SO GOOD SRLS, protects the privacy of Users. The data that may be communicated by the User through the Site will be treated with the utmost attention and with all the tools aimed at guaranteeing its security, in full compliance with current legislation.

We wish to inform you that the “European Regulation 2016/679 on the protection of natural persons with regard to the Processing of Personal Data, as well as on the free movement of such data” (hereinafter “GDPR”) provides for the protection of natural persons with regard to the processing of personal data as a fundamental right. Pursuant to Article 13 of the GDPR, therefore, we inform you that:

DATA CATEGORIES

Data collected automatically

The computer systems and applications dedicated to the operation of this website detect, during their normal operation, some data (the transmission of which is implicit in the use of Internet communication protocols) potentially associated with identifiable users. The data collected includes:

• IP addresses and domain names of the computers used by users who connect to the site
• Addresses in URI (Uniform Resource Identifier) notation of the requested resources
• Method used to submit the request to the server
• Size of the file obtained in response
• Numerical code indicating the status of the response given by the server (successful, error, etc.)
• Other parameters concerning the operating system, the browser, and the IT environment used by the user
• Name of the internet service provider (ISP)
• Date and time of visit
• Web page of origin of the visitor (referral) and exit

Data provided voluntarily by the user

The voluntary and explicit sending of e-mails to the addresses indicated in the different access channels of this site does not require consent and involves the acquisition of the sender’s address and data, necessary to respond to requests, as well as any other personal data included in the message.

Such data is intended to be voluntarily provided by the user at the time of requesting the provision of the service. By inserting a comment or other information the user expressly accepts the privacy policy.

On the contrary, specific summary information will be reported or displayed on the site pages prepared for particular services on request (form). The user must therefore explicitly consent to the use of the data reported in these forms in order to send the request.

Cookies

The site uses cookies. The data collected thanks to cookies can be used to:

• Access parts of the site
• Conduct statistical analysis
• Make the browsing experience more pleasant and efficient in the future, evaluating user behavior and modifying content based on their behavior

For further information, a specific cookie policy is available.

PURPOSE OF DATA PROCESSING AND LEGAL BASIS

The processing of your data has the following purposes and legal basis:

• For data collected automatically: the legal basis is the legitimate interest of the owner, and the purpose is to guarantee and improve the web browsing experience.
• For data provided voluntarily by the user: the legal basis is specified in the individual information provided, depending on the various services requested and provided through the site.
• For cookies: compare the specific cookie policy.

RECIPIENTS OF THE DATA

Within the limits relevant to the processing purposes indicated, your data may be communicated to:

• Partners
• Consultancy firms
• Private companies
• Third-party technical service providers
• Hosting providers
• IT companies
• Communication agencies

The recipients are appointed Data Processors.

TRANSFER OF DATA TO THIRD COUNTRIES

The transfer of your data to a third country is not foreseen. In the event of any processing of personal data outside the European Union, the same will take place only after the adoption of adequate guarantees, as required by mandatory legislation.

STORAGE PERIOD

Due to the principle of limitation of conservation (art.5, GDPR), the verification of the obsolescence of the data stored in relation to the purposes for which they were collected is carried out periodically. In particular:

• Data collected automatically: processed for the time strictly necessary, for the sole purpose of obtaining statistical information on the use of the site and to verify its regular functioning, also for security purposes or according to the deadlines established by law.
• Data provided voluntarily by the user: will be kept for a period of time not exceeding the achievement of the purposes for which they are processed or based on the deadlines established by law.
• Data collected via cookies: refer to the specific cookie policy.

RIGHTS OF THE INTERESTED PARTY

As “Interested Parties” to the processing, the user has the right to:

• Access, rectification, cancellation, limitation, and opposition to the processing of data
• Obtain the data without impediments from the data controller in a structured format commonly used and readable by an automatic device to transmit them to another data controller
• Revoke consent to processing, without prejudice to the lawfulness of the processing based on the consent acquired before the revocation
• Propose a complaint to the Guarantor Authority for the Protection of Personal Data

In the event that it is not possible to request the deletion of the data, you may still object to the processing when this is justified by reasons inherent to your particular situation.

The exercise of the aforementioned rights can be exercised by written communication to be sent by:

• PEC to sogoodsrls@legalmail.it
• Registered letter with return receipt to the address: Milano (MI), Via Carlo de Cristoforis, 12 – CAP 20124

DATA PROCESSING METHODS

The personal data provided by you will be the subject of processing operations in compliance with the aforementioned legislation and the confidentiality obligations which inspire the Data Controller’s activity.

The data will be processed:

• With IT tools
• On paper supports
• On any other type of suitable support (e.g., cloud systems, digital archiving, and substitute conservation systems)

All in compliance with adequate technical and organizational security measures required by the GDPR.

FINAL PROVISIONS

The information is provided only for this website and not for other websites that may be consulted by the user via links contained on this site.

The information may undergo changes due to the introduction of new regulations; the user is therefore invited to periodically check this page to always be updated.

AUTOMATED DECISION MAKING PROCESSES

There are no automated decision-making processes.