WEBSITE PRIVACY POLICY This privacy policy is provided to users who access and use the website of SANIPUR S.r.l., pursuant to and for the purposes of Legislative Decree 196/2003 “Personal Data Protection Code” and subsequent amendments, and Articles 13 – 14 of Regulation (EU) 2016/679 “General Data Protection Regulation” (GDPR), to inform them of the essential elements of the data processing carried out.

Data Controller

The Data Controller is SANIPUR S.r.l., with its registered office at Via S. Quasimodo, 25, 25020 Flero (BS). The website www.monoclorammina.it is a brand of SANIPUR S.r.l.

Data Processors and Persons in Charge

The updated list of data processors and persons in charge of data processing is kept at the headquarters of the Data Controller.

Brief Description of Data Processing

For the purposes outlined in this privacy policy, the Data Controller will process the personal data you voluntarily provide in communications, such as personal and contact details, as well as the data automatically collected during navigation. a) Navigation Data The IT systems and software procedures used to operate the Site may acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. These are not collected to be associated with identified individuals, but by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or the type of device used by users connecting to the Site, settings and characteristics of the device, as well as system activities, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (success, error, etc.), and other parameters related to the user’s operating system and IT environment. These data are used to allow proper navigation, to obtain information to monitor the proper functioning of the Site, to ensure the correct provision of the various functionalities you request, and for identifying any liability in case of hypothetical IT crimes against the Site or third parties. Regarding personal data collected through cookies, we invite you to view our Cookie Policy. b) Personal Data You Provide and Data Collected We collect the data you voluntarily provide, such as personal and contact details (e.g., name, surname, company name, turnover, email address, city, profession/role, phone number, navigation data acquired by the IT systems and software procedures used to operate the website (e.g., IP addresses, domain names of computers…)) to respond to your requests for information sent via email or communications sent to the addresses provided on the Site (e.g., email) or other channels (e.g., social networks).

Purposes and Legal Bases for Data Processing

Personal data will be processed by the Data Controller to allow browsing of the Site, to ensure its proper functioning, to manage and respond to your requests for information or communications, and for the protection of our rights in legal and extrajudicial proceedings. In relation to the purposes we pursue, the legal bases for processing are: the execution of a contract or pre-contractual measures taken at your request, and our legitimate interest.
  1. Allow navigation of the Site and ensure its proper functioning. The legal basis for processing is the execution of a contract or pre-contractual measures at your request. Providing personal data for this purpose is necessary to allow you to navigate the Site and to ensure the correct operation of the Site.
  2. Manage and respond to your requests for information received via the email address provided on the Site or other communication methods. Assistance with purchased products and services.
  • Data types processed: Personal and contact data, personal data related to the contracted product/service.
  • Legal basis: Execution of a contract in which the user is a party (to resolve anomalies). Legitimate interest (for analysis aimed at improving service).
  • The legal basis for processing is the execution of a contract or pre-contractual measures at your request.
You are not obliged to provide your data for this purpose; however, the provision is necessary to follow up on your requests, and the consequence of not providing them could be the inability to process your request.
  1. Send marketing communications, promotions, advertisements, market surveys relating to products marketed or services provided (marketing) with the user’s consent. Sending, with automated contact methods (email and instant messaging), advertising material, newsletters, promotional and commercial communications related to products and/or events, as well as conducting market studies and statistical analysis and assessing customer satisfaction.
  • Legal basis: Consent (requested through contract or specific request); optional and revocable at any time. Art. 6 para. 1(a) GDPR.
  • If the user has not given consent for automated commercial communications, they may still receive traditional communications, unless they have expressed opposition through ordinary means or the Opposition Register.
  1. Marketing to existing clients: Sending communications regarding contracted products/services and/or similar products/services to those already contracted (newsletters, events, etc.).
  • Data types processed: Personal and contact data, company affiliation, and role.
  • Legal basis: Legitimate interest. Art. 6 para. 1(f) GDPR.
  1. User behaviour analysis: Creating a profile through the use of profiling cookies, where accepted (profiling).
  2. Managing your spontaneous application received via the email address provided on the Site or other communication methods. The legal basis for processing is the execution of pre-contractual measures at your request. You are not obliged to provide your data for this purpose; however, the provision is necessary to follow up on your requests, and the consequence of not providing them could be the inability to process your application.
  3. Exercise or defend a right in court or in extrajudicial proceedings. The legal basis for processing is the Data Controller’s legitimate interest in exercising or defending its rights; the Data Controller has deemed that this legitimate interest does not prejudice your rights and freedoms.

Methods of Processing and Data Retention Period

Your data will be processed using IT and telematic tools and are protected by appropriate technical and organisational security measures to ensure confidentiality, integrity, and availability. We retain personal data only for the time necessary to achieve the purposes for which they were collected or for any other legitimate related purpose. Therefore, if personal data are processed for two different purposes, we will retain such data until the purpose with the longest retention period expires. In any case, we will no longer process personal data for the purpose for which the retention period has expired. Personal data that are no longer necessary or for which there is no legal basis for retention will be irreversibly anonymised (and may be retained) or deleted. For marketing purposes, data will be retained until the consent for that purpose is revoked and/or five years after consent is given. Data processed for managing and responding to your information requests will be retained for the time necessary to handle your request and then deleted. If it is necessary to process data for legal protection purposes, they will be retained for the time allowed by law for pursuing legal claims.

Recipients and Transfer of Personal Data

The user’s personal data may be made available to and/or communicated to subjects appointed as data processors (including external ones), in relation to their competencies and functions, in order to achieve the stated purpose or to comply with specific legal obligations. For example, personal data may be made available to and/or communicated to:
  • Employees of the Data Controller, duly appointed as data processors, or collaborators and/or consultants of the Data Controller, duly appointed as data processors;
  • Companies, consultants, or professionals possibly appointed for the installation, maintenance, updating, and management of the hardware and software used by the Data Controller or those employed for the provision of their products and/or services, also potentially acting as system administrators;
  • Companies, consultants, or professionals assisting the Data Controller in complying with specific legal obligations.
The personal data collected will not be disclosed, made available, or consulted in any form to subjects other than those listed in this privacy policy and/or as required by applicable law. The user’s personal data will not be transferred outside the European Economic Area; however, in such a case, the Data Controller specifies that the processing will be carried out using one of the methods allowed by the Data Protection Regulation, such as adopting Standard Clauses approved by the European Commission, selecting subjects adhering to international programs for the free circulation of data, or operating in countries considered safe by the European Commission.