PRIVACY POLICY NOTICE

Pursuant to Articles 12, 13 and 14 of Regulation (EU) 2016/679 (hereinafter the "Regulation"), SACMI IMOLA S.C., as Data Controller of the personal data relating to Users wishing to make use of the services offered through the platform "Second Hand", which is aimed at facilitating contact between Users, potential sellers and potential buyers of used SACMI machinery and systems (hereinafter referred to as "Service" or "Services", referring to the Conditions of Use for any more precise description), hereby informs about the purposes and methods of processing of the personal data collected, the scope of communication and dissemination thereof, as well as the nature of the data to be provided.
The following information on the processing of personal data (hereafter referred to as “Privacy Policy”) is provided by SACMI IMOLA S.C. as Controller of personal data which are directly provided by the Users either upon account creation or subsequently while using the Service, or which are generated following the use of the platform.
The Privacy Policy is divided into individual sections (hereinafter referred to collectively as “Sections” and/or individually as “Section”), each of which deals with a specific area, in order to allow a more immediate and easier reading and search of topics.

DATA CONTROLLER AND CONTACT DETAILS
The Data Controller will be the company SACMI IMOLA S.C. with headquarters in Via Selice Provinciale, 17/A-40026 Imola (BO) - Tax code 00287010375, VAT no. IT00498321207, Tel.: +39-0542-607111, Fax: +39-0542-642354, E-mail: sacmi@sacmi.it-sacmiimola@legalmail.it - sacmiamministrazione@legalmail.it (hereafter also referred to as "the Company”).

The Data Protection Officer (DPO) for the COMPANY is Massimiliano Bovesi – DPO@sacmi.it

PROCESSING PURPOSES AND PROCESSED PERSONAL DATA
In general, all personal data (hereinafter also referred to as “Personal data” and/or “Data”) that the User will provide to the Company and/or that will be collected in the context of use of Services by the User will be processed in accordance with the principles recognised by the applicable data protection regulation, such as the principles of transparency, correctness, lawfulness, data minimisation, purpose limitation and storage, accuracy, integrity and confidentiality.

The Data will be subject to treatment by the Company, according to the limits set by the applicable legislation, for the following purposes:

1. to allow the conduct of operations strictly connected and instrumental to the correct management of the relationship with you, including handling questions or requests received at the addresses provided by the Company in its Site; to allow the Users to create an account, where applicable, and, consequently, to be authorized to access the reserved areas of the Site; to provide support and to allow the Users to access and use the Services correctly; to carry out and fulfil the contractual obligations undertaken towards you and vice versa, of which a detailed description is available in the Service Condition of Use. In particular, through the Service made available through the Site, the User may express their interest and/or request further information by filling in the appropriate form for the transmission of their data to the potential seller in order to be contacted by said seller (Supply of Services and fulfilment of contractual obligations);
2. to allow the fulfilment of obligations that may be provided for by laws, regulations and community rules, or of provisions issued by authorities the Company is subject to (Legal obligations);
3. obtain information necessary to identify anomalies, fraudulent activities and/or violations in the use of the Site (Security);
4. only if you have given your specific consent, to carry out information activities about the products and/or services of the Company and to carry out promotional and commercial activities, market research and marketing by means of automatic systems without the input of an operator (e.g. emails), but also through traditional contact methods, such as by post or telephone calls; to carry out activities to measure your satisfaction by means of questionnaires, surveys or focus groups (Marketing);
5. to perform remarketing and retargeting activities towards Users, showing online personalised ads/posts/adverts (for example through social media, such as LinkedIn or Facebook) following a previous visit to our sites and subject to the user’s consent to the use of third-party profiling cookies/tracking pixels expressed by clicking on the appropriate banner on the site; to analyse the use of the site by Users, to examine the effectiveness of advertising, promotions and contests and, in aggregate form, statistics relating to site browsing and performed activities, in order to simplify the use of the Site and better adapt it to the User's interests and choices. With reference to the details of the cookie activities and similar technologies that make this profiling activity effective for remarketing and retargeting purposes, refer to what is specified in the Cookie Policy Section of this Privacy Policy and to the list of cookies, including third-party cookies, accessible from the cookie banner through the "Cookie Settings" button or from the "Cookie Settings" link located in the footer of the Site (Profiling).

Processed Personal Data fall within the following categories. The provision of data followed by an asterisk (*) are considered by the Company to be necessary and indispensable to fulfil the relevant purposes.
 

