PRIVACY POLICY AND INFORMATION ART. 13 GDPR 679/2016
This Privacy Policy is intended to illustrate the methods and purposes of the processing of personal data carried out by the company Sagitta Spa as owner of the treatment of the site sagitta.it and the services connected to it.

Sagitta Spa respects the privacy of every user who visits the Site and uses the Services.

The Policy does not apply to third party sites accessible via links on the owner’s site.

The processing of Users’ personal data takes place in full compliance with Regulation (EU) 2016/679.

Identity and contact details of the Data Controller
The Data Controller is Sagitta Spa with headquarters in Corso Novara, 163 – 27029 Vigevano (PV) – ITALY – VAT 00171870181 email: info@sagitta.it.

Categories of personal data processed
The Data Controller may process the following categories of Users’ personal data:

data communicated by the user: identification and contact data (mainly name, surname, telephone and e-mail contacts) entered voluntarily by the user in case of filling in the data request form; the optional, explicit and voluntary sending of messages to the owner’s contact addresses, as well as the compilation and forwarding of any forms on the site, entail the acquisition of the sender’s contact data, necessary to reply, as well as all personal data included in communications; if necessary, specific information is published on the web pages prepared for the provision of different services and different purposes.
navigation data: the computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes the IP addresses or domain names of the computers and terminals used by users, the addresses in URI / URL (Uniform Resource Identifier / Locator) notation of the requested resources, the time of the request, the method used in the submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s computer environment.

These data, necessary for the use of web services, are also processed for the purpose of:

obtain statistical information on the use of the services (most visited pages, number of visitors by time or day, geographical areas of origin, etc.);
check the correct functioning of the services offered.
Cookies and other tracking systems: please refer to the cookie policy in the specific section
Purposes and legal bases for the processing of personal data
The Data Controller processes user data to allow navigation of its site and to respond to any requests sent voluntarily by the user.

Any further processing takes place only on the basis of obligations established by law and on the basis of legitimate interest. For any other processing purpose, explicit consent is requested from the User to the Data Controller.

In particular, Sagitta Spa collects and processes Users’ personal data for the following purposes:

purposes strictly connected and instrumental to administrative-accounting management;
fifinality connected to the legal and fiscal obligations envisaged by laws, regulations, community regulations, as well as by provisions issued by Authorities and by supervisory and control bodies;
allow the user to browse the site;
respond to User requests sent through the Site;
allow users to use the services on the site;
improve the presentation, features and functionality of the Site and Services.
Data retention times
The personal data processed by Sagitta Spa on the basis of the User’s consent will be kept for the time strictly necessary to achieve the purposes for which they were originally collected and, in any case, will no longer be processed following any revocation of the consent given.

If the processing of personal data should instead take place in fulfillment of legal, fiscal or judicial obligations, the data may be kept for a maximum of ten (10) years.

The navigation data do not persist for more than seven days and are deleted immediately after their aggregation (except for any need for the detection of crimes by the judicial authority).

Conferment and methods of treatment
The provision of data such as surname / name / telephone contact / address / e-mail is mandatory in order to respond to requests voluntarily submitted by the User.

All personal data will be processed through the use of paper and computerized tools.

The Data Controller has adopted all the necessary adequate technical and organizational measures to guarantee a high level of security in order to minimize the risks of destruction or loss, even accidental, of the data itself, of unauthorized access or of unauthorized processing allowed or not in accordance with the purposes indicated in this document, on the basis of articles 24, 25 and 32 of the GDPR.

However, since it is not possible to guarantee that the measures adopted for the security of the Site and the transmission of data are such as to exclude any risk of unauthorized access or dispersion of data, we invite the user to make sure that his computer is equipped with software. updated antivirus for data protection and that your Internet service provider has in turn taken appropriate measures for the security of data transmission.

Recipients of personal data – Communication and disclosure of personal data
The personal data processed will be communicated to well-defined subjects. Based on the roles and job duties performed, internal and external staff are entitled to the processing within the limits of their competences and in accordance with the instructions given to them by the Owner. The same data may be communicated to the legitimate subjects and appointed Data Processors.

Transfer of personal data abroad
the Data Controller does not transfer personal data to third countries; however, it reserves the right to use cloud services and in this case the service providers will be selected from among those who provide adequate guarantees, as required by art. 46 GDPR 679/16.

Processing of personal data of minors
The use of the Site and the Services is reserved only to adult users. Sagitta Spa does not process personal data of minors.

Rights of the interested party
The Data Controller can be freely contacted for any request regarding this Policy by writing to info@sagitta.it.

The user may, at any time, exercise the rights referred to in articles 15/16/17/18/20/21 of the GDPR 679/16.
The aforementioned rights may be exercised by sending a specific request to the Data Controller through the contact channels indicated in this statement.

Cookie Policy
For the use of cookies, please refer to the appropriate “Cookie Policy” section where appropriate information is provided.

Links to third party sites
Sagitta Spa cannot in any case be held responsible for the treatments carried out through or in relation to these third party sites. Users are therefore invited to pay the utmost attention in this regard, by viewing the conditions of use and the privacy and cookie policy published on the portals visited.

Changes and updates
This Policy is updated and applicable from 05/25/2018.

Any further changes will be communicated to Users by means and times deemed most appropriate by the Owner, in particular through publication on the Site.