Privacy Policy – Sebyone Srl

Privacy Policy

Our website address is: https://sebyone.it.

Privacy Statement

This Privacy Policy describes how user data is collected, processed and stored on the website “sebyone.it” (hereinafter referred to as the “Site”), in accordance with Article 13 of Legislative Decree 196/03 and EU Regulation 2016/679 of the European Parliament and Council, concerning the protection of individuals with regard to the processing of personal data, known as GDPR (General Data Protection Regulation).

The owner of the Site is Sebyone Srl, with registered office in Cosenza at Via Pola No. 8, VAT number and Tax Code 03784780789, REA CS 257052, certified email sebyone@pec.it (hereinafter referred to as the “Owner”).

This policy does not apply to other websites that may be accessible through links on the Site, for which the data controller is in no way responsible. The Owner invites users of the Site to read the following and to contact them for any information and/or clarification they may require. The Owner acquires personal data voluntarily provided by users in forms for entering personal data required to use the services available on the Site.

1 – Data Controller

The data controller is Sebyone Srl. Contacts: phone +39 0984 175 8225, email info@sebyone.it, certified email sebyone@pec.it, postal service at the headquarters of Sebyone Srl, Via Pola No. 8 – 87100 (CS). The legal representative of Sebyone Srl is Dr. Paolo Lo Giacco.

2 – Data Processor and Processing Outside the European Economic Area

The data processor is Dr. Aldo Pirillo. The easiest way to contact the data processor is by writing to the email address privacy@sebyone.it.

The personal data of users subject to processing, where strictly necessary and within the limits of the stated purposes, may be communicated to other companies trusted by the Owner. In particular, for the proper management of the Site, the personal data collected may be communicated (i) to individuals, companies, associations or professional firms that provide services and assistance and consultancy activities to the Owner, with particular but not exclusive reference to tourist, accounting, legal, tax, financial and IT matters; (ii) to subjects whose right to access them is recognized by legal and regulatory provisions.

The provision of personal data is optional. However, failure to provide, even partially, the data requested in the fields of the forms marked with an asterisk [*] will make it impossible for the Owner to proceed with the complete provision of the product and/or service requested.

By using the Site, the User acknowledges and accepts that Internet transmissions are never completely private or secure and that the Site is not equipped with an advanced data encryption system. The User acknowledges that any data or message sent to the Site could be read or intercepted by third parties, even in the presence of a special notice that a particular transmission (e.g., credit card data) is encrypted or otherwise protected.

Our service providers have been carefully selected and there are contractual conditions that refer to compliance with current regulations on privacy protection. Information has been obtained regarding their technical and organizational measures to protect the security in the processing of personal data. There are collaborations with service providers from the EU and EEA countries. The Site’s data is stored with a cloud service provider within the EU or in IT infrastructure and devices (employees’ computers) at our headquarters within the EU. You can learn more about our service providers by contacting the data processor.

3 – Purposes and Methods of Processing

The Owner informs users that:

3.1 – Data Voluntarily Provided by Users/Visitors

3.1.1 – Personal Data

Except as specified later for navigation data, users/visitors are free to provide their personal data for the following purposes:

3.1.1.1 – Newsletter Service

Legal basis for processing: users give consent to the processing of their data.

Through the Site, users can register for free, with consent, to our newsletter and receive an email twice a month with the following information:

  • Tips, news and curiosities related to the digital sector
  • Offers to purchase our services

With reference to the newsletter service, the following personal data are required and processed with prior consent:

  • Name
  • Email address

Users confirm, by giving their consent, that they are at least 16 years old.

Failure to provide this data will make it impossible for the site managers to provide the newsletter service.

The processing of personal data is carried out by the Owner and/or specially appointed staff with the aid of manual and/or IT tools.

The data entered by users (name and email address) subject to processing by the Owner, within the limits of the stated purposes, may be communicated to other companies trusted by the Owner, to offer the service jointly. In particular, for the proper management of the newsletter service, the Site uses the service of the provider SendinBlue. Here you can consult the general terms of use of SendinBlue https://it.sendinblue.com/legal/termsofuse/. The Privacy Policy of SendinBlue is available here: https://it.sendinblue.com/legal/privacypolicy/.

The transmission of users’ personal data to SendinBlue occurs in three ways: (i) via web panel import after authentication on the site https://it.sendinblue.com/ with SSL protocol, entering the reserved area; (ii) querying SendinBlue APIs through private access keys on SSL protocol; (iii) via the use of SendinBlue’s outgoing mail server (SMTP) using port 465 which uses the SHA256 encryption protocol.

3.1.1.2 – Request for Quotation

Legal basis for processing: processing necessary for the execution of pre-contractual measures adopted at the request of users.

Through the Site, users can request a free quotation for digital services (website and app design and development, custom software, other digital solutions, IT consultancy).

The data acquired directly from the interested party are:

  • Company
  • Name and surname
  • Email address
  • Subject of the request

In all cases, users must declare that they are at least 16 years old.

The processing of personal data is carried out by the Owner and/or specially appointed staff with the aid of manual and/or IT tools.

