PRIVACY POLICY (GDPR – EU)

Last updated: May 26, 2026

This Privacy Policy applies to citizens and permanent residents of the European Economic Area (EEA) and Switzerland, in accordance with Regulation (EU) 2016/679 (“GDPR”) and applicable Italian data protection laws.

This Policy explains how SIC–DIVISIONE ELETTRONICA S.R.L. collects, uses, stores, and protects the personal data of users who visit or use the website sic.navy (“Website”).

1. DATA CONTROLLER

The Data Controller is:

SIC–DIVISIONE ELETTRONICA S.R.L.
Viale Gran Bretagna 1 – Industrial Area
73100 Lecce (LE) – Italy
VAT ID: 02431730759
Email: sales@sic.navy
Phone: +39 0832 36 59 79

Pursuant to Article 37 GDPR, the company is not subject to the obligation to appoint a Data Protection Officer (DPO).

2. PURPOSE OF PROCESSING, LEGAL BASIS, AND DATA RETENTION

2.1 Order Management and E-Commerce

Processed data:

  • First and last name;
  • Company name;
  • Billing and shipping address;
  • Email address;
  • Phone number;
  • IP address;
  • Payment information.

Purpose:

  • Order management;
  • Product shipping;
  • Customer support;
  • Tax and accounting obligations.

Legal basis:

  • Performance of a contract;
  • Compliance with legal obligations.

Retention period:
10 years, pursuant to Italian tax regulations.

2.2 Contact Requests and Technical Support

Processed data:

  • Name;
  • Email address;
  • Phone number;
  • Technical information voluntarily provided by the user.

Purpose:

  • Responding to requests;
  • Providing technical and commercial support.

Legal basis:

  • User consent;
  • Legitimate interest of the Data Controller.

Retention period:
36 months after the last interaction.

2.3 Customer Account Registration

Processed data:

  • Username;
  • Encrypted password;
  • Contact details;
  • Order history.

Purpose:

  • Access to the reserved area;
  • Customer account management.

Legal basis:

  • Performance of a contract;
  • User consent.

Retention period:
Until account deletion or user request.

2.4 Newsletter and Marketing Communications

Processed data:

  • Name;
  • Email address;
  • Professional sector.

Purpose:

  • Sending newsletters;
  • Commercial updates;
  • Promotional communications.

Legal basis:

  • Explicit user consent.

Retention period:
Until consent is withdrawn.

Users may withdraw consent at any time using the “unsubscribe” link included in emails or by contacting us directly.

3. COOKIES AND TRACKING TECHNOLOGIES

The Website uses technical, analytical, and—subject to user consent—marketing and profiling cookies.

Third-party services used by the Website may include:

  • Google Analytics;
  • Google Maps;
  • Google reCAPTCHA;
  • Advertising and traffic monitoring services.

For further information, please refer to the dedicated Cookie Policy.

4. DATA SHARING WITH THIRD PARTIES

Personal data may be shared exclusively with parties strictly necessary for providing services, including:

  • Logistics partners and shipping providers;
  • Payment service providers;
  • Tax and legal consultants;
  • Cloud and hosting service providers;
  • Technology and cybersecurity providers.

These parties process personal data as Data Processors or independent Data Controllers, in accordance with GDPR requirements.

5. INTERNATIONAL DATA TRANSFERS

Some technology providers used by the Website may process personal data outside the European Economic Area (EEA).

In such cases, transfers are carried out in compliance with Articles 44 et seq. GDPR through:

  • European Commission adequacy decisions;
  • Standard Contractual Clauses (SCCs);
  • Additional applicable security measures.

6. DATA SECURITY

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, disclosure, or alteration.

Security measures include:

  • HTTPS/TLS secure connections;
  • SSL certificates;
  • Vulnerability monitoring;
  • Restricted access to sensitive data;
  • Backup and security systems;
  • Anti-fraud protection and security logging.

7. DATA SUBJECT RIGHTS

Under Articles 15–22 GDPR, users have the right to:

  • Access their personal data;
  • Request rectification or updates;
  • Request erasure;
  • Restrict processing;
  • Object to processing;
  • Withdraw consent;
  • Request data portability;
  • Lodge a complaint with the competent authority.

To exercise these rights, contact:
sales@sic.navy

8. COMPLAINTS

Users have the right to lodge a complaint with:

Italian Data Protection Authority (Garante per la Protezione dei Dati Personali)

or with the competent authority in their country of residence.

9. MINORS

The Website is not intended for users under the age of 16 and does not knowingly collect personal data from minors.

10. CHANGES TO THIS PRIVACY POLICY

This Privacy Policy may be updated periodically for legal, technical, or operational reasons.

Users are encouraged to review this page regularly for any updates.

11. Data Requests

For common data requests, you can use our data request form below to:

  • Access your data
  • Request deletion of irrelevant data
  • Receive an export of your personal data