Complete information - Contacts
Who are we and what do we do with your personal data?
XTN Cognitive Security S.r.l., headquartered at Via Santa Caterina no. 95, 38062 Arco (TN) (hereinafter also referred to as “the Data Controller”), is committed to protecting your personal data and ensuring its security against any events that could risk a data breach.
The Data Controller implements policies and practices regarding the collection and use of personal data, as well as the exercise of the rights granted to you under applicable regulations. These policies and practices are updated whenever necessary, particularly in response to regulatory or organizational changes that may impact the processing of your personal data.
The Data Controller has appointed a Data Protection Officer (DPO), who can be contacted for any questions regarding data protection policies and practices at dpo@xtn-lab.com.
How does the Data Controller collect and process your data?
The Data Controller collects and/or receives information about you, including: IP address, Personal identification data (such as name, surname, email address, phone number, role, company affiliation, and country) provided while browsing the website.
This data is necessary for the Data Controller to process your request for information. Your personal data may be shared with third parties and/or recipients whose involvement is necessary to fulfill the stated purposes and comply with legal obligations.
If you give your consent, the Data Controller may send you promotional communications regarding its activities and services. You can withdraw your consent at any time by writing to dpo@xtn-lab.com.
Your personal data will not be publicly disclosed or shared with unspecified entities.
The Data Controller transfers personal data outside the SEE but ensures appropriate safeguards through standard contractual clauses (SCCs) and the Data Privacy Framework (DPF). Your personal data will not be disclosed or shared with unspecified and unidentified third parties.
What happens if you do not provide your data?
Your personal data is required to fulfill the request you submitted through the “Contact” or “Get in Touch” sections. If you do not provide the requested data, the Data Controller will not be able to process your request.
What happens if you do not consent to receiving promotional communications?
IYour data will not be processed for this purpose, and there will be no consequences for the main purpose related to providing information. In any case, you can withdraw your consent at any time.
How and for how long are your data stored?
Il The processing of your personal data is carried out using both electronic and manual means made available to individuals acting under the authority of the Data Controller, who are authorized and trained for this purpose.
Personal data is stored in protected electronic archives, secured with effective and appropriate security measures to mitigate the risks of data breaches, as determined by the Data Controller.
Your data will be retained for as long as necessary to fulfil informational requests and communications of this specific nature made by the Data Controller following your request and, in any case, for a maximum period of 10 years, except in cases where events occur that require intervention by the competent authorities, including in collaboration with third parties/recipients responsible for the Data Controller’s IT security activities, to conduct investigations into the causes of the event.
Your name, surname, and email address, used for sending promotional communications, will be retained for a maximum of 10 years from the moment of your consent, unless revoked.
What are your rights?
C Subject to the limitations, particularly those related to the retention period for the processing of your personal data, the rights granted to you ensure that you always have control over your data.
Your rights include:
- Rectification
- Erasure
- Restriction of processing
- Objection to processing
Your rights are guaranteed to you without any charges or formalities required for requesting their exercise, which is essentially intended to be free of charge.
You have the right to:
- Obtain a copy, also in electronic format, of the data you have requested access to. If you request additional copies, the Data Controller may charge you a reasonable fee for expenses;
- Obtain the deletion of the data, limitation of processing, or even the update and correction of your personal data, and ensure that any third parties/recipients who receive your data comply with your request, unless there are overriding legitimate reasons that prevail over your request (e.g., environmental investigations and risk containment related to the emergency managed by the Data Controller on their behalf);
- Receive any relevant communication regarding activities carried out following the exercise of your rights without delay and, in any case, within one month from your request, unless extended, with valid justification, for up to two months, which must be duly communicated to you.
- For any further information and to submit your request, please contact the Data Controller at the email address dpo@xtn-lab.com.
Where can you file a complaint?
Without prejudice to any other action before administrative or judicial authorities, you can file a complaint with the competent supervisory authority, or with the one that carries out its tasks and exercises its powers in Italy where you have your habitual residence or work, or if different, in the Member State where the violation of Regulation (EU) 2016/679 occurred.
