3.3. The provision of your Personal Data is necessary in all cases where the processing takes place on the basis of a legal obligation or to execute a contract of which you are a party or from the execution of pre-contractual measures adopted at your request. Your refusal could make it impossible for CISOaaS.it to carry out the purpose for which the Personal Data are collected.

3.4. The provision of your Personal Data is instead voluntary for the pursuit of the additional purposes indicated in the table. Failure to provide your consent in relation to these latter purposes will make it impossible to pursue these further purposes (for example, sending promotional messages or improving the services offered), but will have no consequence on the conclusion of the contract and provision of the service covered by the contract. The mandatory or optional nature of the provision will be specified at the time of collection.

4. Recipients of Personal Data

4.1. Your Personal Data may be made accessible, for the purposes mentioned above: a) to employees and collaborators of CISOaaS.it, on the basis of the instructions received from CISOaaS.it and under its authority; b) to subjects (including public authorities) who have access to Personal Data by virtue of regulatory or administrative measures; c) to public and / or private subjects, natural and / or legal persons (including, by way of example, legal, administrative and tax consultancy firms, Judicial Offices, Chambers of Commerce, Chambers and Labor Offices, etc.), if the communication is necessary or functional for the correct fulfillment of the contractual obligations assumed as well as the obligations deriving from the law d) to companies, consultants or professionals to whom CISOaaS.it uses in the provision of its services including: companies, consultants or professionals in charge of installation, maintenance, updating and, in general, the management of the hardware and software of CISOaaS.it or which CISOaaS.it uses for the provision of its services; to companies in charge of processing and / or sending advertising and information material on behalf of CISOaaS.it; to companies or Internet providers in charge of sending documentation and / or information material. e) third parties involved in a bankruptcy, merger, acquisition, reorganization or sale of a company, concerning CISOaaS.it, as part of the related transaction. The data concerning the User will neither be transferred nor disseminated, except in anonymous and aggregate form, for statistical or research purposes.

5.Transfer of Personal Data

5.1. Your Personal Data will be processed within the European Union and stored on servers located in Ireland and Germany, within the European Union.

6.Personal data retention period

6.1. The Personal Data concerning the User will be stored on the Company's servers at its hosting providers, only for the time necessary to guarantee the correct provision of the services offered.

6.2. In the event of cancellation, exclusion or disabling for non-use of the account on the Site, the User's data will be kept for administrative purposes for a period not exceeding one quarter, without prejudice to any specific legal obligations on the conservation of accounting documentation or for public security purposes. In such cases, the automatic deletion of the data will also be guaranteed by third parties to whom they may have been communicated.

6.3. In any case, it is understood that the User's Personal Data will be stored and processed for marketing purposes for the period of time permitted by law and by the requirements of the Guarantor Authority for the Processing of Personal Data.

6.4. After this period, the User's data will be transformed into anonymous form, so as not to allow, even indirectly, to identify the interested parties.

7. Rights of interested parties

7.1. Pursuant to art. 15? 21 of the GDPR, in relation to the Personal Data communicated, you have the right to: a) access and request a copy; b) request rectification; c) request cancellation; d) obtain limitation of processing; e) oppose the processing; f) receive in a structured format, commonly used and readable by an automatic device and to transmit such data without hindrance to another data controller; where technically feasible.

7.2. We inform you that you still have the right to object at any time to the processing of your Personal Data carried out for direct marketing purposes.

7.3. If you object to the processing for direct marketing purposes, your Personal Data will no longer be processed for these purposes.

7.4. To exercise your rights and to revoke your consent, you can send a communication to the e-mail address info@cisoaas.it.

7.5. We remind you that it is your right to lodge a complaint with the Guarantor for the protection of personal data, by means of: a) registered letter with return receipt addressed to the Guarantor for the protection of personal data, Piazza di Monte Citorio, 121 00186 Rome; b) and- mail to the address: garante@gpdp.it, or protocol@pec.gpdp.it; c) fax to the number: 06 / 69677.3785.7.6. CISOaaS.it may modify the content of this privacy policy at any time by publishing the new version on this page. Where possible, CISOaaS.it will inform you well in advance of the substantial changes to this privacy policy. However, you can view the constantly updated text of the privacy policy on the Site.