Complete information - Download
Who are we and what do we do with your personal data?
XTN Cognitive Security S.r.l., located at Via Santa Caterina no. 95, 38062 Arco (TN) (hereinafter also referred to as “the Data Controller”), cares about the confidentiality of your personal data and ensures the necessary protection against any event that may put them at risk of violation.
The Data Controller implements policies and practices regarding the collection and use of personal data, as well as the exercise of the rights granted to you under applicable regulations. The Data Controller ensures that these policies and practices are updated whenever necessary, especially in the case of regulatory or organizational changes that may affect the processing of your personal data.
The Data Controller has appointed a Data Protection Officer (DPO), whom you can contact if you have any questions about the policies and practices adopted.
You can contact the DPO at the following address: dpo@xtn-lab.com
How does the Data Controller collect and process your data?
Your personal information will be processed for the following purpose:
- Responding to your download request
The Data Controller collects and/or receives your information, including your IP address and identifying personal data (such as name, surname, company, role, email address, country of origin, and phone number). This information is necessary for the Data Controller to fulfill your request to receive the downloadable material.
Your personal data is primarily communicated to third parties and/or recipients whose activities are essential for carrying out the purposes mentioned above, as well as for compliance with specific legal obligations. Any communication that does not serve these purposes will be subject to your prior consent.
Your personal data will not be in any way disseminated or disclosed to unspecified parties.
- For commercial promotion activities
Your personal data is processed to offer you additional products and services and to send you advertising materials.
Promotional materials may be sent using your data (such as name, surname, and email address) through the following channels:
- sms/whatsapp
- Phone
This processing is based on the legitimate interest of the Data Controller. You can always object at any time by using the dedicated link in the emails you receive, thereby stopping the processing.
What happens if you do not provide your data?
Your personal data, which identifies you, is necessary to fulfill the request you submitted through the “register” section. If not provided, the Data Controller will be unable to process your requests.
How, where, and for how long are your data stored?
Your data is processed using both electronic and manual means. Electronic data is stored in protected archives with effective security measures to prevent data breaches. Manual processing is carried out by authorized and trained personnel acting under the authority of the Data Controller.
Electronic archives are located within the EU (and SEE); however, they may be connected to or interact with databases located in non-EU countries, subject to the following safeguards:
- Data Privacy Framework
- Standard Contractual Clauses
- Adequacy Decision
Personal data is retained for the time necessary to fulfill registration requests and send related communications. In any case, data is not kept for more than 2 years, except in cases where events occur that require intervention by competent authorities, including collaboration with third parties responsible for cybersecurity investigations.
Personal data processed for promotional communication purposes will be stored until you request deletion and, in any case, for no longer than 10 years.
What are your rights?
Within the time limits set for the processing of your personal data, you are granted rights that allow you to maintain full control over your data.
Your rights include:
- access
- rectification
- erasure
- restriction of processing
- objection to processing
- portability
These rights are granted to you free of charge and without any particular formalities for requesting their exercise, which is essentially intended to be cost-free. You have the right:
- To obtain a copy, including in electronic format, of the data for which you have requested access. If you request additional copies, the Data Controller may charge you a reasonable fee for expenses
- To request the deletion, restriction of processing, updating, or rectification of your personal data, and to have third parties/recipients who may have received your data comply with your request, unless there are overriding legitimate reasons that prevail over your request (e.g., environmental investigations or risk containment measures managed through the Data Controller).
- To receive any relevant communication regarding the activities carried out following the exercise of your rights without delay and, in any case, within one month from your request, unless an extension is needed, which may be up to two months and must be properly communicated to you.
- For any further information and to submit your request, you must contact the address dpo@xtn-lab.com.
To whom can you lodge a complaint?
Without prejudice to any other action in administrative or judicial proceedings, you can file a complaint with the competent supervisory authority, or the one that performs its duties and exercises its powers in Italy, where you have your habitual residence or work, or, if different, in the Member State where the violation of Regulation (EU) 2016/679 occurred.
