SIBESTAR
Market leader of road signs. Road marking machines, traffic lights and road marking and road signs.

Privacy

Sibestar S.r.l., headquartered at Largo delle Industrie, 2/3, 24020 Torre Boldone ("Sibestar"), is committed to the continued protection of users’ online privacy on its site www.sibestar.it (the "Site"). This document ("Policy") has been drafted in order to allow you to understand how your personal data will be processed in terms of its use on the Site. The Policy is intended to provide you with the necessary information so that you can express, if you consider it appropriate, explicit and informed consent to the processing carried out on the Site.

In general, any information or personal data that you provide to Sibestar through the Site, or that is collected in any other way on the Site, through the use of products and/or services offered by Sibestar (the "Services"), better defined in the following Paragraph 3, will be processed according to the internationally recognized principles of lawfulness, correctness, transparency, limitation of the purposes of use and of the conservation and minimization of data, accuracy, integrity and confidentiality.

1. Data controller and data protection processor
2. Personal data processed (Name / contact information and other Personal Data / Special categories of personal data / Data voluntarily submitted by the data subject / Navigation data collected anonymously / Cookies)
3. Purposes of use
4. Legal basis and obligatory or facultative nature of processing
5. Recipients of personal data
6. Transfers of personal data
7. Storage of personal data
8. Rights of the data subject
9. Changes

1. Data controller and data protection processor

SIBESTAR, as identified at the beginning of the Policy, is the Data Controller in relation to all personal data that is processed on the Site.
You can contact the Data Protection Officer of SIBESTAR at the following address: privacy@Sibestar.it.

2. Personal data processed

Through the navigation of the Site, we inform you that SIBESTAR will process information that concerns you, which - possibly depending on your decisions about how to use the Services - may be constituted by an identifier such as a name, identification number, an online ID or one or more characteristic elements of your physical, physiological, psychological, economic, cultural or social identity suitable to make you identified or identifiable (hereinafter only "Personal Data").

Your Personal Data may be collected either because you voluntarily provide it (e.g. when you subscribe to the Newsletter, when you request to be contacted in order to receive information about the services/products offered by SIBESTAR) or simply by analysis of your behavior on the Site.

The Personal Data processed on the Site are the following:

Name, contact information and other Personal Data

While navigating the Site, including in the contact section, in particular, or in the case the user sends applications, you will be asked for information such as your name, phone number, email address, date of birth, country of residence, address, etc.

The Personal Data you provide for those purposes will be processed by Sibestar according to the specific information described and provided herein.

Special categories of personal data

Sending a contact request or an application, you can provide Sibestar some extra information, which may contain Personal Data.

Given that with such extra information you could relay (voluntarily or not) some sensitive pieces of Personal Data, such as data suitable to reveal racial or ethnic origin, political opinions, religious or philosophical convictions, union membership, genetic data, biometric data intended to uniquely identify a physical person, data related to health, sexual life or sexual orientation of a person. Sibestar invites you not to send such Personal Data if not strictly necessary.

In view of the fact that the provision of such information is totally optional, we inform you that such special categories of Personal Data may be processed only with your explicit consent and in compliance with the pro tempore legislation in force. If you decide to share such information, your consent is necessary, and said data will not be processed if they are not strictly related to the specific purposes of the collaboration.

Third party data supplied by the data subject

As mentioned above, in some parts of the Site you are allowed to enter text messages, visible to Sibestar, which may contain (voluntarily or otherwise) the Personal Data of other people.

Regarding this hypothetical situation, you act as an independent data controller, assuming all the legal obligations and responsibilities. In this case, you grant the utmost indemnity to Sibestar regarding any disputes, claims, or requests for compensation for damages from processing etc. from third parties whose Personal Data has been processed via your use of the functions of the Site in violation of the applicable rules on the protection of personal data.

In any case, if you provided or otherwise processed Personal Data of third parties in the use of the Site, you guarantee from now on - assuming yourself any related liability - that in this particular case of processing, it is based on the consent of that third party data subject or on another appropriate legal basis which legitimizes the processing of the information in question.

Navigation data collected anonymously

During their normal operation, the computer systems and software procedures designated for the functioning of the Site acquire some Personal Data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected by Sibestar to be associated with identified data subjects, but which by their very nature could, through processing and association with data held by third parties, allow the identification of users.

