INFORMATION PRIVACY POLICY GENERAL NAVIGATION AND CONTACTS SITE

www.smartofficeassistant.com

   

The information does not apply to other websites that may be consulted via links on the owner's domain websites, and the owner is in no way responsible for the websites of third parties.

 

  • 1. The “DATA CONTROLLER” Baasbox srl - Via di Affogalasino 105 - 00148 - Rome (Italy)
  • 2. Only non-particular personal data will be processed for the purposes expressed in this notice.
    •  

    For further processing, please refer to the specific information that will be presented prior to processing and, where necessary, consents will be acquired.

     

    Please refer to the cookies policy found on the smartofficeassistant.com website

     
  • 3. Purposes of processing, data, conferment, basis for lawful communication to third parties and retention periods, transfers outside the European Economic Area (EEA)
    •  

  • A - Allow navigation on the site

    More details

    The computer systems linked to the operation of this site acquire, in the course of normal operation, certain personal data that are transmitted implicitly in the use of Internet communication protocols. This information is not collected in order to be associated with identified interested parties but is exclusively technical in order to allow navigation.

    For processing related to cookies or similar click HERE for the cookie policy

    If you do not provide the data strictly necessary to enable navigation, you will not be able to browse the site.

    What data we process

    Technical information to enable connection protocols with the website.

    What is the legal basis: legitimate interest of the holder Art. 6 lett f GDPR
    For how long
  • We only process data to allow connection to the site and for the connection time
  • Please note that the data may be processed, according to the principle of minimisation (i.e. using only the data strictly necessary for the specific case), for the defence of the holder (in court or before authorities) or for possible litigation until such time as the case is concluded.

  • B - Reception and management of contact requests received via contact area, e-mail or telephone

    More details

    Personal data are processed in connection with the request for information and for the purpose of handling it.

    Please note that only common personal data must be provided.

    If you do not provide your data: no follow-up will be possible.

    What data we process

    first name last name subject of the request possible reference company and contact details and content provided by the interested party.

    What is the legal basis: pre-contractual or contractual activities Art. 6 letter B GDPR
    For how long
  • Time strictly necessary to process the request. Data will be kept for the handling of the request as a rule for a maximum of 6 months
  • Please note that the data may be processed, according to the principle of minimisation (i.e. using only the data strictly necessary for the specific case), for the defence of the holder (in court or before authorities) or for possible litigation until such time as the case is concluded.

    • C – Management of data subjects' rights

    More details

    The purpose is related to receiving, analysing and handling requests to exercise the rights of data subjects, including interacting with the data subject and providing appropriate answers and clarifications.

    The interested party will receive a reply as soon as possible and, in any case, within the legal deadlines. The person concerned will receive a reply, with appropriate reasons, even if the request cannot be granted.

    If you do not provide data: it will not be possible to handle requests.

    What data we process

    Depending on the type of request, we process all data necessary to ensure the proper exercise of the rights of those concerned.

    With what legal prerequisite: guaranteeing the exercise of rights is a precise legal obligation Art. 6 lett. C Gdpr
    For how long
  • The data is processed for as long as is necessary to process and substantiate the request. The storage period is normally 5 years,
  • Please note that the data may be processed, according to the principle of minimisation (i.e. using only the data strictly necessary for the specific case), for the defence of the holder (in court or before authorities) or for possible litigation until the conclusion thereof.
    •  
  • 4. Communication to third parties

    The data will not be disseminated. They will be processed with providers of technological, IT and consulting services who, as a rule, act as data processors. These may also include group companies that provide services to the data controller. It is understood that the data will be processed in compliance with the principle of minimisation, giving preference to anonymous or anonymised data where possible. In particular, the categories of subjects may be as follows:

  • Individuals, including Group companies, who perform/perform tasks/services of a technical and organisational nature on behalf of the data controller, including the organisational and technological support necessary for the provision of the service or the management of the activity being processed
  • firms and companies in the context of assistance and consultancy relations;
  • data may also be disclosed to autonomous third-party data controllers with particular reference to public authorities, law enforcement agencies, when the legal requirements are met and in the exercise of their functions.

    •  
  • 5. Transfers outside the European Economic Area (EEA)

    Data are processed in the European Union. Should the transfer be necessary, the safeguards provided for by the GDPR will be used: adequacy decisions of the EU commission or standard contractual clauses as promoted by the EU commission itself to regulate transfer relationships outside the European economic area and with possible supplementary measures as also provided for by the EDPB guidance.

    •  
  • 6. Rights of the data subject Articles 15, 16, 17, 18,19 20, 21 and 77 of the GDPR Rights of the data subject Articles 15, 16, 17, 18,19 20, 21 and 77 of the GDPR.

    We inform you that you have the right to know the recipients of the possible communication, to access your personal data, to rectification, to cancellation and possibly to oblivion, to restriction of processing, to data portability and to object at any time to the processing of personal data concerning you.

     

    We also inform you that if the basis of lawfulness is consent, you have the right to revoke it at any time, without affecting the lawfulness of the processing based on the consent given before revocation (Art. 7(3) GDPR).

     

    Pursuant to Article 77 of the Regulation, you have the right to lodge a complaint with a supervisory authority, namely in the Member State where you normally reside or work or where the alleged infringement took place, which in Italy corresponds to the Italian Data Protection Authority, whose contact details can be found at www.garanteprivacy.it, or you can take legal action to protect your rights. You may exercise these rights by simply contacting the Data Controller through the contacts indicated in this Policy or present on the company websites.

     

    It is understood that the exercise of rights will be timely evaluated and guaranteed, where possible,as in certain cases, requests must be weighed in conjunction with other regulatory impositions that may limit the exercise.

     

    It is understood that even in cases where requests to exercise rights cannot be followed up, the person concerned will be promptly informed of the circumstance and the reasons thereof.

    •    

    This information sheet was drawn up on 18/07/23