DATENSCHUTZERKLÄRUNG

www.sama-online.com - sama.sacmi.com - sama-online.com

von SAMA MASCHINENBAU GmbH

mit Rechtssitz in Schillerstrasse 21, D-95163 Weissenstadt Germany, UID-Nummer DE812 088 367, Telefon: +49-9253-8890, Fax: +49-9253-1079, E-mail: info@sama-online.com (hereafter also referred to as "the COMPANY”).

Kontaktdaten Datenschutzbeauftragter: Sabine Thiele datenschutz@sama-online.com

This web page describes the management modes of the aforementioned websites (hereinafter referred to as the "websites" and/or individually as the "website") with specific reference to the handling of personal data by the visitors who visit the website (hereinafter referred to as the “users” or individually as the “user”).

The following notice regarding the processing of personal data (hereinafter referred to as the "Data Protection Notice") is issued by the COMPANY as the processing controller of personal data which is collected on the websites and provided directly by the users or generated after website use. The COMPANY values the privacy of the users, which is why it provides this Data Protection Notice in order to allow users to make an informed decision with regard to the collection of requested information and logging in to portions of the website in order to use them.

Personal data refers to “all information that relates to an identified or identifiable natural person (the “data subject” in the following); a natural person is considered identifiable if they are directly or indirectly able to be identified by assignment of an identifier like a name, ID name, location data, an online ID, or according to one or more special characteristics that express information about the physical, physiological, genetic, psychical, economic, cultural, or social identity of this natural person”.

Processing refers to “any process completed with or without the help of automation or any sequence of processes in the context of personal data such as collection, organisation, arrangement, storage, adjustment, or alteration, exporting, querying, use, disclosure via transfer, distribution, or another form of provision, comparison, or connection, limitation, deletion, or destruction”.

As a general rule, all personal data (hereinafter referred to as the "personal data" and/or the "data"), which the user provides to the COMPANY via the website or which is collected in conjunction with the use of the COMPANY’s services (hereinafter referred to collectively as the "services" and/or individually as the "service"), as defined in more detail in the Section Purpose of processing personal data in this Data Protection Notice, is processed in accordance with the principles of data privacy recognised under applicable data protection legislation, e.g. transparency, correctness, legality, data minimisation, restriction of the purposes and retention, accuracy, integrity and confidentiality.

This Data Protection Notice was compiled on the basis of the principle of transparency. At the same time, an effort has been made to avoid the use of legal language in order to make the information easier to understand.

The Data Protection Notice is divided into individual sections (hereinafter referred to collectively as the "sections" and/or individually as the "section"), each covering a specific topic. This subdivision is intended to make the information quick and easy to read through or look up.

The COMPANY’s websites may contain links to third party websites in order to make them easier to use: The COMPANY has no control over these websites, nor is it responsible for their contents and/or for the data processing they practice or implement.

This Data Protection Notice is subject to change at any time. We therefore recommend that you refer to it regularly.

PURPOSE OF PROCESSING AND PERSONAL DATA PROCESSED

Within the applicable legal limitations, data is processed by the COMPANY for the following purposes:
 
  1. For performing activities closely involved in the management of users’ interactions with us, e.g. managing responses to inquiries submitted with the contact forms; registering and processing your requests for technical customer support; registering and processing your applications as COMPANY suppliers; managing access to restricted portions of the website (such as the one for customers or suppliers) and offering to help users recover their login data; concluding purchase contracts for goods and/or services, managing and processing orders; scheduling the delivery of purchased products and monitoring interactions with users (provision of services);
  2. enabling the COMPANY to properly perform their contractual obligations (contractual obligations) to the user and vice versa;
  3. fulfilling the legally stipulated obligations, terms and community regulations or standards on the part of legal authorities and supervisory bodies, as well as performing required accounting and tax duties (legal obligations);
  4. searching for information required in order to identify anomalies, fraudulent activities and/or abuses in conjunction with the use of the website (security);
  5. conducting commercial information campaigns via email for the same type of products and/or services (soft spam) if you have utilised a service on the website or purchased a product or service from the COMPANY;
  6. conducting information campaigns for our products and/or services, as well as advertising or commercial campaigns, market and marketing research using automated systems without operators (e.g. email), but also using conventional channels (e.g. regular mail), conducting activities to determine your level of satisfaction using questionnaires, conducting a survey or interviews (marketing).
The personal data for processing via the website is comprised of the categories listed below.
 
