This privacy policy governs all RESTHeart services provided by SoftInstigate Srl Società Benefit. The original privacy policy is written in Italian under Italian and EU law. In case of any discrepancy between the Italian and English versions, the Italian version shall apply and prevail.
Regulation (EU) 2016/679 ("General Data Protection Regulation"), hereinafter GDPR,
provides for the protection of natural persons with regard to personal data.
SoftInstigate is committed to ensuring that the processing of data relating to a natural person (hereinafter
"data subject") is based on the principles of fairness, lawfulness and transparency, as well as
protection of confidentiality and the rights of the data subject.
SoftInstigate will process your personal data in compliance with regulations, with
the utmost care, implementing effective management procedures and processes to ensure protection of
processing, committing to protect communicated information in such a way as to avoid
unauthorized access or disclosure as well as to maintain data accuracy and to
ensure its appropriate use.
We provide you pursuant to Article 13 of the GDPR (EU regulation 2016/679) and in accordance with the
principle of transparency, the following information in order to make you aware of the
characteristics and methods of data processing:
The Data Controller is SoftInstigate S.R.L. Società Benefit
Since Softinstigate does not fall within the cases provided for in Article 37, paragraph 1, of the GDPR, the Data Protection Officer has not been appointed.
Softinstigate collects and/or receives independently or through third parties the personal data indicated below which will be processed for the purposes described below.
The information concerning you as a Data Subject are:
Softinstigate does not collect or receive so-called special categories of data as defined in Article 9 of the GDPR.
The processing of your personal data is carried out:
SoftInstigate informs you that it does not commercialize your personal data nor uses it for
undeclared purposes.
If the data controller intends to process personal data for a purpose other than
that for which it was collected, before such further processing, the controller
will provide the data subject with information regarding such different purpose and any further
relevant information.
You can obtain detailed information on data collected through interaction with external systems
in Article 8 of this policy.
SoftInstigate processes data based on consent.
Therefore, Personal Data can be provided by you freely subject to what is specified
below or, in the case of web traffic data, collected automatically and in an anonymized manner
as indicated above in this article.
PLEASE NOTE: By using or consulting SoftInstigate-owned websites,
you explicitly approve as a data subject this privacy policy and consent to the processing of
your personal data in relation to the methods and purposes described, including any
disclosure to third parties if necessary for the provision of a service.
The communication of data constitutes an essential requirement for the fulfillment of
pre-contractual and/or contractual obligations. Failure to communicate personal data could result
in the inability to provide the requested services, and website navigation itself may be compromised.
It is always possible to request the Controller to clarify the concrete legal basis of
each processing indifferently and, in particular, to specify whether the processing is
based on law, provided for by a contract or necessary to conclude a contract or other
legitimate interest.
Data is processed within the company by subjects authorized to process data
under the responsibility of the Controller for the purposes indicated above.
Data may be communicated to any external Data Processors who have
entered into specific agreements with the Data Controller.
Data may be communicated to the following categories of recipients: employees,
external consultants of SoftInstigate Srl Società Benefit (by way of example and not exhaustive:
legal consultants, labor consultants, commercial firms, etc.); companies that own systems
for data management, updating and storage, third-party technical service providers,
postal couriers, hosting providers, etc.
Without the need for express consent (Article 6 letter b, GDPR), the Controller may communicate your
data to Supervisory Bodies, judicial authorities, insurance companies for the
provision of insurance services, as well as to those subjects to whom communication is
mandatory by law for the purposes stated above. These subjects will process the data in
their capacity as independent data controllers.
Personal data is processed and stored for the time required by the purposes for which it was collected. Therefore:
It is specified that, in reference to your personal data, you can exercise the following rights:
The processing of your personal data may consist of any operation or set of
operations among those indicated in Article 4 of the GDPR.
Communicated personal data will be stored in our paper and/or electronic archives
with logic strictly related to the indicated purposes, adopting adequate technical and
organizational measures aimed at protecting the data itself. The processing of personal data will take place
through the use of tools and procedures suitable to guarantee its security and confidentiality
and may be carried out, directly and/or through authorized third parties with whom the Controller has
entered into specific agreements, through the use of computer means or electronic tools.
Personal data provided by you will be processed at the Controller's premises and in any other
place where parties involved in processing are located.
The Controller reserves the right to transfer such data to a third country or to
an international organization for which there exists:
Our main website does not set any cookies on your device.
No tracking or data collection occurs through cookies.
We use Plausible Analytics to collect aggregated statistics about website traffic,
but this service does not use cookies and does not track individual users.
All collected data is completely anonymous and aggregated, in full compliance with GDPR and CCPA.
For more details, please refer to our Cookie Policy.
The Data Controller reserves the right to make changes to this privacy policy at any time by informing Users on this page and, where technically and legally feasible, by sending a notification to Users through one of the contact details in its possession. We therefore recommend that you regularly consult this page, referring to the date of last modification. If the changes concern processing whose legal basis is consent, the Controller will collect the User's consent again, if necessary.