INFORMATION PURSUANT TO ART. 13 OF EU REGULATION (GDPR) 2016/679
Several data items are recurring in this document, so we will refer to them as follows: The website www.srainstruments.com is owned by SRA Instruments Spa, which is referred to in this document as "the Company." The aforementioned website, identified as www.srainstruments.com, is referred to in this document as "the Site." The company email address is info@srainstruments.com, which is referred to in this document as "the Company's email address."
WHY THIS NOTICE
The protection of your personal data is very important to our Company, and to best protect you, we are providing this notice. It contains information on the type of information collected online and the various options you have for influencing the collection and use of such information on the Site. The Company, as the Data Controller of your personal data, pursuant to and for the purposes of Article 13 of EU Regulation 679/2016 (GDPR), hereby informs you that the aforementioned legislation provides for the protection of natural persons with regard to the processing of personal data, and that such processing will be based on the principles of fairness, lawfulness, transparency, and protection of your privacy and your rights. Your personal data will be processed in accordance with the legislative provisions of the aforementioned regulation and the confidentiality obligations set forth therein. The processing of personal data applies to those who interact with the Company's web services, accessible electronically from our Site address, corresponding to the homepage of the Company's official website. This policy applies exclusively to the Company's website and not to other websites outside of the Company that may be visited by the user via links and/or connections from our website.
DATA CONTROLLER
The data controller is SRA Instruments SPA, with registered office at Via Alla Castellana, 3 - 20063 Cernusco Sul Naviglio (MI), represented by its legal representative pro tempore, who can be contacted at the following email address: info@srainstruments.com
TYPES OF DATA PROCESSED
a) BROWSING DATA
The computer systems and software procedures used to operate this website acquire, during their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified individuals, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses of computers used by users connecting to the site (anonymized), the URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), and other parameters relating to the user's operating system and IT environment. This data is used solely for the purpose of obtaining anonymous statistical information on the use of the site and to monitor its proper functioning. The data may be used to ascertain liability in the event of hypothetical computer crimes against the site, only at the request of the relevant supervisory authorities. The Site collects, in particular, the following browsing data:
• Anonymized IP address;
• Date and time of access;
• Location of access.
b) DATA PROVIDED VOLUNTARILY BY THE USER
The optional, explicit, and voluntary sending of emails to the addresses indicated on this Site or through the email forms on the Site entails the subsequent acquisition of the sender's email address, which is necessary to respond to requests, as well as any other personal data included—always voluntarily by the user—in the message. Specifically, the user may voluntarily provide the following personal data:
• For contact via the contact form: first name, last name, email address, company name, and telephone number;
• For newsletter subscription: email address;
• For creating and accessing the personal area: first name, last name, email address, company name, and address.
c) SPECIAL PERSONAL DATA
The Data Controller does not request or collect special personal data through this Site.
OPTIONAL DATA PROVISION
Except as specified for navigation data, the user is free to provide personal data in the Company's request forms or otherwise indicated in the sections of the Site relating to contacting the Company, to request informational materials or other communications. Failure to provide such data may make it impossible to obtain what has been requested.
REVOCATION OF CONSENT
The consent given for the data referred to in point b) of the previous paragraph (data provided voluntarily by the user) may be revoked at any time without prejudice to the lawfulness of the processing based on consent given before its revocation.
PURPOSE AND LEGAL BASIS OF PROCESSING
Your data will be processed for purposes related to:
a) The fulfillment of contractual obligations (the legal basis for processing is the performance of a contract);
b) Implementation of legislative obligations and mandatory legal obligations in the tax and accounting fields (the legal basis for processing is the need to fulfill a legal obligation);
c) Sending newsletters (the legal basis for processing is the user's consent);
d) Contacting you via the contact form to request information (the legal basis for processing is the user's consent);
e) Management of the user's personal area (the legal basis for processing is the user's consent);
f) Recruiting (the legal basis for processing is the user's consent);
g) Statistics with anonymized IP (Google Analytics) (the legal basis for processing is the user's consent).
The Data Controller hereby informs you that failure to provide, or incorrect provision of, any mandatory information may make it impossible for the Data Controller to ensure the appropriateness of the processing.
DATA PROCESSING METHODS
Personal data is processed electronically for the time strictly necessary to achieve the purposes for which it was collected. Specific security measures are observed to prevent data loss, illicit or incorrect use, and unauthorized access.
LOCATION OF DATA PROCESSING
The processing operations related to this Site's web services take place at the Company's headquarters and will be communicated exclusively to those responsible for providing the services necessary for proper management of the relationship, ensuring the protection of the data subject's rights. The personal data provided by users who request informational materials (such as information requests, newsletter subscriptions, etc.) are used solely to perform the requested service or performance.
DATA RECIPIENTS
Your data may be disclosed to third parties, particularly to public and/or private entities for which disclosure is mandatory or necessary to fulfill legal obligations or is otherwise functional to the administration of the relationship, such as, for example:
- Persons authorized to process data who carry out their activities at the Data Controller's office (employees, collaborators, partners, etc.);
- Persons appointed as external data processors;
- Consultants and freelancers, including associates, who operate on behalf of the Data Controller (accountants, IT service providers);
- All those to whom the data must be disclosed for the proper fulfillment of the purposes specified above and related or connected activities (credit institutions, etc.).
