Integrazioni alla Privacy policy per il servizio 4HSE
USE, TYPE, PLACEMENT AND STORAGE OF DATA
COMMERCIAL DATA
Legal entities: company name, VAT number, telephone number, e-mail, address, website, number of employees/turnover.
Natural persons: name, surname, title, telephone number, mobile number, e-mail.
LOCATION
The data is stored and processed on Amazon Web Services (AWS) at the server farm in Ireland (EU).
Other data controllers (processors): Hubspot.
STORAGE PERIOD
Legal entities: up to a maximum of 24 months from the last interaction.
Natural persons: up to a maximum of 12 months from the last interaction.
DATA FOR THE PROVISION OF THE SERVICE
ACCOUNT DETAILS:
Access: email
We collect Data during registration on the website www.4hse.com or when a user is added/invited to a project, to give the customer the opportunity to access the platform, receive operational notifications and technical support.
LOCATION
The data is stored and processed on Amazon Web Services (AWS) at the server farm in Ireland (EU).
STORAGE PERIOD
Since this data is linked to the certification of operations carried out by the user also towards third parties, this is not eliminated before 10 years.
PAYMENTS
BILLING DATA
Customer data on 4HSE: company name, VAT number, C.F. Address, Telephone, City, Postcode, Province, Country.
LOCATION
The data is stored and processed on Amazon Web Services (AWS) at the server farm in Ireland (EU).
Other Data Controllers: Chargebee.
STORAGE PERIOD
Invoices and tax documents: according to current legislation.
CREDIT CARD DETAILS
Credit card data is collected if it is chosen as the payment method.
LOCATION
With other data controllers: Chargebee, Stripe.
STORAGE PERIOD
Duration of service provision.
USER RIGHTS
Users can exercise certain rights with reference to the Data processed by the Owner.
In particular, the User has the right to:
Revoke your consent at any time. The User may revoke the previously expressed consent to the processing of their Personal Data.
Object to the processing of your Data. The User can object to the processing of their Data when it occurs on a legal basis other than consent.
Access your Data. The User has the right to obtain information on the Data processed by the Owner, on certain aspects of the processing and to receive a copy of the Data processed.
Check and request rectification. The User can verify the correctness of their Data and request its updating or correction.
obtain the limitation of treatment. When certain conditions are met, the User can request the limitation of the processing of their Data. In this case the Owner will not process the Data for any purpose other than their conservation.
Obtain the deletion or removal of your Personal Data. When certain conditions are met, the User can request the deletion of their Data by the Owner.
Receive your Data or have it transferred to another owner. The User has the right to receive their Data in a structured, commonly used and machine-readable format and, where technically feasible, to obtain its transfer without obstacles to another owner. This provision is applicable when the Data is processed with automated tools and the processing is based on the User's consent, on a contract of which the User is a party or on contractual measures connected to it.
lodge a complaint. The User can lodge a complaint with the competent personal data protection supervisory authority or take legal action.
HOW TO EXERCISE YOUR RIGHTS
You can exercise the rights listed above by writing to: info@4hse.com
To stop receiving our newsletter or commercial emails, follow the unsubscribe instructions included in the emails sent, or contact: info@4hse.com.
To request the total cancellation of a project, you must send a request to: support@4hse.com.
4HSE AS A PROCESSOR
In providing the service, 4HSE acts as a processor (responsible for processing) of the Data of which the customer is the controller (data controller).
The controller is the person who determines the purposes of the Data processing.
The processor is the person who carries out data processing on behalf of the controller.
Example
Mr. Rossi is the "data subject" and is an employee of the company ABC Spa. which uses the 4HSE platform to manage workplace safety.
ABC SpA. (the customer) is therefore the "controller": owner of the data of its employees.
4HSE Srl. is the "processor", i.e. the person responsible for processing the Data on behalf of ABC SpA.
4HSE will therefore never actively collect Mr.'s Data. Rossi, of which the owner remains ABC SpA.
AND THE