Last updated: 26/08/2026
1. Data Controller
The Data Controller is:
S.A.T. S.r.l.
C.da Cerreto, 11 - 66010 Miglianico (CH), Italy
VAT No. 02063560698
E-mail: info@satimpianti.it
Certified e-mail: satimpianti@gigapec.it
2. Categories of personal data processed
The Data Controller may process personal data relating to customers, potential customers, suppliers, company representatives, clients, technicians, works supervisors, safety coordinators, job applicants and other persons involved in commercial, technical and administrative relationships.
By way of example, the following data may be processed:
- identification and personal data;
- tax and administrative data;
- contact details, such as e-mail address, telephone number and address;
- data contained in quotation requests, orders, contracts, work progress reports, technical reports, intervention sheets, project documentation and correspondence;
- data required for the management of site inspections, interventions, maintenance activities, supplies and technical services.
- for job applications: first name, last name, curriculum vitae, professional and educational information, contact details and other information voluntarily included in the curriculum, as well as technical metadata relating to the uploaded file.
Applicants are requested not to include special-category data under Article 9 of Regulation (EU) 2016/679 in their curriculum unless strictly necessary for the application or required by applicable law. Any special-category data provided will be processed solely to the extent permitted by law.
3. Purposes of processing
Personal data are processed for the following purposes:
- management of contact requests and quotation requests;
- preparation of offers, quotations, orders and contracts;
- performance of works, supplies, maintenance activities, site inspections and technical services;
- administrative, accounting and tax management of the relationship;
- management of technical and project documentation;
- compliance with legal obligations;
- protection of the Data Controller's rights in out-of-court and judicial proceedings.
- receipt, assessment and management of applications relating to published job openings, and performance of recruitment and personnel selection activities.
4. Legal basis of processing
Depending on the case, the processing of personal data is based on the following legal bases:
- performance of pre-contractual measures requested by the data subject;
- performance of a contract or commercial relationship;
- compliance with legal obligations;
- legitimate interest of the Data Controller in the proper organisational, administrative, technical and defensive management of the relationship.
- for job applications, performance of pre-contractual measures taken at the data subject's request pursuant to Article 6(1)(b) of Regulation (EU) 2016/679; for any special-category data, the conditions laid down in Article 9 of the Regulation and applicable employment law.
5. Nature of data provision
The provision of data necessary for the management of the request, quotation, contractual relationship or legal obligations is necessary.
Failure to provide such data may prevent the Data Controller from replying to the request, preparing a quotation, performing the requested service or complying with administrative, tax and regulatory obligations.
For job applications, providing a first name, last name and curriculum is necessary to assess the applicant's profile; failure to provide them prevents submission and management of the application. Acknowledging the privacy notice does not constitute consent to processing.
6. Processing methods
Processing is carried out using paper-based, IT and telematic tools, with methods suitable to ensure the security, confidentiality, integrity and availability of personal data.
The Data Controller adopts appropriate technical and organisational measures to prevent unauthorised access, loss, disclosure, alteration or destruction of data.
Curricula submitted through the website are stored in a protected area and cannot be accessed through public direct links.
7. Recipients of personal data
Personal data may be disclosed, within the limits necessary for the purposes indicated above, to:
- authorised personnel of the Data Controller;
- accountants, administrative, tax, technical and legal consultants;
- banks and financial institutions;
- providers of IT, e-mail, cloud, hosting and document management services;
- clients, contractors, works supervisors, safety coordinators and project portals, where necessary for the performance of the relationship;
- public bodies, authorities, administrations and entities to which communication is mandatory by law.
Personal data are not disseminated.
Application data and curricula may be accessed exclusively by authorised personnel using Admin or Gestionale accounts on the internal SatHomePage portal that are enabled for the AnnunciLavoro application and, where necessary, by IT providers appointed as data processors.
8. Transfers outside the EU
If the Data Controller uses suppliers or services with infrastructure, offices or subcontractors located outside the European Economic Area, the processing will take place in compliance with Regulation (EU) 2016/679 and the safeguards required by applicable law.
9. Data retention period
Personal data are retained:
- for the time necessary to manage the request, quotation or contractual relationship;
- for 10 years in relation to civil, tax, accounting and administrative obligations;
- for a further period where necessary to protect the Data Controller's rights or manage any disputes.
- job applications and related curricula are retained for a maximum of 12 months from submission, unless erased earlier at the applicant's request or when no longer necessary; upon expiry, the data and attached file are deleted.
10. Rights of the data subject
The data subject may exercise, in the cases provided for by Articles 15 et seq. of Regulation (EU) 2016/679, the following rights:
- access to personal data;
- rectification of inaccurate data;
- erasure of data in the cases provided for by law;
- restriction of processing;
- objection to processing;
- data portability, where applicable.
The data subject also has the right to lodge a complaint with the Italian Data Protection Authority.
11. How to exercise rights
Requests concerning the processing of personal data may be sent to the following contacts:
E-mail: info@satimpianti.it
Certified e-mail: satimpianti@gigapec.it
12. Automated decision-making
Applications are not subject to decisions based solely on automated processing or to profiling.
13. Cookies and tracking tools
The website may use technical cookies necessary for the proper functioning of pages and services offered.
Any use of analytics cookies, profiling cookies or other tracking tools will be managed in compliance with applicable law, through specific information and, where necessary, by obtaining the user's consent.