Information about use of Data

Pursuant section 13 and 14 of regulation (EU) 2016/679

Dear User,

in compliance with sections 13, 14 of Regulation (EU) 2016/679 (so called GDPR), Advanced Group S.r.l. informs you about the processing of your personal data in the context of your visit to the website.

Who will process your personal data?
Your personal data will be processed by Advanced Group S.r.l. (hereinafter, also “Advanced Group”), with registered office in 20043 Vanzago (MI), Via della Corte Bruciata n°21, Italy, which will act in quality of “Data Controller”; you will be able to contact the Data Controller at the following email address: info@sc-project.com.

Personal data can be processed in the name and on behalf of Advanced Group also by others subjects who will be duly appointed “Data Processors”, belonging to the following categories: IT services providers, payment-platforms providers, carriers, social media, marketing-services providers, consultants.

Data Controller appointed a Data Protection Officer (so called, DPO), who can be contacted at the following email address: dpo@sc-project.com.

How and why we will process your personal data?
Your personal data - with reference to the purpose below - will be processed as following:

REF.	PURPOSE	PERSONAL DATA	LEGAL BASE	PERIOD OF STORAGE
H1	Evaluation of job applications	Anagraphics Contacts Fiscals Health (if indicated on the CV)	- Execution of a contract - Section 111-bis Legislative Decree 196/2003	1 year from the receiving of the Curriculum Vitae
WE1	Online sale as a guest user (without registration on the website)	Anagraphics Contacts	- Execution of a contract - Legal obligation of the Data Controller	10 years from the termination of the contract
WE2	Registration on the website with the purpose to facilitate a future purchase or registration at the same time of the purchase.	Anagraphics Contacts	- Execution of a contract - Legal obligation of the Data Controller (in case of registration at the same time of the purchase)	5 years (in case the customer does not make an order) 10 years from the termination of the contract (in case the customer makes at least one order)
WE3	Responding to contact requests (pre-sale phase)	Anagraphics Contacts	Execution of a contract	10 years from the termination of the contract
WE4	Responding to contact requests from customers from any channel for after-sales issues (returns, withdrawal contract, non-conforming products)	Anagraphics Contacts	Execution of a contract	10 years from the termination of the contract
WE5	Marketing comunications	Anagraphics Contacts	Consent	Up to withdrawal of the consent
WE6	Social media marketing (interaction with the user on the social network page of Advanced Group)	Anagraphics Contacts	Consent	Up to withdrawal of the consent
WE7.1	Make the navigation easier (cookies) - see Cookies policy for more details	Technical Cookies	Legitimate interest	Up to the end of the session
WE7.2	User experience and services improvement through the use of marketing Cookies - for more details see the Cookies policy	Marketing cookies	Consent	Up to withdrawal of the consent
WE8	Marketing communications (so called “soft-spam”) aimed to communicate to the users information related to a product similar to the one that you purchased.	Anagraphics Contacts	Section 130, p. 4 Italian Privacy Code	Up to your objection
IT1	Maintenance, operation and security of computer systems	All personal data above	- Legitimate interest - Legal obligation of the Data Controller	Until the end of the intervention

Furthermore, please take in due consideration the following information:

DATA PROVISION	- When Advanced Group requests your consent, the provision of your personal data is not mandatory. Therefore, if you fail to provide your data, the only consequence will be that Advanced Group will not be able to process your data for specific purposes. - When Advanced Group does not ask for your consent, the provision of your personal data is mandatory and necessary to fulfil contractual or statutory provisions and to correctly perform company activities. Hence, in lack of the data provision, it will not be possible to fulfil the relevant obligations and correctly perform companies’ activities. - If the recipient is a legal entity, Advanced Group S.r.l. does not need to process the data of their representatives or team-members; however, as this circumstance may occur (e.g. in case the characteristics of the email address inserted during the registration is composed by name.surname) Advanced Group will process them according to this information notice. For this reason, Advanced Group S.r.l. invites the user to share this information notice with those representatives / team-members which will deliver their personal data to Advanced Group for the aforementioned reasons.
CATEGORIES OF RECIPIENTS	Data processing should be perfomed by further Data Controller (e.g. Income Revenue Authority).
AUTOMATED DECISION- MAKING PROCESS	No automated decision-making processes.
TRANSFERS EXTRA EU OR TO INTERNATIONAL ORGANIZATIONS	Subject to our prior verification on the subsistence of adequate guarantee, some of the Data Processors shall transfer your personal data to extra EU countries.
LEGITIMATE INTEREST OF DATA CONTROLLER	The legitimate interest - pertaining purpose under point WE7 - is the facilitation of the web-experience of the user on Advanced Group’s website.

Which are your rights?
You can exercise the following rights by sending a specific request to the Data Controller at the following email address: info@sc-project.com

RIGHT	DESCRIPTION
ACCESS (see Article 15 GDPR)	Right to have confirmation of the existence or otherwise of the processing and to access the data and information relating to: purposes of the processing, categories of data processed, possible recipients, possible transfers and appropriate safeguards, storage period, rights of the data subject, possible existence of an automated decision-making process.The controller provides a copy of the personal data. If the request is made by electronic means, and unless otherwise specified, the information is provided in a commonly used electronic format.
RECTIFICATION (see Article 16 GDPR)	The data subject has the right to obtain the rectification of wrong personal data and the integration of incomplete personal data.
DELETE (see Article 17 GDPR)	The data subject shall have the right to obtain from the Data Controller the erasure of his personal data in the following cases: the personal data are no longer necessary in relation to the purpose for which they were collected or otherwise processed, withdrawal of consent (and there is no other legal bases for the processing), he opposes the processing for the reasons related to his particular situation (and the are no overriding legitimate grounds for the processing), he opposes the processing for direct marketing purposes, the personal data have been unlawfully processed, the personal data have to be erased for compliance with legal obligation, the data have been collected in relation to the offer of information society services. The right shall not apply if the processing is necessary for exercising the right of freedom of expression and information, for compliance with legal obligation, for the performance of a task carried out in the public interest or in the exercise of official authority, for reasons of public interest in the area of public health, for archiving purpose in the public interest, scientific and historical research purpose or statistical purpose, for the establishment, exercise or defence of legal claim.
RESTRICTION OF PROCESSING (see Article 18 GDPR)	The data subject shall have the right to obtain from the Data Controller the restriction of processing if: the accuracy of the personal data is contested by the the data subject (for a period enabling the Controller to verify the accuracy), the processing is unlawful (but the data subject opposes the erasure of the personal data and requests the restriction of their use rather than erasure), the personal data are required by the data subject for the establishment, exercise or defence of legal claim e, although the Data Controller no longer needs it, he exercised the right to object (while the Data Controller verifies the existence of legitimate and prevailing reasons).
OBJECTION (see Article 21 GDPR)	The data subject shall have the right of object to processing of personal data if (i) it is based on public interest or legitimate interest and (ii) if personal data are processed for direct marketing purpose, including profiling.
DATA PORTABILITY (see Article 20 GDPR)	The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a data Controller, in a structured, commonly used and machine- readable format (applicable to automated decision- making processes).
WITHDRAWAL (see Article 13, d.2, d)	The data subject has the right to withdraw the consent any time without affect the lawfulness of processing based on the consent before withdrawal.
COMPLAINT (see Article 13, d.2, d)	The data subject has the right to lodge a complaint with a supervisory authority for any alleged breach of the GDPR.