;
-
providers of technical maintenance and website support;
-
entities responsible for the management of IT systems and security;
-
any providers of the cookie consent management platform;
-
any analytics service providers, if acting as data processors.
These entities act, where necessary, as Data Processors pursuant to Article 28 of the GDPR or as independent data controllers, depending on their respective roles.
The data is not disclosed.
8. Transfer of data to third countries
Personal data is processed primarily within the European Economic Area.
Should certain services, for technical or organisational reasons, involve the transfer of data to third countries, such transfer will take place in accordance with the conditions set out in Articles 44 et seq. of the GDPR, adopting the appropriate safeguards applicable.
9. Retention period
Personal data is retained for a period not exceeding that necessary to achieve the purposes for which it is collected.
In particular:
-
data sent via contact forms or email is retained for the time necessary to process the request and, subsequently, for the period required to manage any related developments;
-
Technical data and system logs are retained for the time strictly necessary for security, monitoring and maintenance purposes, within the limits permitted by applicable legislation;
-
Data collected via cookies is retained for the duration specified in the relevant section of this policy or in the consent management system.
10. Rights of the data subject
The data subject may, in the cases provided for, exercise the rights referred to in Articles 15–22 of the GDPR, including:
-
the right of access to personal data;
-
the right to rectification;
-
right to erasure;
-
right to restriction of processing;
-
right to object;
-
right to data portability, where applicable;
-
the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent prior to withdrawal.
To exercise their rights, the data subject may contact the Data Controller using the contact details provided in this policy.
The data subject also has the right to lodge a complaint with the Data Protection Authority, in accordance with the procedures laid down by current legislation.
