Privacy Policy

To immediately access the cookie policy click here
Updated as of 10.28.26

This notice is drafted and customized for visitors to the kireon.it website.

PRIVACY POLICY – WEBSITE DISCLOSURE PURSUANT TO ART. 13 OF EUROPEAN REGULATION 2016/679 (GDPR)

1. Scope of application

This disclosure describes the methods for processing the personal data of users who consult the website www.kireon.it (hereinafter the “Site”) and who use the services available therein (contact forms, registration for webinars and events, submission of applications, reserved area).
The disclosure does not apply to third-party sites reachable via links on the Site, nor to processing carried out within the framework of contractual relationships with customers and suppliers, for which specific disclosures are provided.
Further disclosures are provided, where necessary, on individual pages that involve data collection.

2. Data Controller and Joint Data Controllers

2.1 The Data Controller is Kireon S.r.l. (with registered office in Via Grieco 91 – 41011 Campogalliano (Mo) Italy e-mail info@sideius.com) in the person of its pro-tempore legal representative.
2.2 Joint controllership of processing
Some of the processing activities described in this disclosure (in particular the sending of the Newsletter in point B) and the Marketing activities in point D) are carried out under a regime of Joint controllership (pursuant to Art. 26 of the GDPR) between Kireon S.r.l. and the other Group companies listed below (jointly defined as the “Joint Controllers” or the “Group”):


The joint controllers have transparently defined, by means of an internal agreement, their respective responsibilities regarding compliance with the obligations arising from the Regulation, with particular regard to the exercise of the data subject’s rights and the information to be provided pursuant to Art. 13. The essential content of the agreement is made available to data subjects and can be requested by writing to info@sideius.com.
Pursuant to Art. 26, par. 3, GDPR, the data subject may exercise their rights towards and against each joint controller. The designated contact point for exercising rights is info@sideius.com.
The individual processing activities carried out in joint controllership are indicated in the following sections, with reference to the dedicated disclosure.

DATA SUBJECTS AND RETENTION PERIOD
A) users (visitors) of the kireon.it website
During navigation, the computer systems and software procedures responsible for the operation of the Site acquire some personal data whose transmission is implicit in the use of Internet communication protocols, such as, by way of example, IP addresses or domain names of the computers and terminals used by users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the size of the file obtained, and other parameters relating to the user’s operating system.
For more information, please consult the cookie policy available on the site.

B) Newsletter.
The processing is carried out in Joint Controllership pursuant to Art. 26 GDPR by Sideius S.r.l. and the other companies of the Group as indicated in point 2.2.
By filling out the form accessible in the “Newsletter” section, your personal data (email) will be used to register you for the newsletter and the relative enrollment in the mailing list for direct marketing activities, newsletters, sending of promotional, commercial, and advertising material or regarding events and initiatives of or organized by the Group, in full compliance with the principles of lawfulness and fairness and the provisions of the law.
The provision of your personal data is optional; however, your refusal will make it impossible for the Controller to fulfill your request for newsletter subscription and to inform you about Group news. The legal basis for processing is Art. 6.1.a) of the GDPR. At any time, you may object to the processing using the link at the bottom of the email or by sending a request to the Controller at the contact details indicated in this disclosure. By checking the same box, you also provide consent for the use of the tracking pixel in the newsletters, described in point G). This is a single manifestation of will, informed and revocable at any time, even only in part. Refusal to provide consent has no consequence on other existing relationships with the Controller.
You can revoke your consent:

Revocation does not affect the lawfulness of the processing carried out before the revocation. You can also object to the processing at any time by clicking on the appropriate link in the footer of the emails or by writing to info@sideius.com
Your data will be kept until you decide to cancel your subscription to the service.


C) users of the “Contact Us” section
By filling out the forms accessible in the “Contact Us” section, your personal data (name, surname, telephone, e-mail, profession, address) will be used to provide a response to your request for information. The purpose of providing the data is the fulfillment of your request. The legal basis for processing is Art. 6.1.b) of the GDPR. Your data will be kept for the time necessary to provide the service you requested.


E) Promotional communication purposes
The processing is carried out in Joint Controllership pursuant to Art. 26 GDPR by Kireon S.r.l. and the other companies of the Group as indicated in point 2.2.
Your data, subject to your consent provided by selecting the appropriate marketing box, will be used to send you promotional communications regarding Group initiatives and products, as well as to forward invitations to events organized by the same. The transmission of such communications may take place through traditional methods (such as, for example, telephone calls) and/or automated contact methods (such as, for example, electronic mail, telefax, pre-recorded telephone calls, SMS, MMS, instant messaging, etc.). The legal basis for processing is Art. 6.1.a) of the GDPR. At any time, you may object to the processing using the link at the bottom of the email or by sending a request to the Controller at the contact details indicated in this disclosure.
Participation in promotional initiatives remains optional and your refusal will not entail any consequence regarding the other processing purposes mentioned in this disclosure, but it will prevent the Controller from keeping you updated on its further initiatives, events, and its projects and/or products. Your data will be kept until you decide to cancel your subscription to the service.
By checking the same box, you also provide consent for the use of the tracking pixel in promotional communications, described in point G). This is a single manifestation of will, informed and revocable at any time, even only in part. Refusal to provide consent has no consequence on other existing relationships with the Controller.
You can revoke your consent:

Revocation does not affect the lawfulness of the processing carried out before the revocation. You can also object to the processing at any time by clicking on the appropriate link in the footer of the emails or by writing to info@sideius.com.
Your data will be kept until you decide to cancel your subscription to the service.