  • Personal data, contact data and any other particular category of Personal Data

    Depending on the services required by the User, the COMPANY may request information, such as: Supplier code assigned by the COMPANY, Company name, Name of the inquirer, Company role of the inquirer, Country, Telephone, Fax, Company e-mail, etc.

    Further data may be collected during the management of each relationship through the Site or can comprise data the User decides to provide to the COMPANY by means of the Contact Us area of the Site.

    Some sections of the Site contain free-text fields that can be used to provide information to the COMPANY that may contain Personal Data. Since these are free-text fields, you may decide to communicate (even inadvertently) special categories of Personal Data, such as Data that disclose political opinions, religious or philosophical beliefs or trade union membership , as well as genetic Data, biometric Data to uniquely identify a natural person, Data pertaining to health, sexual life or sexual orientation.

    The COMPANY asks you not to disclose any of these Data types. Since providing this information is totally optional, if you decide to do so, the COMPANY can choose whether to proceed with processing of entered data belonging to the special categories listed above, or to process that information only with your explicit authorisation and in compliance with current regulations.

  • Personal Data of other people

    As mentioned in the previous paragraph, since any type of message can be entered in the free-text fields of the Site, they may indeed contain Personal Data of other people involved. In any case you decide to share this data with the COMPANY, you will be considered as independent Controller and as such you will take on all obligations and legal responsibilities pertaining to this. Therefore, in this regards, the User provides the broadest indemnity against any claim, request, refund or damage due to processing, etc. that may come to the COMPANY from people whose Personal Data have been forwarded by you in breach of applicable personal data protection regulations. Since, in this case, the COMPANY does not collect the information directly from the Data Subjects (but from you indirectly), you ensure that this specific processing is based on the authorisation of these Data Subjects or on another suitable legal basis that authorises processing of this information.

  • Searching and hiring personnel

    If you decide to apply for a work opportunity within our Group or desire to send a spontaneous application for future openings, please see the following address: Work with Us. Personal data provided by you for this purpose will be processed according to what is set out in the specific Privacy Policy provided there.

  • Navigation data and cookies

    In the course of normal operation, the IT systems and available software processes for operating the website gather certain personal data which is transmitted in conjunction with the use of the online communication protocols. This is not information collected by the COMPANY in order to associate it with identified data subjects – rather, it is information which, due to its nature, could potentially be used to identify the users by means of extrapolation and association with data in the possession of third parties.

    This data category includes IP addresses or names in the domain of the computers which the users use to connect to the website, the addresses for identifying the requested resources by URI (Uniform Resource Identifier), the time of the request, the methods used to make the request to the server, the size of the file received in response, the numerical code which indicates the type of reply from the server (successful, error, etc.) and other parameters pertaining to the operating system and the IT environment of the user.

    This data is only used for anonymous statistical information on the utilisation of the website, for checking to ensure correct operation and to search for anomalies and/or abuses.

    The information on the utilisation of cookies is provided in the Cookie Policy, which you should read on the next page (under the heading COOKIE-POLICY).

 

LEGAL BASES FOR PROCESSING, OBLIGATORY/OPTIONAL DISCLOSURE OF PERSONAL DATA AND CONSEQUENCES IN CASE OF NO RESPONSE

If a request for information is marked with an asterisk (*) on the page, this indicates that the COMPANY considers this information as mandatory and absolutely necessary for the following purposes. Described below are the legal bases used by the COMPANY for the processing of your personal data for the purposes indicated in the preceding section ("Purpose of processing and personal data processed").

The disclosure of the personal data and the relevant processing for the purposes of service provision and contractual obligations is closely associated with the performance of the desired service and the proper implementation of our contractual relationship with you. As such, the disclosure of this personal data constitutes a required condition for establishing the contractual relationship. If you fail to disclose the personal data required for this purpose or provide demonstrably unsuitable data, the COMPANY will not be able to perform the service and the contractual relationship. In such cases, the COMPANY is entitled to refuse or discontinue performance of the service or contract relationship.

