Privacy Policy

Dear User, This Policy has been drafted for the website www.grupposcart.com owned by Scart S.r.l. located at Nucleo Pianacci 28 – 52011 Bibbiena (AR), having VAT number 00113990519 and email info@grupposcart.com, acting as Data Controller, and not also for other third-party websites outside the Group that may be consulted by the user through links. 

This Policy is provided pursuant to Article 13 of the GDPR and the Privacy Code, as well as in accordance with Recommendation no. 2/2001 that the European Data Protection Authorities, united in the Group established by Article 29 of Directive no. 95/46/EC, adopted on 17th May 2001 to identify certain minimum requirements for the collection of personal data online, along with subsequent amendments and additions.
Any future additions or changes to this list will be duly brought to your attention.
The Policy is intended for all subjects who interact with the web pages of the site, both for those who use the site without registering and for those who, at the end of the specific procedure, register on the site and use the online services provided through it.

Definitions

This Policy is based on the definitions in Article 4 of the European Data Protection Regulation (GDPR), as follows in order to facilitate the understanding of the text of the Policy:

• GDPR – Regulation (EU) 2016/679 of the European Parliament and Council of 27th April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC.
• Recipient – A natural or legal person, authority, institution or other body to which personal data is disclosed, regardless of whether it is a third party or not. 
• Personal Data – Information relating to an identified or identifiable natural person, being the Data Subject. An identifiable natural person is a person who can be identified directly or indirectly, in particular by the assignment of an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Personal data can be, for example, name, contact details, user behaviour or bank details.
• Data Controller – Natural or legal person, public authority, agency or other body who, alone or together with others, decides on the purposes and means of the processing of personal data. 
• Processing of personal data – Any operation or set of operations performed on personal data or sets of personal data, with or without the use of automated means, such as collection, recording, organisation, structuring, storage, adaptation or modification, extraction, consultation, use, disclosure by transfer, dissemination or other forms of making available, alignment or combination, limitation, erasure or destruction.

Data Controller

The Data Controller is Scart S.r.l. located at Nucleo Pianacci 28 – 52011 Bibbiena (AR), having VAT number 00113990519 and email info@grupposcart.com. The Data Controller has appointed a Data Protection Officer, who can be contacted via the email address dpo@scart.it.

Type of data processed 

The data processed by the user is of a common nature – in particular being navigation data deriving from the use of computer systems. 

During normal operation, the software procedures for operation of the site acquire personal facts of a common nature whose transmission is implicit in the use of communication protocols. This information is not collected in order to be associated with identified parties, yet by its very nature could be able to identify users through processing and association with data held by third parties. 

This category of data includes: IP addresses, domain names of the computers utilised by users to connect to the Website; the addresses in URI (Uniform Resource Identifier) format of the resources requested, the time when the request is made, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server (successful, error, etc.) and other parameters concerning the user’s operating system and computer environment. This data is used solely to extract anonymous statistical information regarding the use of the Website and to check its correct functioning, and is deleted immediately after processing. 

The processing of user data that derives from the compilation of the Contact Form, Newsletter subscriptions, Work With Us and Cookie Policy are subject to specific Policies in accordance with legal requirements. 

Purpose of the processing and legal basis of the processing

Data for the security of the site and for the prevention of abuse and spam, as well as data for the analysis of site traffic (statistics) in aggregate form, is processed on the basis of the legitimate interest of the Data Controller and the protection of the site and users themselves.

The legal basis of the processing is thus found in Article 6(1)(f) of EU Regulation 679/2016. The document explaining the legitimate interest of the Data Controller is available to the user following a specific request to be sent to the certified email address scart.imballaggi@pec.it, an email to the Data Protection Officer via dpo@scart.it or a registered letter to Scart S.r.l. at Nucleo Pianacci 28 – 52011 Bibbiena (AR).

Data retention period

The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the website or application, otherwise the data on web contacts is not retained for more than seven days. 

Use of cookies

With regard to the use of cookies, please refer to the additional and specific “Extended Policy” published on this website and drawn up in accordance with the provisions of the Regulation dated 8th May 2014 issued by the Data Protection Authority, as amended by Regulation no. 231 of 10th June 2021, which supplements and completes this document.

Communication, dissemination and transfer

The provision of personal data is mandatory in order to access and implement the functions of the website and, apart from that specified in regards to browsing data, the user is free to provide their data as required by the specific Privacy Policies. 

The data collected will not be disseminated, sold or exchanged with third parties without the express consent of the Data Subject, except for any communications to authorised third parties likewise committed to confidentiality or whereby appointed as Data Processors pursuant to Article 28 of Regulation (EU) 2016/679. Upon request, the complete and up-to-date list of Data Processors can be found through the methods indicated in this Policy. Your data may be communicated to the other Group companies solely for administrative purposes and for entering into contracts. The data may be communicated to the competent authorities, according to the terms of the law.

Data shall not be transferred outside the European Union.

The Data Controller does not transfer data to third countries or international organisations. However, the use of security tools may result in the transfer of data outside the economic area. This is governed by EU standard contractual clauses, which guarantee adequate protection of your personal data pursuant to Article 46 of the GDPR.

Google’s Privacy Policy and terms of use are available at the links: https://www.google.com/policies/privacy/ and https://policies.google.com/terms. 

Rights of the Data Subjects

The persons to whom the personal data refers have the right at any time to request access to and rectification of the data, erasure of the data, restriction of processing, the right to object to the processing of the data, as well as the right to data portability. They also have the right to lodge a complaint with the Supervisory Authority under the link of the Personal Data Protection Authority, https://www.garanteprivacy.it/home/footer/contatti.

The Data Controller has created a Policy for exercising the rights as Data Subjects, which can be consulted at the link: https://grupposcart.com/en/procedures-for-interested-parties

Methods of exercising rights

Requests may be made, subject to identification of the Data Subject, by sending:

• A registered letter with return receipt to Scart S.r.l. at Nucleo Pianacci 28 – 52011 Bibbiena (AR);
• A certified email to the address scart.imballaggi@pec.it;
• An email to the Data Protection Officer via dpo@scart.it.

This document constitutes the Privacy Policy of this site and will be subject to updates.