F) Registration for webinars and events
By filling out the registration forms for Webinars and events, your personal data (Name and surname, company, role, e-mail, telephone; any participation data collected through the platform used for the event, such as entry and exit times, questions asked in chat and, where provided, audio/video recording of the session) will be used to manage the registration, for the delivery of the event, the sending of material and the recording, and related organizational fulfillments. The legal basis for processing is Art. 6.1.a) of the GDPR. Any recording of the event and its dissemination are processed according to what is indicated in the specific disclosure provided during the registration phase.
Your data will be kept for the duration of the relationship and for the times provided by legal obligations.

G) Tracking pixel
Newsletters and promotional communications contain a tracking pixel. The pixel is a small invisible image that, when you open the email, communicates information to the sending system such as the date and time of opening, type of device and mail client, IP address, and clicks on links.
This information, also combined with data from other company systems, is used to:

The legal basis is your consent (Art. 6.1.a GDPR and Art. 122, paragraph 1, of the Privacy Code), provided with the single box described in point B. No solely automated decision-making process is carried out that produces legal effects or similarly significantly affects you.
Revocation, even partial. You can revoke your consent at any time, in whole or in part:

Revocation does not affect the lawfulness of the processing carried out before the revocation. The Controller follows up on the partial revocation request promptly.


METHODS OF PERSONAL DATA PROCESSING
Your personal data will be processed by electronic and/or telematic means, through the use of cookies (as indicated in the cookie policy available on the site) and by means of electronic computers with the use of third-party software, in compliance with the methods referred to in Arts. 6, 32 of the GDPR and through the adoption of the appropriate security measures provided.
To send communications, the Joint Controllers use a platform that produces reports. Based on the consent provided, the reports indicate, for example:

If you have revoked consent for tracking only, the Joint Controllers use only aggregated and anonymous data regarding you, without individual references.

RECIPIENTS OF PERSONAL DATA AND DISSEMINATION OF DATA
Your data will be processed by appropriately appointed personnel and may be processed by third parties belonging, by way of example, to the following categories:

The subjects belonging to the categories listed above operate, in some cases, as data processors specifically appointed by the Controller in compliance with Article 28 GDPR, in other cases in total autonomy as separate data controllers, it being understood that, in the latter case, the communication of your personal data to such autonomous controllers is carried out solely for the purpose of pursuing the purposes indicated in this disclosure.
The complete list can be requested by writing to the Controller’s contact details.
Your data will not be subject to dissemination.


TRANSFER OF PERSONAL DATA:
Your data is stored in countries belonging to the European Union.
For data processed through cookies only, your data will be transferred to countries not belonging to the European Union as indicated in the cookie policy of the companies providing the services related to third-party cookies. For more information, write to privacy@sideius.com.

Automated decision-making and profiling
The Joint Controllers do not adopt automated decision-making processes that produce legal effects or similarly significantly affect data subjects pursuant to Art. 22 GDPR.
Any profiling activity connected to marketing cookies is described in the Cookie Policy and is based exclusively on the consent of the data subject.

RIGHTS OF DATA SUBJECTS
You have the right to obtain from the Controller the erasure (right to be forgotten), limitation, updating, rectification, portability, and opposition to the processing of personal data concerning you, as well as in general you can exercise all the rights provided for by Arts. 15 and following of European Regulation 2016/679 by writing to privacy@sideius.com or by contacting the Controller at the company contact details provided by the consultant. The data subject has the right to lodge a complaint with the Supervisory Authority
EU Reg. 2016/679: Arts. 15, 16, 17, 18, 19, 20, 21, 22 – Rights of the Data Subject

  1. The data subject has the right to obtain confirmation as to whether or not personal data concerning them exist, even if not yet recorded, and their communication in intelligible form and the possibility of lodging a complaint with the Supervisory Authority.
  2. The data subject has the right to obtain indication of:
    • the origin of the personal data;
    • the purposes and methods of processing;
    • the logic applied in case of processing carried out with the aid of electronic instruments;
    • the identification details of the controller, the processors, and the designated representative pursuant to Article 5, paragraph 2;
    • the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it in their capacity as designated representative in the territory of the State, as processors, or as personnel authorized to process personal data.
  3. The data subject has the right to obtain:
    • the updating, rectification or, when interested, integration of the data;
    • the erasure, transformation into anonymous form, or blocking of data processed in violation of the law, including those whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;
    • certification that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case where such fulfillment proves impossible or involves a use of means manifestly disproportionate to the protected right;
    • data portability.
  4. The data subject has the right to object, in whole or in part:
    • for legitimate reasons to the processing of personal data concerning them, even if pertinent to the purpose of collection;
    • to the processing of personal data concerning them for the purpose of sending advertising material or direct selling or for carrying out market research or commercial communication.