The personal data subject to processing by the Owner, within the limits of the stated purposes, may be communicated to other companies trusted by the Owner, (i) individuals, companies, associations or professional firms that provide services and assistance and consultancy activities to the Owner, with particular but not exclusive reference to accounting, legal, tax, financial and IT matters, (ii) to subjects whose right to access them is recognized by legal and regulatory provisions.

You can request the updated list of data recipients by contacting the data processor by email at privacy@sebyone.it.

3.1.2 – Sensitive Data

In the event that the user/navigator voluntarily provides, through personal contributions, data considered sensitive concerning the same user (relating, in particular, to health status, religious beliefs, political opinions and trade union membership), in no case and for no reason will such data be used.

3.1.3 – Navigation Data

Legal basis for processing: users give consent to the processing of their data.

The computer systems responsible for the operation of the Site may acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified (i.e., parameters relating to the operating system and the user’s IT environment).

We use cookies to collect some user information. A cookie is a small piece of code sent and stored in users’ web browsers, mobile devices or other portable devices while they are browsing a website.

The Site provides for the use of marketing cookies and remarketing pixels provided by third parties. This allows these parties to collect some information from users who have visited the Site and who are interested in certain services or content. In addition, we use beacons, tags, click tracking codes and scripts to analyze user trends and movements on the Site. We collect aggregated user information that helps us improve the service and the Site, distribute advertising based on activities and interests, and measure the effectiveness of advertising actions. The result of these activities is that users may see targeted offers, based on their own interests and the products or services they currently use or have recently viewed.

You can manage your cookie preferences by changing your browser settings or using the designated pop-up tool on our Site. Please note that if you simply delete all our cookies in your browser settings, certain sections or features of our site may not work properly.

You can find more detailed information about our use of cookies on the page with the extended cookie policy which you can find at this link.

4 – Rights of the Data Subject

The data subject has the right to:

  • Know and understand the purposes for which their data is processed
  • Constantly monitor their data and obtain confirmation of the existence or not of personal data concerning them, even if not yet recorded, and their communication in intelligible form
  • Decide at any time what to do with their data: the data subject has the possibility to modify the decisions made regarding their data at any time and therefore can revoke consent, confirm it or rectify the data if particular needs arise
  • Obtain the indication: (i) of the origin of the personal data; (ii) of the purposes and methods of processing; (iii) of the categories of data that are the subject of processing; (iv) of the logic applied in case of processing carried out with the aid of electronic tools; (v) of the identifying details of the controller; (vi) of the subjects and categories of subjects to whom the personal data may be communicated or who may become aware of them as managers or appointees; (vii) of the retention period of the personal data envisaged or, if this is not possible, the criteria used to determine this period; (viii) of the existence of an automated decision-making process
  • Obtain: (i) updating, rectification or, when interested, integration of data; (ii) cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those whose retention is not necessary in relation to the purposes for which they were collected or subsequently processed; (iii) certification that the operations referred to in points (i) and (ii) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case where this fulfillment proves impossible or involves the use of means manifestly disproportionate to the protected right
  • Object in whole or in part: (i) for legitimate reasons, to the processing of personal data concerning them, even if pertinent to the purpose of collection; (ii) to the processing of personal data concerning them for the purpose of sending advertising material or direct sales or for carrying out market research or commercial communication
  • Ask the controller to return their data in a structured format, commonly used and readable by an automatic device, and the possibility of transmitting the same data to another controller (right to portability)
  • Lodge a complaint with a supervisory authority

All requests regarding data processing can also be sent by email to privacy@sebyone.it or using the other methods indicated at the beginning of the policy.

It is understood that the Owner deletes the personal data of users who request it as soon as reasonably possible, in accordance with current regulations. The Owner reserves the right to retain personal data associated with closed accounts, where created, to comply with current regulations, prevent fraud, collect any pending payments, provide assistance in the event of any investigations and take other actions as required by law.

5 – Data Security

Regarding data protection, some measures are adopted regarding the limitation of the risk of their dispersion, their accidental destruction, their loss and unauthorized processing that could concern them. These are precautions that are verified and updated with reference to the state of the art in the field.

6 – Retention Period

Regarding the retention period of the data, in principle we process and retain them for the entire duration of the contractual relationship. Users must consider that the Owner is subject to various retention and documentation obligations, such as in tax law, the duration of which can be up to 10 years. In the event that users’ personal data are no longer necessary to meet contractual or legal obligations, they will be regularly deleted, unless their further limited processing is necessary to fulfill the purposes mentioned above.

7 – Data Communication

Without the consent of users (ex. art. 24 letters a, b and d of the Privacy Code and art.6 letters b and c of the GDPR) the controller may communicate their personal data entered for the purposes indicated to supervisory bodies, judicial authorities, as well as to all other subjects to whom communication is mandatory by law for the fulfillment of the said purposes. Users’ personal data will not be disseminated outside the specifically contemplated cases.

8 – Changes to This Policy

This policy may undergo changes. It is therefore recommended to regularly check the most updated version present on the site sebyone.it. Explicit consent will be requested again for any purposes different from those for which the personal data were initially collected.