Privacy & Cookie Policy

This notice is provided under Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR") and Italian Legislative Decree 196/2003 ("Privacy Code") as amended by Legislative Decree 101/2018. The cookie section follows the Italian Data Protection Authority's Cookie Guidelines of 10 June 2021. It covers the website www.sicurtre.it and our relationships with clients, suppliers and job applicants. The Italian version is the reference text.

1.Data controller

Sicurtre S.r.l.
Via Carlo Mariani 2 — 20063 Cernusco sul Naviglio (MI), Italy
VAT no. IT07197220159
Phone +39 02 9290931
Certified email (PEC) amministrazione@pec.sicurtre.it
Privacy requests: amministrazione@sicurtre.it

2.What data we process and why

We only process the data needed for the stated purpose. For each activity, the table shows the data, the purpose, the legal basis and how long we keep it.

Activity	Data	Purpose and legal basis	Retention
Browsing the website	IP address, date and time, requested page, response status, browser and operating system, referring page (server technical logs).	Running the website and protecting it from attacks and abuse. Legitimate interest (Art. 6(1)(f) GDPR).	90 days, then deleted automatically. Longer only if needed to establish an offence.
Visit statistics	Page viewed, language, referring website (domain only), device type, browser and operating system, approximate country and city, visit duration.	Understanding which content is useful and improving the website. Legitimate interest (Art. 6(1)(f) GDPR).	14 months, then deleted automatically.
Contact form, virtual assistant and forms on promotional pages	Full name, email, phone, company, type of request, message text.	Answering your request, arranging site visits and quotes. Pre-contractual steps taken at your request (Art. 6(1)(b) GDPR) and legitimate interest in replying (Art. 6(1)(f) GDPR).	As long as needed to handle the request. If no business relationship follows, at most 24 months from the last contact.
Live chat with an operator (home page)	Messages, name and email if you provide them, IP address, browser and device data, pages visited during the session, approximate location.	Real-time support. The service only loads if, in the virtual assistant, you choose "Chat with an operator" and confirm: that choice is your consent (Art. 6(1)(a) GDPR and Art. 122 Privacy Code). For the content of the messages: pre-contractual steps (Art. 6(1)(b) GDPR).	At most 24 months from the last conversation.
Map of our premises (Company and Contacts pages)	IP address and browser data, collected directly by Google.	Showing you where we are. The map only loads if you press "Show the map": that choice is your consent (Art. 6(1)(a) GDPR and Art. 122 Privacy Code).	According to Google's privacy policy.

How our statistics work. We do not use Google Analytics or any other third-party service: statistics are collected by an in-house tool on the main pages of the website (Home, About us, Services, Company, Contacts and this notice). Your IP address is not stored: it is truncated by zeroing its last part and turned into a non-reversible code with a key that changes every day. This means we cannot recognise you or link visits made on different days. The statistics use no cookies. If your browser sends a "Do Not Track" or "Global Privacy Control" signal, we record nothing. To estimate country and city we send only the already-truncated IP address to the ipapi.co service.

Requests sent through the forms reach Sicurtre's company mailboxes by email and are not stored in the website database. To block automated submissions (spam), when you submit a form your IP address is kept in pseudonymised form for 10 minutes.

3.Clients and suppliers

If you are a client or a supplier, or their contact person, we process the data needed for the relationship: identification and contact details, tax and bank details, quotes, orders, contracts, service interventions and invoices.

Purposes: managing the contractual and pre-contractual relationship (quotes, orders, contracts, support, deliveries, invoicing), complying with administrative, accounting and tax obligations, and protecting our rights in case of disputes.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR), legal obligations (Art. 6(1)(c) GDPR), legitimate interest in protecting our rights (Art. 6(1)(f) GDPR).
Retention: for the duration of the relationship and then for 10 years, as required for accounting records (Art. 2220 of the Italian Civil Code), unless a dispute is pending.
Marketing communications: we send event invitations and promotional communications (by email, text message or other means) only with your explicit consent, which you can withdraw at any time.

4.Job applications

If you send us your CV, for example to hr@sicurtre.it, we use it only to assess your application for current or future positions. The legal basis is pre-contractual steps (Art. 6(1)(b) GDPR) and Art. 111-bis of the Privacy Code, under which consent is not required for unsolicited CVs. We keep your CV for 24 months and then delete it, unless you ask us to update it. Please do not include unnecessary data such as health data, photographs, or information about religious or political beliefs.