1. Identification and contact details

Depending on the Services requested by the User, the Company will process Personal Data as indicated below.
In order to request the creation of an account in the Seller Hub and have access to the Services, the Company may require you to provide your information, especially: applicant's first and last name, company name and location, company e-mail address, company role, country, telephone number.
In order to request further information on the machines offered for sale by third-party sellers and/or in order to fulfill your request to be contacted by the potential seller, the Company may ask you to indicate, in the appropriate form, your information, especially: applicant's first and last name, company name, company e-mail address, company role, country, telephone number.
Further data may be collected during the management of each relationship through the platform and/or can comprise data the User decides to provide to the Company at any moment by using the contact data of the Company.
In all cases in which you decide to share the Personal Data of third parties with the Company (for example, requesting access to Services on behalf of another applicant), you will be considered as autonomous data controllers and, as such, you will have to take all relevant legal obligations and responsibilities. Therefore, in this regard, the user grants the COMPANY the widest indemnity with respect to any dispute, claim, request for compensation for damage caused by processing, etc. by persons whose Personal Data have been forwarded by you in violation of applicable data protection regulations. Since, in such a case, the Company would not collect this information directly from the data subjects (but, indirectly, from you), you guarantee that such specific processing may be based on the consent of such data subjects or on another appropriate legal basis that legitimises the processing of the concerned information.
 

2. Navigation data, cookies and other information

The computer systems and software procedures used to operate the Event platform acquire some of the User's Personal Data.
In particular, the following data will be processed: the type of content and the titles of the channels that the User has viewed and/or interacted with; the date and time when the User began viewing, when the User stopped viewing and the duration of the viewing; the User's country of origin; the type of browser, type of device and operating system used by the User.
This Data is used only by the Company for the sole purpose of gaining statistical information about use of the platform and the Service, as well as of checking its proper operation and of identifying any unusual activity and/or abuse. Information about cookies is found in the Cookie Policy; please read it below on this web page (under the heading COOKIE POLICY).


LEGAL BASIS FOR PROCESSING, COMPULSORY/OPTIONAL NATURE OF PROVISION OF PERSONAL DATA AND CONSEQUENCES IN THE EVENT OF NO ANSWER
The following are the legal bases used by the Company to process your Personal Data, according to the purposes listed under the previous Section (“Purpose of processing and processed Personal Data”).

The provision of Personal Data and their processing for the purposes associated with the Supply of Services and other contractual obligations is strictly functional to perform the required service and to properly perform the contractual relationship signed with you, respectively; therefore they are a necessary condition to establish the contractual relationship. Consequently, failure to provide Personal Data required for this purpose, or the provision of wrong data, may make it impossible for the Company to perform the Service and the contractual relationship and may entitle the Company to refuse to perform them or to stop their performance.
The provision of Personal Data and their processing for the purposes of the Legal Obligations is required by the Company to meet the relevant legal obligations. When you provide Personal Data to the Company, it needs to process it in compliance with applicable laws that may include storing them or communicating them to pertinent authorities.
The provision of Personal Data and their processing for the purposes of Security, is based on the commitment of the Company to identify and prevent illegal behaviours and to ascertain responsibility in the event of any cybercrime. Consequently, failure to provide Personal Data required for this purpose may make it impossible for the Company to provide access to the platform.
Provision of Personal Data and the relevant processing for purposes of Marketing is based on your explicit authorisation provided by means of a specific positive action (e.g. clicking on a specific checkbox). You are never obligated to provide this authorisation to the Company and, if you do, you are always free to withdraw it at any moment without any consequences (other than not receiving commercial communications by the Company). You can withdraw your authorisation by following the instructions under the Section “Your rights” of this Privacy Policy.
The provision of Personal Data, and the related data processing for Profiling purpose, is based on your explicit consent collected through a specific button on the cookie banner, i.e. by accessing the cookie preference centre, through a button on the cookie “Cookie settings” banner. You are never obligated to provide this authorisation to the Company and, if you do, you are always free to withdraw it at any moment without any consequences (other than not being able to benefit from the personalisation of the Company’s commercial communications). You may withdraw your consent to do so by following the instructions in the "Your Rights as a Data Subject" section of this Privacy Policy, i.e. by accessing the cookie preference centre via the "Cookie Settings" button on the cookie banner. From the cookie preference centre the User can withdraw the consent given for the activation of all cookies by pressing the "Reject all" button.