The disclosure of the personal data and the associated processing for the purposes indicated under legal requirements is required by the COMPANY for compliance with the relevant legal requirements. If you provide personal data to the COMPANY, they must process the data in accordance with the applicable laws. These laws may require that the data be stored and transmitted to the relevant authorities for compliance with tax, customs or other legal requirements.

The disclosure of the personal data and the associated processing for security-related purposes is based on the COMPANY’s interest in identifying and preventing illegal activities and ensuring responsibility for any hypothetical cybercrime against the website or third parties. As such, this is a required condition for navigating the website. The COMPANY can therefore decline access to the website if the personal data is not disclosed for these purposes.

The disclosure of the personal data and the associated processing for soft spam purposes is based on the COMPANY’s interest in emailing you marketing announcements regarding products and services similar to those which you have previously purchased and/or which you use through the website. By using the special link included at the bottom of each message you receive, you can unsubscribe from these emails without any consequences whatsoever (other than no longer receiving these sorts of communications from the COMPANY).

The disclosure of the personal data and the associated utilisation of the data for marketing purposes is based on your express consent, as indicated by a specific signal of affirmation on your part (e.g. clicking the relevant checkbox/field). You are never required to give the COMPANY this consent, and, if you do, you can revoke it at any time without consequence (other than not receiving any marketing communications from the COMPANY). As per the information in the “Your rights as a data subject” section of this Data Protection Notice, you can revoke your consent for this purpose.


RETENTION OF PERSONAL DATA

Personal data processed for service provision and contractual obligations is stored by the COMPANY for as long as absolutely necessary to perform the requested service and properly fulfil our contractual obligations to you. The COMPANY retains your access data for the services on the website until you log off from these services. Since this personal data is made available for the purpose of service provision and contract performance, the COMPANY can retain it for a longer period of time if the interests of the COMPANY with regard to their responsibility for these processing activities must be protected. At the end of this time period, the data is deleted.

Inquiries submitted by you through the contact page of the website and the data contained therein are only stored for the period of time required in order for the COMPANY to properly process the inquiry. At the end of this time period, the data which directly or indirectly identifies a physical person (e.g. given name, surname, email) is anonymised and retained as compiled data for statistical purposes.

Personal data processed for legal requirements is retained by the COMPANY for the period designated in the specific legal provisions or the applicable standard.

Personal data processed for security purposes is retained for no longer than 6 months, unless it is used for determining responsibility for hypothetical cybercrimes against the website or third parties (e.g. for defence in court by providing this data to the relevant authorities).

Personal data processed for soft spam purposes is retained by the company until you will request to stop their processing  using the link at the bottom of every soft spam email you receive.

Personal data processed for marketing purposes is retained by the COMPANY until such time as you revoke your consent. After you revoke your consent, the COMPANY will no longer use your personal data for these purposes but will still retain it if the interests of the COMPANY with regard to the responsibility for these processing activities must be protected.


Handling of business cards

When you give out or exchange business cards, you provide us your personal data, e.g. phone number, email address. We will only use this information for staying in contact with you. We will also send you additional information on our services. If you do not purchase any of our products or services, we will delete your contact information after 5 years.

You have the right to information, deletion or correction at all times.


Information on other data processing procedures

Specific information on the application procedure

Affected data:                                    Application information
Processing purpose:                          Implementation of application procedure
Categories of recipients:                   Public bodies in case of overriding legal provisions.
External service providers or other contractors.
Other external bodies, provided that the data subject has given consent or that disclosure is permissible based on overriding interest.
Transfers to non-EU countries:        In conjunction with contract performance, order processors from outside of the European Union may be used.
Data retention period:                        Application data is usually deleted within six months of the decision notice, unless you have agreed to have the data stored for a longer period.


