According to Regulation (EU) 2016/679 (General Data Protection Regulation) we provide you the due information concerning the processing of collected personal data. This notice is not to be considered valid for other websites attainable trough links and data processor shall not be held responsible for third parties’ web pages.


pursuant to art. 4 and 24 of the Reg. (EU) 2016/679, is SOFTEAM SPA – registered office in Emanuele Filiberto 16/A, 23900 Lecco (LC), represented by the legal representative pro tempore.




Purpose of processing Legal basis Data retention Data conferral
Website browsing Legitimate interest | Data subject rights Art.6 lett. f) and recital 47 GDPR Activities strictly related to site operations and to platform browsing service provision Session Necessary for the legitimate interest of data controller with due regard to user’s rights and fundamental freedoms
Contact request – Information request Subjects request Data controller’s legitimate interest Art. 6 lett. f) and recital 47 GDPR 1 Year Necessary for the legitimate interest of data controller with due regard to user’s rights and fundamental freedoms
Newsletter subscription; Mailing list service for promotional communication and related activities.
The data controller employs newsletters and promotionals with reports in order to compare and improve results. The data controller will handle: readers amount, openings and clicks amount, the Operating system, the detail of single user and sent/received/forwarder E-Mails.
Consent Art. 6.1 a) GDPR the data subject has given consent to the processing of his or her personal data for one or more specific purposes; Until opposition (opt-out) Optional: in case of denial the data controller won’t be able to send you newsletter or promotional communication

Unsolicited application through the  “Work with us” section


art. 6 lett. b) GDPR: processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;

2 Years

Mandatory; tightly essential to give execution to contractual and law obligations. In case of denial, the data Controller won’t be able to establish a contractual relationship.

Internal activities relating to the Organizational, administrative and financial management of customers

Data controller’s legitimate interest Art. 6 lett. f) and recital 47 GDPR

10 years or otherwise stated by law Art. 2220 c.c.

Optional: in case of denial third parties won’t be able to send you promotional communication

Recipients or categories of recipients of personal data

Personal data provided by you may be communicated to recipients who will act as Processors  (art. 28 of the Reg. EU 2016/679) and/or persons acting under the authority of the Controller and the Processor (art.29 of the Reg. UE 2016/679) for the purposes pointed ahead. Precisely, your data may be communicated to recipients part of the following categories:

  • subjects providing services for the management of the information system used by SOFTEAM SPA and telecommunications networks:
  • Freelancers or companies in the context of assistance and consultancy relationships;
  • subjects providing services related to the management of the above mentioned purposes (communication, brochure printing, fliers, websites, videos);
  • Competent authorities for compliance with legal obligations and / or provisions of public bodies, upon request;

Whether you give consent to data dissemination during the signing up, your data could be disseminated through the web site of SOOFTEAM SPA. Any other communication or dissemination will be performed only upon your explicit consent.

Data transfer to a third country and/or international organisation

Personal data provided won’t be transferred to a third Country outside the European Union.

Data subject’s rights

You may freely exercise your rights at any time under Reg. EU 2016/679 –GDPR, Sections15, 16, 17, 18, 19, 20, 21 contacting the Data Controller - SOFTEAM SPA in person of its legal representative sending an email to

You have the right, at any time, to obtain confirmation from the Data Controller as to whether or not personal data concerning you are being processed, request their rectification or erasure.

Without prejudice to any other administrative or judicial remedy, in case you consider your data processing in contrast with Reg. UE 2016/679, pursuant to article 15 lett. f) of Reg. UE 2016/679, you have the right to lodge a complaint with a supervisory authority (

Exercising your right to data portability, the Data Controller may provide your personal data in a structured, commonly used and machine-readable format subject to the provisions set forth in paragraphs 3 and 4 of art. 20 of Regulation EU 2016/679.


Date of review: 02/03/2022