INFORMATION PURSUANT TO ART. 13 Reg. EU 2016/679 (so-called GDPR)

In this text, various data are recurring, so we will refer to them as follows: The website acquasystemitalia.com is owned by the company Acquasystem S.r.l., which is referred to in this text as "the Company." The aforementioned site, identified as acquasystemitalia.com is referred to in this text as "the Site." The company's email address is info@acquasystemitalia.com, referred to in this text as "the Company's email address."

WHY THIS NOTICE

Your personal data protection is very important to our Company, and to better safeguard you, we provide this notice where you will find information about the types of information collected online and the various ways you can intervene in the collection and use of such information on the Site. The Company, as the Data Controller of your personal data, pursuant to and for the purposes of Art. 13 of Reg. EU 679/2016 (GDPR), hereby informs you that the aforementioned regulation provides for the protection of individuals concerning the processing of personal data, and that such processing will be based on principles of fairness, lawfulness, transparency, and the protection of your privacy and rights. Your personal data will be processed in accordance with the legislative provisions of the aforementioned regulation and the confidentiality obligations provided therein. The processing of personal data applies to those who interact with the Company's web services, accessible telematically from the address of our Site, corresponding to the homepage of the Company's official site. This notice applies exclusively to the Site owned by the Company and not to other unrelated websites that may be visited by the user through links and/or connections from our Site.

DATA CONTROLLER

The Data Controller is Acquasystem S.r.l. (VAT no. 07408490964) with its registered office at Via Martiri della Liberazione, 12, 23875 Osnago LC, represented by its current legal representative, reachable at the email address: info@acquasystemitalia.com.

TYPES OF DATA PROCESSED:

a) BROWSING DATA The IT systems and software procedures used for the operation of this website acquire, during their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified individuals, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses of computers used by users who connect to the site (anonymized), the URI (Uniform Resource Identifier) notation addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response from the server (successful, error, etc.), and other parameters related to the user's operating system and IT environment. These data are used solely to obtain anonymous statistical information on the use of the site and to check its correct functioning. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site, only at the request of the competent supervisory authorities. The Site specifically collects the following browsing data: • Anonymized IP; • Date and time of access; • Access location. b) DATA PROVIDED VOLUNTARILY BY THE USER The optional, explicit, and voluntary sending of emails to the addresses indicated on this Site or through the email submission forms present on the Site involves the subsequent acquisition of the sender's email address, necessary to respond to requests, as well as any other personal data voluntarily provided by the user in the message. In particular, the user may voluntarily provide the following personal data: • For contact via contact form: name and email address; • For newsletter subscription: email address; • For the creation and access to the personal area: name, surname, email address, company name, address. c) SPECIAL DATA The Controller does not request nor collect special personal data through this Site.

OPTIONAL NATURE OF DATA PROVISION

Except as specified for browsing data, the user is free to provide personal data indicated in the request forms to the Company or otherwise indicated in the sections of the Site related to contact with the Company, to request the sending of informational material or other communications. Failure to provide such data may make it impossible to fulfill the requested services.

REVOCATION OF CONSENT

The consent given for the data mentioned in section b) of the previous paragraph (data provided voluntarily by the user) may be revoked at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation.

PURPOSES AND LEGAL BASIS OF PROCESSING

Your data will be processed for purposes related to: a) Fulfilling obligations related to contractual obligations (the legal basis for processing is the execution of a contract); b) Fulfilling obligations related to legal requirements in the tax and accounting fields (the legal basis for processing is the need to comply with a legal obligation); c) Sending newsletters (the legal basis for processing is the user's consent); d) Contact via contact form for information requests (the legal basis for processing is the user's consent); e) Managing the user's personal area (the legal basis for processing is the user's consent); f) Recruitment (the legal basis for processing is the user's consent); g) Statistics with anonymized IP (Google Analytics) (the legal basis for processing is the user's consent). The Data Controller informs that failure to provide or incorrect provision of one of the mandatory pieces of information may prevent the Data Controller from ensuring the consistency of the processing itself.

METHODS OF DATA PROCESSING

Personal data is processed by electronic means for the time strictly necessary to achieve the purposes for which it was collected. Specific security measures are observed to prevent data loss, illegal or incorrect use, and unauthorized access.

PLACE OF DATA PROCESSING

Data processing related to the web services of this Site takes place at the Company's headquarters and will only be communicated to the parties necessary for the proper management of the relationship, with a guarantee of protection of the data subject's rights. Personal data provided by users who request the sending of informational material (such as information requests, newsletter subscriptions, etc.) are used solely to perform the requested service or provision.

DATA RECIPIENTS

Your data may be communicated to third parties, in particular to public and/or private entities for whom the communication of data is mandatory or necessary in compliance with legal obligations or is in any case functional to the administration of the relationship, such as: – Authorized data processors who perform their activities at the Data Controller's office (employees, collaborators, partners, etc.); – External Data Processors; – Consultants and independent professionals, also in an associated form, operating on behalf of the Data Controller (accountants, IT service providers); – All those to whom the data must be communicated for the proper fulfillment of the purposes outlined above and related or connected activities (credit institutions, etc.).

DATA RETENTION PERIOD

Your personal data is processed for the time necessary to perform the service requested by the user or required by the purposes described in this document. The personal data collected will be deleted once 10 years have passed since the requested service was performed unless the processing is based on the user's consent; in such a case, the Data Controller will retain the personal data until the consent is revoked. Data provided for promotional activities will be retained until the user's consent is revoked and, in any case, for no more than two years.

