1. Data controller
The data controller is Skema HSE, with its registered office at the address provided on this website and reachable at the email address shown at the end of this page.
2. Types of data collected
The website may collect different categories of personal data, including:
Data provided voluntarily by the user
- First name and surname
- Email address and telephone number
- Company and professional role
- Information entered in contact forms, service requests or newsletter sign-ups
- Other data sent spontaneously by the user
Data collected automatically
- IP address
- Technical device data (browser, operating system and device type)
- Browsing logs
- Cookies and similar technologies (see the Cookie Policy)
Data processed through third parties
- Usage statistics (for example Google Analytics or equivalent tools)
- Data from integrations with CRM tools, newsletters or online forms
3. Purposes of processing
Collected data is used for the following purposes:
- Replying to information requests submitted through contact forms.
- Managing and providing services requested by customers or prospective customers.
- Sending commercial communications or newsletters, subject to the user’s consent.
- Technical website management, information security and fraud prevention.
- Statistical analysis to improve the user experience and service offering.
- Complying with legal and regulatory obligations.
4. Legal basis for processing
Processing is based on the following legal grounds:
- Consent of the data subject (Article 6(1)(a) GDPR)
- Performance of a contract or pre-contractual measures (Article 6(1)(b) GDPR)
- Legal obligations (Article 6(1)(c) GDPR)
- Legitimate interest of the controller (Article 6(1)(f) GDPR) for administration, security and fraud-prevention purposes
5. Processing methods
Data is processed electronically and/or manually in accordance with security, confidentiality and integrity requirements. Processing follows methods strictly connected with the purposes described above.
6. Data retention
Personal data is retained for the time strictly necessary to fulfil the purposes for which it was collected, and in any event no longer than:
- 24 months for commercial contacts
- 10 years for administrative and tax documentation
- Until consent is withdrawn for newsletters and marketing
7. Disclosure and transfer of data
Data may be disclosed to:
- Skema HSE collaborators and consultants
- Technical service providers (hosting, maintenance and IT services)
- Email-marketing or CRM platforms
- Public authorities where required by law
If any service involves transferring data outside the EU, this will take place in accordance with Articles 44–49 GDPR (adequacy decisions or Standard Contractual Clauses).
8. Data-subject rights
Users may exercise the rights provided by the GDPR at any time:
- Access to data
- Rectification and updating
- Erasure (the “right to be forgotten”)
- Restriction of processing
- Data portability
- Objection to processing
- Withdrawal of consent
Requests may be sent to the controller’s email address shown on this website.
9. Data security
Skema HSE adopts appropriate technical and organisational measures to protect data from:
- Unauthorised access
- Accidental loss or destruction
- Unlawful or non-compliant use
10. Cookies
The website uses technical tools that are necessary for its operation and, subject to consent, Google Analytics cookies. Further details are available in the Cookie Policy.
12. Changes to this Privacy Policy
Skema HSE reserves the right to amend this Privacy Policy at any time. Changes will be published on this page and will take effect immediately.
13. Contact details
For information or to exercise rights under the GDPR, you can contact:
Skema HSE
Email: info@skemahse.com
Certified email (PEC): skemahse@pec.it
Address: Via Rodari, 14/r 20060, Trezzano Rosa (MI), Italy
