INFORMATION ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ART. 13 OF EUROPEAN REGULATION NO. 2016/679

This page describes the management methods of the site regarding the processing of personal data of users who consult it. This is a notice provided pursuant to Article 13 of European Regulation 2016/679 (hereinafter also GDPR) regarding the protection of personal data for those who interact with the web services, accessible electronically from the address: www.sudrise.com, hereinafter also referred to as “the Site”.
The purpose of this notice is to provide clear and transparent information about the data collected by the website and the related methods of use, as the consultation of this site by the user involves the release of information that is personal data.
The notice is made exclusively for the site in question and does not concern, therefore, other websites that the user may visit through links.
Further information may be provided to you if necessary at the time of requesting a specific service or product.

DATA CONTROLLER

SUDRISE S.A.S. DI GUERRA MARCO MICHELE is the Data Controller of your personal data in relation to its activities (hereinafter also referred to as "Controller").You can contact the Data Controller at any time to exercise your rights as specified in this document by referring to the following contact details:
Address: Via Piave 15 - 85012 Corleto Perticara (PZ), Tel. 0971 963949, e-mail: info@sudrise.com

PURPOSES AND LEGAL BASIS OF THE PROCESSING

Your personal data will be collected for the following purposes:
1.Execution of a contract and/or fulfillment of contractual obligations:
Automatic and necessary collection of data for browsing the site and in order to verify the correct functioning of the site; managing a request for contact/information from the user; allowing registration on the site; enabling the purchase of products by the user and managing all obligations related to the execution of the contractual relationship, including pre and post-contractual activities.
The provision of data is mandatory and failure to provide it will result in the inability to proceed with the provision related to the contractual obligation.
2. Fulfillment of legal obligations in relation to obligations provided by national and international laws and regulations, of a fiscal, tax, accounting, and administrative nature.
The provision of data is mandatory, and failure to provide it will result in the inability to deliver the services requested by the Interested Party.
3. Legitimate interest of the data controller: sending commercial and/or promotional communications to customers at the email address provided in relation to products/services of the Controller similar to those already used (so-called soft spam).
You may object to the processing at any time or request its limitation.
TYPE OF PERSONAL DATA
We collect and process the following categories of personal data that concern you:
BROWSING DATA
The computer systems and software procedures used to consult this website acquire, during their normal operation, certain identifying data whose transmission is implicit in the use of Internet communication protocols.
VOLUNTARILY PROVIDED DATA
Through specific sections of the Site, you have the opportunity to voluntarily provide personal data such as:
- identification, demographic, and tax data (first name, last name, address, tax code, VAT number, IBAN);
- contact information (email address and phone number);
- any other personal data provided directly by you (information entered in the “message” field of the “contacts” section and in “your review” when you want to submit a review);


DATA OF MINORS
The site is not intended for minors and does not intentionally collect personal data from them.
RECIPIENTS OF PERSONAL DATA
The data collected will not be disclosed, sold, or exchanged with third parties, except in cases where communication to third parties is necessary for the management of the site as service providers.
Your personal data is processed by our collaborators and consultants who are given appropriate instructions regarding measures, precautions, and methods of operation, all aimed at the concrete protection of your personal data.
Exclusively for the purposes related to the execution of the service you requested, we may communicate your personal data only to third parties, service providers.Such subjects will process your data as Data Processors if they carry out the processing on our behalf, or as Data Controllers if the processing is carried out independently by them.
Other subjects may access your data solely based on legal provisions, regulations, and norms.
To the extent necessary or appropriate for achieving the purposes already described, or within the scope of any legal obligations regarding tax and accounting, your Data may be shared with external subjects.In particular, your Data may be known to external service providers including IT services, external consultants, or collaborators, in the following contexts:
- Services related to the maintenance of the Site;
- Packaging and transportation services;
- Consulting and archiving services for tax purposes.
REDIRECT TO EXTERNAL SITES
The Website uses a link to our Facebook page.
If the user interacts with the Facebook page, the information relating to the interested party is directly communicated to the social platform, which processes your Data as an independent data controller. Therefore, in order to obtain further details regarding the purposes and methods of processing, the rights that can be exercised, and the retention of personal data, we kindly ask you to consult the privacy policy of the social network.
TRANSFER OF PERSONAL DATA OUTSIDE THE EU
If, in accordance with the above and for the purposes indicated therein, it becomes necessary to transfer your personal data abroad (outside the EU), this will proceed on the condition that the destination country has been deemed by the European Commission as suitable for transfer pursuant to Article. 45 of Regulation 2016/679 (adequacy decision) or, in the absence of such a decision, if one of the conditions referred to in Articles 46 and 47 of the same Regulation applies (in particular, standard contractual clauses or binding corporate rules).
RETENTION
For the processing purpose indicated in the following information, we will retain your data for the time necessary to achieve the purposes for which they were collected.
Upon expiration of the indicated terms, the data may be anonymized and may be processed for statistical purposes.

RIGHTS OF THE DATA SUBJECT
In accordance with the applicable regulations, in relation to the processing of personal data carried out by us, you have specific and non-limiting rights.In particular:
Right of access: you can request at any time that you be provided with information about your data. Right of rectification: you can request a correction of your data.
Right of deletion: you can request the deletion of your data, provided that the relevant conditions set by law are met.
Right to restriction of processing: you can obtain a restriction on the processing of your data if they are inaccurate or no longer necessary.
Right to object: you can object at any time to the processing of your data, unless it conflicts with current legislation and in the presence of legitimate interests of the Data Controller necessary, for example, to ascertain, exercise or defend a right in court.
Right to data portability: you have the right to receive a copy of the data you previously provided, and if expressly requested by you, we commit to transferring the same, where technically possible, to another data controller you indicate.
We also inform you that you have the right:
to withdraw consent at any time: if the processing is based on consent, without prejudice to the lawfulness of the processing based on consent given before the withdrawal, the Data Controller will seek to manage all requests within a reasonable period and, approximately, within 30 days, unless a justified extension is indicated and communicated.
to file a complaint: if you believe that your data is not being processed in accordance with current regulations, you can file a complaint with the Data Protection Authority or, alternatively, appeal to the competent Judicial Authority.
HOW TO EXERCISE YOUR RIGHTS
To exercise your rights, you can send a request to the contact details of the Data Controller indicated in this document. Requests are submitted free of charge and processed by the Data Controller as quickly as possible, in any case within one month.
You will find, in any case, every broader reference regarding the current regulations on the website of the Data Protection Authority at the following internet address www.garanteprivacy.it , and the complete text of the GDPR can be consulted by accessing the following website: http://eur-lex.europa.eu/
MODIFICATIONS
The Data Controller reserves the right to modify or simply update the content of this notice, in part or completely, also due to changes in applicable regulations. Although we will take care to inform you promptly about any changes, it is advisable to regularly check the documentation.