Privacy policy with regard to the processing of personal data and on the free movement
of such data pursuant to Regulation (EU) 2016/679 of the European Parliament
and of the Council (GDPR) and Italian Law n.101 of 10/08/2018

Controller
The controller of the personal data is: SIAT Spa – via G. Puecher 22, 22078 Turate (CO).

Purpose and lawful basis of the processing
The personal data provided are gathered for the performance of the activities defined in the contractual agreements linked to the realization of machines for industrial packaging and technical assistance services, and related activities, including accessory and auxiliary activities (i.e. accounting, administrative, organisational, management) and for the fulfilment of legal obligations. Also, the data provided are collected for promotional, marketing purposes and for monitoring and analysing the degree of customer satisfaction.


Data processed
These are the general personal data gathered from the client for the management of the contract (name and surname, address, telephone number, email address, technical data indicated in contractual documents, etc...). Is not provided the processing of other special categories of personal data is also envisaged (art. 9 of the Regulation).


Categories of recipients of the personal data
The data processed can be communicated to: internal manager (CFO, IT Manager, HR, Customer Service) and persons entrusted with the data processing, external companies for IT assistance and tax, accounting and administrative assistance. The data, limited to the area of remit, can be also be communicated to third party companies and consultants involved in managing the contract, as well as companies belonging to the Maillis Group. It is also noted that SIAT SPA uses cloud computing applications in EU member states, web platforms and email providers at data centers located within the European Economic Area (EEA). The data, barring specific legal obligations, are not transmitted to other companies and third countries and to countries that do not furnish adequate data processing guarantees.

Storage period
The data gathered will be processed using electronic or, in any case, automated and computerised tools or manual processing with logics strictly related to the purposes for which the personal data have been gathered and, in any case, in such a way as to guarantee the security of same. The data will be processed from the date on which the contract comes into effect until expiry of same, plus a further 10 years (to enable fulfilment of legal and tax related obligations). The fundamental rights of the data subject are specified in articles 15 (access), 16 (rectification), 17 (right to be

forgotten), and 18 (restriction of processing) of Regulation EU  2016/679. To exercise these rights the data subject should send a written request to the following email address: privacy@siat.com. The controller will inform the data subject of receipt of the request and will fulfil this request within 72 working hours. In accordance with article 19, requests regarding the rights as of articles 16, 17 and 18 will be transmitted to the Controller and/or to the internal Manager.


Right to lodge a complaint with a supervisory authority
The data subject is also entitled to lodge a complaint with the competent supervisory authority.

Need and Consequences of refusal to communicate your personal data
Refusal to provide data for the purposes indicated above will prevent the Controller from being able to manage the contract and send the information requested.

Consent to the processing of personal data
The complete information is reported on site: www.siat.com. By signing this policy, I consent to the processing of my personal data by SIAT Spa – via G. Puecher 22, 22078 Turate (CO) and their transmission to the subjects and for the purposes indicated in same policy. All the authorisations I give may be withdrawn at any time by means of letter sent by registered delivery with notification of receipt to your address and same withdrawal will take effect on the day following receipt of such letter.