PRIVACY INFORMATION SUNRISE&SPA S.r.l.

Protecting the security and privacy of your personal data is very important to us, and we act in accordance with the current regulations in the field (EU Regulation 2016/679, D.Lgs.n.101/2018, and the provisions of the Italian Data Protection Authority). Below we explain our practices.

Data Controller.

The data controller is SUNRISE&SPA S.r.l., located at Via Serio, 1 25015 Desenzano del Garda (BS). C.F. and VAT number 03950790984 - Tel. +39 030-9914485

Personal Data

Providing personal data in the forms on various pages of the site (e.g., “PRODUCTS” - “SERVICES” - “CONTACTS”) is a free choice for every visitor to the Site. There is no registration of personal data on our site that occurs without a specific notification to the visitor about the possibility of registering their personal data.
To avoid errors or misunderstandings, any registration of personal data can only occur after an additional and final confirmation by the visitor. Therefore, each registration will only occur after your explicit consent by checking the “I consent” boxes. Any consent can be revoked at any time (see the “Rights of the Data Subject” section).

Site Navigation and Access Registration - Use of Log Files

SUNRISE&SPA S.r.l. uses web server log files to count visitors and assess the technical capabilities of our site.
We use this information to know how many people visit our Site, to organize the pages in the most accessible way possible, to facilitate site navigation, and to make its pages more useful for users. More information is available on the Web Cookie Policy page.

Email – Mailing List

If you wish to send emails to the Site for any reason, or if the Site itself offers you the option to subscribe to a mailing list to receive information of interest on your computer, we reiterate that if any of these options require the registration of your personal data, the registration of your personal data will always comply with the Privacy Law.
Therefore, each registration will only occur after your explicit consent by checking the relevant “I consent” box contained on the site's pages. When you voluntarily send an email to one of the email addresses indicated on our site, we acquire the sender's address and any other personal data you have included in the message and attachments.
The email boxes corresponding to the addresses indicated on our site are not personal in nature, even if they contain the name and/or surname of a natural person.
They belong to the corporate organization and are primarily intended to allow effective work activities within the company. This means that messages forwarded to the email boxes may be known not only by the recipient but also by other people within the organization. By forwarding emails to other email addresses indicated on our site, you declare that you have read and accepted the processing conditions contained in this policy.

Data Processing Location

The processing related to the web services of this site takes place at the technical site manager and at the company's headquarters and is handled only by personnel authorized for processing, or by authorized external technicians during maintenance operations.
Categories of subjects processing the data The processing is carried out by the Data Controller, its authorized personnel: employees, agents, representatives, and authorized third parties. The company is not obliged to appoint a DPO. The list of those authorized to process data is available at the company's headquarters.

Purpose and Legal Basis of Processing

The personal data you may provide will be processed solely for the purpose of: a) complying with legal obligations related to civil, fiscal, accounting regulations, etc., administratively managing the relationship, fulfilling contractual obligations, publishing supports and information regarding the supply of goods and services subject to any relationship; b) publishing information about future activities and announcements of new articles, products, and services. The data will not be disseminated. They will not be communicated to third parties unless it becomes necessary or mandatory pursuant to the preceding letter a).
They may be processed by the duly authorized employees and external collaborators of the Company, within the scope of their respective duties and/or any contractual obligations with them. We commit not to communicate or disseminate your personal data to subjects who do not collaborate with them. We commit not to communicate or disseminate your personal data to subjects who do not collaborate in the realization of the activities necessary to achieve the purposes of your navigation. No "particular" data is collected on the website under any circumstances.

Processing Methods

Personal data is processed electronically or on paper for the time necessary to achieve the purposes for which they were collected.

Security

SUNRISE&SPA S.r.l. has adopted specific security measures to prevent data loss, unlawful or incorrect uses, and unauthorized access.

Data Retention Period

Personal data will be retained within the terms of civil, fiscal, and legal prescription.

Links to Other Websites

On the Company's web pages, there are and may be hyperlinks to other websites proposed to provide a better service. SUNRISE&SPA S.r.l. is not in any way responsible for the content of websites that users may eventually access.