RECIPIENTS AND TRANSFER OF PERSONAL DATA
Personal Data will be provided to personnel of the Company, who is authorised to process them in order to fulfil the previously described purposes and who is committed to confidentiality or has received a suitable legal confidentiality obligation.
The Personal Data provided by the User in order to make use of the Services related to the request for information and contact by the third party seller will be communicated or otherwise shared by the Company with said party who will act as autonomous Data Controllers and, therefore, please refer to their personal data processing policies for any further information.
Personal Data processed for the previously described purposes can be shared, used and transferred among the companies of the SACMI Group for internal accounting and administrative purposes, having registered headquarters both within and outside countries of the European Union and/or the European Economic Area (given the international reach of Sacmi). In this case, the Company ensures that Data will be processed by these subjects in compliance with applicable regulations. Therefore transfers are made by means of suitable guarantees, such as adequacy decisions, Standard Contractual Clauses approved by the European Commission or other suitable guarantees. These companies act as independent Controllers who process the data as strictly necessary for the aforementioned purposes; for anything not mentioned in this Privacy Policy, these subjects shall provide you with a specific policy on how they will potentially carry out the Data processing. The up-to-date list of companies of the SACMI Group can be viewed on the website of the Group https://www.sacmi.it/.
Personal Data will be supplied to third parties, called Data Processors, since they process Data on behalf of the Company (e.g. companies with whom it is necessary to interact to provide Services, such as hosting providers, providers of emailing services, or other companies appointed to carry out technical maintenance, including maintenance of network equipment and electronic communication networks, software developers, companies providing the technological platform). Personal Data that is strictly required to provide the requested Services may be shared with third parties with whom the Company has agreements for services that are functional to its operations (such as companies, people, firms or professional offices that provide support activities and for the purpose of providing these Services).
Finally, Personal Data will be communicated, upon request, to the relevant authorities (e.g. in the event of frauds and/or abuses when using the Site), to financial offices or to other Public Institutions according to the provisions of current regulations.
The Data shall not be circulated ("circulation" meaning making unspecified subjects aware of the Data).


STORAGE OF PERSONAL DATA
Personal Data processed for the purposes of Supply of Services and fulfilment of contractual obligations will be stored by the Company for the time that is strictly required to perform the requested Service and to properly fulfil our contractual relationship with you. In any case, since this Personal Data is processed to provide Services and to allow the contractual relationship to be fulfilled, the Company may store them for a longer period, in particular as necessary in order to protect the interests of the Company from any liability pertaining to the Services. Data will be deleted at the end of this period.
The Personal Data processed for the purposes of Legal Obligations will be kept by the Company for the period provided for by specific legal obligations or applicable regulations.
Personal data processed for the purpose of Security will not last more than 6 months, except when it is used to ascertain responsibility for any cybercrime against the Company or third parties (e.g. to protect from legal actions by providing this data to the relevant Authorities).
Personal Data processed for the purpose of Marketing will be stored by the Company until you withdraw your authorisation to do so. After withdrawing your authorisation, the Company will no longer use your Personal Data for this purpose, but will still be able to store them, particularly when necessary to protect the interests of the Company against any liability based on this processing.
Personal Data processed for the purpose of Profiling will be retained by the Company until you withdraw your authorisation to do so. Once your consent has been withdrawn, the Company will no longer use your Personal Data for such purposes, but may still retain them in aggregate form for statistical use. With regard to the retention period of data processed through cookies and other similar technologies, read the Cookie Policy Section and the list of cookies, including third-party cookies, accessible from the cookie banner through the "Cookie Settings" button or from the "Cookie Settings" link located in the footer of the Site.


YOUR RIGHTS AS DATA SUBJECTS
As Data subjects, you have the right, exercisable at any time, to:

• request access to your Personal Data (and/or a copy of such Personal Data), as well as further information on the processing in progress on them;
• request the rectification or updating of your Personal Data processed by the Company, if they are incomplete or not updated;
• request the deletion of your Personal Data from the Company’s databases, where you consider the processing to be unnecessary or unlawful;
• request the limitation of the processing of your Personal Data by the Company where you consider that your Personal Data are incorrect, not necessary or unlawfully processed, or where you have objected to their processing;
• to exercise the right to the portability of the Data, i.e. to obtain in a structured, commonly used and machine-readable format a copy of the Personal Data concerning you provided to the Company, or to request its transmission to another Data Controller;
• to oppose the processing of your Personal Data, using a legal basis relating to your particular situation, which you believe should prevent the Company from processing your Personal Data;
• to revoke your consent for Marketing and Profiling purposes. Remember that the authorisation given for Marketing communications covers not only communications sent by means of automatic systems without operator intervention (such as emails or SMS) but also traditional contact methods such as the phone or postal service. You can always withdraw authorisation to processing also separately, for example deciding to receive these communications only by means of automatic systems such as email or SMS but not through the postal service or phone and vice versa.

