Digital Technologies Srl – PRIVACY POLICY

This privacy policy (hereafter “Policy”) explains the reasons, methods of collection, and management of personal data related to the customers of Digital Technologies Srl Benefit Corporation and how their protection is ensured.

DATA CONTROLLER

Digital Technologies Srl Benefit Corporation (hereafter also referred to as “the Company”) acts as the data controller and can be contacted through its organization for information about the processing of personal data and to exercise the rights recognized by the GDPR to the data subject, at the following contact details: privacy@digtechs.com.

Digital Technologies Srl has appointed a Data Protection Officer (“DPO”), who can be contacted by data subjects to receive answers regarding the processing of personal data carried out by the data controller, at the following address: privacy.dpo@digtechs.com.

Digital Technologies Srl commits to processing your data in accordance with the General Data Protection Regulation (EU Reg. 2016/679), better known as “GDPR.” Specifically, the processing of Personal Data carried out by Digital Technologies Srl will adhere to the principles of lawfulness, fairness, transparency, purpose limitation and data retention, data minimization, accuracy, integrity, and confidentiality.

PURPOSE OF THIS PRIVACY POLICY

This privacy policy is prepared in accordance with Article 13 of the GDPR with the aim of providing information on how Digital Technologies Srl processes personal data collected through the use of its website or application, including data provided to use its services and to request information (for example, to subscribe to our newsletter, to interact with our customer support, or to participate in a promotion or survey).

1 Browsing Data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. These are pieces of information that are not collected to be associated with identified individuals, but which by their nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numeric code indicating the status of the server’s response (successful, error, etc.), time indications of the beginning and end of the session, and other parameters related to the user’s operating system and computer environment.

  • Purpose and legal basis of processing: data is used to ensure the correct functioning of the website and to obtain anonymous statistical information. Data may also be used to establish liability in the event of cybercrimes against the site (site usage conditions).
  • Retention period: data is generally kept for short periods of time [12 months], except for possible extensions related to investigative activities.
  • Provision: data is automatically acquired by the website’s technological systems.

2 Cookie

The Company’s cookie policy is available here

3 Contacts and Data Voluntarily Provided by the User Using the Website

The optional, explicit, and voluntary sending by the user concerning:

  • Filling out forms to request information, materials, or to participate in events (for example, webinars or conferences)
  • Sending emails and/or regular mail to Digital Technologies Srl through the contact details found on the website

entails the subsequent acquisition and use of personal data to fulfill the purposes arising from the user’s requests. Personal data will be stored for periods compatible with the purpose of the collection.

  • Purpose and legal basis for processing: to respond to the inquiries of the requester (contract).
  • Retention period: upon the end of the relationship with the requester [maximum 12 months].
  • Provision: necessary to respond to the requests of the requester.

4 Employment Opportunities

The Company collects data from individuals interested in submitting their applications for open positions through the “Work with Us” section of the website.

  • Purpose and legal basis for processing: Evaluation of the application (pre-contractual measure).
  • Retention period: Typically, 12 months after the application is submitted.
  • Provision: Necessary to conduct the selection process.

5 Marketing

The optional, explicit, and voluntary subscription of the user to the company’s newsletter for commercial purposes.

  • Purpose and legal basis for processing: Consent of the data subject.
  • Retention period: Until the consent is withdrawn.
  • Provision: Optional.

MODES OF USE OF PERSONAL DATA

Data processing is carried out using manual, computerized, electronic, or otherwise automated tools, directly by the Data Controller or by third parties (acting as independent controllers, part of the so-called insurance chain, or appointed by the Controller). Data is processed for the time necessary to achieve the purposes mentioned above and within the limits prescribed by law or by the directives of the Data Protection Authority. Data is processed using technical and organizational security measures appropriate to the level of risk, to minimize the risks of destruction or loss, alteration, unauthorized access, or processing not in accordance with the purposes of the collection.

 RIGHTS PROVIDED BY LAW

The law guarantees a series of rights concerning your personal data. The Company is committed to protecting personal data and complying with the data privacy laws in force at any given time. More information and advice on these rights can be obtained from the national authority responsible for data protection (www.garanteprivacy.it).

Rights What does it mean?
1. Right to Information The user’s right to receive clear, transparent, and easily understandable information about how their personal data is used and their rights. This is why the information contained in this Policy is provided.
2. Right to access The user’s right to obtain access to their data (if such data is being processed) and other information (similar to that provided in this privacy policy). The purpose is to ensure that the user is aware and can verify whether their personal data is being used in accordance with data privacy laws.
3. Right to Rectification The user’s right to have their information corrected in case of inaccuracies or incompleteness.
4. Right to Erasure or Right to Oblivion The user’s right to request the deletion or removal of data where there is no valid reason for its continued use. This is not an indiscriminate right to deletion, as it is limited by exceptions.
5. Right to Restrict Data Processing The user’s right to ‘block’ or suppress further use of their information. When data processing is restricted, the Company may still retain the information but cannot use it further. The Company keeps lists of individuals who have requested the “block” of further use of their information to ensure that this restriction is respected in the future.
6. Right to Data Portability The user’s right to obtain and reuse their personal data for their own purposes across different services. For example, if they decide to switch to a new provider, this right allows them to move, copy, or transfer information easily between the company’s IT systems and those of others securely and safely, without affecting usability.
7. Right to Object to Processing The user’s right to object to processing for the purposes of direct marketing (which is only carried out with prior consent) and also to processing that is carried out for the purpose of protecting the legitimate interests of the Company.
8. Right to Lodge Complaints The user’s right to lodge a complaint about the way the Company processes or handles their personal data with the national data protection authority.
9. Right to Withdraw Consent The user’s right to withdraw their consent at any time, previously given, for any activity that involves the processing of their personal data. Exercising this right does not affect the lawfulness of the processing based on consent before its withdrawal. This may also include revoking consent to use personal data for marketing purposes alone, by sending a request to privacy@digtechs.com.

To exercise their rights, the data subject can contact the DPO (Data Protection Officer) of the Company at: privacy.dpo@digtechs.com.