1. Data Controller

AMSA Srl, headquartered in Arco (TN), Via delle Magnolie No. 9, as the data controller, guarantees compliance with personal data protection regulations by providing the following information regarding the processing of data communicated or collected while surfing this website.

 

2. Data Processed, Purpose, and Legal Basis for Use of Personal Data

Data Generated by Accessing the Website

The IT systems and software procedures responsible for the operation of this website acquire, during normal use, certain personal data whose transmission is implicit in the use of Internet communication protocols. These data (such as domain names, IP addresses, operating systems used, types of devices or browsers used for the connection) are not accompanied by any additional personal information and are used to obtain anonymous statistical information on the use of the website; manage control needs for its use; and determine responsibility in case of hypothetical cybercrimes. The legal basis that legitimizes the processing of such data is the necessity of making the website's features available to the user upon access.

Data Voluntarily Provided by the User

Personal data provided by the user via forms are collected and processed for the following purposes: a. To manage relations with the individual concerned (e.g., responding to information requests, gathering preliminary information aimed at establishing a contractual relationship, preparing commercial offers, etc.);

1. For administrative purposes and to fulfill activities strictly related to the management of relations with the individual, as well as for compliance with legal obligations, such as accounting or tax requirements or in response to requests from judicial authorities;
2. With specific consent, for the periodic sending of newsletters and advertising materials via email;
3. With specific consent, to send updates about our activities;
4. With specific consent, to send promotional communications and invitations to events or special promotions;
5. In case of CV submission, solely for recruitment purposes.

The legal basis for the data processing is a contract to which the individual is a party or the execution of pre-contractual measures taken at their request. In the expressly indicated cases (points c., d., e.), the legal basis is the freely given consent of the individual.

Cookies

For further information, please refer to the cookie policy published on the homepage.

 

3. Nature of Data Provision

Except for navigation data, the provision of data:

Is optional for the purposes mentioned in points a., b., and f., but refusal will prevent the Data Controller from fulfilling contractual obligations;

Is also optional for the purposes mentioned in points c., d., and e., and their use depends on the explicit consent of the individual. Refusal will prevent the Data Controller from sending newsletters, advertising materials, or invitations to events and initiatives.

 

4. Methods of Processing and Data Retention Period

The collected data will be processed using electronic, automated, IT, or telematic tools, or through manual processing strictly related to the purposes for which the personal data were collected, and in any case, in a way that ensures the security of the data.

 

5. Authorized Personnel for Data Processing, Responsible Parties, and Data Communication

The processing of collected data is carried out by personnel authorized to process it, following specific instructions in compliance with applicable regulations. The collected data, if necessary or instrumental for the execution of the indicated purposes, may be processed by third parties appointed as data processors, or, in some cases, communicated to them as independent controllers. Specifically:

• Individuals, companies, associations, or professional firms that provide assistance and consulting services to our Company, for the purposes outlined in point 2;
• Companies, entities, consultants that perform services related to or instrumental to the execution of the purposes mentioned above (e.g., IT system maintenance).

The collected data will not be transferred outside the EU.

In any case, personal data will never be disclosed without the explicit authorization of the individual.

 

6. Rights of the Individual

At any time, it is possible to access the data, oppose their processing, or request the deletion, modification, or updating of all personal information collected by the data controller, by exercising the right to restrict processing and the right to data portability by sending an email to info@amsaarco.it.

The contact details of the supervisory authority are as follows: urp@gdp.it.

The contact details of the Data Protection Officer (DPO) are: avvmatteograzioli@puntopec.it.