PRIVACY NOTICE
pursuant to Article 13 of Regulation (EU) 2016/679
1. Data Controller
The Data Controller is Everset S.r.l., with its registered office in Modena, Via Pietro Giardini n. 476/N, certified email (PEC): everset@pec.it, email: privacy@everset.it.
2. Data Protection Officer (DPO)
Everset has appointed a Data Protection Officer (DPO), who can be contacted by email at: dpo@everset.it.
3. Types of data processed
The following personal data may be collected through this website:
- first name and surname
- company (registered company name)
- telephone number
- any further data voluntarily provided by the user in the message
- data relating to business needs
- browsing data (e.g. IP address, date and time of access)
4. Purposes of processing and legal basis
a) Handling contact requests
The data are used to handle requests submitted by the user through the website and to respond to them.
Legal basis: taking steps prior to entering into a contract at the data subject’s request (Article 6(1)(b) GDPR).
b) Assessing and handling the request
Everset may use the data to assess the suitability of the request and contact the user again in order to respond, explore the needs expressed in greater detail and assess the possible start of a collaboration.
Legal basis: taking steps prior to entering into a contract (Article 6(1)(b) GDPR).
c) Administrative purposes and protection of rights
The data may be retained for administrative and organisational needs and to protect the Controller’s rights.
Legal basis: the Controller’s legitimate interest (Article 6(1)(f) GDPR).
5. Disclosure of data to third parties
Personal data are not disclosed to third parties for commercial purposes.
They may be disclosed only to parties that support Everset in providing services (e.g. IT providers), duly appointed as data processors where necessary.
6. Categories of recipients
The data may be processed by technical and organisational service providers that support Everset in managing the website and requests, duly authorised or appointed as data processors.
7. Methods of processing
Data are processed using IT and organisational tools suitable for ensuring the security, integrity and confidentiality of personal data.
8. Retention period
Personal data are retained for the time necessary to handle the request and, subsequently, for no longer than 24 months from the date of the last interaction, subject to the exercise of the right to object or statutory obligations.
9. Registro Pubblico delle Opposizioni
The user is informed of the possibility of registering their telephone numbers with the Registro Pubblico delle Opposizioni (Public Register of Objections). Registration does not affect the lawfulness of any consent subsequently given.
10. Rights of the data subject
The data subject may exercise the rights provided for in Articles 15 et seq. of the GDPR, including:
- access to data
- rectification
- erasure
- restriction of processing
- objection
- data portability
The data subject may object at any time to processing based on legitimate interest (administrative purposes and protection of rights) by writing to privacy@everset.it
11. Complaint to the Authority
The data subject has the right to lodge a complaint with the Garante per la protezione dei dati personali (Italian Data Protection Authority), pursuant to Article 77 GDPR.