Privacy Policy

1.- Data Controller and Data Protection Officer

SQIM S.r.l. VAT IT 03459510123, headquartered at Via S. Francesco 62, 21020 Inarzo (VA) | IT, represented by its legal representative pro tempore, is the entity that processes the data of data subjects and is, for legal purposes, considered the Data Controller. As such, it is responsible for ensuring the implementation of appropriate organizational and technical measures for data protection in accordance with applicable regulations.

SQIM S.r.l. has appointed a Data Protection Officer (DPO), responsible for ensuring compliance with privacy regulations. The DPO can be contacted for matters related to personal data processing at: contact@sqim.bio

2.- Methods of Personal Data Collection

The Personal Data processed by the Controller may be collected directly from the data subject, including through remote communication technologies used by the Controller (e.g., websites, smartphone and tablet apps, call centers, etc.);

3.- Categories of Personal Data Processed

The Personal Data processed by the Controller includes, by way of example:

• browsing data (e.g., IP addresses, domain names, request times, request methods, server response status codes, browser and OS parameters, logs);
• identification data (e.g., name, surname, tax code, address, date and place of birth, nationality);
• contact data (e.g., phone numbers, landline and/or mobile, email address);
• profiling and marketing data (e.g., interests and preferences);
• other data related to the above categories.

4.- Purposes and Legal Basis of Processing

Personal Data, when applicable, will be processed for the following purposes:

• registration on the website and management of contact and/or information requests

Processing occurs to handle registration requests (if applicable), requests for information, contacts, and sending of materials, as well as to fulfill related obligations.

Legal basis: performance of pre-contractual or contractual obligations and compliance with legal duties.

Providing data is optional, but refusal will prevent the provision of the requested services.

• contract execution

Data is processed to manage the contractual relationship, including billing, payments, complaints, and service delivery via the website.

Legal basis: contract fulfillment and legal obligations.

Providing data is optional but necessary for service provision.

• compliance with legal obligations, legal defense, and fraud prevention

Data is processed for legal compliance, to establish, exercise, or defend legal claims, and for crime prevention and enforcement.

Legal basis: the Controller’s legitimate interest, balanced against the rights of the data subject.

• promotional activities on similar Services/Products

Processing occurs for sending promotional communications related to Services/Products similar to those already purchased, unless the data subject has objected.

Legal basis: the Controller’s legitimate interest.

The data subject may object at any time.

• promotional activities on Services/Products offered by SQIM S.r.l.

Processing occurs, with prior consent, for sending promotional communications via traditional (e.g., post, phone calls) and/or automated channels (e.g., email, SMS, MMS, fax, recorded calls).

Legal basis: freely revocable consent.

Refusal to provide consent prevents access to related services without affecting the contractual relationship.

• marketing for products or services from SQIM S.r.l. partners

Processing occurs, with prior consent, for promotional communications regarding products/services from SQIM S.r.l.’s business partners via traditional and/or automated channels.

Legal basis: freely revocable consent.

• profiling

Processing (including location and sociodemographic data) occurs, with prior consent, for profiling purposes such as data analysis and product/service customization. This is performed anonymously and in aggregate using algorithms and predictive models for a limited period.

Personal Data will not be subject to fully automated decisions that produce legal effects or significantly affect the individual.

Legal basis: consent, freely revocable at any time.

5.- Recipients of Personal Data

Data may be shared with entities acting as independent Controllers or as Processors for the above purposes, in compliance with legal obligations or legitimate interest. Specifically, data may be shared with:

• service providers (e.g., storage, IT, marketing, insurance companies, banks);
• business partners of SQIM S.r.l.;
• Public Administrations, Authorities, and others as required by law.

Data will not be disseminated (i.e., made available to undefined third parties).

6.- Transfer of Data to Third Countries

Personal Data is stored within the European Union. If transferred outside the EU, this will be to entities in countries deemed adequate by the European Commission or under appropriate safeguards (e.g., Standard Contractual Clauses or data subject consent).

The data subject may request a copy of transferred data and a list of destinations by writing to contact@sqim.bio

7.- Personal Data Retention Period

Data will be kept in identifiable form only as long as necessary to achieve the purposes for which they were collected, considering applicable laws. Afterwards, they will be deleted or anonymized unless retention is required by legal or regulatory obligations (e.g., tax laws, art. 2220 Civil Code) or orders from Authorities.

Cookie retention is detailed in the Cookie Policy.

In case of litigation, data may be retained for up to 10 years after resolution.

8.- Processing Methods

Processing is carried out by authorized personnel using electronic tools, under principles of lawfulness and fairness, protecting confidentiality and rights at all times in compliance with applicable law.

Marketing-related profiling is performed through automated processes to analyze customer profiles and optimize promotional activities.

9.- Data Subject Rights

The data subject may request the following from the Controller:

• confirmation of data processing and access to personal data (right of access);
• correction or completion of inaccurate or incomplete data (right to rectification);
• erasure of data under conditions of the GDPR (right to be forgotten);
• restriction of processing under applicable conditions (right to restriction);
• data portability (right to data portability);
• objection to processing for legitimate interest, marketing, or profiling purposes (right to object);
• withdrawal of consent at any time without affecting the lawfulness of prior processing.

Consent for automated marketing extends to traditional contact methods. Similarly, objections apply to both methods unless otherwise specified.

To exercise these rights, contact contact@sqim.bio or write to the legal address of SQIM S.r.l..

The data subject also has the right to lodge a complaint with the relevant supervisory authority (in Italy: the Data Protection Authority) or the competent body in their country of residence, under Articles 77–79 of the GDPR.

10.- Cookies

For information on cookies, please refer to the specific Cookie Policy.