IP addresses or domain names of the computers used by users who connect to the Site fall into this category of data as well as addresses in Uniform Resource Identifier (URI) notation of resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters related to the operating system and the user's computer environment.

This data is used for the sole purpose of obtaining anonymous statistical information on the use of the Site in addition to checking its correct functioning, and identifying anomalies and/or abuses.

Cookies
No personal data of the users are acquired by the WEBSITE via so-called cookies. Cookies are not used to transmit information of a personal nature and no persistent cookies of any type are used, i.e. systems for tracking users. The use of session cookies (which are not stored persistently in the user’s computer and disappear when the browser is shut down) is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) that are necessary for enabling the website to be explored securely and efficiently. The session cookies used in this website make it unnecessary to resort to other IT techniques that are potential threats to the confidentiality of the users’ browsing and do not allow personal data identifying the user to be acquired. The cookies for integrating software products and functions of third parties (Google Maps, YouTube videos, social network integrations, online payments, etc.) supplement functions developed by third parties within the pages of the website in order to share website content or for using the software services of third parties (such as the software for generating the maps and further software that provides additional services). These cookies are sent from third-party domains and from partner websites that offer their functions on the pages of the website. You can view the management of the cookies of your browser on the website of the relative producer (e.g.: Apple Safari, Google Chrome, Microsoft Internet Explorer, Mozilla Firefox, Opera, etc).

The data subject can disable cookies by the settings of his or her browser, but the methods and processing of the data will change following a "Do Not Track" signal in the http header from his or her browser or mobile application. The activities of the data subject are tracked if he or she clicks on an advertisement for WEBSITE services on websites or platforms of third parties such as search engines and social networks.

3. Purposes of use

Sibestar will use your Personal Data, collected through the Site, for the following purposes:

To verify your identity, to send you non-promotional informative materials; to send you any information you have explicitly requested; to finalize your order and carry out of the supply of goods and services requested; to allow you to request a quote for the provision of any other Service you request (“Supply of goods and Services”);

To send you marketing materials, promotions and advertisements through paper mail and through the official social media pages of Sibestar, related to Sibestar products and services and third parties (“Marketing”);

To send you marketing, promotions and advertisements through email regarding products and services similar to those previously purchased (“Soft Spam”);

To create your profile through the use of profiling cookies, where accepted, therefore collecting and analysing information about the selection and choices that you make on the Site, as well as your general activity on the Site. This profile will be used to provide you information about other products and/or services that SIBESTAR considers to be possibly relevant to you and to show you advertisements that could be relevant for your tastes. All of the algorithms involved in this process are regularly tested to ensure accuracy of the process and to prevent errors (“Profiling”);

To fulfill the legal obligations that require Sibestar to collect and/or further process certain types of Personal Data ("Compliance");

To prevent or detect any abuses in the use of the Site or any fraudulent activity ("Abuse/Fraud").

4. Legal basis and obligatory or facultative nature of processing

The legal basis used by Sibestar to process your Personal Data, according to the purposes indicated in the previous Paragraph 3, are the following:

Supply of goods and services: the processing for this purpose is necessary to provide you with the products and/or services and, therefore, also for the execution of the pre-contractual phase and/or the contract in place with you. The provision of your Personal Data to Sibestar for this purpose is not mandatory, but otherwise it will not be possible to provide you with any Service.

Marketing: processing for this purpose is based on your consent. It is not mandatory to give your consent to SIBESTAR for this purpose and you are free to cancel it at any time without any consequence (other than no longer receiving marketing communications from SIBESTAR). You can revoke the consent previously given by following the instructions in Paragraph 8 of this Notice.

Soft Spam: the processing for this purpose is based on SIBESTAR's interest in sending you marketing materials via email regarding products and services similar to those you have already purchased. You can interrupt the receipt of these communications, without any consequence for you (other than not receiving further communications of this kind from SIBESTAR) by sending an email to privacy@sibestar.it;

Profiling: the processing for this purpose is based on your consent collected through the cookie banner. It is not mandatory to give your consent to SIBESTAR for this purpose and you are free to cancel it at any time without any consequence (other than not being able to benefit from the customization of SIBESTAR commercial offers). You can revoke the consent previously given by following the instructions in Paragraph 8 of this Notice.