Specific information on the processing of customer data/potential customer data

Affected data:                                      Data provided for the purposes of contract performance; if applicable, additional data for processing based on your explicit consent.
Processing purpose:                          Contract performance.
Categories of recipients:                    Public bodies in case of overriding legal provisions
External service providers or other contractors.
Other external bodies, provided that the data subject has given consent or that disclosure is permissible based on overriding interest.
Transfers to non-EU countries:        In conjunction with contract performance, order processors from outside of the European Union may be used.
Data retention period:                        The data retention period depends on the legal retention requirements and is usually 10 years.


Specific information on the processing of employee data

Affected data:                                      Data provided for the purposes of contract performance; if applicable, additional data for processing based on your explicit consent.
Processing purpose:                          Contract performance.
Categories of recipients:                    Public bodies in case of overriding legal provisions.
External service providers or other contractors.
Other external bodies, provided that the data subject has given consent or that disclosure is permissible based on overriding interest.
Transfers to non-EU countries:        In conjunction with contract performance, order processors from outside of the European Union may be used.
Data retention period:                        The data retention period depends on the legal retention requirements and is usually 10 years.


Specific information on the processing of supplier data

Affected data:                                      Data provided for the purposes of contract performance; if applicable, additional data for processing based on your explicit consent.
Processing purpose:                          Contract performance.
Categories of recipients:                    Public bodies in case of overriding legal provisions.
External service providers or other contractors.
Other external bodies, provided that the data subject has given consent or that disclosure is permissible based on overriding interest.
Transfers to non-EU countries:        In conjunction with contract performance, order processors from outside of the European Union may be used.
Data retention period:                        The data retention period depends on the legal retention requirements and is usually 10 years.


YOUR RIGHTS AS A DATA SUBJECT

As a data subject, at all times, you have the following rights:
 
  1. the right to request access your personal data (and/or a copy thereof) and other information on the ongoing processing of said data;
  2. the right to request that the COMPANY correct or update your personal data if it is incomplete or not up-to-date;
  3. the right to request that the COMPANY delete your personal data if it is no longer required for processing or legal compliance;
  4. the right request that the COMPANY restrict the processing of your personal data if you believe that your data is being handled incorrectly, illegally or despite your objection and/or unnecessarily;
  5. the right to data transmission, i.e. the right to have the COMPANY provide you with a copy of your personal data in a structured format which can be read both normally and on automated devices or to have the data transmitted to another data controller;
  6. the right to enter an objection, regarding your specific situation, against the processing of your personal data on a legal basis, prohibiting the COMPANY from processing your personal data;
  7. the right to revoke your consent for marketing purposes or object to the use of your personal data for soft spam purposes. We also wish to note that the consent to receive marketing notifications does not only pertain to messages sent by automated systems without an operator (e.g. email or SMS) but also those sent by conventional means of contact (e.g. phone or mail). Consent for processing can always be revoked, even separately, if you decide, for example, that you only wish to receive such communications through automated systems (e.g. via email or SMS instead of by mail or by phone and vice versa).
 
See here to contact us by email or post [datenschutz@sama-online.com]. You also have the right to file a complaint with data protection supervisory authorities.


CHANGES TO THIS DATA PROTECTION NOTICE

Version 1.0 of this Data Protection Notice is effective as of 25/05/2018. The COMPANY reserves the right to modify its content in part or in whole based on changes to the applicable regulations or to simply update it. The COMPANY can notify you of these changes as soon as they are introduced or when they become binding upon publication on the website. The COMPANY encourages you to visit this section regularly to stay informed regarding the latest and most up-to-date version of the Data Protection Notice, as well as the collection and utilisation of personal data by the COMPANY.


COOKIE POLICY

The COMPANY uses cookies on their websites in the forms and by the methods described on this page. By using the website, you agree to the utilisation of cookies in accordance with terms and conditions as follows.

What are cookies?
Cookies are information segments which websites add to the user’s navigation device when the user visits a page. They can include transmission information between the website and the device utilised, as well as between said device and other websites which operate on behalf of the COMPANY or privately and are consistent with the information on data protection in the corresponding document. The user can choose to disable all cookies by modifying the settings of the navigation program (browser) they are using. However, disabling cookies could prevent some services from functioning properly, and the user will no longer be able to access multiple functions designed to optimise the navigation experience. For more information on managing or disabling browser cookies, refer to the final section of this cookie policy.
For more details on cookies and their overall functions, please visit an informational website such as allaboutcookies.org

Why do we use cookies?
Cookies serve multiple purposes. They help website owners understand how users use the current website. They allow the user to navigate the various pages of the website more efficiently and help the site remember default settings, etc. Cookies also provide marketing information, for example. This information helps the website owner understand which products the user is most interested in and which of these products is most important.

