eeRis Sprinkler v.28.0
per Microsoft Dynamics 365 Business Central up to v.28.5

BASIC INFORMATION
eeRis S.a.g.l. implements all measures necessary to guarantee the highest level of security for users visiting its website, as well as the utmost care in the collection and management of data acquired during browsing or spontaneously provided by the user through the contact form or the email addresses listed on the site. The legal framework to which eeRis S.a.g.l. refers for privacy matters is the one set out by the provisions of the Federal Act on Data Protection (FADP), its Ordinance (OFADP) and the Telecommunications Act (TCA). In addition, where applicable and not conflicting, the guidance of the European Union's General Data Protection Regulation (GDPR) is followed.

DATA CONTROLLER AND CONTACTS
The Data Controller (hereinafter also “Controller”) is eeRis S.a.g.l., based in Lugano, c/o DEMAFID SA, via Besso 59, 6900, Lugano, Switzerland. eeRis S.a.g.l. is registered with the Commercial Register under number CHE-383.041.707. The company can also be contacted via the email address privacy@eeris.net

DATA PROCESSED
The data processed are browsing data and data spontaneously provided by the user.

Browsing data
The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes, for example, the IP addresses or domain names of the computers used by users connecting to the website, the time of the request, the method used to submit the request to the server, the numerical code indicating the status of the server's response (success, error, etc.), the size of the file obtained in response, and other parameters relating to the user's operating system and computing environment (browser used for the connection). Browsing data collected in this way is stored for a maximum period of 12 months.

Data provided directly by the user
This category includes all personal data spontaneously provided by the website user, therefore entirely on a voluntary basis. For example: when writing to the email addresses shown on the website to request information, when registering for restricted areas to access specific services, or when filling in a contact form available on the website. The User assumes responsibility for any personal data of their own and/or of third parties published or shared through this site, and guarantees to have the right to communicate or disseminate it, releasing the Company from any liability towards third parties.

IN CASE OF NON-PROVISION OF DATA
Except for browsing data, which is necessary to carry out the computer and telematic protocols for the website's own operation, the provision of data by users through the other methods made available is free and optional. However, it should be noted that failure to provide some of this data will inevitably make it impossible to process requests submitted, or that the user intends to submit, to the Controller. For example, if the user requests information through the contact form but does not provide any contact details, the Company will not be able to follow up on the request.

PURPOSES AND LEGAL BASES OF PROCESSING
Browsing data: purposes and legal bases
Browsing data is used to obtain purely statistical information regarding the use of the website, for security purposes, and to check its correct operation. The data could be used to establish liability in case of computer crimes against the website. The legal basis for processing this data is legitimate interest and, in case of requests by the Authorities, legal obligation. For the use of cookies for specific purposes, please refer to the “cookies” section of this document.

Data provided directly by the user: purposes and legal bases
Personal data provided by the user on an optional basis by spontaneously contacting the Controller is used exclusively to follow up on any requests made and to allow the requested services to be provided. The legal basis for processing this data is therefore the performance of pre-contractual measures and obligations arising from the contract. Where necessary, the data may also be used in light of the Controller's legitimate interest in carrying out defensive activities or asserting or defending a right in court. This is without prejudice to the legal obligation that the Controller must fulfil upon request by the Authorities.

DATA MANAGEMENT
The data collected is processed with the help of IT tools. Adequate security measures are adopted in all processes to prevent data loss, unlawful or incorrect use, as well as to prevent unauthorized access to the data. The Controller retains the User's personal data as Data Controller where such processing has a legal basis or falls within its legitimate interests and does not prejudice the protection of the User's data or fundamental rights and freedoms. Please note that servers physically located within European territory are used for the processing of data related to the website's services.

DATA PROCESSING PERIOD
Data will be processed for the time necessary to carry out any service requested by the User, or to pursue the purposes described in this Policy. Retention periods will vary depending on the type of data processed, but in general the following criteria will be used to determine the retention period:

• legal or contractual need to retain the data;
• whether the data is necessary to provide the services.