The Company wishes to inform you that Personal Data you supply can be modified at any moment, by means of the relevant sections within the Site or by writing to the email address:privacy@sacmi.it.
Other rights can be exercised by writing to the email address:privacy@sacmi.it.

For Marketing purposes, you can ask to withdraw or cease sending the relevant commercial communications at any moment by writing to the email address privacy@sacmi.it. When communications are received by means of computer tools, follow the procedure described in the footer of the communications (by means of the “Delete” button).

Please note that for Profiling purposes you can withdraw your consent also by following the instructions on how to disable cookies in the Cookie Policy Section, or by accessing the cookie preference centre through the "Cookie Settings" button on the cookie banner. From the cookie preference centre the User can withdraw the consent given for the activation of all cookies by pressing the "Reject all" button.

The Company also informs you that you always have the right to lodge a complaint with the competent Control Authority (for example, that of the Country in which you have your habitual residence, in Italy the Data Protection Authority) if you believe that the processing of your Data is in breach of the applicable legislation on the protection of personal data.

CHANGES TO THIS PRIVACY POLICY
The Company reserves the right to change or update the content of this privacy policy, partially or fully, also as a consequence of changes in the applicable regulations. If such changes result in substantial derogation from your rights under this policy, you will be reminded by prominently notifying on the page before the changes take effect. In this case, if you continue to use the services we provide, it will be deemed you agree and subject to the revised policy. Therefore the Company invites you to periodically check this section to familiarise with the latest and most up to date version of the Privacy Policy in order to always be up to date with Personal Data that is collected and used by the Company.


COOKIE POLICY


LIST OF SECTIONS

1. Definitions, types and regulation application
2. Types of cookies used by the Site
3. List of cookies used by the Site
4. How to manage or delete cookies

a) Definitions, types and regulation application

Cookies are small text files sent by the websites visited by the user and recorded on the user's computer or mobile device and retransmitted to the same websites on the subsequent visit. Cookies allow a website to remember the user's actions and preferences (such as login details, language chosen, font size, other display settings, etc.) avoiding the need to indicate them again when the user returns to the website or browses through its web pages.

Therefore, cookies are used for login, session tracking and retention of information regarding a user's activities when accessing a website. They may also contain a unique identification code that allows keeping track of the user’s navigation experience within the website for statistical or advertising purposes. Some operations could not be carried out without the use of cookies, which, in some cases, are technically necessary for the website to operate correctly.

For further information on cookies and their general functions, the User can visit the information Website http://www.allaboutcookies.org/

Cookies may be those set directly by the website or web server that the user is visiting or those of the website whose address was typed by the user and displayed in the URL window (so-called "first-party” cookies).

While browsing a website, users may also receive on their devices cookies from websites or web servers other than the one they are visiting (so-called "third-party" cookies). Third-party cookies are relevant in cases when the user visits a website and a third party, with respect to the manager of the website visited, sets a third-party cookie using said website.

There are also various types of cookies, depending on their characteristics and functions, which remain on the user’s computer for different periods of time: session cookies, which are automatically deleted when the browser is closed; persistent cookies, which remain on your device until a predetermined expiration time.

According to the current regulation applicable in Italy, the user's consent is not always required for the use of cookies. In particular, technical cookies, i.e. those used for the sole purpose of transmitting a communication over an electronic communication network, or to the extent strictly necessary to provide a service explicitly requested by the user, do not require such consent. Technical cookies, which do not require express consent for their use, include:

• first-party analytical cookies, used to collect information, in aggregate form, about the number of users and how they use the website;
• third-party analytical cookies, when tools are used to reduce the identification power of cookies and the third party does not cross-reference the collected information with other information that it already has;
• browsing or session cookies, used for authentication and access to a service;
• functionality cookies, which allow the user to navigate based on a number of selected criteria (e.g. language, products selected for purchase) in order to improve the service provided.

