Privacy Policy

Personal data collected for the following purposes and using the following services:

CONTACTING THE USER

Mailing List or Newsletter
Personal Data: Email and Name

Contact form
Personal Data: Surname, Email, Name and Company name

Statistics

Google Analytics and Google Tag Manager
Personal Data: Cookies and Usage Data

contact info

Holder of the treatment
Crisma Security srl Via Rhodesia 2, 00144 Rome – VAT number 12299161005 – segreteria@crismasecurity.it

Full policy

Data Controller

Crisma Security s.r.l. Via Durban 2-4, 00144 Rome – P.Iva 12299161005
Email: privacy@crismasecurity.it

Types of data collected

This privacy policy describes the methods of management of the official website of Crisma Security s.r.l. (hereinafter Crisma Security) with reference to the processing of Personal Data of users, identified or identifiable, who consult it and interact with it and with the web services accessible by electronic means.
Other Personal Data collected may be indicated in other sections of this privacy policy or by means of informative texts displayed at the same time as the collection of such Data.

Personal Data may be entered voluntarily by the User, or collected automatically during the use of this site.
Any use of Cookies – or other tracking tools – by this site or the owners of third party services used by this site, unless otherwise specified, is for the purpose of identifying the User. Failure by the User to provide certain Personal Data may prevent this site from providing its services.
This information is provided in accordance with European Regulation 2016/679 and current national legislation on the protection of personal data.

Method and place of processing of the collected data

Processing methods
The Data Controller processes Users’ Personal Data by taking appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data.
The processing is carried out by means of computer and/or telematic tools, with organizational methods and logics strictly related to the indicated purposes. In addition to the Data Controller, in some cases, categories of employees involved in the organization of the site (administrative, commercial, marketing, legal, system administrators) or external parties (such as third party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) also appointed, if necessary, Data Processors by the Data Controller may have access to the Data. The updated list of Data Processors can always be requested from the Data Controller.
Place
The Data are processed at the Holder’s operational offices and at any other location where the parties involved in the processing are located. For more information, please contact the Data Controller.
Times
The Data are processed for the time necessary to perform the service requested by the User, or required by the purposes described in this document, and the User can always request the interruption of the Processing or the deletion of the Data. Browsing Data are kept for 6 months. Data voluntarily provided by the User are kept for 10 years.

Purpose of the processing of collected data

User Data is collected to enable the Owner to provide its services, as well as for the following purposes: Contacting the User, Interaction with external platforms, Advertising and Statistics.
The types of Personal Data used for each purpose are indicated in the specific sections of this document.

Details on the processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

  • Contacting the User
  • Mailing List or Newsletter

By registering to the mailing list or newsletter, the User’s email address is automatically included in a list of contacts to whom email messages containing information, including of a commercial and promotional nature, relating to Crisma Security s.r.l. may be sent.

  • Contact Form

The User, by filling in the contact form with his/her Data, consents to their use to respond to requests for information, quotes, or any other nature indicated by the header of the form.

  • Interaction with external platforms

These services allow for interactions with external platforms, directly from the pages of this site.
The interactions and information acquired by this site are in each case subject to the User’s privacy settings related to each platform.

  • Statistics

The services contained in this section allow the Data Controller to monitor and analyze traffic data and serve to track User behavior.

Google Analytics (Google Inc.)
Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google uses the Personal Data collected for the purpose of tracking and examining the use of this site, compiling reports and sharing them with other services developed by Google.
Google may use Personal Data to contextualize and personalize ads in its advertising network.
Place of processing : USA – Privacy Policy- Opt Out

Google Tag Manager (Google Inc.)
Google Tag Manager is a statistics service provided by Google Inc.
Place of processing : USA – Privacy Policy

Further information on the treatment

Defense in Court
The User’s Personal Data may be used for the defense by the Owner in court or in the preparatory stages of its possible establishment, from abuse in the use of the same or related services by the User.
The User declares that he/she is aware that the Data Controller may be required to disclose the Data at the request of public authorities.

Specific disclosures
Upon the User’s request, in addition to the information contained in this privacy policy, Crisma Security may provide the User with additional and contextual disclosures regarding specific services, or the collection and processing of Personal Data.

System Logs and Maintenance
For operation and maintenance purposes, this site and any third-party services it uses may collect System Logs, i.e. files that record interactions and may also contain Personal Data, such as the User’s IP address.

Information not contained in this policy
Further information in relation to the processing of Personal Data may be requested at any time from the Data Controller using the contact information.

Exercise of Rights by Users
The subjects to whom the Personal Data refer have the right at any time to obtain confirmation of the existence or non-existence of the same at the Data Controller, to know their content and origin, to verify their accuracy or request their integration, cancellation, updating, rectification, transformation into anonymous form or blocking of Personal Data processed in violation of the law, as well as to oppose in any case, for legitimate reasons, their processing. Requests should be addressed to the Data Controller.
This site does not support “Do Not Track” requests. To find out whether any third-party services used support them, please consult their privacy policies.

Changes to this privacy policy
The Data Controller reserves the right to make changes to this privacy policy at any time by giving notice to Users on this page. Therefore, please consult this page often, taking as reference the date of last modification indicated at the bottom. If you do not accept the changes made to this privacy policy, you must cease using this site and may request the Data Controller to remove your Personal Data. Unless otherwise specified, the previous privacy policy will continue to apply to Personal Data collected up to that point.

About this privacy policy
The Data Controller is responsible for this privacy policy.

Definitions and legal references

Personal Data (or Data)
Personal Data is any information relating to a natural person who is identified or identifiable, even indirectly, by reference to any other information, including a personal identification number.

Usage Data
This is the information collected automatically by this site (or by the third party applications that this site uses), including: the IP addresses or domain names of the computers used by the User who connects with this site, the addresses in URI (Uniform Resource Identifier) notation, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.. ) the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal connotations of the visit (e.g. the time spent on each page) and the details of the itinerary followed within the site, with particular reference to the sequence of pages consulted, the parameters relating to the operating system and the User’s computer environment.

User
The individual who uses this site, who must coincide with or be authorized by the Data Subject and whose Personal Data is being processed.

Data Subject
The natural or legal person to whom the Personal Data relate.

Data Processor (or Processor)
The natural person, legal entity, public administration and any other entity, association or body assigned by the Data Controller to the processing of Personal Data, in accordance with the provisions of this privacy policy.

Data Controller (or Owner)
The natural person, legal person, public administration and any other body, association or body responsible, even jointly with another owner, for decisions regarding the purposes, methods of processing of Personal Data and the tools used, including the security profile, in relation to the operation and use of this Application. The Data Controller, unless otherwise specified, is the owner of this site.

This Site
The hardware or software tool by which Users’ Personal Data are collected.

Cookies
Cookies are small text files that sites you visit send to your terminal equipment, where they are stored and then retransmitted the next time you visit the site. In the course of browsing a site, the user may also receive cookies from different sites (so-called “third-party” cookies) on his or her terminal, such as specific links to web pages of other domains.
Cookies are used for different purposes depending on the sites on which they are installed; they may serve the purposes of computer authentication, session tracking and storage of specific information, regarding users accessing the server.