DATA TRANSFER

The Data Controller may transfer the personal data collected through the Site to countries located outside the European Union. In such cases, if the company is located in a country for which the European Commission has not adopted an adequacy decision, pursuant to Art. 45 Reg. EU 2016/679, we will guarantee access to your personal data only if you provide your explicit consent. The Data Controller does not transfer the personal data collected through the Site to international organizations.

AUTOMATED DECISION-MAKING PROCESSES

The Data Controller does not engage in processing activities involving automated decision-making processes.

SECTION FOR MINORS

No person under the age of 16 may send information to this Site without prior consent from their parents or guardians, nor may they make purchases or finalize legal acts on this Site without such consent unless permitted by applicable law.

SOCIAL NETWORK PLUG-INS

The Site also incorporates plug-ins that allow easy sharing of content on Social Networks. By clicking on the corresponding Social Network plug-in, a connection is established between the browser and the Social Network's servers, which may track your visit to our Site and, if applicable, associate it with your social account, particularly if you are logged in during the visit. If you do not want the Social Network to track data related to your visit to our Site, you must log out of your Social Network account and delete the cookies that the Social Network has installed on your browser. The collection and use of information by the Social Networks are governed by their respective privacy policies, to which you are advised to refer. Facebook:  https://www.facebook.com/help/238318146535333?helpref=hc_global_nav LinkedIn:  https://www.linkedin.com/legal/privacy-policy?_l=it_IT Instagram:  https://help.instagram.com/196883487377501 The European Commission has currently determined that the United States does not offer an adequate level of data protection. However, Facebook, LinkedIn, and Instagram have committed to complying with the EU-US Privacy Shield agreement, published by the U.S. Department of Commerce on the collection, use, and retention of personal data from EU member states.

YOUR RIGHTS REGARDING DATA PROCESSING

We inform you that, as a data subject, you may exercise the rights provided for in Articles 15-21 GDPR. In particular, you may: Obtain confirmation of whether or not personal data concerning you exists, even if not yet registered, and their communication in intelligible form; Obtain: a) the indication of the origin of personal data, b) the purposes and methods of processing, c) the logic applied in the case of processing carried out with the aid of electronic tools, d) the identification details of the Data Controller, the processors, and the representative appointed under Art. 5, paragraph 2, of the Privacy Code and Art. 3, paragraph 1, GDPR, the subjects or categories of subjects to whom personal data may be communicated or who may become aware of them as designated representatives in the territory of the State, as processors or agents; Obtain: a) the updating, rectification, or, when interested, the integration of data, b) the deletion, anonymization, or blocking of data processed in violation of the law, including data for which storage is unnecessary for the purposes for which they were collected or subsequently processed, c) certification that the operations referred to in letters a) and b) have been brought to the attention, also regarding their content, of those to whom the data have been communicated or disseminated, except in cases where this proves impossible or involves a disproportionate effort in relation to the protected right; Oppose, in whole or in part, a) on legitimate grounds, to the processing of personal data concerning you, even if relevant to the purpose of the collection, b) to the processing of personal data concerning you for the purpose of sending advertising material or direct sales or for the performance of market research or commercial communication, using automated calling systems without the intervention of an operator via email and/or traditional marketing methods, by phone and/or certified mail. It should be noted that the data subject's right to object, set out in the previous point b), for direct marketing purposes through automated methods extends to traditional ones, and that in any case, the data subject retains the possibility of exercising the right to object even in part. Therefore, the data subject may decide to receive only communications through traditional methods or only automated communications or neither of the two types of communication. Where applicable, the data subject also has the rights referred to in Articles 16-21 GDPR (right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object).

FILING A COMPLAINT

The data subject also has the right to file a complaint with the Supervisory Authority of the country of residence.

HOW TO EXERCISE YOUR RIGHTS

To exercise the rights of data subjects, users may send a request to the contact details of the Data Controller listed below:

By registered mail: Acquasystem S.r.l. Via Martiri della Liberazione, 12, 23875 Osnago LC,
By email: info@acquasystemitalia.com;
By phone: +39 039 9371187

Requests are free of charge and processed by the Data Controller as quickly as possible, in any case within one month of receiving the request.

DEFENSE IN COURT

The user's personal data may be used by the Data Controller in court or in the preparatory stages of its possible establishment for the defense against abuses committed by the user in the use of this Site and the services connected to it. The user declares to be aware that the Data Controller may be required to disclose personal data by order of Public Authorities.

EXTERNAL DATA PROCESSOR

The web hosting (OVH Srl, via Leopoldo Cicognara, 7, Milan (MI)), is designated as the external data processor. OVH is located in the European Economic Area and operates in accordance with European regulations (https://www.ovh.it/protezione-dati-personali/).

CHANGES TO THE SITE

The Site Owner reserves the right to modify the contents of the Site at any time and without notice. The user agrees to be bound by such future revisions and therefore undertakes to periodically visit the Site to be informed of any changes.

CHANGES TO THIS PAGE

The Data Controller reserves the right to make changes to this page. The user agrees to be bound by such future revisions and therefore undertakes to periodically visit this page to be informed of any changes.

This privacy policy was updated in 05/2023.