Privacy Policy
Privacy Policy pursuant to Article 13 GDPR
Conceria Samanta S.r.l., C.F. and P.IVA 01726540501, with registered office in Ponte a Egola - San Miniato (PI), via Dei Conciatori, 18/28 CAP 56024 (the "Company"), is the Data Controller of the personal data you will communicate through the use of the website "www.samanta.com" (the "Site"). In this Policy, we will also refer to you as "Data Subject," meaning the person to whom the collected personal data refer.
If you have any doubts about the use of your data or if you want to exercise the rights granted to you by law, you can write to: privacy@samanta.com
If you have any doubts about the use of your data or if you want to exercise the rights granted to you by law, you can write to: privacy@samanta.com
Which data does the Data Controller collect?
Through the Site, the following data are collected:
Browsing data:
The Site's computer systems collect some personal data whose transmission is implicit in the use of Internet communication protocols. These are information that is not collected to be associated with you, but that by their very nature could, through processing and association with data held by third parties, allow you to be identified. These include:
• IP address;
• URI (Uniform Resource Identifier) of the requested resources;
• The time and date of interaction with the Site;
• The type of operating system, the browser used, the screen resolution, and other technical information about the device used.
Personal data:
In the optional, explicit, and voluntary use of the Site, such as sending emails to the indicated address and filling out the contact form, personal data (name, surname, e-mail address, phone number, data contained in the sent messages) will be acquired. A specific summary policy will be present under the form. Filling out the form generates an e-mail that will not be saved in the site's database.
The data you communicate must refer to you or to third parties who have expressly authorized you to provide them, and in such cases, with the communication, you assume the related obligations and responsibilities.
Browsing data:
The Site's computer systems collect some personal data whose transmission is implicit in the use of Internet communication protocols. These are information that is not collected to be associated with you, but that by their very nature could, through processing and association with data held by third parties, allow you to be identified. These include:
• IP address;
• URI (Uniform Resource Identifier) of the requested resources;
• The time and date of interaction with the Site;
• The type of operating system, the browser used, the screen resolution, and other technical information about the device used.
Personal data:
In the optional, explicit, and voluntary use of the Site, such as sending emails to the indicated address and filling out the contact form, personal data (name, surname, e-mail address, phone number, data contained in the sent messages) will be acquired. A specific summary policy will be present under the form. Filling out the form generates an e-mail that will not be saved in the site's database.
The data you communicate must refer to you or to third parties who have expressly authorized you to provide them, and in such cases, with the communication, you assume the related obligations and responsibilities.
How do we use your data? On what legal bases?
Personal data are processed using IT and/or telematic tools, with organizational methods and logics strictly related to the purposes listed below.
Specific security measures are observed to prevent data loss, unlawful or incorrect use, and unauthorized access.
For all occasions in which the Company processes your data, there is a legal basis that legitimizes the processing.
Sometimes your consent is necessary to process personal data. Other times, when the law allows it and subject to the respect of your fundamental rights, the Company is not required to ask for your consent to process the data. This happens when the data are processed for a legal obligation or following a request you have made by contacting the Company and/or requesting certain services.
The communication of data for which consent is required is optional, while in other cases, failure to communicate may make it impossible to fulfill requests and/or answer questions or comply with obligations to which the Company is subject.
At the end of the retention period, the collected personal data will be irreversibly deleted.Personal data are processed using IT and/or telematic tools, with organizational methods and logics strictly related to the purposes listed below.
Specific security measures are observed to prevent data loss, unlawful or incorrect use, and unauthorized access.
For all occasions in which the Company processes your data, there is a legal basis that legitimizes the processing.
Sometimes your consent is necessary to process personal data. Other times, when the law allows it and subject to the respect of your fundamental rights, the Company is not required to ask for your consent to process the data. This happens when the data are processed for a legal obligation or following a request you have made by contacting the Company and/or requesting certain services.
The communication of data for which consent is required is optional, while in other cases, failure to communicate may make it impossible to fulfill requests and/or answer questions or comply with obligations to which the Company is subject.
At the end of the retention period, the collected personal data will be irreversibly deleted.
Specific security measures are observed to prevent data loss, unlawful or incorrect use, and unauthorized access.
For all occasions in which the Company processes your data, there is a legal basis that legitimizes the processing.
Sometimes your consent is necessary to process personal data. Other times, when the law allows it and subject to the respect of your fundamental rights, the Company is not required to ask for your consent to process the data. This happens when the data are processed for a legal obligation or following a request you have made by contacting the Company and/or requesting certain services.
The communication of data for which consent is required is optional, while in other cases, failure to communicate may make it impossible to fulfill requests and/or answer questions or comply with obligations to which the Company is subject.
At the end of the retention period, the collected personal data will be irreversibly deleted.Personal data are processed using IT and/or telematic tools, with organizational methods and logics strictly related to the purposes listed below.
Specific security measures are observed to prevent data loss, unlawful or incorrect use, and unauthorized access.
For all occasions in which the Company processes your data, there is a legal basis that legitimizes the processing.
Sometimes your consent is necessary to process personal data. Other times, when the law allows it and subject to the respect of your fundamental rights, the Company is not required to ask for your consent to process the data. This happens when the data are processed for a legal obligation or following a request you have made by contacting the Company and/or requesting certain services.
