1. Privacy - GDPR and Data Controller

This website is operated by A.T.H.S. snc (hereinafter also referred to as "we", "us", "our", or "ATHS"). We take privacy seriously and are open and transparent about how we manage your Personal Data and our obligations in accordance with data protection laws and regulations, including the General Data Protection Regulation (GDPR).

This privacy policy sets out the basis on which we will control and process Personal Data that we collect from you or that you may provide to us through this website or otherwise. We are responsible for such Personal Data in our capacity as Data Controllers or Data Processors, as determined in accordance with applicable personal data protection legislation.

We have tried to keep this policy as simple as possible. However, if you need further information or clarification, please contact us directly at the following details:

2. What Information We Collect

"Personal Data" means any information capable of identifying an individual. It does not include anonymized data. We may process the following categories of Personal Data about you:

• Customer Data: includes data such as name, title, address, phone number, email address, financial details, and employment terms and details.
• Communication Data: includes any communication you send us whether via email, phone, or any other method.
• Technical Data: includes data about how you use our website, such as your IP address, login data, browser details, length of page visits, page views, and navigation paths. The source of this data is our analytics tracking system.

Special Categories of Personal Data

We require your explicit consent for processing special categories of Personal Data (such as health data). Where necessary and relevant, we will send you a further communication to confirm consent.

We do not adopt automated decision-making processes and do not carry out any type of automated profiling.

3. How We Collect Your Personal Data

We may collect Personal Data about you when you provide your data directly to us (for example, by sending us an email or through phone calls), or from third parties.

We automatically collect certain data while you use the website through cookies and similar technologies. Additionally, we may receive personal data from analytics providers (such as Google).

4. How We Use Your Personal Data

We use data for the following legitimate reasons:

1. For the performance of a contract in place with you;
2. For compliance with a legal obligation to which we are subject;
3. For the purposes of pursuing our legitimate interests (except where overridden by individual rights).

Our Legitimate Interests include:

5. Data Sharing and Protection

We may share your Personal Data with employees, officers, professional advisors, lawyers, accountants, insurers, or third-party service providers. We guarantee that, prior to disclosing or transmitting any data, we take all reasonable steps to ensure adequate security measures.

Data is protected using security measures updated periodically to prevent unauthorized access, loss, or alteration. We have procedures ready to handle any potential data breaches.

6. How Long We Retain Data

We will only retain Personal Data for as long as necessary to fulfill the purposes for which it was collected. For tax and accounting purposes, the law requires us to retain customer information for a period of six years even after the contractual relationship ends.

7. User Rights

As a data subject, you have the right to exercise:

• Right of Access: obtain a copy of the data we hold (response within 1 month).
• Right to Erasure: request the removal of data where no legal obligations apply.
• Right to Rectification: update or correct inaccurate or incomplete data.
• Right to Restriction and Objection: object to processing for marketing or legitimate interest.
• Right to Data Portability: transfer data to another controller.

8. Complaints

If you wish to make a complaint, you can do so in person, by phone, or by email. Alternatively, you can contact the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali):