Which categories of personal data does S.S.I. and how are they treated?
S.S.I. collects the personal data of employees, candidates, customers, suppliers, professional contacts, shareholders and users of the website. If the data we collect are not listed in this privacy statement, we will provide interested parties (where required by law) with an adequate communication of what other data will be collected and how they will be used.
In particular, the personal data we collect includes the categories described in the sections “How do we use your personal data when you visit the SSI website?”, “How do we use cookies (and other similar tracking technologies)?”, “How we use personal data when you visit our offices? “and” How do we use your personal data for marketing purposes? “, as well as any other category of personal data referred to in this privacy statement or in other statements you have received .
Except for some information required by law, your decision to provide personal data to S.S.I. it is voluntary. You will therefore not be subject to negative consequences if you do not wish to provide us with your personal data. However, if you do not provide certain information, we will not be able to accomplish some or all of the purposes indicated in this privacy statement and we may not be able to use certain tools and systems that require the use of such personal data.
If provided to S.S.I. personal data of another person (for example, a potential employee / contact person), you will be responsible for ensuring that this person is aware of the information contained in this privacy statement and that you have given consent for sharing information with S.S.I ..
The aforementioned categories of personal data were obtained directly from you (for example, when you provide information to subscribe to a newsletter or register to comment on a forum) or indirectly by certain third parties (for example, through the technology of our website ). These third parties include our affiliates, public authorities, public websites, social media and suppliers.
For what purposes and on what legal basis do we use your personal data?
S.S.I. use your personal data only if requested for specific purposes. Click here for (i) a list of purposes for which S.S.I. uses the users’ personal data and (ii) an overview of the legal basis of each purpose.
At the point where the previous table shows that S.S.I. uses legitimate interests for a given purpose, we believe that our legitimate interests are not second to the interests, rights or freedoms of users, in consideration of (i) the transparency we provide in relation to the processing activity, (II) of the approach to protection from the design, (iii) of the revisions regarding the protection of personal data that we carry out at regular intervals and (iv) of your rights regarding the processing activity. Contact us for more information on this comparative approach.
S.S.I. will use your personal data for the purposes mentioned above on the basis of your prior consent, to the extent that such consent is required pursuant to applicable laws.
S.S.I. will not use your personal data for purposes incompatible with the purposes for which you have been informed, unless such use is required or authorized by law, or is in your vital interest (for example in the case of a medical emergency).
S.S.I. Do you share your personal data with third parties?
We may transfer personal data to our service providers, consultants, public and governmental authorities or third parties connected to a (potential) business or commercial transaction. These subjects may reside in other countries. Before doing so, we will take measures to ensure that personal data is adequately protected, as required by the relevant laws and internal policies of S.S.I ..
Unless otherwise communicated, transfers of personal data from the European Economic Area (EEA) to third parties established outside the EEA will be based on an adequacy decision or will be governed by standard contractual clauses (a copy of which may be obtained through the contact information below: Any other external transfer to the EEA will take place in accordance with the appropriate mechanisms and standards governing international data movements.
What are sensitive data?
In general S.S.I. try not to collect sensitive data (also known as special categories of personal data) through this site or otherwise. In the rare cases in which we will try to do so, this will be in accordance with the requirements of the law on the protection of data privacy and / or we will ask for your consent.
The expression “sensitive data” refers to the various categories of personal data identified by the laws on the confidentiality of data that impose special treatment and, in some circumstances, the need to obtain explicit consent. These categories include ethnic or racial origin, political, religious, philosophical or other opinions, union membership, physical or mental health, biometric or genetic data, life or sexual orientation or criminal record (including information on suspected criminal activities).
What is data security?
S.S.I. has put in place measures for physical, technical and organizational security regarding all the personal data in its possession. We have protocols, controls and relevant policies, procedures and guides to manage these measures, taking into consideration the risks associated with the categories of personal data and the processing to which they are subjected.
To protect your personal data we adopt market-leading security measures. S.S.I. has ISO 27001 certification which indicates the adhesion by S.S.I. to the highest and strictest standards of information security. This is a safety standard awarded by the British Standards Institution (“BSI”) which serves as an international certification regarding the fact that S.S.I. adopts the highest and strictest standards. This certification is the only international standard that can be verified and that defines the requirements for an Information Security Management System (“ISMS”). It also confirms that the processes and security controls selected by S.S.I. they provide an effective structure for protecting customers and their information.
Regarding the use of our websites, it should be emphasized that the nature of the Internet is such that personal information and data can be freely present on networks that connect users to our systems without security measures, and can be accessed and accessed. usable by people other than those to whom the data are intended.
For how long S.S.I. will you keep your personal data?
S.S.I. will only store your personal data for as long as necessary. We adopt specific policies and procedures for the management and storage of information, so that personal data is deleted after a reasonable time based on the following conservation criteria:
- We keep your data until a relationship with you is in progress (in particular, where you have an S.S.I. account).
- We will retain your data only as long as your account remains active or for as long as necessary to provide you with services.
- We keep your data for the time necessary to comply with our legal and contractual obligations.
What are your rights in relation to the processing of personal data?
It is your right (in the circumstances and under the conditions, and subject to the exceptions established by the applicable law) to:
- Request access to your personal data processed by S.S.I .: this right authorizes you to know if we have personal data about you and, in this case, to obtain information about it, as well as a copy of such personal data.
- Request a correction of your personal data: this right allows you to have your personal data corrected in case they are inaccurate or incomplete.
Oppose the processing of your personal data: this right authorizes you to request that S.S.I. no longer treat your personal data.
- Request the deletion of your personal data: this right authorizes you to request the deletion of your personal data, even where such data is no longer necessary to achieve the intended purposes.
- Request the limitation of the processing of personal data: this right authorizes you to request that S.S.I. treat your personal data only in certain circumstances, as well as with your consent.
- Request the portability of personal data: this right allows you to receive a copy (in a structured format, commonly used and readable by the computer) of the personal data supplied by you to S.S.I., or to request to S.S.I. to transmit such personal data to another data controller.
To the extent that the processing of your personal data is based on consent, you have the right to revoke this consent at any time by contacting S.S.I. to the Contact address. This right will not affect the right of S.S.I. to process personal data received prior to the withdrawal of consent, or its right to continue partial processing by virtue of legal bases other than consent.
If, despite our commitment and our efforts to protect your personal data, you believe that your data protection rights have been violated, we first of all invite you to contact S.S.I. to try to resolve any issue. You always have the right to file a complaint directly with the relevant supervisory authority or take legal action in a competent court (in the country where you live, in the country where you work or in the country where you believe the law on personal data protection has been violated).
Contact us to exercise your rights.