What types of cookies do we use?
The cookies used on our website fall into the categories illustrated below.

Temporary and persistent cookies
Cookies can also expire at the end of a navigation session, which is defined as a timeframe in which the user opens and then closes a window, or they may remain for a longer period of time.
Temporary cookies – These are deleted and disappear from the device if the user leaves the website and closes the program used for navigation; they expire if the browser session ends and cannot remain for a longer period of time. 
Persistent cookies – These remain on the device even after the user leaves the website, until they are deleted or until they reach the expiry date potentially set by the website owner.

First-party and third-party cookies
Depending on the website or domain/internet server, there may be "first-party" and "third-party cookies".
First-party cookies are cookies set directly by websites while the websites are being visited by users or by the website, as soon as the address of the user (displayed in the URL window) is entered.
Third-party cookies are cookies set by a website which are different from the ones visited by the user. Third-party cookies are relevant in cases where the user visits a website and a third party in relation to the service provider of the website that was visited uses a cookie on said website, i.e. cookies from other websites or internet servers of a third party service provider.
As for these cookies, these third-party service providers are normally data controllers independent of the COMPANY (who process the data collected for their own purposes and in accordance with the framework established with you) or can act as representatives of the COMPANY with regard to the processing (i.e. process personal data for the COMPANY).

Cookie technology for performance and functionality
Depending on their rationale, website cookies can vary and fall into three other categories as illustrated below.
The absolutely required or “technical” cookies are important for navigating the website and using some of its functions. Some of the online services that the user needs (e.g. access to reserved areas) cannot be provided without these cookies. On our websites, this type of cookie does not collect any personal data from the user, and the user cannot be identified using only the cookies.
Performance cookies collect anonymous information, and that lets us know how users are interacting with our websites. For example, they tell us which pages are used the most, how much time is spent on the website, any error messages, etc. The performance cookies we use only collect information in groups and in an anonymous form and are used to improve website functions and the user’s navigation experience. For additional information on how to delete or manage performance cookies, refer to the corresponding sections on this page.
Functional cookies: these allow our websites to record user behaviour (e.g. text size viewed, language setting, location, etc.) and offer functionalities based on user behaviour. In some cases, cookies can also be used to offer online services (e.g. a live chat service) or avoid offering services or notifications which the user has already declined in the past. Our websites set this cookie type on the user’s navigation device in a way that is entirely anonymous, and you should not be able to identify that. For additional information on how to delete or manage performance cookies, refer to the corresponding sections on this page. Please note that the selected presettings and/or settings for future visits are not saved if the user deletes this type of cookies.

Statistical/analytical third-party cookies without identification: Utilisation of Google Analytics with IP masking and without cross-referencing with other data held by third parties.
The COMPANY uses the service of Google Analytics from Google Inc. to manage the website with IP masking and without cross-referencing with other data held by third parties, i.e. Google Inc.). Google Analytics uses cookies which provide information on the way the user uses the website. These cookies can be accepted in accordance with the applicable policy on technical cookies, since they comply with the following conditions: Measures taken to reduce the identification of cookies by masking portions of the IP (described at the following link: https://support.google.com/analytics/answer/2763052?hl=i); the third part pertains to the requirement that these cookies be used exclusively for the provision of the service, that they be stored separately and not "enhanced" or “cross-referenced” with other available information. In this context, we wish to note that the COMPANY has connected Google Analytics with a supplementary service from Google and that no advertising option or data sharing has been enabled with Google. Furthermore, an add-on for disabling Google Analytics can also be installed on the user’s browser (https://tools.google.com/dlpage/gaoptout).

