Privacy Policy

Welcome to the SmartCAE S.r.l. Privacy Policy.
PRIVACY NOTICE PURSUANT TO ARTICLE 13 OF REGULATION (EU) 2016/679 (GDPR)

SmartCAE S.r.l. ("SmartCAE", the "Data Controller", the "Controller", or the "Company"), in its capacity as Data Controller pursuant to Regulation (EU) 2016/679 ("GDPR" or the "Regulation"), considers the protection of privacy and personal data to be a fundamental commitment towards its customers, suppliers, partners, employees, contractors, and anyone who provides personal data in connection with the Company's activities.

We therefore invite you to read this Privacy Policy carefully, as it contains important information regarding the processing and protection of your personal data.

This Privacy Policy is provided pursuant to Article 13 of the GDPR to all individuals who interact with our Company and forms an integral part of the services and activities we offer.

Its purpose is to explain our privacy practices, how your personal information is processed, and, where required, to enable you to provide informed consent to the processing of your personal data.

Any information and personal data you provide, or that we otherwise collect in the course of our business activities, will be processed in compliance with the GDPR and in accordance with the principles of confidentiality that have always guided SmartCAE S.r.l.

In accordance with the GDPR, all processing activities are carried out in compliance with the principles of lawfulness, fairness, transparency, purpose limitation, storage limitation, data minimization, accuracy, integrity, and confidentiality.

Contents

  1. Data Controller
  2. Personal Data Processed
  3. Purposes of Processing
  4. Legal Basis and Whether the Provision of Data is Mandatory
  5. Recipients of Personal Data
  6. Data Retention
  7. Data Subject Rights
  8. Changes to this Privacy Policy

1. Data Controller

The Data Controller is SmartCAE S.r.l.

For any questions regarding this Privacy Policy or the processing of your personal data, you may contact us at: [email protected]

2. Personal Data Processed

The personal data we process may include identifiers such as your name, telephone number, email address, or any other information that can directly or indirectly identify you.

If you contact the Company by email, you may voluntarily provide special categories of personal data as defined in Article 9 of the GDPR (formerly referred to as sensitive personal data).

We kindly ask you not to send such information, as it is generally unnecessary for handling your request. Should you nevertheless voluntarily transmit special categories of personal data, SmartCAE S.r.l. shall not be held responsible for their transmission, since such processing is permitted where the data have been manifestly made public by the data subject. Any emails containing special categories of personal data will, where appropriate, be deleted.

When using our email addresses, you may also provide personal data relating to third parties. In such cases, you act as an independent Data Controller with respect to those data and assume all legal obligations and responsibilities arising from their processing.

3. Purposes of Processing

Where required, and based on your specific request or consent, your personal data may be processed for the following purposes:

  • managing requested activities, projects, or business relationships;
  • responding to requests for information;
  • complying with legal obligations, including accounting and tax requirements.

Your data may be processed in both paper and electronic form using appropriate technical and organizational measures to ensure their security and confidentiality.

4. Legal Basis and Whether the Provision of Data is Mandatory

The legal bases for processing your personal data include:

  • compliance with applicable legal obligations (for example, accounting and invoicing requirements);
  • compliance with the provisions of the GDPR and other applicable legislation.

For communications relating to products and services offered by the Company, SmartCAE may use your postal or email address without obtaining additional consent where permitted by applicable privacy legislation.

In all cases, you have the right to object to such processing at any time, either immediately or upon receiving future communications, free of charge, by contacting us using the details provided above.

5. Recipients of Personal Data

Your personal data will not be transferred or disclosed to third countries outside the applicable legal framework and may be shared, solely for the purposes described in Section 3, with:

  • individuals, companies, or professional firms providing accounting, administrative, legal, tax, financial, or debt recovery services to SmartCAE;
  • service providers whose involvement is necessary for delivering our services;
  • providers responsible for technical support and maintenance, including maintenance of IT infrastructure and communication networks;
  • public authorities, government bodies, or other entities where disclosure is required by law or by order of a competent authority;
  • employees and authorized personnel of SmartCAE S.r.l. who require access to personal data in order to perform activities directly related to our services and who are subject to confidentiality obligations.

6. Data Retention

Personal data processed for the purposes described in Section 3 will be retained for the duration of the relevant business relationship and, where appropriate, for such additional period as the Company considers necessary in relation to the activities performed and applicable legal obligations.

Further information regarding data retention periods and the criteria used to determine them may be requested by contacting the Data Controller.

7. Data Subject Rights

Pursuant to Articles 15 and following of the GDPR, you have the right, where applicable, to:

  • obtain confirmation as to whether your personal data are being processed;
  • access your personal data;
  • request the correction or updating of inaccurate personal data;
  • request the deletion of your personal data;
  • request the restriction of processing in the cases provided for by Article 18 of the GDPR;
  • receive your personal data in a structured, commonly used, and machine-readable format (data portability);
  • withdraw your consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal;
  • lodge a complaint with the competent supervisory authority pursuant to Article 77 of the GDPR (in Italy, the Italian Data Protection Authority – Garante per la Protezione dei Dati Personali) if you believe that the processing of your personal data infringes applicable data protection laws;
  • object to the processing of your personal data by submitting a written request stating the reasons for your objection.

All requests relating to the exercise of your rights should be submitted in writing to the Data Controller.

8. Changes to this Privacy Policy

This Privacy Policy was last updated on 22 May 2023.

SmartCAE S.r.l. reserves the right to amend or update this Privacy Policy, in whole or in part, at any time. We therefore encourage you to review this page regularly to ensure that you are aware of the latest version and remain informed about the personal data we collect and how we process it.