On the other hand, for profiling cookies, i.e. those aimed at creating profiles referred to users and used to send advertising messages in line with the preferences expressed by the latter when browsing the web, the user's prior consent is required. User consent is also required for third-party analytical cookies when tools are not used to reduce the identification power of cookies and the third party cross-references the collected information with other information that it already has.

b) Types of cookies used by the Site

The Site uses the following types of cookies:

• browsing technical or session cookies, strictly necessary for the operation of the Site or to allow the User to take advantage of the contents and Services requested;
• functionality cookies, used to activate specific functionalities of the Site and to configure the Site according to the User's choices (e.g. language) in order to improve the browsing experience. Please note that by disabling browsing, session and/or functionality cookies, the Site may be unavailable or certain Services or functions of the Site may be unavailable or not work properly and users may be forced to modify or manually enter certain information or preferences each time they visit the Site;
• analytical cookies, which allow the COMPANY to understand how the site is used by users and to track the website incoming and outgoing traffic. It is hereby specified that the COMPANY uses the Google Analytics service (provided by Google Inc. or “Google”) complying with the following conditions: measures taken to decrease the identification power of these cookies by masking parts of the IP (as described in the following link: https://support.google.com/analytics/answer/2763052?hl=i); the COMPANY has accepted the data protection amendment with Google Inc. by which the latter refers to its commitment to use such cookies exclusively for the provision of the service, to store them separately and not to “enhance” them or “cross-check” them with other information it has. Furthermore, it is reminded that an add-on can always be installed on the browser to disable Google Analytics (https://tools.google.com/dlpage/gaoptout).
• for more information on the way the third party, Google, may use the User information, here is the link to their Privacy Policy: https://policies.google.com/privacy?hl=it; href="https://policies.google.com/technologies/partner-sites?hl=it
• profiling cookies used in order to comply with the preferences set by the User through the use of the Site and to send advertising messages in line with these preferences.

With regards to third-party cookies, third parties typically act as autonomous data controllers with respect to the cookies they provide (and use the data they collect for their purposes and according to their own terms) or operate as Data Processors (i.e. they process Personal Data on behalf of the COMPANY). For further information on how these third parties may use your information, please refer to their personal data processing policies (privacy policies and consent forms), which are provided, where possible, for each cookie in the list accessible from the cookie banner or from the "Cookie settings" link in the footer of the Site.

c) List of cookies used by the Site

The cookies used by the Site can be viewed by the User by accessing, at any time, the list of cookies, including third-party cookies, accessible from the cookie banner through the "Cookie Settings" button or from the "Cookie Settings" link located in the footer of the Site.

Social buttons and widgets

It is also possible to find social buttons/widgets on our Websites or specific "buttons" that depict the social network icons (for example, Facebook, Twitter, YouTube, Google Plus, etc.). These "buttons" allow the Users who are navigating the Websites to reach and interact with social networks directly with one "click". By clicking on Social buttons/widgets, the social network obtains data relating to the User visit. Aside from these cases where the User can share his or her own navigation data spontaneously with preselected social networks with one click, the COMPANY does not share any User navigation information or data obtained through the Websites with social networks that are accessible through Social buttons/widgets. For further information, refer to the privacy policies of the specific social networks that may be accessed through our Websites using the social buttons.

Facebook

https://it-it.facebook.com/about/privacy

Twitter

https://twitter.com/privacy

Linkedin

http://www.linkedin.com/legal/privacy-policy

YouTube e Google Plus

https://www.google.it/intl/it/policies/privacy/

How to manage or delete cookies
Most Internet browsers are initially set to accept cookies automatically. The User may modify these settings in order to block cookies or be warned every time cookies are sent to the navigation device. Furthermore, at the end of each navigation session, the User may delete the cookies that were collected from his or her device. There are various methods to manage cookies. Please refer to the specific instructions for the browser in use. If the User uses various devices to visit and access Websites (for example, computer, smartphone, tablet, etc.), then the User is responsible for ensuring that each browser of each device is set to reflect his or her expressed preferences regarding cookies. For more information on managing cookies, please refer to the page http://www.allaboutcookies.org/manage-cookies/

Select the following links to access specific instructions for managing cookies through some of the main navigation programs.

Microsoft Windows Explorer

http://windows.microsoft.com/en-us/windows-vista/block-or-allow-cookies

Google Chrome

https://support.google.com/chrome/answer/95647?hl=en&p=cpn_cookies

Mozilla Firefox

https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences

Apple Safari

http://www.apple.com/legal/privacy/it/cookies/

If the User does not use any of the aforementioned browsers then the User may, in any case, select "cookies" in the relevant section of the guide to see where the cookies folder is located.

You can also manage your choices about third-party cookies by means of online platforms such as AdChoice.