Compliance: the processing for this purpose is necessary for SIBESTAR to fulfill any legal obligations. When you provide Personal Information to SIBESTAR, it will be processed in accordance with the applicable regulations, which could entail their storage and/or disclosure to the Authorities concerning accounting or tax obligations, or others of that nature.

Abuse/Fraud: the information collected for this purpose will be used exclusively to prevent and/or identify any fraudulent activity or abuse in the use of the Site (with criminal implications).

5. Recipients of Personal Data

Your Personal Data may be shared with the following individuals (the "Recipients"):

Individuals who typically act as Data Processors, that is: i) persons, companies or professional firms that provide assistance and advice to SIBESTAR in the categories of accounting, administrative, legal, tax, financial and debt collection with regard to the supply of goods and/or services;

Subjects with whom it is necessary to interact for the provision of goods and services (e.g. hosting providers or emailing platform providers);

Subjects authorized to perform technical maintenance activities (including maintenance of network equipment and electronic communication networks);

Persons authorized by SIBESTAR to process Personal Data necessary to perform activities strictly related to the provision of goods and services, that may be required to maintain confidentiality or have adequate legal obligation to confidentiality (e.g. SIBESTAR employees);

Subjects, entities or authorities to whom it is mandatory to communicate your Personal Data for purposes of Compliance, Abuse or Fraud, or on order from the authorities;

6. Transfers of personal data

Your personal data is stored on servers located within the European Union. In any case, it is understood that, if necessary, Sibestar as the Controller will have the right to move the servers even outside the EU. In this case, the Data Controller hereby ensures that the transfer of non-EU data will take place in accordance with the applicable legal provisions, subject to the stipulations of the standard contractual clauses provided by the European Commission. Sibestar ensures that the processing of your Personal Data by these Recipients will take place in compliance with applicable regulations and with adequate guarantees, such as adequacy decisions, Standard Contractual Clauses approved by the European Commission or other guarantees considered adequate.

Write to the following address to receive more information from Sibestar: privacy@sibestar.it.

7. Storage of Personal Data

Personal Data processed for the purpose of Supplying goods and services will be kept by Sibestar strictly for the time necessary for the execution of the aforementioned intended goal. In any case, as such Personal Data is processed to provide you with goods and services, Sibestar may retain them for a longer period, particularly since they may be necessary in order to protect the interests of Sibestar from possible liability for said provision.

The Personal Data processed for the purposes of Marketing, Soft Spam, and Profiling will be kept by Sibestar until the consent given by you is revoked. Once your consent is revoked, Sibestar will no longer use your Personal Data for such purposes, but may in any case retain them, particularly as may be necessary in order to protect Sibestar's interests from possible liability based on such processing.

Personal Data processed for the purposes of Compliance will be retained by SIBESTAR for the period provided for by specific legal obligations or applicable legislation.

Personal Data processed to prevent Abuse/Fraud will be retained by Sibestar strictly for the time necessary for the aforementioned purposes.

8. Rights of the data subject

Regarding the processing of Personal Data carried out by Sibestar, you have the right to request the following at any moment:

access to data concerning you, their correction or cancellation pursuant to art. 17 of the GDPR, the integration of missing data, limitation of the Data’s processing; to receive the Data in a structured format, via a common and automatic system, as well as, if technically feasible, to transmit the Data to another controller without impediments in the event that the conditions are met for the exercise of the right to portability, art. 20 of the GDPR (the processing is based on consent pursuant to Article 6.1, point a or art. 9.2, point a) or in the contract pursuant to art. 6.1, point b) and is carried out using automated tools); to revoke your consent given at any time for the purposes referred to in the previous art. 3; and to oppose, in whole or in part, processing in the cases allowed; to issue a complaint to the Authorities, as well as to exercise the other rights recognized by the applicable regulations (articles 16-21 GDPR).

You can also exercise your rights by writing to Sibestar at the following address: privacy@sibestar.it.

In any case, you are always entitled to issue a complaint to the Supervisory Authority in charge if you believe that the processing of your Personal Data is in violation of the law in force.

9. Changes

This Policy is effective from 25/05/18. Sibestar reserves the right to modify or simply update its contents, partly or completely, also due to changes in the applicable legislation. Sibestar will inform you of these changes as soon as they are introduced and they will be binding as soon as they are published on the Site. Sibestar invites you to visit this section regularly to be aware of the most recent and updated version of the Information in order to always be up to date on Sibestar’s collection and use of Personal Data.