To provide you with more information, we have compiled the following table listing the name, data controller, purpose, duration and disabling method for each cookie:
 
Cookie Name Controller Cookie Purpose Cookie Duration How to disable the cookie
ASP.NET_SessionId The COMPANY Session cookies Session cookies This cookie is required for navigating the website.
If you wish to disable it, leave the website, and close every open session. To continue navigating the website, this authorises the use of this cookie.
CookiePolicy The COMPANY This cookie is used to track authorisations given by the user 20 years If you wish to disable this cookie, delete it from your device by following the instructions on this page at the "Managing or Deleting Cookies" paragraph.
__utma Google Inc. Cookies used to calculate the number of visits by the same user with Google Analytics 2 years If you wish to disable this cookie, which is set by Google Analytics, follow this link, and install the additional component for disabling Google Analytics: https://tools.google.com/dlpage/gaoptout
__utmb Google Inc. Cookie which, along with the cookie immediately after it, is used to calculate the time spent on the website with Google Analytics 30 minutes If you wish to disable this cookie, which is set by Google Analytics, follow this link, and install the additional component for disabling Google Analytics: https://tools.google.com/dlpage/gaoptoutt
__utmc Google Inc. Cookie wich, along with the cookie preceding it, is used to calculate the time spent on the website with Google Analytics Session If you wish to disable this cookie, wich is set by Google Analytics, follow this link, and install the additional component for disabling Google Analytics: https://tools.google.com/dlpage/gaoptout
__utmt Google Inc. Cooke used by Google Analytics to throttle the request rate 10 minutes If you wish to disable this cookie, wich is set by Google Analytics, follow this link, and install the additional component for disabling Google Analytics: https://tools.google.com/dlpage/gaoptout
__utmz Google Inc. Cookie for tracking the source of the user with Google Analytics 6 months If you wish to disable this cookie, which is set by Google Analytics, follow the link, and install the additional component for disabling Google Analytics: https://tools.google.com/dlpage/gaoptout

For more information on how the third-party service provider Google Inc. could use your information, follow this link to the applicable data protection legislation: https://policies.google.com/privacy?hl=ithttps://policies.google.com/technologies/partner-sites?hl=it.

Social buttons and widgets
Our websites could also contain social buttons/widgets or specific “buttons” designed as social network icons (e.g. Facebook, Twitter, YouTube, Google Plus, etc.). Using these buttons, users browsing the website are able to directly access and interact with social networks with just a “click”. When users click social buttons/widgets, the social network receives data in conjunction with the user’s visit to the site. Aside from cases in which the user can spontaneously click to share his or her own browsing data with the preselected social networks, the COMPANY does not exchange any user browsing information received through the websites with social networks accessible via social buttons/widgets. For more information, refer to the data privacy policies of the specific social networks accessible via the social buttons on our website.

Facebook
https://it-it.facebook.com/about/privacy
Twitter
https://twitter.com/privacy
LinkedIn
http://www.linkedin.com/legal/privacy-policy
YouTube and Google Plus
https://www.google.it/intl/it/policies/privacy/

Managing or deleting cookies
Most internet browsers are initially set to automatically accept cookies. The user can modify these settings to block cookies or to get a notification each time that cookies are sent to the navigation device. Also, at the end of each navigation session, the user can delete the cookies collected by his or her device. There are various ways to manage cookies. Please refer to the specific instructions for your browser. If the user uses different devices to visit and access websites (e.g. computer, smartphone, tablet, etc.), then the user his/herself is responsible for setting each browser of each device to his/her desired default settings with regard to cookies. For more information on managing cookies, refer to:http://www.allaboutcookies.org/manage-cookies/

Select from the following links to access specific instructions for managing cookies with some of the main navigation programs.

Microsoft Windows Explorer
http://windows.microsoft.com/en-us/windows-vista/block-or-allow-cookies
Google Chrome
 https://support.google.com/chrome/answer/95647?hl=en&p=cpn_cookies
Mozilla Firefox
https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Apple Safari
http://www.apple.com/legal/privacy/it/cookies/

If the user does not use any of the aforementioned browsers, he/she can still select “Cookies” in the relevant section of the instructions to find out where the cookie folder is located.
 
You can manage your selection regarding third-party cookies on online platforms such as AdChoice.
 

Ruota il tuo device.