5.Providing your data

Providing your data is optional. Without contact details, however, we cannot answer your request, and without the data needed for a contract we cannot enter into it or perform it. The live chat and the map are optional: if you do not turn them on you can still use the whole website and write to us through the form or the virtual assistant.

6.Who receives your data

Your data is processed by authorised and trained Sicurtre staff. It may also be received, only for the stated purposes, by:

suppliers processing data on our behalf, appointed as processors (Art. 28 GDPR): Hetzner Online GmbH (Germany), which hosts the website servers; tawk.to, Inc. (United States), which provides the live chat; Kloudend, Inc. (United States), which runs the ipapi.co service used to estimate country and city from the truncated IP; IT and email service providers;
consultants, accountants, professional firms, banks and couriers, for managing relationships with clients and suppliers;
public authorities, where required by law.

If you choose to show the map, Google (Google Ireland Limited and Google LLC) receives directly the data collected through the map and processes it as an independent controller under its own policy: policies.google.com/privacy.

We do not sell or publish your data.

7.Transfers outside the EU

tawk.to and Google may process data in the United States. Transfers rely on the European Commission's adequacy decision of 10 July 2023 (EU-U.S. Data Privacy Framework) for certified companies, or on the Standard Contractual Clauses approved by the Commission (Art. 46 GDPR). We send Kloudend (ipapi.co) only the truncated IP address, which on its own does not identify you. You can ask for information on the safeguards in place by writing to amministrazione@sicurtre.it.

8.Your rights

At any time you can ask for:

access to your data and a copy of it (Art. 15 GDPR);
correction of inaccurate data (Art. 16);
erasure (Art. 17);
restriction of processing (Art. 18);
portability of the data you provided (Art. 20);
objection to processing based on legitimate interest and, always, to marketing (Art. 21);
withdrawal of consent, without affecting processing already carried out (Art. 7(3)).

Write to amministrazione@sicurtre.it, to our certified email amministrazione@pec.sicurtre.it, or by post to our registered office. We reply within one month (Art. 12 GDPR). We do not take decisions based solely on automated processing that produce legal effects on you.

If you believe the processing breaches the law, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome — www.garanteprivacy.it) or with the supervisory authority of the EU country where you live or work.

Cookies are small files the website stores in your browser. Similar tools include the browser's storage (localStorage and sessionStorage). Technical cookies are needed for the website to work and do not require consent. Third-party cookies require your prior consent: on this website they are only turned on when you ask for them with a click. We use no profiling cookies and no advertising tools.

Technical cookies (no consent required)

Name	Set by	Purpose	Duration
`sicurtre_teaser_dismissed_until` (local storage)	Sicurtre	Remembers that you closed the "Need any information?" message, so it is not shown again.	24 hours
`sct_maps_ok` (session storage)	Sicurtre	Remembers that you chose to show the map, so you are not asked again on every page.	Until the browser is closed
`sct_session`	Sicurtre	Access to the staff-only area (visit reports).	8 hours
`wordpress_`, `wordpress_logged_in_`, `wp-settings-*`	Sicurtre	Access to the website administration area, for staff only.	Session, up to 1 year

Visit statistics use no cookies (see section 2).

Third-party cookies (only with your consent)

Service	When it is turned on	Main cookies	Purpose	Duration
Live chat — tawk.to, Inc.	Home page, only after "Chat with an operator" and your confirmation	`twk_uuid_*`, `TawkConnectionTime`, `twk_idm_key`	Chatting with an operator and recognising the ongoing conversation.	Session, up to 6 months
Google Maps — Google	Company and Contacts, only after "Show the map"	`NID`, `AEC`, `SOCS`	Showing the map, storing preferences and protecting the service.	Up to 13 months

Until you press these buttons, no data is sent to tawk.to or Google and none of their cookies are set. You can withdraw your consent at any time by deleting the website's cookies and data in your browser settings; the map choice is reset anyway when the browser is closed. Providers' policies: tawk.to, Google.

Managing cookies

You can block or delete cookies in your browser settings: Chrome, Firefox, Safari, Edge. If you block technical cookies, some parts of the website may not work.

10.Security and changes

We protect data with appropriate technical and organisational measures (Art. 32 GDPR): encrypted connection (HTTPS), access limited to authorised staff, and protection against unauthorised access. We may update this notice when our processing or the law changes; the date of the last update is shown at the top of the page.

Privacy and cookie policy