**Privacy Policy (pursuant to Article 13 of EU Regulation No. 2016/679)**
We take the protection of your personal data very seriously.
The personal data collected will be processed, in accordance with Article 5 of EU Regulation 679/2016, in a lawful, fair, and transparent manner in relation to the data subject and according to the principles of accuracy, adequacy, confidentiality, and security established by the Regulation.
The EU Regulation No. 679/2016 (GDPR), applicable in all Member States, grants every individual protection of their personal data, as an expression of respect for human dignity and fundamental rights and freedoms.
Therefore, in accordance with the relevant European and national regulations in force, we provide you with the following information.
**1. Personal Data Subject to Processing**
The optional, explicit, and voluntary sending of emails to the addresses provided on this site and/or the completion of data collection forms will result in the acquisition of the sender's email address, necessary to respond to the requests, as well as any other personal data entered.
During the registration process for creating a new personal account, we will request common personal data such as name, business name, address, tax code, VAT number, telephone contact, and email.
**2. Purpose, Legal Basis, and Mandatory or Optional Nature of Processing**
The purposes of processing your data are as follows:
- Completing data collection forms for quote requests, contacts, job applications, or communication of suggestions;
- Registering an account to access the restricted area to download files and documents of interest;
- Compliance with laws and legal obligations the Data Controller is subject to.
It is important to note that, based on the above purposes, the provision of your personal data is mandatory. Failure to provide, partial or incorrect provision, or explicit refusal to process may result in the inability of the Data Controller to provide the requested service.
Any processing of your data for purposes beyond those indicated will require specific consent, which is not mandatory for the execution of the contract.
**3. Data Controller**
The Data Controller is: ZORZAN SISTEMI S.R.L., Via Valle Luna 25, 21100 VARESE (VA), Tax Code and VAT Number: 02743750123.
**4. Recipients of Personal Data**
Your data will be made available to our internal administrative personnel, specifically appointed, and to our external collaborators, who will be designated as Data Processors under Articles 28 and following of EU Regulation 679/2016 (GDPR). The list of these recipients is available at our office.
The data may also be communicated to third parties belonging to the following categories:
- Entities providing services for the management of the information system used by the Data Controller and telecommunications networks;
- Studies or companies in the context of support and consultancy relationships;
- Competent authorities for the fulfillment of legal obligations and/or public body requirements, as requested.
**5. Data Transfers**
Personal data is stored on servers located within the European Union. However, the Data Controller reserves the right to transfer the data outside the EU if necessary. In such cases, the Data Controller ensures that the transfer of data outside the EU will be carried out in accordance with applicable legal provisions, including the signing of standard contractual clauses as required by the European Commission.
**6. Processing and Storage Methods**
Data processing and storage will be carried out with the aid of IT and/or paper-based means that ensure integrity, updating, security, and confidentiality of your personal data, protecting them from unauthorized or unlawful processing as well as accidental loss, destruction, or damage.
Except for communications made in compliance with legal obligations, data may be shared with external parties carrying out specific tasks on behalf of the Data Controller, provided they undertake to protect your personal data in accordance with the provisions of this Privacy Policy and applicable Data Processor regulations under Articles 28 and following of EU Regulation 679/2016 (GDPR).
**7. Duration of Processing**
Data processing will continue for the entire duration of the relationship between the parties, and, following the conclusion of the contract/relationship, to comply with civil and fiscal obligations applicable to the relationship, as well as any other legal obligations the Data Controller must fulfill.
Data related to newsletter submissions will be stored until you request their removal.
**8. Rights of the Data Subject**
You may exercise your rights under European and national laws at any time by submitting a written request to the Data Controller, in particular the rights under Articles 13, 14, 15-22, and 34 of the EU Regulation and applicable national legislation, including:
- The right to obtain confirmation of the existence of data concerning you, even if not yet registered, and their communication in an intelligible form.
- The right to access and/or obtain a copy of your personal data free of charge, including details of the processing activities in accordance with EU Regulation.
- The right to update or rectify inaccurate data, limit processing, or, when necessary, complete the data.
- The right to object, in whole or in part, to the processing of your personal data for legitimate reasons, or to withdraw consent, where applicable.
- The right to data portability, receiving your personal data in a structured, commonly used format, and transferring it to another data controller without hindrance.
- The right to file a complaint with a supervisory authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with a judicial authority.
An exhaustive list of the data subject’s rights is available at the office of the Data Controller. You may exercise your rights at any time by submitting a written request (by mail or email) to the Data Controller.