STORAGE PERIODS
Your personal data is processed for the time necessary to perform the service requested by the user, or required by the purposes described in this document. The personal data collected will be deleted 10 years after the requested service was provided, unless the processing is based on the user's consent; in this case, the Data Controller will retain the personal data until such consent is revoked. Data provided for commercial promotion activities will be retained until the user revokes consent and, in any case, for a period not exceeding two years.
DATA TRANSFER
The Data Controller may transfer personal data collected through the Site to countries outside the European Union. In such cases, if the company is located in a country for which an adequacy decision has not been adopted by the European Commission, pursuant to Article 45 of EU Regulation 2016/679, we will guarantee access to your personal data only if you provide your express consent. The Data Controller does not transfer personal data collected through the Site to international organizations.
AUTOMATED DECISION-MAKING
The Data Controller does not perform automated decision-making processes.
SECTION RESERVED FOR MINORS
No person under the age of 16 may send information to this Site, nor may they make purchases or complete legal transactions on this Site without the prior consent of a parent or guardian, unless permitted by applicable law.
SOCIAL NETWORK PLUG-INS
The Site also includes plug-ins that allow easy sharing of content on social networks. By clicking on the corresponding social network plug-in, a connection is established between your browser and the social network's servers. These servers may track your visit to our Site and, if applicable, associate it with your social network account, especially if you are logged in at the time of your visit. If you do not want the social network to record data relating to your visit to our Site, you must log out of your social network account and delete the cookies installed by the social network in your browser. The collection and use of information by social networks are governed by their respective privacy policies, to which we encourage you to refer.
Facebook: https://www.facebook.com/help/...
LinkedIn: https://www.linkedin.com/legal...
Instagram: https://help.instagram.com/196...
The European Commission has currently determined that the United States does not offer an adequate level of data protection. However, social media companies have committed to complying with the EU-US Privacy Shield framework published by the U.S. Department of Commerce regarding the collection, use, and retention of personal data from EU Member States.
YOUR RIGHTS REGARDING DATA PROCESSING
We inform you that, in light of your status as a data subject, you may exercise the rights provided for in Articles 15-21 of the GDPR.
In particular, you may:
Obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet recorded, and communication of such data in an intelligible form;
Obtain:
a) information on the source of the personal data;
b) the purposes and methods of processing;
c) the logic applied in the event of processing carried out with the aid of electronic means;
d) the identification details of the Data Controller, the data processors, and the designated representative pursuant to Article 5, paragraph 2, of the Privacy Code and Article 3, paragraph 1, of the GDPR, and the persons or categories of persons to whom the personal data may be communicated or who may become aware of such data in their capacity as designated representative in the territory of the State, data processors, or persons in charge of processing;
Obtain:
a) the updating, rectification, or, where applicable, integration of the data;
b) the deletion, anonymization, or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which it was collected or subsequently processed;
c) certification that the operations referred to in letters a) and b) have been notified, including their content, to those to whom the data was communicated or disseminated, except where such compliance proves impossible or involves a manifestly disproportionate effort compared with the right being protected;
Object, in whole or in part, to:
a) for legitimate reasons, the processing of your personal data, even if pertinent to the purpose of collection;
b) the processing of your personal data for the purpose of sending advertising or direct sales materials or for conducting market research or commercial communications, through the use of automated calling systems without the intervention of an operator, by email and/or through traditional marketing methods, by telephone and/or certified mail.
Please note that the data subject's right to object, set out in point b) above, for direct marketing purposes via automated means extends to traditional methods, and that the data subject may exercise the right to object even partially. Therefore, the data subject may decide to receive communications only via traditional means, only automated communications, or neither type of communication. Where applicable, the data subject also has the rights set forth in Articles 16-21 GDPR (right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object).
COMPLAINTS
The data subject also has the right to lodge a complaint with the supervisory authority of their country of residence.
HOW TO EXERCISE YOUR RIGHTS
To exercise their rights, users can send a request to the Data Controller's contact details, summarized below:
• By registered mail: SRA Instruments Spa - Via Alla Castellana, 3 - 20063 Cernusco Sul Naviglio (MI)
• By email: srainstruments@legalmail.it
Requests are submitted free of charge and will be processed by the Data Controller as quickly as possible, in any case within one month of receiving the request.
DEFENSE IN COURT
The user's personal data may be used by the Data Controller in court or in the preparatory stages of possible legal proceedings for the defense against abuse committed by the user in the use of this Site and related services. The user acknowledges that the Data Controller may be required to disclose personal data by order of public authorities.
EXTERNAL DATA PROCESSOR
The web hosting provider (OVH Srl, Via Leopoldo Cicognara, 7, Milan (MI)) is designated as the external data processor. OVH is located in the European Economic Area and complies with European regulations (https://www.ovh.it/protezione-dati-personali/).
SITE MODIFICATIONS
The Site Owner reserves the right to modify the content of the Site at any time and without notice. The user agrees to be bound by any such future revisions and therefore undertakes to periodically visit the Site to be informed of any changes.
CHANGES TO THIS PAGE
The Data Controller reserves the right to make changes to this page. You agree to be bound by any such future revisions and therefore agree to periodically visit this page to stay informed of any changes.
Last updated September 2025