Information for Applicants

SUNRISE&SPA S.r.l. informs that personal data voluntarily sent and contained in the Curriculum Vitae may be subject to processing consisting of collection, retention, selection, comparison, deletion, and destruction within the scope of personnel search and selection activities, exclusively for the purpose of evaluating the profile, aptitudes, and professional skills. The provision of data is aimed at examining the application for potential employment.

Minors

Although our website does not have any sections with content not viewable by minors, we would like to specify that no personal data should be entered by minors without the prior consent of parents or guardians when filling out forms placed on the various pages of the site. SUNRISE&SPA S.r.l. encourages all parents and guardians to instruct minors on the safe and responsible use of their personal data on the Internet. SUNRISE&SPA S.r.l. commits not to retain or knowingly use any personal data possibly entered in the form by minors for any purpose, including disclosure to third parties.

Information Requests

With reference to the processing of data collected during navigation, SUNRISE&SPA S.r.l. commits to responding to any questions posed regarding Privacy as promptly as possible to ensure transparency of its processing. It also commits to modifying this information in the event of any changes to Privacy regulations.

Rights of the Data Subject (Articles 15 to 22 of EU Regulation No. 2016/679)

In relation to the data subject to processing referred to in this information, the data subject is granted the right at any time to:

• Access (Art. 15 EU Regulation No. 2016/679);
• Rectification (Art. 16 EU Regulation No. 2016/679);
• Erasure (Art. 17 EU Regulation No. 2016/679);
• Restriction (Art. 18 EU Regulation No. 2016/679);
• Portability, understood as the right to obtain from the data controller the data in a structured, commonly used, and machine-readable format to transmit them to another data controller without hindrance (Art. 20 EU Regulation No. 2016/679);
• Objection to processing (Art. 21 EU Regulation No. 2016/679);
• Withdrawal of consent to processing, without prejudice to the lawfulness of processing based on consent acquired prior to withdrawal (Art. 7, para. 3 EU Regulation No. 2016/679);
• Lodge a complaint with the Data Protection Authority (Art. 51 EU Regulation No. 2016/679).

More explicitly:

1. The data subject has the right to obtain confirmation of the existence or non-existence of personal data concerning them, even if not yet recorded, and their communication in an intelligible form.
2. The data subject has the right to obtain information about the origin of the personal data; the purposes and methods of processing; the logic applied in case of processing carried out with the aid of electronic instruments; the identification details of the controller, processors, and the designated representative pursuant to Article 5, paragraph 2; the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them as designated representatives in the territory of the State, processors, or persons in charge.
3. The data subject has the right to obtain: a. the updating, rectification, or, when interested, integration of the data; b. the erasure, transformation into anonymous form, or blocking of data processed unlawfully, including those whose retention is unnecessary for the purposes for which the data were collected or subsequently processed; c. certification that the operations referred to in letters a. and b. have been brought to the attention, including as regards their content, of those to whom the data have been communicated or disseminated, except where this proves impossible or involves a manifestly disproportionate effort compared to the right protected; d. data portability.
4. The data subject has the right to object, in whole or in part: on legitimate grounds to the processing of personal data concerning them, even if pertinent to the purpose of collection; to the processing of personal data concerning them for the purpose of sending advertising materials or direct selling or for carrying out market research or commercial communication.
5. The data subject has the right to be informed within 72 hours of the event in the case of theft or accidental loss of their personal data.

For the exercise of the aforementioned rights, it is confirmed that the data controller is SUNRISE&SPA S.r.l. located at Via Serio 1, 25015 Desenzano del Garda del Garda (BS), by writing to the aforementioned address or via email: sunrise-spa@pec-center.netregister.it or by calling +39 030-9914485. We confirm that the Company guarantees the effective exercise of the aforementioned rights, indicating that in the event of our inaction, you have the option to report to the Data Protection Authority (www.garanteprivacy.it) any processing of your data deemed non-compliant. We confirm that in the event of cessation of data processing, after the expiry of civil, tax, and legal prescription periods, you have the right to be forgotten.

Applicable Law – Competent Court

Access to the site implies full acceptance of the rules stated on the site itself. Consequently, the user accessing the Site accepts that the applicable legislation to resolve any issues arising from access to the site, or for information or objects present on the Site, is Italian law. Similarly, the user accepts that the exclusively competent court for the above-mentioned issues is the Court of Brescia.