The communication of data for which consent is required is optional, while in other cases, failure to communicate may make it impossible to fulfill requests and/or answer questions or comply with obligations to which the Company is subject.
At the end of the retention period, the collected personal data will be irreversibly deleted.
| DATA PROCESSED | PURPOSE | LEGAL BASIS DATA RETENTION PERIOD |
|---|---|---|
| Browsing data | 1) To obtain anonymous statistical information on the use of the Site and to check its correct functioning; 2) To ascertain responsibility in case of hypothetical computer crimes against the Site and the Data Controller only upon request of the competent supervisory authorities. |
6.1.b – Contract or pre-contractual measures (purpose 1) 6.1.c – legal obligation (purpose 2) Retention period Six months. The Data Controller may be required to retain personal data for a longer period in compliance with a legal obligation or by order of an authority. |
| Data entered in the "Request Information – “Fill out the form to contact us" form | 1) to respond to your requests. | 6.1.b – Contract or pre-contractual measures 6.1.c – legal obligation Retention period For the time necessary to respond to your request. If necessary, for the time required to fulfill legal obligations or to ascertain, exercise, or defend a right in court. |
| Data entered in communications via email sent to the address on the site | 1) to respond to your requests. | 6.1.b – Contract or pre-contractual measures 6.1.c – legal obligation Retention period For the time necessary to respond to your request. If necessary, for the time required to fulfill legal obligations or to ascertain, exercise, or defend a right in court. |
| Data collected through cookies | 1) for technical cookies, to allow the correct functioning of some sections of the Site; 2) If they are profiling or marketing cookies, the data collected with your prior consent will be used to show you advertising of interest to you on this Site and on other companies' sites; if you do not accept them, you may still see advertising, but not related to your interests. The Site incorporates YouTube videos that may install, with your consent, marketing and advertising cookies. For more information, please refer to the Cookie Policy (https://www.eng.samanta.com/cookie-policy.htm). |
6.1.b – Contract or pre-contractual measures (purpose 1) 6.1.a – Consenso (purpose 2) Retention period Until the end of each session or until the end of the retention period provided for each type of cookie, unless prior revocation of consent. For more information, please refer to the Cookie Policy (https://www.eng.samanta.com/cookie-policy.htm). |
Are my data shared with other subjects?
The personal data provided will not be disseminated, meaning they will not be made known to unspecified subjects.
However, the data may be communicated to subjects defined by the Data Controller for the purposes indicated, appointed, if necessary, Data Processors by the Data Controller. By way of example and not exhaustive, the data may be accessed by:
- Subjects authorized by us to process data, who have committed to confidentiality or have an adequate legal obligation of confidentiality;
- Those who take care of the maintenance of the Site and our legal or tax consultants, as Data Processors or independent Data Controllers;
- Public authorities, where required by law or upon their request;
- Third-party platforms, such as YouTube, if you accept third-party cookies.
The updated list of Data Processors can always be requested from the Data Controller by writing to: privacy@samanta.com
However, the data may be communicated to subjects defined by the Data Controller for the purposes indicated, appointed, if necessary, Data Processors by the Data Controller. By way of example and not exhaustive, the data may be accessed by:
- Subjects authorized by us to process data, who have committed to confidentiality or have an adequate legal obligation of confidentiality;
- Those who take care of the maintenance of the Site and our legal or tax consultants, as Data Processors or independent Data Controllers;
- Public authorities, where required by law or upon their request;
- Third-party platforms, such as YouTube, if you accept third-party cookies.
The updated list of Data Processors can always be requested from the Data Controller by writing to: privacy@samanta.com
Which are my rights as Data Subject?
We will always guarantee you control over your personal data. In particular, you have the right to:
- request information about your personal data processed by the Company and request a copy in a structured and readable format;
- not be subject to automated decisions, unless you consent;
- ask the Company to correct data referring to you that are incorrect, delete them, or use them only for certain purposes;
- revoke any consent given.
Please note that in some limited cases, we may not be able to fulfill your requests, such as when prohibited by law or by order of an Authority.
In any case, you have the right to lodge a complaint with the competent supervisory authority (Garante per la Protezione dei Dati Personali) if you believe that the processing of your personal data is contrary to current regulations.
- request information about your personal data processed by the Company and request a copy in a structured and readable format;
- not be subject to automated decisions, unless you consent;
- ask the Company to correct data referring to you that are incorrect, delete them, or use them only for certain purposes;
- revoke any consent given.
Please note that in some limited cases, we may not be able to fulfill your requests, such as when prohibited by law or by order of an Authority.
In any case, you have the right to lodge a complaint with the competent supervisory authority (Garante per la Protezione dei Dati Personali) if you believe that the processing of your personal data is contrary to current regulations.
Where are my data stored?
The personal data communicated through the Site will be processed only within the European Economic Area.
How will I be informed of any changes to this Policy?
The Company will update this Notice when it deems it necessary. If there are substantial changes, particularly regarding the purposes for which we use your personal data, we will inform you via email, to the address provided, or through a notice on the Site.
Privacy privacy policy updated on 04/02/2025 13:50