Once the need and/or obligation to process the User's personal data ceases, the Controller will delete it or render it anonymous or, if this is not possible (for example, because the personal data has been stored in backup archives), will keep it securely, anonymizing it and excluding it from any further processing until its deletion. As for processing for marketing purposes, in the absence of specific regulatory or legal indications, data will be processed and retained (unless opted out or revoked) for a period consistent with the interest shown by the person to whom the data refers towards the Controller's initiatives, and the Controller will periodically verify that this interest still persists. In any case, the User may always request the interruption of processing or the deletion of their data, as indicated in the “RIGHTS OF THE DATA SUBJECT” section.

KNOWLEDGE OF DATA
Data will be processed directly by the Controller or by the Controller's employees who have been previously authorized to process it. Data may be made known to the competent Authorities in the event of specific requests that the Controller is required to follow up on for legal obligations, and to the Controller's consultants for the management of disputes and for legal assistance in case of any controversies requiring their involvement with access to the data. Data may also be shared with consultants or companies possibly also located outside Switzerland and/or outside the European Economic Area, who provide data supply and processing services on behalf of the Controller, as well as IT assistance for activities always carried out on behalf of the Controller. Such parties are required to implement adequate technical and organizational measures to guarantee the protection of the data subject, and are bound to data protection through the legal obligation of confidentiality. The parties belonging to the categories listed above will process the User's data as independent Data Controllers or, if necessary, as Data Processors or persons in charge appointed by the Controller.

DISCLOSURE OF DATA TO THIRD PARTIES
Under no circumstances will the Company transmit or transfer the data collected to third parties without the specific consent of the data subject. Such consent, where necessary, will always be clearly requested, indicating the categories of parties, or the individual name, to which the Company will transmit or transfer the data.

RIGHTS OF THE DATA SUBJECT
The law grants the data subject the right to request, free of charge and at any time, from the Data Controller access to their personal data, its rectification or deletion, or the restriction of the processing concerning them, or to object to its processing, as well as the right to data portability. The data subject may request from the Controller the list of any parties to whom the Users' personal data has been communicated and/or transferred. The data subject may assert their rights at any time by contacting the Data Controller at the email address info@eeris.net. The data subject is informed that, if they believe that the processing of their personal data is in violation of applicable regulations, they have the right to lodge a complaint with the Data Protection Supervisory Authority, or to bring the matter before the competent courts.

COPYRIGHT AND TRADEMARKS
Texts, images and any other multimedia content on the site are owned by the Controller or licensed to it. All distinctive signs and trademarks indicated and used on the site belong to their respective owners or licensees.

FURTHER INFORMATION – COOKIE POLICY
DEFINITION OF COOKIE
A cookie is a small piece of text stored on the computer, tablet, mobile phone or any other device used by the User to browse the internet, capable of storing the User's browsing information to be then retransmitted to the same site on the User's next visit. Cookies are intended to make websites work more efficiently, improve their performance, and provide information to the site owners. The computer systems and software procedures used to operate this site acquire, during normal operation, certain browsing data which by its nature is not immediately associated with identified Users, but which, through processing or association with data held by third parties, could allow the identification of Users/visitors of the site (such as, for example, IP addresses, the type of browser and operating system used by the user, the time of the request to access web pages).

TYPE OF COOKIES USED ON THIS SITE
This website exclusively uses technical cookies for the purpose of ensuring correct site navigation and improving the user's experience on the web pages. Technical cookies manage the data necessary to deliver the pages and facilitate navigation, allowing, for example, not having to re-enter user and password to access certain services, remembering the last page visited or how far a video has been watched, recognizing the type of device in use and adapting image sizes accordingly. Technical cookies also allow aggregate statistical analysis on the most visited pages and user preferences, but only in anonymous form, and are not used to analyze the behavior or preferences of individual Users.

DISABLING COOKIES
Browsers allow you to control and disable cookies through the browser's own settings. Please note, however, that disabling technical cookies may cause the site to malfunction and/or limit the service offered.

® eeRis